last executing test programs: 15.571913732s ago: executing program 2 (id=101): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x3ff, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0x7fffffffffffffff], 0xffff1001, 0x43000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.823543175s ago: executing program 2 (id=105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000033bed3ceea000085000000330000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, {[@end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x20) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7ffd, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 13.617523173s ago: executing program 2 (id=107): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = getpgid(r2) close_range(r0, r1, 0x0) setpgid(0x0, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11.527224319s ago: executing program 2 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x1000000000007, 0x28842) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0xfff1, 0x9, 0x9, 0x5, r5}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000200)={r5, 0x3}, &(0x7f00000002c0)=0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x81) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_async', 0x2, 0xcd) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r6, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc8dbe43ff6a6de16ddbc0bfc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x81]}}) ioctl$BLKRRPART(r2, 0x125f, 0xf000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) 10.682146172s ago: executing program 3 (id=117): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 9.425972515s ago: executing program 2 (id=122): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x1, 0x10, 0x2, 0x100, {{0x10, 0x4, 0x1, 0x0, 0x40, 0x67, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x89, 0x2}, @ssrr={0x89, 0x17, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2]}, @end, @generic={0x7, 0x12, "6e5900c22573d1fe33e5cb8829917d85"}]}}}}}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f}, 0x48) 7.493332585s ago: executing program 2 (id=128): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsopen(0x0, 0x1) socket$packet(0x11, 0x3, 0x300) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r3 = getegid() keyctl$chown(0x4, 0x0, 0xee01, r3) syz_open_procfs(r0, &(0x7f0000000000)='personality\x00') syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000080)="29000300010003", 0x7) socket$inet_tcp(0x2, 0x1, 0x0) 7.327427101s ago: executing program 3 (id=129): r0 = openat$dsp(0xffffff9c, &(0x7f0000000380), 0x41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000005}, 0x4000) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000002100)={{0x0, 0x0, 0x80, {0x0, 0x1000}}, "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", "a3f19876a2d342155ba116f39b871f05fcc5ffb3ffc5a59ecd35cd11fbe538cd3c90d3e18d70bf930ffffb30f4e157d91efdbbd02ff33fd135f549de480dce81429ba10edc3b68f5c51b24829c6323d8082064df6f18c328038a28c70c8d4a94cda6305c88de89b6cce6914b0a0dc96a5d539376b00fdd6631a77c0b7f95b9596592fedd106c032f9d7c0be78e5e9f895949f812443aff3d4d72b76ee4498db7dd0b0074a95094ece3511c6067130df1e75d7ff0139ec36bcd3a9ea0114347bcd013fe83a3efacdc871f1ef8f6f412157e76e8228ec057ff18b57adf2033d6ce15f74b19ac387cd5382eacfc251cdbc3348307e255a0a8db7a2a0237367e51bacd74197540637abd757561be728d1158cf05e55216e394ed9029f183803e7604956bc78c7c84f86eeab2a2d8492feb65524788a78dcc2b10c334230becb31f28d5b0a06056734e0e9f07bcc8fbfdcaf53aa82d70fa0835aec90ab72cca3a234a72457177c30d2f3f411c7abf3dfaada80441dfbd47ff4fc16815aef57b696a9aab4009538381841dc002f23babf62e52dcabc2924b720623e2efe9c858f45671c1693696ab695c07f119974468c15634ebedabfdacf160f8b0102e0f1c3bf2ba5e2424acfb8867302f28d5adac5a72f1f1e191f36ca433fe9468bb031be8d339c9b85088d0c293b8c450271004748de05f528d2230c333ce40b0525138417d564a3dc7fe9acf8b2623b470f5843091bb7fccb5001b4ee70db7b8eac86c817afb630b28a376dfe3d827b6921992f31f59d54b5093c4fcd3cbe99ea58cefd9d512e6516a6ec3a80490292993450aa51e9fa92b828a507e376c5180741ecfa89e6ee7d31ed0433d1d9050e0fe52b4e93f1f1071f9713c68abfd740f2e76a575c7ea38d8226c2e07935ec16346a2d6d343899767103846c353ba120ae03b497a7771ed7eb99ecdb468cc3e0771852b7ccd5e922549a6af6f915f921ae1a3d2b25624db1c4a33db35a82cdf425c391de6a6500df19bd5bbd9ef98d7ab33554365b3d884f0bfa15f70d3d17a9f504a62bb722c82c1ca95c2cf00e12a7cbf0b5a912b6bec5fc63673c5b0171f5d10ba65463265b4c92dda9d5d3a5961c2558239cbec62ce7e4f59f0c82a6f2dd5b0e1bc7f96f9714c2db663cddffb8ea296b34c69c134502165fdcb41d20bfa959bcba8ca9d0a95ee34c00f6c847fba2c60c9c45b5fec14c2a0c3eecb3bade2b23ee7abe1006e74cd2535b4d82aaeba41637e912aeed48ad7fd75f635d696b016e777a590db1a31c07fb0395a175693e46f3256f6fb183937c766ac95d1f3c1cfd3dc391370b2191beeb4a6036231d7f5333cbf4ec73fa4039c0cb3deaed27c0cd91e9e7f5b5b65bad991332bf710428d37d7a28780529017451f5740f6b09bcae7df4b72b8908347820b136694b6c06468a93fb82c3396b95776fe1fd7f2fac1c027cdb0c61758985c7228d3be60274e6c2df558009189d9762963058e6981367001dcabbddd446072bcfe24c6bfd7e8d9ccca90b85fb1c2d4fe79f686a34cb5b29a27da4a2186dd4396c1fe0f13bb4ce7d30c2620e8485decce8f9b93a8342b21e5f95617dfb8c9c3bb11d5d8f265cd7bab6826dc64799c709b1597b052644c5af672b084c320db6ac272c900bf3555a3d6517ba2c26c9c2f43583eea407f262a79d77595a544bcc218e4e301227336eea285d782588538ec31f1c494b312d648e725ff6ed7b19d75d9745fdc23e2aa837e94656a933388270898c68ab87488300eabe51018b9a1508be2aafb09bb7b05305ac3e3a60e3de550c07b33d2bd32e993250c17bf58df5f06e68f7f6a0cdb6593da23d5a133a2cc38a8d0ff9da3838789149ba80e8324ae3202539e6515b58cb366908442ce0401d12dd1f5415e27333b873cbd3b207c5897ce79d8b0200bc00c2b534536804d14b65b71152f70cc064d1a3f8bd5b175378a2ccaf5f46b89ae5ab0e5b8e55d0723b3843c4406c716ae382bfe1f4eb0a752d469f4933ef4fbffa75f34e5d4e485d8350445d5fa55d0204ca0ef8637b0a05c3eb0ddbda46de0efefd53761a968e47fb0e32090e4d5b21d9a848646f625aa6da0091c724ef47555da1214d4f9afaf136c0e4af68c3ac922280e70809c54b3386062af1c1d9de3bb8704a7fe4a508107fc20b39ebcd98e583e44cb75fdc1fcf28c5323ad0ac8f16ea9e2ec4cbbc2f5ec13e59562fb77e5fa0313357e3a5c0d34ff639fe1422bdb5b2a1194ed3926c8430573f904392ffd95d8251f200789500f1538c188b6a5c7d172f4b46f54f578f356b7a66cd272e1328ebdf26a9ecedcbf3c8a1ad23d7dddfafca51ad115af289e9b8fba34772bdb8a8b066ec3fd45cfc421d84afb1cefa0e379c9e45ed11185a6cccbef98dff3a6952781a9556cb2281c9934145890473ca42d72c1d7ce959d6eecda4385f2d08ec5e945ec1619732ba09185bc12f6b1515e85c060eabf9395468238ba6ed79a4f6cc78a96d7f4d5197186350f0a2be2dd9f74a4b133ec3883f6919f4cf09c44c75d93fd994c4206129aece022d611f2c831dd16c723fb35ae2ee450e7d6bfe110d894a851c3fe5938cf6072c1b844a6fa648f697dc8b2c28315cdc6ed5855ca5ce9061022ada7da765426b06e03bfb5352df09b09c52e456ea0cf916b9346e88f5bf67f0b73c834547fd9e6361078aed7740cb292939e419a14680c8ab775c005670e974e28543a5d5ba1ef2e20492cb78ff11b8ab0910147a1f1f3cd8c5a4422dc6bb6861f7f4d691c7446a3a0b8ebb4b3c17bc6e0d5b9c6df770b4a43c85d4d89be6dfe968844cc279ab6cf37f07b7ee976cefed2742196df24cdcac2da0c60898984dfaf9a67e66ab077cbf862d29af6cbfc706abc7aae4f76cb0a0a5ffb022a3f632be9e38c95c2a66e5cf15d7d34b733ca5e42b52785c27d0c7106abc31062b5635cbd48a6a34e3800c336cb3536eaeaa87c4a72ad6da4deab684ef30ec82273ffe9191d65fbe4777de30bf53985e4edad0e6cfd29e27374d94e2bdc4d0d7472bb1106872b38fbf3f23e765b3757383de2cbc736be2067656f4931875ea9db874130cdefab769a7808edcce3511c2f78a385874e1d7e63ce9af3675046c28fb5103b9239e1105cd9b27b8432211594d01f26da14f841bfd31bb27612991d4270b3e565aeb279026a92dd87c1a657492fd83e1345b1e368b754ea4663cc0609f0e492fb1843e5b7b86fc9e7b17befd9526de2b0c01f0db235a010abeb0968c2777551dc1ce59648848a239b519ca0309c013af97e81fa829ce9f44fc2ec431dfc20e178b6e1c71748391f67b7fc219522164d1c51deed2686f26e9ad01aa1fe758180711f8c1ef3daedb59430d1ad3dc72433d652a05c8c83c46e7f4fbd9719e187fa517210c3cf5397af5f1ea47feb8a39df0c3c355a1c4cdbc9fe576c10ebe18fa6c9206f8d80da27288ed881c23844050ae39073c04360666043963f3a223f9a502d62c571a4133d9db21d8574b22bbed66ad8a882e0ee4446c26dc17c0b14db93ee0e69771aa60a2b2a24ea0e2af4034784a649c7e20ff4495347c60d65e17d01934da30c8458e57534731a5bf7247b9523fc60e5d6ab86fb232bd3575b90d98d62fe293c82f8d841c896a0bc2a3d3e552795e3c40e53ceceecf89f265e9e9a97c33e4ba995386c21e5cb40d6b9ecfbf355994cc1ece413fbfa741886ab1a02c5e88337499d9e52ead16c6b116dfae5ec3cebcddc95bee5f7159033fbeda0f20e1663e86303fbe0b6cbfd8474cae340cab079f8d341dbc49d5b232e07354ee7f728b2e084921c0f1194338d57fa945ed919778d146b2c43751b9ca1a436382e1f27488b5838c14371557c1c2328d04e074e574538e67d62687a002bfae76d3cc55d9610a476d32cbaa1f9c4fabaeee0a2caac2ed1dd8aef3cb389cdc5956c25d0372f1ce33feafdc02ca464f68509670550b0cb07db1f4b4dc57b35aa1108600dce050dbdbe89260a2d454168277ab6b3a25a3fe8109daa4e5362b4e22dde23a304d90fe62fa0305590924fe95536ddaedd7521b460ea23b284b2d14ac69e7ef60c997f04795badfaad7564f2d818fdb3850891e97e3eaefdd6dad52e88e24cc109228115601fe18149b1306497eedbec8c985d6affecf02f78b840a171ebc4b98091400f1b7afb2b555745c32a4b9c0348069f070a848ba9e2afd58bcc7c14d0f9a59680ee59e2d7a5ec4ade6b5a6b0572c8a418dbfd2fc3c113143505b0cba0795f1a148b7d2dc2861f7f1684214d480293f02cf0519d2b120e09b0dc4994aac3393aafab04b27e14344b060a9b770860abf06044a54a40576cdf8735205995681522701b18bdfd6