last executing test programs: 25.232549296s ago: executing program 1 (id=211): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x52) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x68) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x300) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000008400f9000700000005000000000000005f7380a6fa5462c1398222889c70b297fb8df5e21ff7bf3204135ab5fba1245a589ce7af9c08ea1639b5c1b9d5aacff0443dbd4cdcbdc66b0c1bfc4b629248f7"], 0x18}], 0x1, 0x0) 24.024415253s ago: executing program 1 (id=217): socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x80, 0x1, 0xffffffffffffd0c4, 0x10000000}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19.507911088s ago: executing program 1 (id=226): r0 = socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x800000, 0xffffffff, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@mcast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x68}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) epoll_create(0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_io_uring_setup(0x253a, &(0x7f00000003c0)={0x0, 0xec25, 0x10000, 0x3, 0x28e}, &(0x7f0000000140), &(0x7f00000001c0)) 14.246217154s ago: executing program 1 (id=236): socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x80, 0x1, 0xffffffffffffd0c4, 0x10000000}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11.804356219s ago: executing program 1 (id=242): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xe) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) r8 = dup(r1) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) syz_init_net_socket$ax25(0x3, 0x0, 0xc4) write$FUSE_INIT(r8, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="74945fae8dcc56c6207266646e6f3d", @ANYRESHEX=r0, @ANYBLOB="2c77595c9fef5296c4c419f023736ef7c06a66646e6f3d", @ANYRESHEX=r8]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 10.320531821s ago: executing program 3 (id=245): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x52) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x68) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x300) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000008400f9000700000005000000000000005f7380a6fa5462c1398222889c70b297fb8df5e21ff7bf3204135ab5fba1245a589ce7af9c08ea1639b5c1b9d5aacff0443dbd4cdcbdc66b0c1bfc4b629248f7"], 0x18}], 0x1, 0x0) 10.286118841s ago: executing program 1 (id=247): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 9.304285895s ago: executing program 0 (id=251): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x129800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) gettid() ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) close(r0) 8.504428707s ago: executing program 0 (id=252): socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x80, 0x1, 0xffffffffffffd0c4, 0x10000000}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 8.30589259s ago: executing program 2 (id=254): syz_open_dev$vcsu(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, 0x0, 0x0) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x8000000, 0x0, 0x9}) 7.350851273s ago: executing program 0 (id=255): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [], "fb36eeca6fad50b375a22a58"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103d00000000001d300500000000004704000001ed00000f030000000000001d44000000000000620a60fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000000), 0x0, 0x0, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000080), &(0x7f0000000040)=@md5={0x1, "d70ec82c696148625acfe64606069033"}, 0xfeb5, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000840)={0x4, 0xf, 0x101, 0x3, 0x3, 0x10000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fgetxattr(r6, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xffde) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000040)={0x4000000}) close_range(r0, 0xffffffffffffffff, 0x0) 7.262226375s ago: executing program 2 (id=256): sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x40c2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0xe87}, 0x1c) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0xa}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0xe, 0x6, 0x58565559, 0x7, 0x5f7, 0xfffffffe, 0x6, 0x0, 0x0, 0x6, 0x2, 0x2}}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r5}) ioctl$TIOCGPGRP(r5, 0x540f, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380), 0x0, 0xffffffff, 0x30, 0x0, 0x0}) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) listen(0xffffffffffffffff, 0x9) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000000c0)={0x2, 0x9f}) 7.064492648s ago: executing program 3 (id=257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'pimreg\x00', @multicast}) 6.297053659s ago: executing program 0 (id=258): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x52) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x68) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_TTL={0x5, 0x8, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x84}}, 0x4000000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x300) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000008400f9000700000005000000000000005f7380a6fa5462c1398222889c70b297fb8df5e21ff7bf3204135ab5fba1245a589ce7af9c08ea1639b5c1b9d5aacff0443dbd4cdcbdc66b0c1bfc4b629248f7"], 0x18}], 0x1, 0x0) 5.552503019s ago: executing program 3 (id=260): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) 5.066052616s ago: executing program 2 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 4.344637997s ago: executing program 4 (id=263): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000003c0), &(0x7f0000000200)='%-010d \x00'}, 0x20) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 4.248062168s ago: executing program 2 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) dup3(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="510000000000000000000000006e5b930000000000"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x100a, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) lchown(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 4.11272539s ago: executing program 4 (id=265): socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x80, 0x1, 0xffffffffffffd0c4, 0x10000000}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.040158941s ago: executing program 0 (id=266): syz_open_dev$vcsu(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, 0x0, 0x0) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x8000000, 0x0, 0x9}) 3.243937793s ago: executing program 2 (id=267): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x52) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x68) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x300) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000008400f9000700000005000000000000005f7380a6fa5462c1398222889c70b297fb8df5e21ff7bf3204135ab5fba1245a589ce7af9c08ea1639b5c1b9d5aacff0443dbd4cdcbdc66b0c1bfc4b629248f7"], 