last executing test programs: 7.217834696s ago: executing program 1 (id=272): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @private0, 0x6}, {0xa, 0x4e20, 0x6, @private0, 0x9}, 0xffffffffffffffff, 0x2}}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 6.448294375s ago: executing program 2 (id=277): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6.340643527s ago: executing program 4 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r4 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000140)) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 5.710456302s ago: executing program 2 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r4, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 3.928995815s ago: executing program 4 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000140)) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 3.927723125s ago: executing program 4 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) 3.927472275s ago: executing program 3 (id=286): ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) setresuid(0x0, 0xee01, 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000b80)=""/4096) 3.926537695s ago: executing program 1 (id=288): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.926318805s ago: executing program 2 (id=289): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = dup(r0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 3.926095255s ago: executing program 3 (id=290): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in6=@private1}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) 3.849062067s ago: executing program 2 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(0xffffffffffffffff, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) 3.839677557s ago: executing program 1 (id=292): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) 3.766553339s ago: executing program 0 (id=293): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000002060102000000008000000002000000040007800c000300686173683a6970000500040000000000"], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') 3.766157399s ago: executing program 4 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r5 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000140)) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 2.567536498s ago: executing program 4 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000140)) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 2.551135638s ago: executing program 0 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) 2.550815998s ago: executing program 1 (id=297): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) setreuid(0xee01, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 2.501118459s ago: executing program 3 (id=298): bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 1.999088932s ago: executing program 4 (id=299): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @private0, 0x6}, {0xa, 0x4e20, 0x6, @private0, 0x9}, 0xffffffffffffffff, 0x2}}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 1.844113305s ago: executing program 2 (id=300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r4, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) 1.694892229s ago: executing program 0 (id=301): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = dup(r0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 1.590076941s ago: executing program 3 (id=302): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.561405562s ago: executing program 1 (id=303): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0xffffffb4, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYRES64=r1, @ANYRES64=r1], 0x68}, 0x1, 0x0, 0x0, 0x24044048}, 0x4010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) setreuid(0xee01, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = dup(r0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 1.432079175s ago: executing program 0 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {0x8, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x13}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008020}, 0x0) 1.070087044s ago: executing program 3 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r5 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000140)) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 574.404086ms ago: executing program 0 (id=306): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 11.634309ms ago: executing program 3 (id=307): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 11.285529ms ago: executing program 2 (id=308): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in6=@private1}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) 6.197079ms ago: executing program 0 (id=309): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 0s ago: executing program 1 (id=310): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x2, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x101, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 64.103486][ T4175] cgroup: Unknown subsys name 'net' [ 64.205037][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.655166][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.563504][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.684236][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.705124][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.765147][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.773093][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.781631][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.790554][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.814252][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.821797][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.831935][ T4187] device bridge_slave_1 entered promiscuous mode [ 67.864898][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.904392][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.913882][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.968969][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.976674][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.984933][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.001313][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.008665][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.017623][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.043128][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.050574][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.059215][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.074419][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.082767][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.091023][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.104746][ T4187] team0: Port device team_slave_0 added [ 68.146803][ T4187] team0: Port device team_slave_1 added [ 