last executing test programs: 12.329290315s ago: executing program 0 (id=1): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@mpls_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_VIA={0x14, 0x12, {0x0, "fa9bc12ecfdd04968e8dc9d61ea9"}}]}, 0x30}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x24, &(0x7f0000002500)={[{0x1f, 0x4e00, "771541d31616ba0fc7d7bef7ebe6853b5b2e7b25be59d467262151c30fa8db"}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000800), 0xe, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setns(0xffffffffffffffff, 0x24020000) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) close_range(r5, 0xffffffffffffffff, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) 9.260052254s ago: executing program 0 (id=26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x4) sendto$inet(r1, &(0x7f0000001240)="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", 0x272, 0x8040841, 0x0, 0x0) 9.245426884s ago: executing program 2 (id=27): syz_emit_ethernet(0x11f, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe9, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0xa, "bd3e6d4706598080a80300378927fc503b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0xf, "77f902045490290b6e87f278e94724e20c43c95f9b49204a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c"}]}}}}}}, 0x0) 9.137556453s ago: executing program 3 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x20048044) 9.051887074s ago: executing program 2 (id=30): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x1ff, 0x0, 0x4) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) 8.949490073s ago: executing program 3 (id=31): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x4, 0xc, 0x0, 0xe, @multicast}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg(r0, 0x0, 0x0, 0x0) 8.042109419s ago: executing program 0 (id=36): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x1, &(0x7f0000000100)=""/46) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$vim2m(0x0, 0x100000000000082, 0x2) 7.95259725s ago: executing program 2 (id=37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000440)) 7.867210709s ago: executing program 1 (id=38): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) setregid(0x0, 0x0) 7.866946729s ago: executing program 3 (id=39): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) dup(0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x1a52a53203556666) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x48d0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x15, 0x1, 0x2) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x100, &(0x7f0000000080)=0x4aa, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0x0, r5, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) getpid() 5.998008062s ago: executing program 3 (id=40): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x24, 0x27, 0x107, 0x70bd26, 0xfffffffd, {0x4, 0x7c}, [@typed={0x4, 0xa0}, @generic="3164c16e28125c4e22cccb"]}, 0x24}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x388, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010106}, [0xffffff00, 0x0, 0xff000000, 0xffffff00], [], 'ip6gretap0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0xa, 0x1}}}, {{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'geneve1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x1, 0xa}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xd1a}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 5.702679651s ago: executing program 4 (id=41): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23e) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = socket(0x1a, 0x8080f, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x80}, &(0x7f0000000200)=0x8) 5.199164669s ago: executing program 1 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x26010a00) keyctl$session_to_parent(0x12) mmap(&(0x7f000033e000/0x2000)=nil, 0x2000, 0xe, 0x1010, 0xffffffffffffffff, 0x3248000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x2c, 0x3d, 0x9, 0x0, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x0) 5.129438579s ago: executing program 2 (id=43): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000dc0)={0x2c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.689172377s ago: executing program 2 (id=44): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.036104371s ago: executing program 2 (id=45): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000fda00d6ce00791048001700800008000000000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 2.838141641s ago: executing program 4 (id=46): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) 2.145485318s ago: executing program 0 (id=47): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x1ff, 0x0, 0x4) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) 1.880112147s ago: executing program 1 (id=48): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 1.821622107s ago: executing program 4 (id=49): r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 1.618007576s ago: executing program 4 (id=50): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.551243886s ago: executing program 1 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000000)='adfs\x00', 0x8007, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000380), 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) 1.106165264s ago: executing program 3 (id=52): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8957) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24004040}, 0x804) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0xffbb}, 0x1, 0x0, 0x0, 0x4000}, 0x8804) 897.601664ms ago: executing program 0 (id=53): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000380)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) 802.104643ms ago: executing program 3 (id=54): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x5460, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_create1(0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) read(r4, 0x0, 0xfeec) r7 = syz_open_procfs(r1, &(0x7f0000000200)='syscall\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/89, 0x59}], 0x1, 0x7, 0x126) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/231, 0xe7}], 0x1, 0x2000000, 0x0) 569.909392ms ago: executing program 1 (id=55): ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x800) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) mknod(0x0, 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x17, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f800000000aca7bd6447a4b4e00d9683dd01000000000000000003000000000000001f20000400", "2809e8db10f8704048224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c5512406c7f0000001a000000000000ea81ac00", [0x4, 0x40000000000000]}}) socket$phonet(0x23, 0x2, 0x1) splice(r4, &(0x7f00000000c0)=0x4, r4, &(0x7f0000000180)=0x7, 0x0, 0x0) sendmsg(r0, &(0x7f0000003380)={0x0, 0x0, 0x0}, 0x408c0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000680)={0xffffffffffffffff, 0x44, {0x2a00, 0x80010000, 0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x10, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767fc294550db603cf4900", "90be8b1c55f9640000000000000000000000000000005900f9ff00", [0x800, 0x1]}}) 541.832872ms ago: executing program 4 (id=56): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 54.13633ms ago: executing program 4 (id=57): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000080)=0x4, 0x4) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x7, {0x2020, 0x2, 0x1000, 0x6}}) 0s ago: executing program 1 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x26010a00) keyctl$session_to_parent(0x12) mmap(&(0x7f000033e000/0x2000)=nil, 0x2000, 0xe, 0x1010, 0xffffffffffffffff, 0x3248000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x30, 0x3d, 0x9, 0x0, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x4, 0xb}, @nested={0x4, 0x36}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 66.180173][ T4236] cgroup: Unknown subsys name 'net' [ 66.311074][ T4236] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.889049][ T4236] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.409777][ T4259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.414687][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.419086][ T4259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.425729][ T4263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.440168][ T4259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.440465][ T4263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.447993][ T4259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.455522][ T4263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.461869][ T4259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.469448][ T4263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.475546][ T4259] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.482462][ T4263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.491770][ T4259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.496666][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.504894][ T4259] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.511289][ T4263] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.518035][ T4259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.525324][ T4263] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.531559][ T4259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.538831][ T4263] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.553078][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.561418][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.569302][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.577313][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.584953][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.585030][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.592240][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.606530][ T4263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.615762][ T4263] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.627676][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.922739][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 70.097190][ T4248] chnl_net:caif_netlink_parms(): no params data found [ 70.118657][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.126158][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.134978][ T4249] device bridge_slave_0 entered promiscuous mode [ 70.178560][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.186099][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.194090][ T4249] device bridge_slave_1 entered promiscuous mode [ 70.236990][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 70.313149][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.332929][ T4258] chnl_net:caif_netlink_parms(): no params data found [ 70.352406][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.361815][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.369664][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.378348][ T4248] device bridge_slave_0 entered promiscuous mode [ 70.420075][ T4249] team0: Port device team_slave_0 added [ 70.432467][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.440211][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.451097][ T4248] device bridge_slave_1 entered promiscuous mode [ 70.471108][ T4249] team0: Port device team_slave_1 added [ 70.477106][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 70.539199][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.549308][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.557471][ T4254] device bridge_slave_0 entered promiscuous mode [ 70.577928][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.585051][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.611003][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.628168][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.635170][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.661637][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.673602][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.680974][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.692705][ T4254] device bridge_slave_1 entered promiscuous mode [ 70.701822][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.736052][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.802088][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.813947][ T4248] team0: Port device team_slave_0 added [ 70.827100][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.835517][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.844422][ T4258] device bridge_slave_0 entered promiscuous mode [ 70.861580][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.874265][ T4248] team0: Port device team_slave_1 added [ 70.896219][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.903308][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.911886][ T4258] device bridge_slave_1 entered promiscuous mode [ 70.949018][ T4249] device hsr_slave_0 entered promiscuous mode [ 70.956113][ T4249] device hsr_slave_1 entered promiscuous mode [ 70.971567][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.978926][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.987548][ T4250] device bridge_slave_0 entered promiscuous mode [ 71.022942][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.030385][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.038739][ T4250] device bridge_slave_1 entered promiscuous mode [ 71.049302][ T4254] team0: Port device team_slave_0 added [ 71.064606][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.071577][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.098398][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.111467][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.118498][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.144710][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.157878][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.176753][ T4254] team0: Port device team_slave_1 added [ 71.199352][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.218347][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.258400][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.284700][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.291695][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.321490][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.321759][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.328270][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.379017][ T4258] team0: Port device team_slave_0 added [ 71.385507][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.392479][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.418710][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.441227][ T4250] team0: Port device team_slave_0 added [ 71.454083][ T4258] team0: Port device team_slave_1 added [ 71.476343][ T4248] device hsr_slave_0 entered promiscuous mode [ 71.483168][ T4248] device hsr_slave_1 entered promiscuous mode [ 71.493619][ T4248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.501669][ T4248] Cannot create hsr debugfs directory [ 71.508706][ T4250] team0: Port device team_slave_1 added [ 71.554488][ T4254] device hsr_slave_0 entered promiscuous mode [ 71.561256][ T4254] device hsr_slave_1 entered promiscuous mode [ 71.568035][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.575777][ T4254] Cannot create hsr debugfs directory [ 71.607047][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.614070][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.641436][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 71.641451][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 71.648160][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.666912][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.673962][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.699964][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.714018][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 71.714041][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 71.714246][ T4261] Bluetooth: hci2: command 0x0409 tx timeout [ 71.736296][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.743275][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.769421][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.806816][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.813988][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.840880][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.904504][ T4250] device hsr_slave_0 entered promiscuous mode [ 71.911255][ T4250] device hsr_slave_1 entered promiscuous mode [ 71.917976][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.925692][ T4250] Cannot create hsr debugfs directory [ 72.035529][ T4258] device hsr_slave_0 entered promiscuous mode [ 72.042654][ T4258] device hsr_slave_1 entered promiscuous mode [ 72.052314][ T4258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.060045][ T4258] Cannot create hsr debugfs directory [ 72.219731][ T4249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.271963][ T4249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.299919][ T4249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.318089][ T4249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.334848][ T4254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.346841][ T4254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.360937][ T4254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.376299][ T4254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.471639][ T4248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.497922][ T4248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.508491][ T4248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.547767][ T4248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.560469][ T4250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.571323][ T4250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.583237][ T4250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.607933][ T4250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.682314][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.704158][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.712315][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.721903][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.757095][ T4258] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.774933][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.787781][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.798577][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.805932][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.815730][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.826300][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.835286][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.842434][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.850585][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.861211][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.870224][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.879322][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.903594][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.911408][ T4258] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.928126][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.940395][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.948980][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.959276][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.969642][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.979013][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.995219][ T4258] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.008231][ T4258] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.025167][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.038984][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.050172][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.097226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.112968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.142068][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.172600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.185241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.200315][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.207501][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.221656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.232882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.242275][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.249418][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.258990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.271393][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.284383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.310082][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.346107][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.356854][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.367135][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.380953][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.391082][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.409253][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.447924][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.462089][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.471386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.481042][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.491534][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.499680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.507798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.515952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.528023][ T4254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.539945][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.568491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.577748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.587233][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.595453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.602879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.611661][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.620215][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.627403][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.636317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.645297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.654272][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.661361][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.669265][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.678566][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.687324][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.694454][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.702160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.711185][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.714196][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 73.720801][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.725265][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 73.732284][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.747325][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.756310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.777020][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.794076][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 73.803993][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 73.804541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.810026][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 73.836179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.851010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.888394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.898554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.910416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.920076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.959370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.969438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.980320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.995271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.004465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.013031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.022356][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.036923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.048680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.062211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.071825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.082593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.091814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.136414][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.146733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.155662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.164584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.172050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.191370][ T4249] device veth0_vlan entered promiscuous mode [ 74.210499][ T4248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.231722][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.248260][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.268250][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.277649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.296310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.311603][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.320446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.330359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.349270][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.363733][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.396196][ T4258] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.439018][ T4249] device veth1_vlan entered promiscuous mode [ 74.472103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.485626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.505601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.515537][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.522624][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.531623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.549113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.560200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.572105][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.581454][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.590852][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.598011][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.643336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.651840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.668040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.680978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.692702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.707856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.720085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.731938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.741352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.750441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.759124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.767474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.787885][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.798129][ T4254] device veth0_vlan entered promiscuous mode [ 74.812908][ T4249] device veth0_macvtap entered promiscuous mode [ 74.823668][ T4249] device veth1_macvtap entered promiscuous mode [ 74.842499][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.852473][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.861539][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.871720][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.885250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.899474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.911783][ T4254] device veth1_vlan entered promiscuous mode [ 74.935201][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.962638][ T4258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.977965][ T4258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.990410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.000337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.012430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.021661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.031014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.040277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.049149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.058573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.066380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.076187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.084809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.093410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.111005][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.125953][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.134909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.143708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.180041][ T4249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.216831][ T4249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.241948][ T4249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.264104][ T4249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.287794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.308216][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.342484][ T4254] device veth0_macvtap entered promiscuous mode [ 75.375383][ T4250] device veth0_vlan entered promiscuous mode [ 75.384698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.396514][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.414993][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.444473][ T4254] device veth1_macvtap entered promiscuous mode [ 75.474177][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.482672][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.503252][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.519913][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.563010][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.576763][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.598711][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.618922][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.632631][ T4250] device veth1_vlan entered promiscuous mode [ 75.646923][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.663302][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.675630][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.714191][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.722645][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.732515][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.742645][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.752052][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.759605][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.770214][ T4254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.782863][ T4254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.791715][ T4254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.801057][ T4252] Bluetooth: hci3: command 0x040f tx timeout [ 75.801111][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 75.815402][ T4254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.850173][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.874498][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 75.884284][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 75.884304][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 75.924534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.933290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.942536][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.943645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.961292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.972359][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.989760][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.029793][ T4250] device veth0_macvtap entered promiscuous mode [ 