0x18}], 0x1, 0x0) 3.144439044s ago: executing program 4 (id=268): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [], "fb36eeca6fad50b375a22a58"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103d00000000001d300500000000004704000001ed00000f030000000000001d44000000000000620a60fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000000), 0x0, 0x0, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000080), &(0x7f0000000040)=@md5={0x1, "d70ec82c696148625acfe64606069033"}, 0xfeb5, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000840)={0x4, 0xf, 0x101, 0x3, 0x3, 0x10000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fgetxattr(r6, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xffde) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000040)={0x4000000}) close_range(r0, 0xffffffffffffffff, 0x0) 3.120916015s ago: executing program 0 (id=269): syz_open_dev$vcsu(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000200)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x8000000, 0x0, 0x9}) 2.855804808s ago: executing program 3 (id=270): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff2f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 2.103720309s ago: executing program 4 (id=271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 2.02847154s ago: executing program 3 (id=272): sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x40c2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0xe87}, 0x1c) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0xa}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0xe, 0x6, 0x58565559, 0x7, 0x5f7, 0xfffffffe, 0x6, 0x0, 0x0, 0x6, 0x2, 0x2}}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r5}) ioctl$TIOCGPGRP(r5, 0x540f, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380), 0x0, 0xffffffff, 0x30, 0x0, 0x0}) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) listen(0xffffffffffffffff, 0x9) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000000c0)={0x2, 0x9f}) 1.014668315s ago: executing program 4 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000440)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40880}, 0x24000000) 79.905578ms ago: executing program 2 (id=274): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x1ff) 16.535869ms ago: executing program 4 (id=275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 0s ago: executing program 3 (id=276): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x52) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x68) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_TTL={0x5, 0x8, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x84}}, 0x4000000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x300) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000008400f9000700000005000000000000005f7380a6fa5462c1398222889c70b297fb8df5e21ff7bf3204135ab5fba1245a589ce7af9c08ea1639b5c1b9d5aacff0443dbd4cdcbdc66b0c1bfc4b629248f7"], 0x18}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.166' (ED25519) to the list of known hosts. [ 64.840522][ T4157] cgroup: Unknown subsys name 'net' [ 64.948106][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.450406][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.963646][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 67.991009][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 68.121085][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 68.137618][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 68.151201][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 68.206453][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.214463][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.222888][ T4171] device bridge_slave_0 entered promiscuous mode [ 68.244810][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.252095][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.260799][ T4167] device bridge_slave_0 entered promiscuous mode [ 68.287654][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.294748][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.302930][ T4171] device bridge_slave_1 entered promiscuous mode [ 68.310980][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.318273][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.326212][ T4167] device bridge_slave_1 entered promiscuous mode [ 68.394609][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.419989][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.431713][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.445712][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.500624][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.507900][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.516015][ T4172] device bridge_slave_0 entered promiscuous mode [ 68.547268][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.554566][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.563407][ T4176] device bridge_slave_0 entered promiscuous mode [ 68.571510][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.579587][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.588652][ T4172] device bridge_slave_1 entered promiscuous mode [ 68.595785][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.603119][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.611544][ T4178] device bridge_slave_0 entered promiscuous mode [ 68.621741][ T4171] team0: Port device team_slave_0 added [ 68.630049][ T4171] team0: Port device team_slave_1 added [ 68.638425][ T4167] team0: Port device team_slave_0 added [ 68.645072][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.652328][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.660580][ T4176] device bridge_slave_1 entered promiscuous mode [ 68.676398][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.683708][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.692124][ T4178] device bridge_slave_1 entered promiscuous mode [ 68.706770][ T4167] team0: Port device team_slave_1 added [ 68.763124][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.774457][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.791577][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.798823][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.825767][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.848418][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.859504][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.870523][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.882283][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.891969][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.899583][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.926163][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.938682][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.945800][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.973274][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.986213][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.993356][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.019677][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.095854][ T4178] team0: Port device team_slave_0 added [ 69.114570][ T4176] team0: Port device team_slave_0 added [ 69.123534][ T4172] team0: Port device team_slave_0 added [ 69.146694][ T4178] team0: Port device team_slave_1 added [ 69.162663][ T4176] team0: Port device team_slave_1 added [ 69.169823][ T4172] team0: Port device team_slave_1 added [ 69.209812][ T4171] device hsr_slave_0 entered promiscuous mode [ 69.216551][ T4171] device hsr_slave_1 entered promiscuous mode [ 69.246812][ T4167] device hsr_slave_0 entered promiscuous mode [ 69.253729][ T4167] device hsr_slave_1 entered promiscuous mode [ 69.260499][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.268937][ T4167] Cannot create hsr debugfs directory [ 69.274923][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.281929][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.308500][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.329982][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.336964][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.363367][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.375962][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.383587][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.411036][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.423455][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.431083][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.458468][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.471456][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.478741][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.505117][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.518217][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.525187][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.551520][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.618435][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 69.625654][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 69.627612][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 69.645480][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 69.672763][ T4176] device hsr_slave_0 entered promiscuous mode [ 69.679814][ T4176] device hsr_slave_1 entered promiscuous mode [ 69.686444][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.694189][ T4176] Cannot create hsr debugfs directory [ 69.699811][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 69.750567][ T4178] device hsr_slave_0 entered promiscuous mode [ 69.757775][ T4178] device hsr_slave_1 entered promiscuous mode [ 69.764554][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.772610][ T4178] Cannot create hsr debugfs directory [ 69.828313][ T4172] device hsr_slave_0 entered promiscuous mode [ 69.835160][ T4172] device hsr_slave_1 entered promiscuous mode [ 69.843303][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.851108][ T4172] Cannot create hsr debugfs directory [ 70.098845][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.111348][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.126178][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.153584][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.197197][ T4171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.219919][ T4171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.231344][ T4171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.244382][ T4171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.290609][ T4176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.301137][ T4176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.315568][ T4176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.358552][ T4176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.381181][ T4178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.411659][ T4178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.425071][ T4178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.470076][ T4178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.491863][ T4172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.502249][ T4172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.512829][ T4172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.524364][ T4172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.539810][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.571680][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.581937][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.607809][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.639093][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.648759][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.660230][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.667631][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.682076][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.694309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.703739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.712869][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.720022][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.750254][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.798667][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.808621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.862561][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.872971][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.884511][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.903928][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.924002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.934108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.943427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.952858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.962799][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.984464][ T4167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.995821][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.009732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.021582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.031669][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.039668][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.049096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.058773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.070081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.079069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.091145][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.112440][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.125091][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.133217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.142288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.151421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.160228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.170352][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.177493][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.187215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.196424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.204637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.215099][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.247233][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.271014][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.280852][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.291426][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.298669][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.314133][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.323820][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.333720][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.343451][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.352609][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.359771][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.369816][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.381053][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.382052][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.387863][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.396566][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.412851][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.422292][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.431156][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.440690][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.449755][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.459779][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.470964][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.483535][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.492657][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.501560][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.524555][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.536168][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.565710][ T4178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.578347][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.599786][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.609650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.620475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.630813][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.638204][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.647221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.655996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.664309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.673418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.682916][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.690043][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.697958][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 71.698005][ T4209] Bluetooth: hci0: command 0x041b tx timeout [ 71.707687][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 71.712043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.716707][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 71.724842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.739054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.749531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.758809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.767727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.776442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.788189][ T4209] Bluetooth: hci3: command 0x041b tx timeout [ 71.794474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.845677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.862938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.891096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.901733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.911411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.921116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.930050][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.937140][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.946478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.955299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.964160][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.971395][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.980489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.989647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.021524][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.043345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.052487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.062525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.072366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.083630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.112864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.121875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.131466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.139635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.147128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.156270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.165234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.175105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.201131][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.213389][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.228774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.236938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.245633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.254684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.270881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.279950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.313596][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.327344][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.343183][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.354831][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.371725][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.399606][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.411012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.419582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.427122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.453381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.471043][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.499071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.518739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.562438][ T4167] device veth0_vlan entered promiscuous mode [ 72.576158][ T4167] device veth1_vlan entered promiscuous mode [ 72.587238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.596920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.633167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.643985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.653381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.675704][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.714929][ T4167] device veth0_macvtap entered promiscuous mode [ 72.728292][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.736485][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.746092][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.765276][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.785911][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.795156][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.803949][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.811830][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.822339][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.831154][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.840262][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.861590][ T4167] device veth1_macvtap entered promiscuous mode [ 72.907308][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.916044][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.925202][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.934110][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.943762][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.952990][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.962537][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.971526][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.980545][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.991529][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.999991][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.010433][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.018583][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.028360][ T4178] device veth0_vlan entered promiscuous mode [ 73.061199][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.075892][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.092964][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.109753][ T4172] device veth0_vlan entered promiscuous mode [ 73.119243][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.130077][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.139380][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.148273][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.157057][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.165910][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.176892][ T4178] device veth1_vlan entered promiscuous mode [ 73.186884][ T4171] device veth0_vlan entered promiscuous mode [ 73.200365][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.211288][ T4176] device veth0_vlan entered promiscuous mode [ 73.220289][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.229746][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.237802][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.245663][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.254534][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.285128][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.294287][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.303636][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.313580][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.352481][ T4172] device veth1_vlan entered promiscuous mode [ 73.361501][ T4171] device veth1_vlan entered promiscuous mode [ 73.379062][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.388726][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.407287][ T4176] device veth1_vlan entered promiscuous mode [ 73.424879][ T4178] device veth0_macvtap entered promiscuous mode [ 73.469366][ T4178] device veth1_macvtap entered promiscuous mode [ 73.512166][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.524005][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.532840][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.543352][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.579018][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.591412][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.603157][ T4171] device veth0_macvtap entered promiscuous mode [ 73.626049][ T4172] device veth0_macvtap entered promiscuous mode [ 73.636348][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.648310][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.660831][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.669445][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.677732][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.685834][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.695335][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.710195][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.719784][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.730424][ T4171] device veth1_macvtap entered promiscuous mode [ 73.741878][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.754271][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.761121][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.765673][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.782637][ T4211] Bluetooth: hci4: command 0x040f tx timeout [ 73.786857][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.789759][ T4211] Bluetooth: hci1: command 0x040f tx timeout [ 73.796754][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 73.803564][ T4211] Bluetooth: hci2: command 0x040f tx timeout [ 73.817631][ T4176] device veth0_macvtap entered promiscuous mode [ 73.826810][ T4176] device veth1_macvtap entered promiscuous mode [ 73.846621][ T4172] device veth1_macvtap entered promiscuous mode [ 73.857798][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.866756][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.874705][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 