68.167446][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.188413][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.210143][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.217495][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.225774][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.235752][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.251923][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.259254][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.267442][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.281521][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.288734][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.297009][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.303909][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.311199][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.319122][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.327830][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.344810][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.352045][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.378127][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.418460][ T4190] team0: Port device team_slave_0 added [ 68.424881][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.432238][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.458289][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.478202][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.489111][ T4190] team0: Port device team_slave_1 added [ 68.516330][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.527303][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.545129][ T4191] team0: Port device team_slave_0 added [ 68.553646][ T4191] team0: Port device team_slave_1 added [ 68.583415][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.591161][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.600730][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.629428][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.636552][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.662671][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.689462][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.696558][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.722694][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.736934][ T4189] team0: Port device team_slave_0 added [ 68.743326][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.751562][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.778001][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.806771][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.813749][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.840236][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.853022][ T4189] team0: Port device team_slave_1 added [ 68.868116][ T4188] team0: Port device team_slave_0 added [ 68.899394][ T4188] team0: Port device team_slave_1 added [ 68.905764][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.912743][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.939056][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.992852][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.999931][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.026224][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.051796][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.059044][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.086045][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.104435][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.111892][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.138150][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.160796][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.168016][ T4190] device hsr_slave_1 entered promiscuous mode [ 69.174692][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.182686][ T4190] Cannot create hsr debugfs directory [ 69.192052][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.199267][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.206593][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.214186][ T4191] Cannot create hsr debugfs directory [ 69.296468][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 69.303014][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 69.305553][ T4197] Bluetooth: hci0: command 0x0409 tx timeout [ 69.316300][ T4197] Bluetooth: hci1: command 0x0409 tx timeout [ 69.338803][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 69.347896][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.354567][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.361640][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.369329][ T4189] Cannot create hsr debugfs directory [ 69.398428][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.405553][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.412080][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.419813][ T4188] Cannot create hsr debugfs directory [ 69.594349][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.613500][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.642642][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.674855][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.722971][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.738245][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.752041][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.761146][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.861391][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.874646][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.886307][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.895824][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.921675][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.963233][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.972072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.981705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.996261][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.017066][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.029213][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.041894][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.051510][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.058891][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.085610][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.094513][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.102953][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.112564][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.124099][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.131247][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.155605][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.171836][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.187554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.198072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.207529][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.218127][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.247605][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.257461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.267102][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