b4bf0e7d5cfdecbe67787eeab03cfe877efc24d7c020ea4c20cd25a8f1ac9d5733e70ded73025a7494ea0f1f523ea839d569fb5cbd23870fb8181a60c465f57269f0ec96f4133a2f36c7e55afff57d12580ccbf82b1a65fb1ae4414e2577f77937696ff6bc7387357ece78f692eeece79e9d88e0231869f2ad841f3a36c0ed5fab98ef98e6cdf1952cc522cf42e76f5a06dddf0de2c1185877f4f3da55d6f5c164ec04286b26851bbc6822b3fd351f767d9e7377f5e6982685b2ba713bcb3fbc14587de19457a7c1972325bf0501b88e5b526b4656b1875fbe3178349ff63315f9f6504453a23ae21514da5dcef79cd1ab5d9813e38bb9f51ec0329228817a0bd748f07578427a8ecad4d08ed7d8137fd9645d75512953c62f61bfdc2d8be71e23ce97c3b5da5d851f1ddafe47e567c5e4103064bfc015dd76632e0dbf2e41727014c25be33d88821c7885dc5579425d25b4a1fd1cf4f02a7012a3ddfd609841667e9f33a386548baf19754b28ca6d3d94759c4dd8f6a3d4d67d2163099847e60c9d22dc5dfe064144b8ca1ddc61f9387cc0354980d63ebb2d2d1cc88a229246a0460b608dbe0968d1869ce7c545a4536eb7c4825d27371733ddce24b21559aa9973d7e265a4af61ac6c62b9403eb2cb301e7f9caddfefb0d5a824ed6eb7c71e02b7950ff016e617b9bea2207d4a846e0342b3180590a1c54b7d13cffbec61fb9649345dcaa3d2d67f604de26524cd8b3d1aa94b82324a10707c1d9851b4008567daccaf8a25b97cf52230b4f5f03d17febedc5c6d00768128ba189b497fd6ab1aa470da2c2056208c7c7768626333c830688824518c8409d4338a3758355ff70c3431fefb09b357a2fefd541aebe8174d8b466f648dd27548c4c266f7b621a114a2631f40336b48bee58c7391a1d22d5007f9d00fd50dbe596f298e83d1e453295957296ccb05758312780cbdf734fa437c3e268ae3a9145d22d4b25fccbeebccdebe80f5e45cb5d5acc451139efce8381263fb0acf974ce5bb96997a3d9e6e542fb7665a9f751c76087767d4de11cdfbe1b577d1087f6e1cbd9907f7630bf95a077b2e3e8abc6e3d6e2111050b52df8a19c13a3462ca688939e189ada4d0d1e3bb0c3da329f3d143a63b22aa0a325bd7d3111351118577ae6d66c0bb3906270e4f03200e97e28b960317d782e64171f8a2b86465d61564e0bf0e9fe9dc7f0b0130ee0066dc1b5edeb4b2521f7ba5395b69a993284ecfd2b962db1ad001fa1be5e55f0c39c212e19313c31a5c5f8c15b1551712ef6600d1abdce34ba1e31452322253ed1d88671a36ef3b8f07c62f1a17cb56742e5cf5758826e0656d5648ab68e2bfd1bcef7f583dd27dfd8cccfa5351691c8777a9c93332f71fcdf96b84f9856afeb1e90100ec05b"}) ioctl$VT_OPENQRY(r1, 0x4b4b, &(0x7f0000000480)) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r11, 0x84, 0x22, &(0x7f00000010c0)=""/4106, &(0x7f0000000000)=0x100a) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000140)={0x2}) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f00000003c0)=0xfffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) 6.696640193s ago: executing program 1 (id=132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x1, 0x4) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 6.547455948s ago: executing program 3 (id=133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff00", 0x2000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb9}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 6.448227757s ago: executing program 1 (id=134): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) 5.625972438s ago: executing program 3 (id=136): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f33e65ab90e6d788f94219f85e58000000274135dd2f06b91ce91abf23efbecd2ec520173a16bc326b2a387efab136b6307872a40cb7ffc3ccbbd7adfc392f2c577e743dceacba9cd3d1e4c6236123fd3000"], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x6e8e, &(0x7f0000000a40)={0x0, 0x73f3, 0x8000, 0x1, 0xbfdffffd}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) openat$rfkill(0xffffff9c, &(0x7f0000000600), 0x20000, 0x0) gettid() r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 5.175618152s ago: executing program 0 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f}, 0x48) 5.155283885s ago: executing program 1 (id=139): r0 = socket$netlink(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 4.407892498s ago: executing program 0 (id=140): ioperm(0x6, 0x88, 0x8) syz_io_uring_setup(0x35ff, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0x86) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f00000007c0)=0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) 4.352709303s ago: executing program 4 (id=141): ioperm(0x6, 0x88, 0x8) syz_io_uring_setup(0x35ff, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0x86) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f00000007c0)=0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[], 0x30}}, 0x41) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff7}, {0xfff3, 0xc}, {0xffff, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x3840000}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048810}, 0x40) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x4000, 0x6, 0x4d, 0xffffffff, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ['\x00', "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x6, 0x6, 0x1e, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x20, 0x6, 0xffff}}) r7 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000140)={0x8, 0x0, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b60fd94c5bd97abc150", 0x70, 0x3, 0xf5, 0x7, 0x8, 0x0, 0x1}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) 4.351697034s ago: executing program 3 (id=142): mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='adfs\x00', 0x221000d, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008855}, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000a00060050505050505000000800350000000000050018011d0000000800a10000000100"], 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="2100000800030095dea8981278c8f60c4b31e4fe6964a2d9f06a46795efcf9e1a8500dd866ac614f131fb7e6bf6ee299c6f148bc939853eff5953326dd85b15de03ea2e3cf4502589c957c", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x20000080) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x5c3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5ec}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44081}, 0x4000000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) read(r2, &(0x7f00000005c0)=""/152, 0x98) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0207000902", @ANYRESDEC], 0x10}}, 0x20000041) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x9000000) 4.08075428s ago: executing program 0 (id=143): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69000000001406fffe800080000000000000000000000039fe8000000000000000000000000000aa4e204e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 4.015541196s ago: executing program 4 (id=144): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 3.913287856s ago: executing program 1 (id=145): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x90400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) gettid() syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2000) 3.87794577s ago: executing program 4 (id=146): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x10) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000100)=0x9) 3.627428304s ago: executing program 4 (id=147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff00", 0x2000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb9}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 3.154529281s ago: executing program 0 (id=148): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.95952884s ago: executing program 1 (id=149): syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x80, @multicast1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x0) 2.737429872s ago: executing program 4 (id=150): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f}, 0x48) 1.983382956s ago: executing program 0 (id=151): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x14008045, 0x1}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x300, 0x0, &(0x7f00000003c0)=0x14) 1.913257553s ago: executing program 4 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000003000000000000000f000000186200000f00000000000000f9ffffff1811", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70000860000009500000000000008f0c3352b7687e981f5d87f2a8b96a5f775b22a07622bedabf2e342"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x40, &(0x7f0000000400)=""/64, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x5, 0xb, 0x5}, {0x3, 0x3, 0x2b, 0x1}, {0x2, 0x1, 0x9, 0xa}], 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, r7, 0x0, 0x7}, 0x18) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="ec3ca600", @ANYRES16=r8, @ANYBLOB="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"/1242], 0x4ec}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x3, 0xfd}, 0x8) 666.02µs ago: executing program 0 (id=153): ioperm(0x6, 0x88, 0x8) syz_io_uring_setup(0x35ff, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0x86) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f00000007c0)=0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) 346.65µs ago: executing program 3 (id=154): ioperm(0x6, 0x88, 0x8) syz_io_uring_setup(0x35ff, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0x86) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f00000007c0)=0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[], 0x30}}, 0x41) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff7}, {0xfff3, 0xc}, {0xffff, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x3840000}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048810}, 