last executing test programs: 3.039462202s ago: executing program 4 (id=187): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x8004745a, &(0x7f0000005280)) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 2.923693486s ago: executing program 4 (id=192): rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x22, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sync() ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) 2.79852564s ago: executing program 4 (id=195): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000480)=0x2, 0x4) 2.724032713s ago: executing program 4 (id=196): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0xfdf1) 2.652483325s ago: executing program 4 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x2030, 0x0) 1.835941681s ago: executing program 4 (id=214): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000002c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0x3951}, 0x1c) r2 = epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unshare(0x2040400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002140)={0x50, 0x0, r7}, 0x50) read$FUSE(r5, &(0x7f0000006980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff65) sched_getattr(r8, 0x0, 0x0, 0x0) fstat(r6, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a80)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, 0x0}, &(0x7f0000000c40)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000600}, 0xc, &(0x7f0000000240), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000059a8562e1619c59b50959f7230f607000000000000000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=r10, @ANYRES32, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}, 0x44800) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002840)={@val={0x8, 0x201}, @void, @ipv4=@generic={{0x7, 0x4, 0x2, 0x2, 0xec6, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x7, 0x21, [@broadcast]}]}}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7f46005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37"}}, 0xeca) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xc0000007}) close_range(r0, r0, 0x0) r12 = syz_open_dev$rtc(&(0x7f0000000100), 0x7, 0x8040) ioctl$RTC_WKALM_SET(r12, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x9, 0x7, 0xc, 0x1f, 0x9, 0xff, 0x3, 0x70, 0xffffffffffffffff}}) 1.431936664s ago: executing program 1 (id=225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x2d0, 0x228, 0xfeffffff, 0x2d0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x300, 0x300]}}}, @common=@set={{0x40}, {{0x0, [0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 1.352259116s ago: executing program 1 (id=228): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/kcm\x00') lseek(r0, 0x79660000000, 0x1) 1.352025736s ago: executing program 3 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000300)=""/49, &(0x7f0000000340)=0x31) 1.327277548s ago: executing program 1 (id=232): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) 1.264528239s ago: executing program 3 (id=233): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x804, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r1, &(0x7f00000006c0)=@ceph_nfs_fh={0x8, 0xfe, {0x40}}, 0x755c00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.264188099s ago: executing program 1 (id=235): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x288000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) read$FUSE(r0, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$cgroup_pid(r0, &(0x7f0000003600)=r2, 0x12) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) gettid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001580)="9052", 0x2}, {0x0}], 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x0, 0xd1f}, {{@in=@private=0xa010102, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x3, 0x0, 0x0, 0x100, 0x0, 0x80}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r4, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9a, 0xf4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3c8, 0x9, 0x1, 0x95ce, 0x8}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1.24321019s ago: executing program 3 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000010c0)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x82, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.160539233s ago: executing program 3 (id=238): r0 = syz_clone(0xa0006411, 0x0, 0xa0c0c201e076494c, 0x0, 0x0, 0x0) waitid(0x2, r0, 0x0, 0x8, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) 1.124371003s ago: executing program 1 (id=241): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 1.040521386s ago: executing program 2 (id=242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {0x400}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x138}}, 0x0) 1.025118947s ago: executing program 2 (id=243): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) 964.691439ms ago: executing program 2 (id=244): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 672.453738ms ago: executing program 2 (id=245): open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) unshare(0x28000600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) signalfd4(r2, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 627.22752ms ago: executing program 2 (id=246): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 416.191516ms ago: executing program 2 (id=248): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x19059) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f0000000180), 0xf11, 0x4900) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x48011}, 0x40) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094) 383.294927ms ago: executing program 0 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 290.71153ms ago: executing program 3 (id=251): unshare(0x2a020600) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000001080)={0x1000, 0x4, 0x9, 0xbd75}) 224.457803ms ago: executing program 0 (id=252): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023893) 215.499143ms ago: executing program 0 (id=253): sendmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x68, 0x103, 0x8, "cc23776fe7eafa19a68a8ecf851af933e3698cf4df4597894bfc6e0c4b5ac7661dfaaaf25dc3801dc86fc7a8955b9b32faca12b4a3f8fde39adb77d9cd0c14c06234cdddfe9d40eb1313774b0091684d804593c48dc55136"}], 0x68}}], 0x1, 0x2004c040) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x1, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x21}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010102, {0x0, 0x192, 0x6, 0x10002, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3500, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 182.677734ms ago: executing program 0 (id=254): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2, 0x400) readv(r0, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/29, 0x1d}], 0x1) 132.446826ms ago: executing program 3 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/217, 0x125}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f0000000580)=""/138, 0x8a}, {&(0x7f00000072c0)=""/4108, 0x100c}, {&(0x7f00000001c0)=""/62, 0x3e}], 0x6}, 0x70004}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x81}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000900)=""/88, 0x58}, {&(0x7f0000006280)=""/4110, 0x100e}, {&(0x7f0000002840)=""/207, 0xcf}], 0x3, &(0x7f0000003d00)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000004d00)=@phonet, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/244, 