73.878699][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.889260][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.897362][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.906734][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.915793][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.926708][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.936381][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.946163][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.955759][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.995455][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.007923][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.019631][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.033827][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.045872][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.059809][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.071524][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.082369][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.092893][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.103033][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.114008][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.125203][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.140769][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.152501][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.162696][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.177382][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.188565][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.199335][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.209404][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.219883][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.231838][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.239865][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.249135][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.258333][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.266962][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.277261][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.286098][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.301060][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.312291][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.322445][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.333227][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.351763][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.360996][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.371735][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.382144][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.392971][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.403190][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.414767][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.427804][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.439177][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.442881][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.458104][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.465591][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.477887][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.488814][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.499481][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.510291][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.520505][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.531428][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.542823][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.565811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.577038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.587886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.596720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.605934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.614319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.625196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.637136][ T4176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.646353][ T4176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.655676][ T4176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.665233][ T4176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.679717][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.688788][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.698037][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.706758][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.718971][ T4172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.728545][ T4172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.737300][ T4172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.759854][ T4172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.962920][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.999578][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.061151][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.077347][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.085338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.114850][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.121449][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.141878][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.149808][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.162792][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.164920][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.173717][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.193973][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.202187][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.224780][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.337381][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.376322][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.398360][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.406403][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.436016][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.465912][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.524260][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.552129][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.590149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.858249][ T4168] Bluetooth: hci0: command 0x0419 tx timeout [ 75.864813][ T4168] Bluetooth: hci2: command 0x0419 tx timeout [ 75.888483][ T4168] Bluetooth: hci1: command 0x0419 tx timeout [ 75.918725][ T4168] Bluetooth: hci4: command 0x0419 tx timeout [ 75.955183][ T4212] Bluetooth: hci3: command 0x0419 tx timeout [ 77.456738][ T4325] device pim6reg1 entered promiscuous mode [ 78.976528][ T4368] device pim6reg1 entered promiscuous mode [ 79.471055][ T4393] device pim6reg1 entered promiscuous mode [ 80.206577][ T4410] device pim6reg1 entered