0x40) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x4000, 0x6, 0x4d, 0xffffffff, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ['\x00', "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x6, 0x6, 0x1e, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x20, 0x6, 0xffff}}) r7 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000140)={0x8, 0x0, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b60fd94c5bd97abc150", 0x70, 0x3, 0xf5, 0x7, 0x8, 0x0, 0x1}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 1 (id=155): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f33e65ab90e6d788f94219f85e58000000274135dd2f06b91ce91abf23efbecd2ec520173a16bc326b2a387efab136b6307872a40cb7ffc3ccbbd7adfc392f2c577e743dceacba9cd3d1e4c6236123fd3000"], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x6e8e, &(0x7f0000000a40)={0x0, 0x73f3, 0x8000, 0x1, 0xbfdffffd}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) openat$rfkill(0xffffff9c, &(0x7f0000000600), 0x20000, 0x0) gettid() r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [ 58.487621][ T4172] cgroup: Unknown subsys name 'net' [ 58.599805][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.157030][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.646787][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.777510][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.792051][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.803178][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.858893][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 61.898448][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.905752][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.913882][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.944280][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.951370][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.959989][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.039346][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.046589][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.054886][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.064687][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.074027][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.081107][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.089674][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.108306][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.115649][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.123483][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.131333][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.139058][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.147226][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.156272][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.174340][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.181421][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.189713][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.211029][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.218253][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.226235][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.265268][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.272432][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.280470][ T4182] device bridge_slave_0 entered promiscuous mode [ 62.304204][ T4183] team0: Port device team_slave_0 added [ 62.312580][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.321919][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.329232][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.337544][ T4182] device bridge_slave_1 entered promiscuous mode [ 62.354479][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.366121][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.377044][ T4183] team0: Port device team_slave_1 added [ 62.384350][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.402590][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.444928][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.479413][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.499326][ T4184] team0: Port device team_slave_0 added [ 62.506445][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.514075][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.540414][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.554711][ T4190] team0: Port device team_slave_0 added [ 62.562215][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.588468][ T4184] team0: Port device team_slave_1 added [ 62.594864][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.601824][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.627925][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.640986][ T4190] team0: Port device team_slave_1 added [ 62.657165][ T4185] team0: Port device team_slave_0 added [ 62.665078][ T4182] team0: Port device team_slave_0 added [ 62.697646][ T4182] team0: Port device team_slave_1 added [ 62.704403][ T4185] team0: Port device team_slave_1 added [ 62.733746][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.740721][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.766805][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.809212][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.816488][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.842512][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.854216][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.861183][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.887344][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.907168][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.914404][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.940454][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.961067][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.968133][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.994130][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.012548][ T4183] device hsr_slave_0 entered promiscuous mode [ 63.019463][ T4183] device hsr_slave_1 entered promiscuous mode [ 63.027321][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.034654][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.060788][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.072307][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.079620][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.105567][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.117991][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.125236][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.151227][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.201730][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.209105][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.215923][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.224423][ T4184] Cannot create hsr debugfs directory [ 63.282682][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.289676][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.296331][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.304243][ T4190] Cannot create hsr debugfs directory [ 63.341284][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.348547][ T4186] Bluetooth: hci4: command 0x0409 tx timeout [ 63.355810][ T4186] Bluetooth: hci3: command 0x0409 tx timeout [ 63.358755][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.361939][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 63.374241][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.374248][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 63.374358][ T4186] Bluetooth: hci2: command 0x0409 tx timeout [ 63.381812][ T4185] Cannot create hsr debugfs directory [ 63.406619][ T4182] device hsr_slave_0 entered promiscuous mode [ 63.413374][ T4182] device hsr_slave_1 entered promiscuous mode [ 63.420006][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.427747][ T4182] Cannot create hsr debugfs directory [ 