0xf4}, {&(0x7f0000005e80)=""/167, 0xb0}, {&(0x7f0000005f40)=""/98, 0x62}], 0x4, &(0x7f0000006000)=""/33, 0x21}, 0x69f}], 0x9, 0x100, 0x0) 132.325115ms ago: executing program 0 (id=256): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) brk(0x200000ffc000) 118.940756ms ago: executing program 0 (id=257): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x176b90bd46832ffe}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100034b7ec740c605019250c5010203010902240003080e50000904b2cc0036", @ANYRES16], 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 1 (id=258): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) pipe2$watch_queue(&(0x7f0000000300), 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) 0s ago: executing program 2 (id=259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. syzkaller login: [ 28.905602][ T4314] cgroup: Unknown subsys name 'net' [ 29.148617][ T4314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.405990][ T4314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.165344][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.172068][ T4341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.173448][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.174874][ T4341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.175371][ T4340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.176480][ T4341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.178203][ T4340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.180035][ T4342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.180303][ T4340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.182899][ T4340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.184296][ T4340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.185502][ T4343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.186322][ T4340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.188476][ T4340] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.189766][ T4340] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.191706][ T4340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.196158][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.198232][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.199680][ T4340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.199739][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.202171][ T4340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.202381][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.208627][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.211489][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.216185][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.216645][ T4343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.217997][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.218785][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.219699][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.220872][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.334999][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 30.361090][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.363163][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.393478][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.410879][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.412111][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.413731][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.423459][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.424720][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.426579][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.436968][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.438228][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.439823][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.444343][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.452904][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.454140][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.456445][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.457840][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.459011][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.460548][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.465301][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.475586][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.478374][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.479977][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.482189][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.485918][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.487212][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.488739][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.494057][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.495243][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.498236][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.508024][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.518408][ T4326] team0: Port device team_slave_0 added [ 30.520209][ T4326] team0: Port device team_slave_1 added [ 30.525216][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.526789][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.531343][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.534597][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.541793][ T4327] team0: Port device team_slave_0 added [ 30.543379][ T4327] team0: Port device team_slave_1 added [ 30.549681][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.552363][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.554104][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.555348][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.560370][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.564360][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.565448][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.567074][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.569975][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.572157][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.574058][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.575158][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.580024][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.584374][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.585541][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.587481][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.598400][ T4331] team0: Port device team_slave_0 added [ 30.599664][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.600912][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.605074][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.612194][ T4335] team0: Port device team_slave_0 added [ 30.613806][ T4335] team0: Port device team_slave_1 added [ 30.623881][ T4331] team0: Port device team_slave_1 added [ 30.666747][ T4326] device hsr_slave_0 entered promiscuous mode [ 30.705936][ T4326] device hsr_slave_1 entered promiscuous mode [ 