promiscuous mode [ 81.630481][ T1108] cfg80211: failed to load regulatory.db [ 82.360855][ T4458] device wg2 entered promiscuous mode [ 84.258340][ T4497] device pim6reg1 entered promiscuous mode [ 84.509321][ T4502] syz.2.94[4502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.509433][ T4502] syz.2.94[4502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.522610][ T4505] device pim6reg1 entered promiscuous mode [ 86.437455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 86.446573][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 86.455622][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 86.464730][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 86.473722][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 86.482811][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 86.491797][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 86.500879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 86.509906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 86.518999][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 90.449493][ T4600] Â: renamed from pim6reg1 [ 96.905936][ T4671] dlm: no local IP address has been set [ 96.911927][ T4671] dlm: cannot start dlm midcomms -107 [ 98.403131][ T4686] dlm: no local IP address has been set [ 98.409553][ T4686] dlm: cannot start dlm midcomms -107 [ 101.196850][ T4728] dlm: no local IP address has been set [ 101.202517][ T4728] dlm: cannot start dlm midcomms -107 [ 104.141934][ T4754] dlm: no local IP address has been set [ 104.148364][ T4754] dlm: cannot start dlm midcomms -107 [ 109.906447][ T4801] dlm: no local IP address has been set [ 109.961261][ T4801] dlm: cannot start dlm midcomms -107 [ 111.094105][ T4813] dlm: no local IP address has been set [ 111.099879][ T4813] dlm: cannot start dlm midcomms -107 [ 116.414447][ T4871] dlm: no local IP address has been set [ 116.420374][ T4871] dlm: cannot start dlm midcomms -107 [ 117.974633][ T4882] dlm: no local IP address has been set [ 117.980451][ T4882] dlm: cannot start dlm midcomms -107 [ 124.794931][ T4928] dlm: no local IP address has been set [ 124.800757][ T4928] dlm: cannot start dlm midcomms -107 [ 125.198234][ T4933] dlm: no local IP address has been set [ 125.203924][ T4933] dlm: cannot start dlm midcomms -107 [ 130.512730][ T4987] dlm: no local IP address has been set [ 130.518696][ T4987] dlm: cannot start dlm midcomms -107 [ 132.929114][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.943224][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.776620][ T5026] dlm: no local IP address has been set [ 136.782350][ T5026] dlm: cannot start dlm midcomms -107 [ 140.173500][ T5066] dlm: no local IP address has been set [ 140.179355][ T5066] dlm: cannot start dlm midcomms -107 [ 143.536412][ T5099] syzkaller0: tun_chr_ioctl cmd 35108 [ 143.753260][ T5104] dlm: no local IP address has been set [ 143.758998][ T5104] dlm: cannot start dlm midcomms -107 [ 149.858576][ C1] [ 149.860946][ C1] ====================================================== [ 149.867954][ C1] WARNING: possible circular locking dependency detected [ 149.874951][ C1] 5.15.179-syzkaller #0 Not tainted [ 149.880127][ C1] ------------------------------------------------------ [ 149.887121][ C1] syz.3.276/5165 is trying to acquire lock: [ 149.893124][ C1] ffff8880b8f27e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x1b5/0x8a0 [ 149.901752][ C1] [ 149.901752][ C1] but task is already holding lock: [ 149.909107][ C1] ffff88807c9e59b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 149.917967][ C1] [ 149.917967][ C1] which lock already depends on the new lock. [ 149.917967][ C1] [ 149.928353][ C1] [ 149.928353][ C1] the existing dependency chain (in reverse order) is: [ 149.937348][ C1] [ 149.937348][ C1] -> #2 (&trie->lock){..-.}-{2:2}: [ 149.944627][ C1] lock_acquire+0x1db/0x4f0 [ 149.949636][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 149.955430][ C1] trie_delete_elem+0x90/0x690 [ 149.960697][ C1] 0xffffffffa0016532 [ 149.965181][ C1] bpf_trace_run3+0x1d1/0x380 [ 149.970364][ C1] __traceiter_timer_start+0x79/0xd0 [ 149.976154][ C1] enqueue_timer+0x3ae/0x540 [ 149.981248][ C1] __mod_timer+0xa60/0xeb0 [ 149.986171][ C1] sk_reset_timer+0x1f/0xb0 [ 149.991196][ C1] tipc_sk_finish_conn+0x16b/0x810 [ 149.996816][ C1] tipc_socketpair+0x258/0x4b0 [ 150.002083][ C1] __sys_socketpair+0x402/0x700 [ 150.007455][ C1] __x64_sys_socketpair+0x97/0xb0 [ 150.012983][ C1] do_syscall_64+0x3b/0xb0 [ 150.017906][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.024305][ C1] [ 150.024305][ C1] -> #1 (&base->lock){-.-.}-{2:2}: [ 150.031585][ C1] lock_acquire+0x1db/0x4f0 [ 150.036611][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 150.042403][ C1] lock_timer_base+0x120/0x260 [ 150.047692][ C1] __mod_timer+0x1d6/0xeb0 [ 150.052618][ C1] queue_delayed_work_on+0x156/0x250 [ 150.058412][ C1] kvfree_call_rcu+0x50e/0x8a0 [ 150.063682][ C1] rtnl_register_internal+0x443/0x530 [ 150.069560][ C1] rtnl_register+0x32/0x70 [ 150.074499][ C1] ip_rt_init+0x2e6/0x3a0 [ 150.079335][ C1] ip_init+0xa/0x20 [ 150.083647][ C1] inet_init+0x27c/0x390 [ 150.088391][ C1] do_one_initcall+0x22b/0x7a0 [ 150.093662][ C1] do_initcall_level+0x157/0x210 [ 150.099105][ C1] do_initcalls+0x49/0x90 [ 150.103941][ C1] kernel_init_freeable+0x425/0x5c0 [ 150.109641][ C1] kernel_init+0x19/0x290 [ 150.114478][ C1] ret_from_fork+0x1f/0x30 [ 150.119406][ C1] [ 150.119406][ C1] -> #0 (krc.lock){..-.}-{2:2}: [ 150.126425][ C1] validate_chain+0x1649/0x5930 [ 150.131780][ C1] __lock_acquire+0x1295/0x1ff0 [ 150.137135][ C1] lock_acquire+0x1db/0x4f0 [ 150.142144][ C1] _raw_spin_lock+0x2a/0x40 [ 150.147151][ C1] kvfree_call_rcu+0x1b5/0x8a0 [ 150.152436][ C1] trie_delete_elem+0x520/0x690 [ 150.157794][ C1] bpf_prog_8c8ab8634bca3061+0x3a/0x728 [ 150.163842][ C1] bpf_trace_run3+0x1d1/0x380 [ 150.169024][ C1] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 150.175160][ C1] kmem_cache_free+0x1ce/0x1f0 [ 150.180429][ C1] hsr_forward_skb+0x7a1/0x1bd0 [ 150.185787][ C1] send_hsr_supervision_frame+0x540/0xad0 [ 150.192033][ C1] hsr_announce+0x176/0x300 [ 150.197044][ C1] call_timer_fn+0x16d/0x560 [ 150.202141][ C1] __run_timers+0x67c/0x890 [ 150.207169][ C1] run_timer_softirq+0x63/0xf0 [ 150.212445][ C1] handle_softirqs+0x3a7/0x930 [ 150.217715][ C1] __irq_exit_rcu+0x157/0x240 [ 150.222898][ C1] irq_exit_rcu+0x5/0x20 [ 150.227647][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 150.233787][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 150.240276][ C1] exc_page_fault+0x110/0x700 [ 150.245463][ C1] asm_exc_page_fault+0x22/0x30 [ 150.250823][ C1] [ 150.250823][ C1] other info that might help us debug this: [ 150.250823][ C1] [ 150.261034][ C1] Chain exists of: [ 150.261034][ C1] krc.lock --> &base->lock --> &trie->lock [ 150.261034][ C1] [ 150.272756][ C1] Possible unsafe locking scenario: [ 150.272756][ C1] [ 150.280188][ C1] CPU0 CPU1 [ 150.285535][ C1] ---- ---- [ 150.290891][ C1] lock(&trie->lock); [ 150.294945][ C1] lock(&base->lock); [ 150.301516][ C1] lock(&trie->lock); [ 150.308086][ C1] lock(krc.lock); [ 150.311877][ C1] [ 150.311877][ C1] *** DEADLOCK *** [ 150.311877][ C1] [ 150.319999][ C1] 5 locks held by syz.3.276/5165: [ 150.325002][ C1] #0: ffffc90000dd0be0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 150.334989][ C1] #1: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 150.344280][ C1] #2: ffff88806104cd88 (&hsr->seqnr_lock){+.