63.728485][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.741834][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.754067][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.768451][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.813304][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.832928][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.852397][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.870274][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.933939][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.943021][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.960043][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.981917][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.012519][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.060389][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.076217][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.086761][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.097154][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.127201][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.136185][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.145067][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.154343][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.161527][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.170363][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.182694][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.191425][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.198498][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.211431][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.225747][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.234574][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.247834][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.260675][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.298280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.327397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.336084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.360830][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.371507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.381024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.392233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.400996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.409675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.418602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.427282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.440909][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.452883][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.470594][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.483004][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.496818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.507075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.531947][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.551290][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.580747][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.595957][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.610062][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.617211][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.629550][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.651840][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.660091][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.669401][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.679007][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.689589][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.696733][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.706264][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.714591][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.722357][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.746773][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.757441][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.766412][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.773808][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.786243][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.793254][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.829104][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.838183][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.846429][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.854954][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.864612][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.873133][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.880264][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.888563][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.898048][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.907024][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.917323][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.926330][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.935498][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.947555][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.956847][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.965741][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.975132][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.983682][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.992125][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.004309][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.012143][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.027479][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.037618][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.051795][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.060535][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.070826][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.079459][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.093265][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.105559][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.121361][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.136018][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.178439][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.190680][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.204814][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.213437][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.222443][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.229579][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.237557][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.247505][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.256002][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.263050][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.271227][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.280043][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.289069][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.299731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.364484][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.373286][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.388556][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.398362][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.408477][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.418210][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.426668][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 65.433319][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 65.444681][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.453431][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.471668][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 65.478276][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 65.490735][ T4190] device veth0_vlan entered promiscuous mode [ 65.497757][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 65.524093][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.532949][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.549070][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.559422][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.577856][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.591243][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.600888][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.608960][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.619664][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.628325][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.642832][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.654062][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.665773][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.694718][ T4190] device veth1_vlan entered promiscuous mode [ 65.715888][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.734504][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.742040][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.780044][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.807194][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.828377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.844292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.901509][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.911789][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.926877][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.934034][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.942687][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.953189][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.961834][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.968928][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.977154][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.986754][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.995770][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.003211][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.011058][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.020134][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.029238][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.044774][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.064339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.082912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.094480][ T4190] device veth0_macvtap entered promiscuous mode [ 66.131455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.140774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.156667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.167167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.176036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.185003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.195282][ T4190] device veth1_macvtap entered promiscuous mode [ 66.221360][ T4184] device veth0_vlan entered promiscuous mode [ 66.248356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.256890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.266465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.275642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.284850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.293296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.301798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.311129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.320687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.329729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.338446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.351504][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.360009][ T4184] device veth1_vlan entered promiscuous mode [ 66.372347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.380956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.390746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.402505][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.419163][ T4183] device veth0_vlan entered promiscuous mode [ 66.440369][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.447960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.456821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.466321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.475660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.484435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.493016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.503015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.511025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.532541][ T4183] device veth1_vlan entered promiscuous mode [ 66.562814][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.572981][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.588490][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.598400][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.612735][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.622057][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.630538][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.642180][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.650872][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.659017][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.692266][ T4185] device veth0_vlan entered promiscuous mode [ 66.702157][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.712723][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.734665][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.745714][ T4184] device veth0_macvtap entered promiscuous mode [ 66.776425][ T4184] device veth1_macvtap entered promiscuous mode [ 66.797392][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.806455][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.814928][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.823511][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.835654][ T4183] device veth0_macvtap entered promiscuous mode [ 66.857925][ T4185] device veth1_vlan entered promiscuous mode [ 66.876949][ T4183] device veth1_macvtap entered promiscuous mode [ 66.896253][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.910417][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.918341][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.960986][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.979567][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.993197][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.008458][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.036811][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.047132][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.056365][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.065442][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.079751][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.090661][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.100815][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.113174][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.126102][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.137512][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.148695][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.160356][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.177564][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.184809][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.190732][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.205280][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.207453][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.224091][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.235443][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.242843][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.252048][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.261076][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.270855][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.279839][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.289684][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.298639][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.308737][ T4185] device veth0_macvtap entered promiscuous mode [ 67.319034][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.327889][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.337157][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.346917][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.381659][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.390651][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.401470][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.410437][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.423393][ T4185] device veth1_macvtap entered promiscuous mode [ 67.456636][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.466061][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.477286][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.486535][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.504190][ T4249] Bluetooth: hci3: command 0x040f tx timeout [ 67.510344][ T4249] Bluetooth: hci0: command 0x040f tx timeout [ 67.516768][ T4249] Bluetooth: hci1: command 0x040f tx timeout [ 67.522881][ T4249] Bluetooth: hci2: command 0x040f tx timeout [ 67.536023][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.547112][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.558538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.584273][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 67.589936][ T4182] device veth0_vlan entered promiscuous mode [ 67.617560][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.633049][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.647071][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.661017][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.671437][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.683241][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.697564][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.711574][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.721291][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.729892][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.738724][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.748785][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.757079][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.780802][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.805702][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.823733][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.839736][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.849976][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.861386][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.873307][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.886510][ T4182] device veth1_vlan entered promiscuous mode [ 