30.746077][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.747257][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.751629][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.754308][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.755435][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.760111][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.766390][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.767598][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.771924][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.774735][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.786615][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.788447][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.789574][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.793963][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.836828][ T4335] device hsr_slave_0 entered promiscuous mode [ 30.875952][ T4335] device hsr_slave_1 entered promiscuous mode [ 30.915709][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.916954][ T4335] Cannot create hsr debugfs directory [ 30.956904][ T4327] device hsr_slave_0 entered promiscuous mode [ 30.995822][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.035690][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.036850][ T4327] Cannot create hsr debugfs directory [ 31.040784][ T4334] team0: Port device team_slave_0 added [ 31.058423][ T4334] team0: Port device team_slave_1 added [ 31.096716][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.135854][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.185696][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.186945][ T4331] Cannot create hsr debugfs directory [ 31.191607][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.192817][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.199666][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.207790][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.208932][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.213478][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.287293][ T4334] device hsr_slave_0 entered promiscuous mode [ 31.335972][ T4334] device hsr_slave_1 entered promiscuous mode [ 31.375751][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.377038][ T4334] Cannot create hsr debugfs directory [ 31.397733][ T4326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.442868][ T4326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.498392][ T4326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.526875][ T4326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.612453][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.641243][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.676887][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.720144][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.763206][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.773665][ T4327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.810625][ T4327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.846947][ T4327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.882556][ T4327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.921728][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.929516][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.931632][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.933222][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.934827][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.937389][ T1619] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.938497][ T1619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.940022][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.941582][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.943146][ T1619] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.944306][ T1619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.945616][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.947956][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.949838][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.984233][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.986639][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.037870][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.077167][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.119443][ T4334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.170106][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.172050][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.173730][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.176628][ T4334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.226809][ T4334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.236404][ T4343] Bluetooth: hci0: command 0x0409 tx timeout [ 32.237417][ T4343] Bluetooth: hci3: command 0x0409 tx timeout [ 32.238401][ T4343] Bluetooth: hci2: command 0x0409 tx timeout [ 32.239387][ T4343] Bluetooth: hci4: command 0x0409 tx timeout [ 32.240296][ T4343] Bluetooth: hci1: command 0x0409 tx timeout [ 32.266735][ T4334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.310648][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.312401][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.319823][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.321487][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.332188][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.336342][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.357888][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.379183][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.380774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.388744][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.391785][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.402060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.403704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.405258][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.406432][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.410864][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.413298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.414936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.417189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.421886][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.429533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.431154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.432605][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.433784][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.435428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.437971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.439395][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.440490][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.441820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.443404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.445251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.449865][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.451025][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.457098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.458685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.460387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.462424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.464263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.473010][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.474766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.477871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.479223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.497164][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.498517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.500301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.502262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.503848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.505462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.509690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.511265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.512772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.514106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.515378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.523231][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.526743][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.528572][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.530067][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.531676][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.533147][ T1619] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.534252][ T1619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.539308][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.540994][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.542581][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.544102][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.545614][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.548770][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.553136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.554742][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.559079][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.560283][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.568570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.570216][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.571622][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.573329][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.582465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.584361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.586004][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.587953][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.590783][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.592504][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.594062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.595480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.601695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.604553][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.608369][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.613212][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.615424][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.621858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.623431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.624870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.628033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.641306][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.643235][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.644964][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.647410][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.651506][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.652646][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.653930][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.655408][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.659014][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.660239][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.661517][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.667776][ T4326] device veth0_vlan entered promiscuous mode [ 32.672773][ T4326] device veth1_vlan entered promiscuous mode [ 32.678573][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.680114][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.681583][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.686164][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.687811][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.691057][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.693401][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.699634][ T4334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.701255][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.711452][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.713004][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.714560][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.717779][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.719653][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.721148][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.726392][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.727960][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.737284][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.739460][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.741148][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.752676][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.755078][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.756847][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.769681][ T4326] device veth0_macvtap entered promiscuous mode [ 32.772782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.774328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.776758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.783928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.785323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.794701][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.797355][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.798947][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.800613][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.801905][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.803230][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.804569][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.811888][ T4326] device veth1_macvtap entered promiscuous mode [ 32.813979][ T4327] device veth0_vlan entered promiscuous mode [ 32.816640][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.821784][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.823296][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.824602][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.837238][ T4327] device veth1_vlan entered promiscuous mode [ 32.841322][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.843417][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.844924][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.849699][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.852460][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.861753][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.864954][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.867860][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.869467][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.871070][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.873090][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.881323][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.882915][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.884277][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.886432][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.892669][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.894218][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.896462][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.905968][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.907725][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.909239][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.913145][ T4335] device veth0_vlan entered promiscuous mode [ 32.921105][ T4335] device veth1_vlan entered promiscuous mode [ 32.929317][ T4327] device veth0_macvtap entered promiscuous mode [ 32.931989][ T4327] device veth1_macvtap entered promiscuous mode [ 32.939374][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.940914][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.942463][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.943928][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.945348][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.954156][ T4331] device veth0_vlan entered promiscuous mode [ 32.960850][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.962389][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.964024][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.965377][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.971874][ T4331] device veth1_vlan entered promiscuous mode [ 32.989406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.990997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.992457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.993972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.002526][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.004294][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.007099][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.009228][ T4335] device veth0_macvtap entered promiscuous mode [ 33.010711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.012182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.013816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.020310][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.021981][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.024312][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.027687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.029185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.030746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.040439][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.042094][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.042142][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.043406][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.047230][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.050647][ T4335] device veth1_macvtap entered promiscuous mode [ 33.052953][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.054390][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.056822][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.058183][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.073699][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.075150][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.077427][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.079437][ T4331] device veth0_macvtap entered promiscuous mode [ 33.087071][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.088864][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.090446][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.092168][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.094580][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.099320][ T4334] device veth0_vlan entered promiscuous mode [ 33.102442][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.103968][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.105522][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.107901][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.109546][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.111127][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.112600][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.127447][ T4334] device veth1_vlan entered promiscuous mode [ 33.129308][ T4331] device veth1_macvtap entered promiscuous mode [ 33.134293][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.138082][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.139655][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.141242][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.143384][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.150330][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.151637][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.158712][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.160335][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.161886][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.163506][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.165018][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.168439][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.169866][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.171257][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.172636][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.180665][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.181946][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.182106][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.184082][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.185159][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.187094][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.189773][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.191338][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.192921][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.195217][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.202787][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.204115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.205838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.207194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.208611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.210133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.227677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.229373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.231428][ T4334] device veth0_macvtap entered promiscuous mode [ 33.237623][ T4334] device veth1_macvtap entered promiscuous mode [ 