.280417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.289196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.313340][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.330550][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.342238][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.350378][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.359522][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.368305][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.379911][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.390323][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.399802][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.408632][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.415750][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.428507][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.439903][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.459708][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.468692][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.482792][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.494691][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.511039][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.518179][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.532974][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.542162][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.577578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.588055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.641194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.650374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.660752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.670958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.679754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.695461][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.717941][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.740671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.751420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.761812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.769578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.782785][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.793987][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.813038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.822573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.841637][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.887531][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.894525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.904431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.913674][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.920811][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.930672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.940541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.949151][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.956268][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.964104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.974003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.983635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.991633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.000080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.047224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.060920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.070027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.081214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.089912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.098948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.108234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.117912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.127345][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.134432][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.143724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.152694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.162520][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.169649][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.177755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.186861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.208614][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.221302][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.239800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.249650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.259649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.271289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.280464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.289682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.301559][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.308322][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.335445][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.344352][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.382932][ T4187] device veth0_vlan entered promiscuous mode [ 71.390791][ T4238] Bluetooth: hci3: command 0x041b tx timeout [ 71.398350][ T4238] Bluetooth: hci2: command 0x041b tx timeout [ 71.405258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.413095][ T4238] Bluetooth: hci1: command 0x041b tx timeout [ 71.420196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.428662][ T4238] Bluetooth: hci0: command 0x041b tx timeout [ 71.430748][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.434865][ T4238] Bluetooth: hci4: command 0x041b tx timeout [ 71.451597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.460683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.472626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.481454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.490334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.499093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.510248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.518454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.529496][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.541373][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.550779][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.584846][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.600727][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.610763][ T4187] device veth1_vlan entered promiscuous mode [ 71.629761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.644225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.653295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.683370][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.717132][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.746808][ T4187] device veth0_macvtap entered promiscuous mode [ 