67.915527][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.927447][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.941614][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.959349][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.971056][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.992161][ T4293] fuse: Invalid rootmode [ 68.015297][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.042943][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.082077][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.113665][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.211080][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.286946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.296936][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.330330][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.402571][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.474534][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.535449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.692934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.881466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.897753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.059504][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.082607][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.100064][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.139033][ T4182] device veth0_macvtap entered promiscuous mode [ 69.157086][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.194485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.202593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.239326][ T4182] device veth1_macvtap entered promiscuous mode [ 69.247025][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.260872][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.283625][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.293469][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.306398][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.323437][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.331098][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.349691][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.363767][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.380998][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.393242][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.407601][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.422165][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.435269][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.443466][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.453307][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.462912][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.486405][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.532404][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.563777][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.594612][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.607151][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.629401][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.673581][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.694616][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.753224][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 69.760034][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 69.766192][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 69.772274][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 69.780224][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.793287][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 69.808987][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.864171][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.885229][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.909428][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.924638][ T4314] ip6t_rpfilter: unknown options [ 69.942970][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.979965][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.025223][ T4313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.205292][ T263] block nbd4: Attempted send on invalid socket [ 70.212310][ T263] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.228649][ T4316] vxfs: unable to read disk superblock at 1 [ 70.247381][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.262519][ T263] block nbd4: Attempted send on invalid socket [ 70.269947][ T263] blk_update_request: I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.282655][ T4316] vxfs: unable to read disk superblock at 8 [ 70.294079][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.303377][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.374079][ T4316] vxfs: can't find superblock. [ 70.416110][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.494363][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.524629][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.655171][ T4301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.800544][ T4321] loop2: detected capacity change from 0 to 7 [ 70.825107][ T4201] Dev loop2: unable to read RDB block 7 [ 70.830875][ T4201] loop2: unable to read partition table [ 70.847543][ T4201] loop2: partition table beyond EOD, truncated [ 70.865066][ T4321] Dev loop2: unable to read RDB block 7 [ 70.871314][ T4321] loop2: unable to read partition table [ 70.893708][ T4301] usb 2-1: Using ep0 maxpacket: 32 [ 70.924418][ T4321] loop2: partition table beyond EOD, truncated [ 70.960663][ T4321] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 71.020967][ T3561] Dev loop2: unable to read RDB block 7 [ 71.021359][ T4301] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 71.038147][ T3561] loop2: unable to read partition table [ 71.063789][ T4301] usb 2-1: config 0 has no interface number 0 [ 71.071315][ T3561] loop2: partition table beyond EOD, truncated [ 71.073925][ T4301] usb 2-1: config 0 interface 12 has no altsetting 0 [ 71.348271][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.350564][ T4301] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 71.355211][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.391432][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.416152][ T4301] usb 2-1: Product: syz [ 71.433281][ T4301] usb 2-1: Manufacturer: syz [ 71.443045][ T4301] usb 2-1: SerialNumber: syz [ 71.477421][ T4301] usb 2-1: config 0 descriptor?? [ 72.193723][ T4301] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 72.209853][ T4301] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 72.242802][ T4301] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 72.270933][ T4301] f81534: probe of 2-1:0.12 failed with error -71 [ 72.313736][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.337041][ T4301] usb 2-1: USB disconnect, device number 2 [ 72.563724][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 72.806486][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.913633][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.923428][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.018923][ T4348] syz.1.15[4348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.019563][ T4348] syz.1.15[4348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.779035][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.924695][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.029636][ T23] usb 3-1: config 0 descriptor?? [ 74.531176][ T23] HID 045e:07da: Invalid code 65791 type 1 [ 74.561407][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5 [ 74.624056][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.636276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 74.652597][ T4362] syz.1.30[4362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.653069][ T4362] syz.1.30[4362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.703925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.738080][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 74.748127][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 74.757370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 75.501746][ T4359] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 75.625195][ T23] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 75.680996][ T23] usb 3-1: USB disconnect, device number 2 [ 75.807670][ T4369] fuse: Invalid rootmode [ 76.746043][ T4379] loop2: detected capacity change from 0 to 7 [ 76.799897][ T4378] Dev loop2: unable to read RDB block 7 [ 76.807078][ T4368] fido_id[4368]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 76.821647][ T4378] loop2: unable to read partition table [ 76.844389][ T4378] loop2: partition table beyond EOD, truncated [ 76.979737][ T4383] ip6t_rpfilter: unknown options [ 77.061398][ T4379] Dev loop2: unable to read RDB block 7 [ 77.118137][ T4379] loop2: unable to read partition table [ 77.139701][ T4379] loop2: partition table beyond EOD, truncated [ 77.172944][ T4379] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 77.230024][ T3561] Dev loop2: unable to read RDB block 7 [ 77.235673][ T3561] loop2: unable to read partition table [ 77.250638][ T3561] loop2: partition table beyond EOD, truncated [ 78.412882][ T4393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.819757][ T4395] loop2: detected capacity change from 0 to 7 [ 78.912961][ T4378] Dev loop2: unable to read RDB block 7 [ 78.919715][ T4378] loop2: unable to read partition table [ 78.973906][ T4378] loop2: partition table beyond EOD, truncated [ 79.021035][ T4395] Dev loop2: unable to read RDB block 7 [ 79.043840][ T4395] loop2: unable to read partition table [ 79.049794][ T4395] loop2: partition table beyond EOD, truncated [ 79.063714][ T4395] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 80.449057][ T4414] syz.3.33[4414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.449416][ T4414] syz.3.33[4414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.660225][ T4426] ip6t_rpfilter: unknown options [ 84.301859][ T4440] loop2: detected capacity change from 0 to 7 [ 84.324866][ T4378] Dev loop2: unable to read RDB block 7 [ 84.332355][ T4378] loop2: unable to read partition table [ 84.344593][ T4378] loop2: partition table beyond EOD, truncated [ 84.379100][ T4440] Dev loop2: unable to read RDB block 7 [ 84.407959][ T4440] loop2: unable to read partition table [ 84.436657][ T4440] loop2: partition table beyond EOD, truncated [ 84.481069][ T4440] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 85.541015][ T4463] syz.3.48[4463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.541430][ T4463] syz.3.48[4463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.674140][ T4463] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.694864][ T4463] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.703660][ T4463] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.712588][ T4463] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.728885][ T4463] Zero length message leads to an empty skb [ 86.016842][ T4465] ip6t_rpfilter: unknown options [ 86.806943][ T1110] cfg80211: failed to load regulatory.db [ 87.554698][ T4485] loop2: detected capacity change from 0 to 7 [ 87.631427][ T4485] Dev loop2: unable to read RDB block 7 [ 87.649130][ T4485] loop2: unable to read partition table [ 87.681701][ T4485] loop2: partition table beyond EOD, truncated [ 87.689493][ T4485] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 87.953642][ T4259] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.358556][ T4509] ip6t_rpfilter: unknown options [ 88.513804][ T4259] usb 4-1: device descriptor read/64, error -71 [ 88.738456][ T4512] syz.2.64[4512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.738787][ T4512] syz.2.64[4512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.793706][ T4259] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.871351][ T4512] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.880226][ T4512] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.889089][ T4512] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.897900][ T4512] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.123862][ T4259] usb 4-1: device descriptor read/64, error -71 [ 89.254515][ T4259] usb usb4-port1: attempt power cycle [ 90.087638][ T4522] dlm: dev_write: no op 0 74000000000000 [ 90.163478][ T4522] netlink: 'syz.2.67': attribute type 3 has an invalid length. [ 90.208404][ T4522] netlink: 'syz.2.67': attribute type 4 has an invalid length. [ 90.263673][ T4259] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.283344][ T4524] netlink: 'syz.2.67': attribute type 4 has an invalid length. [ 90.373847][ T4259] usb 4-1: device descriptor read/8, error -71 [ 90.475198][ T4534] loop2: detected capacity change from 0 to 7 [ 90.486359][ T4534] Dev loop2: unable to read RDB block 7 [ 90.491985][ T4534] loop2: unable to read partition table [ 90.498748][ T4534] loop2: partition table beyond EOD, truncated [ 90.522960][ T4534] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 90.643770][ T4259] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.669168][ T4538] mmap: syz.1.74 (4538) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 90.793798][ T4259] usb 4-1: device descriptor read/8, error -71 [ 91.021280][ T4259] usb usb4-port1: unable to enumerate USB device [ 91.288732][ T4552] ip6t_rpfilter: unknown options [ 91.588917][ T4554] syz.0.78[4554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.589128][ T4554] syz.0.78[4554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.060765][ T4554] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.081017][ T4554] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.089833][ T4554] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.098736][ T4554] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.492998][ T4569] loop2: detected capacity change from 0 to 7 [ 92.508286][ T4569] Dev loop2: unable to read RDB block 7 [ 92.518145][ T4569] loop2: unable to read partition table [ 92.528330][ T4569] loop2: partition table beyond EOD, truncated [ 92.538671][ T4569] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 92.782355][ T4576] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 92.796814][ T2304] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.904455][ T4579] syz.3.88 uses obsolete (PF_INET,SOCK_PACKET) [ 93.056942][ T2304] usb 2-1: Using ep0 maxpacket: 8 [ 93.174140][ T2304] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.202217][ T2304] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.261540][ T2304] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.385225][ T2304] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.613936][ T2304] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.777677][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.328849][ T2304] usb 2-1: GET_CAPABILITIES returned 0 [ 94.334582][ T2304] usbtmc 2-1:16.0: can't read capabilities [ 94.406730][ T4643] ip6t_rpfilter: unknown options [ 94.553663][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.567497][ T2304] usb 2-1: USB disconnect, device number 3 [ 95.241836][ T4654] syz.3.94[4654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.241949][ T4654] syz.3.94[4654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.658803][ T4662] loop2: detected capacity change from 0 to 7 [ 95.744549][ T3561] Dev loop2: unable to read RDB block 7 [ 95.750182][ T3561] loop2: unable to read partition table [ 95.756357][ T3561] loop2: partition table beyond EOD, truncated [ 95.896028][ T3561] Dev loop2: unable to read RDB block 7 [ 95.913998][ T3561] loop2: unable to read partition table [ 95.927799][ T3561] loop2: partition table beyond EOD, truncated [ 95.947968][ T4662] Dev loop2: unable to read RDB block 7 [ 95.961365][ T4662] loop2: unable to read partition table [ 95.975836][ T4662] loop2: partition table beyond EOD, truncated [ 96.023645][ T4662] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 97.659910][ T4695] ip6t_rpfilter: unknown options [ 98.925826][ T4704] syz.4.109[4704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.925899][ T4704] syz.4.109[4704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.968473][ T4704] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.988684][ T4704] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.997485][ T4704] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.006287][ T4704] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.095469][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 100.367451][ T4718] loop3: detected capacity change from 0 to 8 [ 100.475640][ T4378] Dev loop3: unable to read RDB block 8 [ 100.481268][ T4378] loop3: unable to read partition table [ 100.547814][ T4378] loop3: partition table beyond EOD, truncated [ 100.679433][ T4718] Dev loop3: unable to read RDB block 8 [ 100.690946][ T4729] loop2: detected capacity change from 0 to 7 [ 100.704916][ T4718] loop3: unable to read partition table [ 100.736631][ T4729] Dev loop2: unable to read RDB block 7 [ 100.742271][ T4729] loop2: unable to read partition table [ 100.756933][ T4718] loop3: partition table beyond EOD, truncated [ 100.763186][ T4718] loop_reread_partitions: partition scan of loop3 (Cjmmý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 100.872090][ T4729] loop2: partition table beyond EOD, truncated [ 100.916574][ T3561] Dev loop3: unable to read RDB block 8 [ 100.922260][ T3561] loop3: unable to read partition table [ 100.951669][ T4729] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 101.280565][ T3561] loop3: partition table beyond EOD, truncated [ 101.778868][ T4743] ip6t_rpfilter: unknown options [ 102.919926][ T4758] syz.4.123[4758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.920229][ T4758] syz.4.123[4758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.072482][ T4781] loop2: detected capacity change from 0 to 7 [ 104.176422][ T4781] Dev loop2: unable to read RDB block 7 [ 104.182065][ T4781] loop2: unable to read partition table [ 104.256446][ T4781] loop2: partition table beyond EOD, truncated [ 104.282786][ T4781] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 104.316503][ T3561] Dev loop2: unable to read RDB block 7 [ 104.334868][ T3561] loop2: unable to read partition table [ 104.512782][ T3561] loop2: partition table beyond EOD, truncated [ 105.103614][ T4790] ip6t_rpfilter: unknown options [ 106.152966][ T4802] syz.3.136[4802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.153300][ T4802] syz.3.136[4802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.309131][ T4819] loop2: detected capacity change from 0 to 7 [ 107.419692][ T4378] Dev loop2: unable to read RDB block 7 [ 107.429733][ T4378] loop2: unable to read partition table [ 107.459939][ T4378] loop2: partition table beyond EOD, truncated [ 107.603953][ T4819] Dev loop2: unable to read RDB block 7 [ 107.643844][ T4819] loop2: unable to read partition table [ 107.651499][ T4819] loop2: partition table beyond EOD, truncated [ 107.684241][ T4819] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 107.924308][ T4829] ip6t_rpfilter: unknown options [ 111.433567][ T4854] [ 111.435968][ T4854] ====================================================== [ 111.443003][ T4854] WARNING: possible circular locking dependency detected [ 111.450064][ T4854] syzkaller #0 Not tainted [ 111.454487][ T4854] ------------------------------------------------------ [ 111.461514][ T4854] syz.4.152/4854 is trying to acquire lock: [ 111.467415][ T4854] ffff888078eecb98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 111.477902][ T4854] [ 111.477902][ T4854] but task is already holding lock: [ 111.485283][ T4854] ffff888078eecff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 111.494628][ T4854] [ 111.494628][ T4854] which lock already depends on the new lock. [ 111.494628][ T4854] [ 111.505041][ T4854] [ 111.505041][ T4854] the existing dependency chain (in reverse order) is: [ 111.514067][ T4854] [ 111.514067][ T4854] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 111.521831][ T4854] __mutex_lock_common+0x1eb/0x2390 [ 111.527574][ T4854] mutex_lock_nested+0x17/0x20 [ 111.532871][ T4854] hci_dev_do_close+0x5f/0x1030 [ 111.538259][ T4854] hci_rfkill_set_block+0x10a/0x190 [ 111.543998][ T4854] rfkill_set_block+0x1c6/0x420 [ 111.549391][ T4854] rfkill_fop_write+0x458/0x560 [ 111.554778][ T4854] vfs_write+0x300/0xd00 [ 111.559555][ T4854] ksys_write+0x14d/0x250 [ 111.564414][ T4854] do_syscall_64+0x4c/0xa0 [ 111.569539][ T4854] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.575966][ T4854] [ 111.575966][ T4854] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 111.583977][ T4854] __mutex_lock_common+0x1eb/0x2390 [ 111.589715][ T4854] mutex_lock_nested+0x17/0x20 [ 111.595021][ T4854] rfkill_register+0x33/0x8a0 [ 111.600244][ T4854] hci_register_dev+0x452/0x970 [ 111.605633][ T4854] vhci_create_device+0x32c/0x5c0 [ 111.611194][ T4854] vhci_write+0x391/0x450 [ 111.616056][ T4854] vfs_write+0x712/0xd00 [ 111.620834][ T4854] ksys_write+0x14d/0x250 [ 111.625693][ T4854] do_syscall_64+0x4c/0xa0 [ 111.630641][ T4854] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.637069][ T4854] [ 111.637069][ T4854] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 111.644902][ T4854] __mutex_lock_common+0x1eb/0x2390 [ 111.650636][ T4854] mutex_lock_nested+0x17/0x20 [ 111.655941][ T4854] vhci_send_frame+0x88/0x100 [ 111.661147][ T4854] hci_send_frame+0x1a9/0x2e0 [ 111.666337][ T4854] hci_tx_work+0x9f9/0x1710 [ 111.671384][ T4854] process_one_work+0x863/0x1000 [ 111.676836][ T4854] worker_thread+0xaa8/0x12a0 [ 111.682026][ T4854] kthread+0x436/0x520 [ 111.686606][ T4854] ret_from_fork+0x1f/0x30 [ 111.691537][ T4854] [ 111.691537][ T4854] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 111.700731][ T4854] __lock_acquire+0x2c33/0x7c60 [ 111.706097][ T4854] lock_acquire+0x197/0x3f0 [ 111.711115][ T4854] __flush_work+0xdd/0x1b0 [ 111.716046][ T4854] hci_dev_do_close+0x1e7/0x1030 [ 111.721495][ T4854] hci_rfkill_set_block+0x10a/0x190 [ 111.727204][ T4854] rfkill_set_block+0x1c6/0x420 [ 111.732573][ T4854] rfkill_fop_write+0x458/0x560 [ 111.737949][ T4854] vfs_write+0x300/0xd00 [ 111.742706][ T4854] ksys_write+0x14d/0x250 [ 111.747546][ T4854] do_syscall_64+0x4c/0xa0 [ 111.752472][ T4854] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.758985][ T4854] [ 111.758985][ T4854] other info that might help us debug this: [ 111.758985][ T4854] [ 111.769372][ T4854] Chain exists of: [ 111.769372][ T4854] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 111.769372][ T4854] [ 111.784328][ T4854] Possible unsafe locking scenario: [ 111.784328][ T4854] [ 111.791767][ T4854] CPU0 CPU1 [ 111.797139][ T4854] ---- ---- [ 111.802489][ T4854] lock(&hdev->req_lock); [ 111.806901][ T4854] lock(rfkill_global_mutex); [ 111.814195][ T4854] lock(&hdev->req_lock); [ 111.821129][ T4854] lock((work_completion)(&hdev->tx_work)); [ 111.827100][ T4854] [ 111.827100][ T4854] *** DEADLOCK *** [ 111.827100][ T4854] [ 111.835234][ T4854] 2 locks held by syz.4.152/4854: [ 111.840243][ T4854] #0: ffffffff8d4c0c68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 111.850332][ T4854] #1: ffff888078eecff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 111.860068][ T4854] [ 111.860068][ T4854] stack backtrace: [ 111.865956][ T4854] CPU: 1 PID: 4854 Comm: syz.4.152 Not tainted syzkaller #0 [ 111.873235][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.883290][ T4854] Call Trace: [ 111.886565][ T4854] [ 111.889487][ T4854] dump_stack_lvl+0x168/0x230 [ 111.894162][ T4854] ? load_image+0x3b0/0x3b0 [ 111.898658][ T4854] ? show_regs_print_info+0x20/0x20 [ 111.903850][ T4854] ? print_circular_bug+0x12b/0x1a0 [ 111.909074][ T4854] check_noncircular+0x274/0x310 [ 111.914020][ T4854] ? add_chain_block+0x940/0x940 [ 111.918953][ T4854] ? lockdep_lock+0xdc/0x1e0 [ 111.923547][ T4854] ? mark_lock+0x94/0x320 [ 111.927883][ T4854] __lock_acquire+0x2c33/0x7c60 [ 111.932731][ T4854] ? lock_chain_count+0x20/0x20 [ 111.937579][ T4854] ? mark_lock+0x94/0x320 [ 111.941904][ T4854] ? verify_lock_unused+0x140/0x140 [ 111.947093][ T4854] ? __lock_acquire+0x12d9/0x7c60 [ 111.952109][ T4854] ? lockdep_hardirqs_on+0x94/0x140 [ 111.957301][ T4854] ? finish_lock_switch+0x12f/0x280 [ 111.962491][ T4854] ? __switch_to_asm+0x34/0x60 [ 111.967247][ T4854] ? __schedule+0x11c3/0x4390 [ 111.971916][ T4854] lock_acquire+0x197/0x3f0 [ 111.976414][ T4854] ? __flush_work+0xc1/0x1b0 [ 111.981003][ T4854] ? read_lock_is_recursive+0x10/0x10 [ 111.986376][ T4854] ? release_firmware_map_entry+0x190/0x190 [ 111.992277][ T4854] __flush_work+0xdd/0x1b0 [ 111.996685][ T4854] ? __flush_work+0xc1/0x1b0 [ 112.001264][ T4854] ? flush_work+0x20/0x20 [ 112.005586][ T4854] ? rcu_lock_release+0x5/0x20 [ 112.010343][ T4854] ? __lock_acquire+0x7c60/0x7c60 [ 112.015365][ T4854] ? preempt_schedule_thunk+0x16/0x18 [ 112.020737][ T4854] hci_dev_do_close+0x1e7/0x1030 [ 112.025669][ T4854] hci_rfkill_set_block+0x10a/0x190 [ 112.030859][ T4854] ? rcu_lock_release+0x20/0x20 [ 112.035705][ T4854] rfkill_set_block+0x1c6/0x420 [ 112.040549][ T4854] rfkill_fop_write+0x458/0x560 [ 112.045390][ T4854] ? rfkill_fop_read+0x4b0/0x4b0 [ 112.050319][ T4854] ? common_file_perm+0x90/0x1c0 [ 112.055265][ T4854] ? fsnotify_perm+0x5d/0x560 [ 112.059938][ T4854] ? security_file_permission+0x75/0xa0 [ 112.065495][ T4854] ? rfkill_fop_read+0x4b0/0x4b0 [ 112.070441][ T4854] vfs_write+0x300/0xd00 [ 112.074680][ T4854] ? file_end_write+0x250/0x250 [ 112.079533][ T4854] ? preempt_schedule_irq+0xd0/0x150 [ 112.084814][ T4854] ? __fget_files+0x40f/0x480 [ 112.089484][ T4854] ? __fdget_pos+0x1e2/0x370 [ 112.094061][ T4854] ? ksys_write+0x71/0x250 [ 112.098469][ T4854] ksys_write+0x14d/0x250 [ 112.102789][ T4854] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 112.108413][ T4854] ? __ia32_sys_read+0x80/0x80 [ 112.113182][ T4854] do_syscall_64+0x4c/0xa0 [ 112.117602][ T4854] ? clear_bhb_loop+0x30/0x80 [ 112.122275][ T4854] ? clear_bhb_loop+0x30/0x80 [ 112.126943][ T4854] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.132839][ T4854] RIP: 0033:0x7f3abc3eefc9 [ 112.137252][ T4854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.156850][ T4854] RSP: 002b:00007f3aba614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.165255][ T4854] RAX: ffffffffffffffda RBX: 00007f3abc646180 RCX: 00007f3abc3eefc9 [ 112.173218][ T4854] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008 [ 112.181180][ T4854] RBP: 00007f3abc471f91 R08: 0000000000000000 R09: 0000000000000000 [ 112.189173][ T4854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.197158][ T4854] R13: 00007f3abc646218 R14: 00007f3abc646180 R15: 00007ffd2ada6ff8 [ 112.205136][ T4854] [ 112.284230][ T4855] syz.1.155[4855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.284567][ T4855] syz.1.155[4855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.375740][ T4857] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.396205][ T4857] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.404957][ T4857] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.413685][ T4857] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0