33.240135][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.241861][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.243485][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.245290][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.249891][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.252954][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.255468][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.264537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.266299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.277100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.278869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.300034][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.301856][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.303486][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.305209][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.318269][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.321938][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.323498][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.325156][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.340621][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.345144][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.348409][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.349899][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.351331][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.353510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.355065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.389449][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.390869][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.398461][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.411660][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.416405][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.417942][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.419645][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.428860][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.430598][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.432169][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.433746][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.436782][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.443625][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.445335][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.451490][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.452850][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.454094][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.482036][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.483586][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.493521][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.494948][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.525788][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.527164][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.528967][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.569649][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.570913][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.574830][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.614643][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.614967][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.616661][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.617377][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.641402][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.665871][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.667230][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.668565][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.760176][ T4443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.770432][ T4443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.783599][ T4444] binder: 4440:4444 tried to acquire reference to desc 0, got 1 instead [ 33.792960][ T4444] binder: 4440:4444 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 33.795039][ T4444] binder: 4444 RLIMIT_NICE not set [ 33.798866][ T4444] binder: 4444 RLIMIT_NICE not set [ 33.801165][ T4444] binder: 4444 RLIMIT_NICE not set [ 33.802943][ T4444] binder: undelivered TRANSACTION_COMPLETE [ 33.846119][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 33.847200][ T4378] binder: undelivered transaction 6, process died. [ 34.316040][ T4338] Bluetooth: hci1: command 0x041b tx timeout [ 34.317137][ T4338] Bluetooth: hci4: command 0x041b tx timeout [ 34.318078][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 34.319002][ T4338] Bluetooth: hci3: command 0x041b tx timeout [ 34.319963][ T4338] Bluetooth: hci0: command 0x041b tx timeout [ 34.425271][ T4503] device syzkaller0 entered promiscuous mode [ 34.857942][ T4549] netlink: 802 bytes leftover after parsing attributes in process `syz.3.36'. [ 34.937674][ T4564] xt_hashlimit: size too large, truncated to 1048576 [ 35.201390][ T4594] device pim6reg1 entered promiscuous mode [ 35.230780][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 35.462581][ T4622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.466255][ T4622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.389546][ T4672] device syzkaller1 entered promiscuous mode [ 36.395969][ T4343] Bluetooth: hci0: command 0x040f tx timeout [ 36.396998][ T4343] Bluetooth: hci3: command 0x040f tx timeout [ 36.397972][ T4343] Bluetooth: hci2: command 0x040f tx timeout [ 36.399043][ T4343] Bluetooth: hci4: command 0x040f tx timeout [ 36.400036][ T4343] Bluetooth: hci1: command 0x040f tx timeout [ 36.443861][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 37.614344][ T4753] capability: warning: `syz.4.104' uses deprecated v2 capabilities in a way that may be insecure [ 37.640569][ T4755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 37.676525][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 37.678039][ T4759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.106'. [ 37.679685][ T4759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.106'. [ 37.690430][ T4755] device veth1_to_team entered promiscuous mode [ 37.716220][ T4755] device gretap0 entered promiscuous mode [ 37.742889][ T4755] device hsr1 entered promiscuous mode [ 37.761010][ T4766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'. [ 37.889070][ T4778] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 37.965077][ T4785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.968308][ T4786] trusted_key: encrypted_key: insufficient parameters specified [ 37.973705][ C1] vcan0: j1939_tp_rxtimer: 0x0000000028d373ac: rx timeout, send abort [ 37.975589][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000028d373ac: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 37.985151][ T4785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.005178][ T4790] xt_hashlimit: size too large, truncated to 1048576 [ 38.193436][ T4785] Zero length message leads to an empty skb [ 38.255118][ T4809] netlink: 'syz.3.130': attribute type 12 has an invalid length. [ 38.388705][ T4817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.390540][ T4817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.476444][ T4338] Bluetooth: hci1: command 0x0419 tx timeout [ 38.477526][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 38.478539][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 38.479490][ T4338] Bluetooth: hci3: command 0x0419 tx timeout [ 38.480568][ T4338] Bluetooth: hci0: command 0x0419 tx timeout [ 39.256267][ T4842] netlink: 'syz.4.144': attribute type 4 has an invalid length. [ 39.461318][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 39.472023][ T4855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.148'. [ 39.494415][ T4857] capability: warning: `syz.1.150' uses 32-bit capabilities (legacy support in use) [ 39.905239][ T4891] __nla_validate_parse: 2 callbacks suppressed [ 39.905251][ T4891] netlink: 3188 bytes leftover after parsing attributes in process `syz.1.165'. [ 40.055033][ T4899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.058823][ T4899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.261543][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 40.263983][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.265412][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.267607][ T4907] device bridge_slave_0 left promiscuous