71.780395][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.792275][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.803846][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.818666][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.825808][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.833640][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.842563][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.851939][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.864361][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.874851][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.881982][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.890771][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.899093][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.906835][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.916166][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.924885][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.933616][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.954401][ T4187] device veth1_macvtap entered promiscuous mode [ 71.964771][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.974408][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.988839][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.998842][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.016536][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.037778][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.072609][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.093592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.111762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.121869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.137339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.158144][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.171871][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.181810][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.191473][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.200831][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.212840][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.225832][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.233715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.244392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.253661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.263974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.294619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.303828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.313573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.323887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.343396][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.427901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.438098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.447979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.457612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.486457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.506892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.515036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.524826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.536473][ T4191] device veth0_vlan entered promiscuous mode [ 72.559885][ T4189] device veth0_vlan entered promiscuous mode [ 72.570757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.583068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.614417][ T4191] device veth1_vlan entered promiscuous mode [ 72.649435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.659287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.668757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.678097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.686268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.694671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.704750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.712983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.726891][ T4190] device veth0_vlan entered promiscuous mode [ 72.739128][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.756637][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.782643][ T4189] device veth1_vlan entered promiscuous mode [ 72.792802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.801069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.810310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.824378][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.854137][ T4190] device veth1_vlan entered promiscuous mode [ 72.863971][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.873176][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.882544][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.912700][ T4191] device veth0_macvtap entered promiscuous mode [ 72.952338][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.962728][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.977981][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.986921][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.995753][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.015293][ T4190] device veth0_macvtap entered promiscuous mode [ 73.031286][ T4190] device veth1_macvtap entered promiscuous mode [ 73.047759][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.064545][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.074455][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.083241][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.093150][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.104536][ T4189] device veth0_macvtap entered promiscuous mode [ 73.115698][ T4191] device veth1_macvtap entered promiscuous mode [ 73.172179][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.181981][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.198218][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.216814][ T4189] device veth1_macvtap entered promiscuous mode [ 73.234472][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.251780][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.264499][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.298558][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.313139][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.322597][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.341232][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.354288][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.380583][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.398490][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.417164][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.425031][ T4188] device veth0_vlan entered promiscuous mode [ 73.435119][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.448104][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.459637][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.468594][ T4193] Bluetooth: hci4: command 0x040f tx timeout [ 73.471309][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.485809][ T4193] Bluetooth: hci0: command 0x040f tx timeout [ 73.492313][ T4193] Bluetooth: hci1: command 0x040f tx timeout [ 73.505561][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.506269][ T4193] Bluetooth: hci2: command 0x040f tx timeout [ 73.525112][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.535447][ T4193] Bluetooth: hci3: command 0x040f tx timeout [ 73.544876][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.561797][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.574424][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.590581][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.604125][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.630964][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.646684][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.660241][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.671543][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.706940][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.717558][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.733638][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.745062][ T4267] loop1: detected capacity change from 0 to 32768 [ 73.753664][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.764002][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.774727][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.789806][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.801768][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.812650][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.823451][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.834129][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.850333][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.881785][ T4188] device veth1_vlan entered promiscuous mode [ 73.895235][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.907990][ T4267] XFS (loop1): Mounting V5 Filesystem [ 73.911657][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.954287][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.964100][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.975555][ T4267] XFS (loop1): Ending clean mount [ 73.997661][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.024056][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.044079][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.054408][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.064987][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.075128][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.085897][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.098449][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.109165][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.123496][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.143403][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.155093][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.171629][ T4187] XFS (loop1): Unmounting Filesystem [ 74.204043][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.213511][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.229718][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.243467][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.253663][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.263991][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.377298][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.387170][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.400964][ T4188] device veth0_macvtap entered promiscuous mode [ 74.467592][ T4188] device veth1_macvtap entered promiscuous mode [ 74.490259][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.506085][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.518781][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.527696][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.554243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.571429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.584017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.595769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.621532][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.639274][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.653260][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.664841][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.676468][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.687263][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.698243][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.710402][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.722652][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.784705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.809301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.831543][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.849246][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.883514][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.894458][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.904880][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.916230][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.932194][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.944051][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.976948][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.000863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.011379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.020512][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.030745][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.053397][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.084699][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.093749][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.103152][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.150101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.201785][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.218686][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.251500][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.263717][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.280389][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.340942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.357865][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.384060][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.419057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.438623][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.489695][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.527848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.540847][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 75.547397][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 75.557780][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 75.589305][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.616427][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 75.622987][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.631091][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 75.678098][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.718226][ T4288] loop4: detected capacity change from 0 to 32768 [ 75.841562][ T4288] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4288) [ 75.919937][ T4288] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 75.976650][ T4288] BTRFS info (device loop4): using free space tree [ 76.041156][ T4288] BTRFS info (device loop4): has skinny extents [ 76.095168][ T4298] device dummy0 entered promiscuous mode [ 77.001404][ T4288] BTRFS info (device loop4): enabling ssd optimizations [ 77.376086][ T4293] loop2: detected capacity change from 0 to 32768 [ 78.059901][ T4292] loop3: detected capacity change from 0 to 32768 [ 78.196689][ T4293] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root [ 78.196689][ T4293] [ 78.244906][ T4293] ERROR: (device loop2): remounting filesystem as read-only [ 78.378006][ T4292] XFS (loop3): Mounting V5 Filesystem [ 78.389588][ T4181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4181) [ 79.085532][ T4292] XFS (loop3): Ending clean mount [ 79.905333][ C0] sched: RT throttling activated [ 80.106855][ T4343] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.576297][ T4343] usb 2-1: Using ep0 maxpacket: 16 [ 80.765859][ T4343] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.805609][ T4362] loop0: detected capacity change from 0 to 1024 [ 80.823245][ T4343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 80.840829][ T4343] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 80.867218][ T4362] ======================================================= [ 80.867218][ T4362] WARNING: The mand mount option has been deprecated and [ 80.867218][ T4362] and is ignored by this kernel. Remove the mand [ 80.867218][ T4362] option from the mount to silence this warning. [ 80.867218][ T4362] ======================================================= [ 80.933402][ T4343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.013169][ T4343] usb 2-1: config 0 descriptor?? [ 81.523575][ T4343] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 81.554203][ T4191] XFS (loop3): Unmounting Filesystem [ 81.727422][ T4362] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: none. [ 81.730648][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 81.794819][ T4362] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.915510][ T4343] usb 2-1: USB disconnect, device number 2 [ 81.928742][ T26] audit: type=1800 audit(1787091827.597:2): pid=4362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 81.968148][ T4370] input: syz0 as /devices/virtual/input/input6 [ 81.977147][ T4367] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 82.161521][ T4377] loop2: detected capacity change from 0 to 2048 [ 82.298377][ T4377] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 82.360665][ T4377] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 82.377181][ T4377] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 82.394770][ T4377] UDF-fs: Scanning with blocksize 512 failed [ 82.434211][ T4377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.215948][ T26] audit: type=1800 audit(1787091828.887:3): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="file1" dev="loop2" ino=838 res=0 errno=0 [ 84.311241][ T4399] loop0: detected capacity change from 0 to 2048 [ 84.430517][ T4399] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 85.024620][ T4399] EXT4-fs (loop0): shut down requested (2) [ 85.042507][ T4382] loop3: detected capacity change from 0 to 32768 [ 85.971372][ T4418] xt_hashlimit: max too large, truncated to 1048576 [ 86.472320][ T4421] input: syz0 as /devices/virtual/input/input7 [ 86.659822][ T13] cfg80211: failed to load regulatory.db [ 88.045408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 88.521921][ T4496] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.245351][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 89.265358][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 89.275349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 89.285350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 89.295355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 89.305347][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 89.315352][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 89.325346][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 89.335343][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 92.381619][ T4541] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.762589][ T26] audit: type=1800 audit(1787091841.427:4): pid=4588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.69" name="attr_allow_any_host" dev="configfs" ino=33811 res=0 errno=0 [ 96.566362][ T4588] nvmet: adding nsid 1 to subsystem testnqn [ 96.696687][ T4588] tipc: Started in network mode [ 96.726466][ T4588] tipc: Node identity ac1414aa, cluster identity 4711 [ 96.758480][ T4588] tipc: Enabled bearer , priority 10 [ 97.897079][ T4338] tipc: Node number set to 2886997162 [ 103.977548][ T4671] Zero length message leads to an empty skb [ 105.531413][ T4694] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.388555][ T4718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.347286][ T4264] FS-Cache: Duplicate cookie detected [ 108.354283][ T4264] FS-Cache: O-cookie c=00000008 [p=00000006 fl=222 nc=0 na=1] [ 108.362376][ T4264] FS-Cache: O-cookie d=ffffffff8c747c00{AFS.cell} n=ffff8880786cf800 [ 108.370554][ T4264] FS-Cache: O-key=[2] '7379' [ 108.375214][ T4264] FS-Cache: N-cookie c=00000009 [p=00000006 fl=2 nc=0 na=1] [ 108.382607][ T4264] FS-Cache: N-cookie d=ffffffff8c747c00{AFS.cell} n=ffff8880212d4800 [ 108.390753][ T4264] FS-Cache: N-key=[2] '7379' [ 109.034162][ T4655] ODEBUG: Out of memory. ODEBUG disabled [ 111.033929][ T4762] kAFS: Invalid Command on /proc/fs/afs/cells file [ 113.528935][ T4785] loop2: detected capacity change from 0 to 512 [ 113.688875][ T4785] EXT4-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 116.523644][ T4831] kAFS: Invalid Command on /proc/fs/afs/cells file [ 117.012293][ T4839] loop2: detected capacity change from 0 to 512 [ 117.186214][ T4839] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.159: inode #1: comm syz.2.159: iget: illegal inode # [ 117.234434][ T4839] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.159: error while reading EA inode 1 err=-117 [ 117.276112][ T4839] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.448715][ T4839] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.159: inode #1: comm syz.2.159: iget: illegal inode # [ 117.692700][ T4839] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.159: error while reading EA inode 1 err=-117 [ 117.842644][ T4839] EXT4-fs (loop2): 1 orphan inode deleted [ 117.914642][ T4839] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,user_xattr,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000056,errors=continue,dioread_lock,noblock_validity,noquota,barrier,,errors=continue. Quota mode: none. [ 118.226953][ T4839] EXT4-fs (loop2): shut down requested (2) [ 119.416505][ T4234] FS-Cache: Duplicate cookie detected [ 119.422041][ T4234] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 119.429753][ T4234] FS-Cache: O-cookie d=ffffffff8c747c00{AFS.cell} n=ffff88807778a800 [ 119.437911][ T4234] FS-Cache: O-key=[4] '73797a30' [ 