-.}-{2:2}, at: send_hsr_supervision_frame+0x272/0xad0 [ 150.354964][ C1] #3: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 150.364260][ C1] #4: ffff88807c9e59b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 150.373555][ C1] [ 150.373555][ C1] stack backtrace: [ 150.379437][ C1] CPU: 1 PID: 5165 Comm: syz.3.276 Not tainted 5.15.179-syzkaller #0 [ 150.387490][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.397534][ C1] Call Trace: [ 150.400802][ C1] [ 150.403633][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 150.408303][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 150.413944][ C1] ? print_circular_bug+0x12b/0x1a0 [ 150.419147][ C1] check_noncircular+0x2f8/0x3b0 [ 150.424078][ C1] ? add_chain_block+0x850/0x850 [ 150.429004][ C1] ? lockdep_lock+0x11f/0x2a0 [ 150.433673][ C1] validate_chain+0x1649/0x5930 [ 150.438545][ C1] ? reacquire_held_locks+0x660/0x660 [ 150.443911][ C1] ? mark_lock+0x98/0x340 [ 150.448229][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 150.453260][ C1] ? mark_lock+0x98/0x340 [ 150.457578][ C1] __lock_acquire+0x1295/0x1ff0 [ 150.462443][ C1] lock_acquire+0x1db/0x4f0 [ 150.466938][ C1] ? kvfree_call_rcu+0x1b5/0x8a0 [ 150.471860][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 150.476873][ C1] ? read_lock_is_recursive+0x10/0x10 [ 150.482228][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 150.487415][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 150.493296][ C1] ? _raw_spin_unlock+0x40/0x40 [ 150.498130][ C1] ? debug_object_active_state+0x6b/0x380 [ 150.503841][ C1] _raw_spin_lock+0x2a/0x40 [ 150.508334][ C1] ? kvfree_call_rcu+0x1b5/0x8a0 [ 150.513259][ C1] kvfree_call_rcu+0x1b5/0x8a0 [ 150.518011][ C1] ? _raw_spin_lock_irqsave+0xac/0x120 [ 150.523475][ C1] ? call_rcu+0xa70/0xa70 [ 150.527792][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 150.533238][ C1] ? _raw_spin_lock+0x40/0x40 [ 150.537902][ C1] ? read_lock_is_recursive+0x10/0x10 [ 150.543260][ C1] ? longest_prefix_match+0x49b/0x640 [ 150.548622][ C1] trie_delete_elem+0x520/0x690 [ 150.553485][ C1] bpf_prog_8c8ab8634bca3061+0x3a/0x728 [ 150.559014][ C1] bpf_trace_run3+0x1d1/0x380 [ 150.563682][ C1] ? bpf_trace_run2+0x340/0x340 [ 150.568518][ C1] ? hsr_forward_skb+0x7a1/0x1bd0 [ 150.573530][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 150.578721][ C1] ? hsr_forward_skb+0x7a1/0x1bd0 [ 150.583731][ C1] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 150.589371][ C1] ? hsr_forward_skb+0x7a1/0x1bd0 [ 150.594397][ C1] kmem_cache_free+0x1ce/0x1f0 [ 150.599154][ C1] hsr_forward_skb+0x7a1/0x1bd0 [ 150.603996][ C1] ? read_lock_is_recursive+0x10/0x10 [ 150.609357][ C1] ? prp_fill_frame_info+0x620/0x620 [ 150.614632][ C1] ? memset+0x1f/0x40 [ 150.618604][ C1] ? __skb_pad+0x3d3/0x5b0 [ 150.623025][ C1] send_hsr_supervision_frame+0x540/0xad0 [ 150.628736][ C1] hsr_announce+0x176/0x300 [ 150.633227][ C1] ? hsr_dev_finalize+0x6a0/0x6a0 [ 150.638242][ C1] call_timer_fn+0x16d/0x560 [ 150.642818][ C1] ? hsr_dev_finalize+0x6a0/0x6a0 [ 150.647863][ C1] ? __run_timers+0x890/0x890 [ 150.652528][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 150.657715][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 150.662912][ C1] ? hsr_dev_finalize+0x6a0/0x6a0 [ 150.667923][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 150.673128][ C1] ? hsr_dev_finalize+0x6a0/0x6a0 [ 150.678157][ C1] __run_timers+0x67c/0x890 [ 150.682659][ C1] ? detach_timer+0x2f0/0x2f0 [ 150.687338][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 150.693307][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 150.698583][ C1] run_timer_softirq+0x63/0xf0 [ 150.703354][ C1] handle_softirqs+0x3a7/0x930 [ 150.708192][ C1] ? __irq_exit_rcu+0x157/0x240 [ 150.713030][ C1] ? do_softirq+0x240/0x240 [ 150.717522][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 150.722711][ C1] __irq_exit_rcu+0x157/0x240 [ 150.727423][ C1] ? irq_exit_rcu+0x20/0x20 [ 150.731918][ C1] irq_exit_rcu+0x5/0x20 [ 150.736143][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 150.741782][ C1] [ 150.744696][ C1] [ 150.747657][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 150.753641][ C1] RIP: 0010:exc_page_fault+0x110/0x700 [ 150.759098][ C1] Code: ff ff 7f 0f 85 ac 04 00 00 4d 85 e4 0f 84 a3 04 00 00 48 8b 04 24 f6 80 88 00 00 00 03 74 0d e8 16 22 47 f7 fb bb 54 02 00 00 14 bb 14 02 00 00 f6 80 91 00 00 00 02 74 06 e8 fb 21 47 f7 fb [ 150.778715][ C1] RSP: 0000:ffffc9000324fee8 EFLAGS: 00000282 [ 150.784772][ C1] RAX: 5a2fc3a314eba900 RBX: 0000000000000254 RCX: ffffffff96a95f03 [ 150.792730][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab2a60 RDI: ffffffff8af9fa80 [ 150.800688][ C1] RBP: 00007fde5ecb1000 R08: ffffffff81871b70 R09: fffffbfff1c153f6 [ 150.808649][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880749ae200 [ 150.816608][ C1] R13: 0000000000000007 R14: 0000000000000000 R15: 0000000000000000 [ 150.824569][ C1] ? trace_hardirqs_on+0x30/0x80 [ 150.829511][ C1] ? exc_page_fault+0x10a/0x700 [ 150.834370][ C1] asm_exc_page_fault+0x22/0x30 [ 150.839210][ C1] RIP: 0033:0x7fde5e9629fc [ 150.843628][ C1] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 55 48 [ 150.863219][ C1] RSP: 002b:00007ffedb3f5e88 EFLAGS: 00010246 [ 150.869272][ C1] RAX: 0000000000000000 RBX: 00007fde5f7eb720 RCX: 0000000000000000 [ 150.877230][ C1] RDX: 0000000000001348 RSI: ffffffff81871348 RDI: 0000000000000000 [ 150.885186][ C1] RBP: ffffffff81871348 R08: 00007fde5eca6000 R09: 00007fde5eca8000 [ 150.893157][ C1] R10: 000000008187134c R11: 0000000000000000 R12: 0000000000000000 [ 150.901215][ C1] R13: 0000000000000000 R14: ffffffff81871b8b R15: 0000000000000009 [ 150.909187][ C1] ? trace_hardirqs_on+0x4b/0x80 [ 150.914120][ C1] ? trace_event_raw_event_preemptirq_template+0xe8/0x270 [ 150.921222][ C1] ? trace_event_raw_event_preemptirq_template+0xe8/0x270 [ 150.928323][ C1] [ 150.931425][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.081629][ T5167] dlm: no local IP address has been set [ 151.087319][ T5167] dlm: cannot start dlm midcomms -107