mode [ 40.269279][ T4907] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.311409][ T4908] syz.4.172 uses obsolete (PF_INET,SOCK_PACKET) [ 40.319724][ T4907] device bridge_slave_1 left promiscuous mode [ 40.320906][ T4907] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.369321][ T4907] bond0: (slave bond_slave_0): Releasing backup interface [ 40.409481][ T4907] bond0: (slave bond_slave_1): Releasing backup interface [ 40.457195][ T4907] team0: Port device team_slave_0 removed [ 40.474464][ T4907] team0: Port device team_slave_1 removed [ 40.479649][ T4907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.480819][ T4907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.487681][ T4907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.488972][ T4907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.568317][ T4914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.175'. [ 40.570189][ T4914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'. [ 40.571861][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 40.573341][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 40.763611][ T4927] device syzkaller0 entered promiscuous mode [ 40.788872][ T4927] tipc: Started in network mode [ 40.789794][ T4927] tipc: Node identity d634f05416cc, cluster identity 4711 [ 40.798404][ T4927] tipc: Enabled bearer , priority 0 [ 40.799997][ T4926] tipc: Resetting bearer [ 40.857075][ T4926] tipc: Disabling bearer [ 41.686509][ T4975] netlink: 14 bytes leftover after parsing attributes in process `syz.2.200'. [ 41.880488][ T4990] x_tables: duplicate underflow at hook 3 [ 41.906497][ T4992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.908512][ T4992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.139327][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.143526][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.591052][ T5037] syz.0.229 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.629495][ T5041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.231'. [ 42.686962][ T5048] binder: 5046:5048 unknown command 1074553620 [ 42.692721][ T5048] binder: 5046:5048 ioctl c0306201 200001c0 returned -22 [ 42.736848][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 43.512968][ T5082] netlink: 44 bytes leftover after parsing attributes in process `syz.2.248'. [ 43.524898][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.526771][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.531703][ T5084] netlink: 64 bytes leftover after parsing attributes in process `syz.0.249'. [ 43.628064][ T5090] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 44.092142][ T5108] [ 44.092555][ T5108] ====================================================== [ 44.093613][ T5108] WARNING: possible circular locking dependency detected [ 44.094768][ T5108] syzkaller #0 Not tainted [ 44.095460][ T5108] ------------------------------------------------------ [ 44.096725][ T5108] syz.2.259/5108 is trying to acquire lock: [ 44.097739][ T5108] ffff0000df719458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe4/0x1ec [ 44.099633][ T5108] [ 44.099633][ T5108] but task is already holding lock: [ 44.100881][ T5108] ffff0000df718130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x50c [ 44.102419][ T5108] [ 44.102419][ T5108] which lock already depends on the new lock. [ 44.102419][ T5108] [ 44.104161][ T5108] [ 44.104161][ T5108] the existing dependency chain (in reverse order) is: [ 44.105643][ T5108] [ 44.105643][ T5108] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 44.105716][ T111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 44.106954][ T5108] lock_sock_nested+0x70/0x130 [ 44.109172][ T5108] smc_listen_out+0x114/0x3a4 [ 44.110122][ T5108] smc_listen_work+0x490/0xde0 [ 44.111007][ T5108] process_one_work+0x7f8/0x13a4 [ 44.111983][ T5108] worker_thread+0x8c4/0xfec [ 44.112846][ T5108] kthread+0x250/0x2d8 [ 44.113718][ T5108] ret_from_fork+0x10/0x20 [ 44.114535][ T5108] [ 44.114535][ T5108] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 44.116288][ T5108] __lock_acquire+0x2880/0x6800 [ 44.117213][ T5108] lock_acquire+0x20c/0x63c [ 44.118079][ T5108] __flush_work+0x10c/0x1ec [ 44.118960][ T5108] __cancel_work_timer+0x300/0x458 [ 44.119944][ T5108] cancel_work_sync+0x24/0x38 [ 44.120880][ T5108] smc_clcsock_release+0x64/0xe8 [ 44.121820][ T5108] __smc_release+0x568/0x6bc [ 44.122704][ T5108] smc_close_non_accepted+0xd8/0x254 [ 44.123648][ T5108] smc_close_active+0x9c4/0xd24 [ 44.124566][ T5108] __smc_release+0x48c/0x6bc [ 44.125387][ T5108] smc_release+0x258/0x50c [ 44.126251][ T5108] sock_close+0xb4/0x1f8 [ 44.127076][ T5108] __fput+0x1bc/0x7b8 [ 44.127865][ T5108] ____fput+0x20/0x30 [ 44.128585][ T5108] task_work_run+0x1ec/0x278 [ 44.129387][ T5108] do_notify_resume+0x1fa0/0x2aa4 [ 44.130374][ T5108] el0_svc+0x98/0x128 [ 44.131113][ T5108] el0t_64_sync_handler+0x84/0xf0 [ 44.132093][ T5108] el0t_64_sync+0x18c/0x190 [ 44.132955][ T5108] [ 44.132955][ T5108] other info that might help us debug this: [ 44.132955][ T5108] [ 44.134733][ T5108] Possible unsafe locking scenario: [ 44.134733][ T5108] [ 44.136019][ T5108] CPU0 CPU1 [ 44.136993][ T5108] ---- ---- [ 44.137924][ T5108] lock(sk_lock-AF_SMC/1); [ 44.138742][ T5108] lock((work_completion)(&new_smc->smc_listen_work)); [ 44.140413][ T5108] lock(sk_lock-AF_SMC/1); [ 44.141631][ T5108] lock((work_completion)(&new_smc->smc_listen_work)); [ 44.142825][ T5108] [ 44.142825][ T5108] *** DEADLOCK *** [ 44.142825][ T5108] [ 44.144179][ T5108] 2 locks held by syz.2.259/5108: [ 44.144991][ T5108] #0: ffff0000e06f7a10 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 44.146630][ T5108] #1: ffff0000df718130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x50c [ 44.148235][ T5108] [ 44.148235][ T5108] stack backtrace: [ 44.149221][ T5108] CPU: 0 PID: 5108 Comm: syz.2.259 Not tainted syzkaller #0 [ 44.150443][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 44.152275][ T5108] Call trace: [ 44.152809][ T5108] dump_backtrace+0x1c0/0x1ec [ 44.153627][ T5108] show_stack+0x2c/0x3c [ 44.154303][ T5108] __dump_stack+0x30/0x40 [ 44.155052][ T5108] dump_stack_lvl+0xf4/0x15c [ 44.155870][ T5108] dump_stack+0x1c/0x5c [ 44.156581][ T5108] print_circular_bug+0x148/0x1b0 [ 44.157446][ T5108] check_noncircular+0x264/0x2f8 [ 44.158260][ T5108] __lock_acquire+0x2880/0x6800 [ 44.159003][ T5108] lock_acquire+0x20c/0x63c [ 44.159730][ T5108] __flush_work+0x10c/0x1ec [ 44.160501][ T5108] __cancel_work_timer+0x300/0x458 [ 44.161371][ T5108] cancel_work_sync+0x24/0x38 [ 44.162164][ T5108] smc_clcsock_release+0x64/0xe8 [ 44.163056][ T5108] __smc_release+0x568/0x6bc [ 44.163866][ T5108] smc_close_non_accepted+0xd8/0x254 [ 44.164677][ T5108] smc_close_active+0x9c4/0xd24 [ 44.165514][ T5108] __smc_release+0x48c/0x6bc [ 44.166273][ T5108] smc_release+0x258/0x50c [ 44.167043][ T5108] sock_close+0xb4/0x1f8 [ 44.167743][ T5108] __fput+0x1bc/0x7b8 [ 44.168401][ T5108] ____fput+0x20/0x30 [ 44.169069][ T5108] task_work_run+0x1ec/0x278 [ 44.169836][ T5108] do_notify_resume+0x1fa0/0x2aa4 [ 44.170674][ T5108] el0_svc+0x98/0x128 [ 44.171373][ T5108] el0t_64_sync_handler+0x84/0xf0 [ 44.172210][ T5108] el0t_64_sync+0x18c/0x190 [ 44.288621][ T111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.290624][ T111] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 44.291914][ T111] usb 1-1: can't read configurations, error -71