119.442935][ T4234] FS-Cache: N-cookie c=0000000a [p=00000006 fl=2 nc=0 na=1] [ 119.450313][ T4234] FS-Cache: N-cookie d=ffffffff8c747c00{AFS.cell} n=ffff8880266c0800 [ 119.458690][ T4234] FS-Cache: N-key=[4] '73797a30' [ 119.746562][ T4873] input: syz0 as /devices/virtual/input/input16 [ 119.934872][ T4861] loop2: detected capacity change from 0 to 256 [ 119.978755][ T4861] FAT-fs (loop2): Unrecognized mount option "rodFñ/`)y_'smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 149.044442][ T5227] [ 149.044442][ T5227] but task is already holding lock: [ 149.051818][ T5227] ffff8880250a0120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 149.060823][ T5227] [ 149.060823][ T5227] which lock already depends on the new lock. [ 149.060823][ T5227] [ 149.071239][ T5227] [ 149.071239][ T5227] the existing dependency chain (in reverse order) is: [ 149.080266][ T5227] [ 149.080266][ T5227] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 149.088639][ T5227] lock_sock_nested+0x44/0x100 [ 149.093944][ T5227] smc_listen_out+0x105/0x3b0 [ 149.099165][ T5227] smc_listen_work+0x52a/0xd10 [ 149.104477][ T5227] process_one_work+0x867/0xff0 [ 149.109885][ T5227] worker_thread+0xad7/0x12a0 [ 149.115113][ T5227] kthread+0x42e/0x520 [ 149.119724][ T5227] ret_from_fork+0x1f/0x30 [ 149.124678][ T5227] [ 149.124678][ T5227] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 149.134862][ T5227] __lock_acquire+0x2c66/0x7b50 [ 149.140264][ T5227] lock_acquire+0x19e/0x400 [ 149.145310][ T5227] __flush_work+0x116/0x210 [ 149.150354][ T5227] __cancel_work_timer+0x3f4/0x560 [ 149.156008][ T5227] smc_clcsock_release+0x5c/0xe0 [ 149.161497][ T5227] __smc_release+0x644/0x7b0 [ 149.166624][ T5227] smc_close_non_accepted+0xd1/0x1f0 [ 149.172464][ T5227] smc_close_active+0xae2/0xea0 [ 149.177878][ T5227] __smc_release+0x9c/0x7b0 [ 149.182923][ T5227] smc_release+0x2c1/0x520 [ 149.187886][ T5227] sock_close+0xbf/0x210 [ 149.192667][ T5227] __fput+0x212/0x8c0 [ 149.197187][ T5227] task_work_run+0x125/0x1a0 [ 149.202349][ T5227] exit_to_user_mode_loop+0x10f/0x130 [ 149.208276][ T5227] exit_to_user_mode_prepare+0xee/0x180 [ 149.214364][ T5227] syscall_exit_to_user_mode+0x16/0x40 [ 149.220368][ T5227] do_syscall_64+0x58/0xa0 [ 149.225349][ T5227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.231783][ T5227] [ 149.231783][ T5227] other info that might help us debug this: [ 149.231783][ T5227] [ 149.242029][ T5227] Possible unsafe locking scenario: [ 149.242029][ T5227] [ 149.249498][ T5227] CPU0 CPU1 [ 149.254882][ T5227] ---- ---- [ 149.260263][ T5227] lock(sk_lock-AF_SMC/1); [ 149.264795][ T5227] lock((work_completion)(&new_smc->smc_listen_work)); [ 149.274274][ T5227] lock(sk_lock-AF_SMC/1); [ 149.281326][ T5227] lock((work_completion)(&new_smc->smc_listen_work)); [ 149.288287][ T5227] [ 149.288287][ T5227] *** DEADLOCK *** [ 149.288287][ T5227] [ 149.296451][ T5227] 2 locks held by syz.0.309/5227: [ 149.301508][ T5227] #0: ffff8880744c0e10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 149.311735][ T5227] #1: ffff8880250a0120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 149.321261][ T5227] [ 149.321261][ T5227] stack backtrace: [ 149.327178][ T5227] CPU: 0 PID: 5227 Comm: syz.0.309 Not tainted syzkaller #0 [ 149.334483][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.344568][ T5227] Call Trace: [ 149.347868][ T5227] [ 149.350816][ T5227] dump_stack_lvl+0x188/0x250 [ 149.355522][ T5227] ? load_image+0x410/0x410 [ 149.360049][ T5227] ? show_regs_print_info+0x20/0x20 [ 149.365277][ T5227] ? print_circular_bug+0x12b/0x1a0 [ 149.370502][ T5227] check_noncircular+0x296/0x330 [ 149.375461][ T5227] ? deref_stack_reg+0xd0/0x120 [ 149.380341][ T5227] ? look_up_lock_class+0x71/0x110 [ 149.385478][ T5227] ? add_chain_block+0x9b0/0x9b0 [ 149.390433][ T5227] ? lockdep_lock+0xf1/0x1f0 [ 149.395060][ T5227] ? lock_release+0xb5/0x8a0 [ 149.399680][ T5227] ? mark_lock+0x94/0x320 [ 149.404039][ T5227] ? _find_first_zero_bit+0xd1/0xf0 [ 149.409272][ T5227] __lock_acquire+0x2c66/0x7b50 [ 149.414165][ T5227] ? hlock_conflict+0x59/0x1f0 [ 149.419123][ T5227] ? __bfs+0x27a/0x560 [ 149.423211][ T5227] ? verify_lock_unused+0x140/0x140 [ 149.428431][ T5227] ? mark_lock+0x94/0x320 [ 149.432785][ T5227] ? __lock_acquire+0x13dc/0x7b50 [ 149.437835][ T5227] ? lockdep_unlock+0x143/0x2e0 [ 149.442711][ T5227] lock_acquire+0x19e/0x400 [ 149.447238][ T5227] ? __flush_work+0xfa/0x210 [ 149.451854][ T5227] ? read_lock_is_recursive+0x10/0x10 [ 149.457253][ T5227] __flush_work+0x116/0x210 [ 149.461777][ T5227] ? __flush_work+0xfa/0x210 [ 149.466391][ T5227] ? flush_work+0x20/0x20 [ 149.470741][ T5227] ? try_to_grab_pending+0xfb/0x820 [ 149.475965][ T5227] ? mark_lock+0x94/0x320 [ 149.480315][ T5227] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.486320][ T5227] ? lock_chain_count+0x20/0x20 [ 149.491201][ T5227] ? mark_lock+0x94/0x320 [ 149.495557][ T5227] ? __cancel_work_timer+0x36a/0x560 [ 149.500865][ T5227] __cancel_work_timer+0x3f4/0x560 [ 149.506002][ T5227] ? cancel_work_sync+0x20/0x20 [ 149.510882][ T5227] ? __local_bh_enable_ip+0x136/0x1c0 [ 149.516888][ T5227] ? lockdep_hardirqs_on+0x94/0x140 [ 149.522110][ T5227] ? __local_bh_enable_ip+0x136/0x1c0 [ 149.527502][ T5227] ? _local_bh_enable+0xa0/0xa0 [ 149.532404][ T5227] smc_clcsock_release+0x5c/0xe0 [ 149.537367][ T5227] __smc_release+0x644/0x7b0 [ 149.541983][ T5227] smc_close_non_accepted+0xd1/0x1f0 [ 149.547292][ T5227] smc_close_active+0xae2/0xea0 [ 149.552172][ T5227] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 149.557833][ T5227] __smc_release+0x9c/0x7b0 [ 149.562388][ T5227] smc_release+0x2c1/0x520 [ 149.566931][ T5227] sock_close+0xbf/0x210 [ 149.571195][ T5227] ? sock_mmap+0x90/0x90 [ 149.575469][ T5227] __fput+0x212/0x8c0 [ 149.579486][ T5227] task_work_run+0x125/0x1a0 [ 149.584126][ T5227] exit_to_user_mode_loop+0x10f/0x130 [ 149.589520][ T5227] exit_to_user_mode_prepare+0xee/0x180 [ 149.595092][ T5227] syscall_exit_to_user_mode+0x16/0x40 [ 149.600575][ T5227] do_syscall_64+0x58/0xa0 [ 149.605094][ T5227] ? clear_bhb_loop+0x30/0x80 [ 149.609791][ T5227] ? clear_bhb_loop+0x30/0x80 [ 149.614489][ T5227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.618900][ T4335] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 149.620416][ T5227] RIP: 0033:0x7fc74aacc0d9 [ 149.629571][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.633847][ T5227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.661439][ T5227] RSP: 002b:00007ffe1c9ce3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 149.669882][ T5227] RAX: 0000000000000000 RBX: 00007fc74ad55da0 RCX: 00007fc74aacc0d9 [ 149.677878][ T5227] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 149.685898][ T5227] RBP: 00007fc74ad55da0 R08: 00007fc74ad54038 R09: 0000000000000000 [ 149.693890][ T5227] R10: 00000000003ffd28 R11: 0000000000000246 R12: 00000000000247f9 [ 149.701907][ T5227] R13: 00007fc74ad53fac R14: 0000000000024509 R15: 00007ffe1c9ce4f0 [ 149.709913][ T5227] [ 151.530490][ T4235] usb 4-1: USB disconnect, device number 2