76.048134][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.057500][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.066645][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.075711][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.084620][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.095733][ T4248] device veth0_vlan entered promiscuous mode [ 76.126608][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.137306][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.150738][ T4250] device veth1_macvtap entered promiscuous mode [ 76.175986][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.188537][ T4258] device veth0_vlan entered promiscuous mode [ 76.195571][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.200319][ T4248] device veth1_vlan entered promiscuous mode [ 76.219830][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.231159][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.241311][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.252260][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.264995][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.282315][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.293734][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.302954][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.304918][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.320580][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.328979][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.338512][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.348281][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.357868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.366089][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.379154][ T4258] device veth1_vlan entered promiscuous mode [ 76.388346][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.399722][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.410547][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.421282][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.432765][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.474212][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.482425][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.501249][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.511700][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.525006][ T4250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.533715][ T4250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.543358][ T4250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.552187][ T4250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.579368][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.587677][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.598776][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.607455][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.617809][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.676205][ T4258] device veth0_macvtap entered promiscuous mode [ 76.691887][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.919928][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.928691][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.946240][ T4258] device veth1_macvtap entered promiscuous mode [ 76.967477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.983844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.993828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.002019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.010248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.018421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.026751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 77.035069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 77.043823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 77.051993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 79.501814][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 79.510547][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 79.516673][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 79.518904][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 79.522729][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 79.559147][ T4248] device veth0_macvtap entered promiscuous mode [ 79.587363][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.614588][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.659981][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.691519][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.743931][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.803848][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.813721][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.826023][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.838420][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.915579][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.952759][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.037929][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.064141][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.083878][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.114847][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.460803][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.584843][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.745521][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.919597][ T4248] device veth1_macvtap entered promiscuous mode [ 80.950747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.974727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.989465][ T4258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.014439][ T4258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.023194][ T4258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.041371][ T4258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.150290][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.235033][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.245309][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.256274][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.267326][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.280801][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.291043][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.326125][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.415587][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.464366][ T4350] Zero length message leads to an empty skb [ 81.472880][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.533056][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.935350][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.943333][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.980498][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.005493][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.027251][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.042676][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.058638][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.114211][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.155142][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.191505][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.231023][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.274778][ T4248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.283532][ T4248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.330533][ T4248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.358588][ T4248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.401046][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.435693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.785368][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.183533][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.204221][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.231569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.393181][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11'. [ 83.430066][ T4360] netlink: 'syz.1.11': attribute type 7 has an invalid length. [ 83.442637][ T4360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 83.485187][ T4360] device gretap0 entered promiscuous mode [ 83.504501][ T4360] device batadv_slave_1 entered promiscuous mode [ 83.538309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 83.594071][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.602222][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.646942][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.708607][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.716829][ T4363] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 83.743355][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.768330][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.777282][ T4365] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.822489][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.867990][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.886340][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.901059][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.918163][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.203472][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.875342][ T4341] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.109344][ T4341] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.118532][ T4341] usb 1-1: config 0 has no interface number 0 [ 85.130615][ T4341] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 85.208151][ T4341] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 85.264835][ T4341] usb 1-1: config 0 interface 184 has no altsetting 0 [ 85.306239][ T4384] tipc: Started in network mode [ 85.307137][ T4341] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.323438][ T4384] tipc: Node identity 7f000001, cluster identity 4711 [ 85.347270][ T4384] tipc: Enabled bearer , priority 10 [ 85.483636][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.492272][ T4341] usb 1-1: Product: syz [ 85.503894][ T4341] usb 1-1: Manufacturer: syz [ 85.512401][ T4341] usb 1-1: SerialNumber: syz [ 85.536518][ T4341] usb 1-1: config 0 descriptor?? [ 85.549353][ T4378] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.596537][ T4378] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.665346][ T4341] smsc75xx v1.0.0 [ 85.924651][ T4294] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.960354][ T4378] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.999748][ T4378] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.113993][ T4294] usb 2-1: Using ep0 maxpacket: 8 [ 86.131272][ T4294] usb 2-1: config 75 has an invalid interface number: 194 but max is 0 [ 86.154037][ T4294] usb 2-1: config 75 has no interface number 0 [ 86.175855][ T4294] usb 2-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=91.fd [ 86.210619][ T4294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.228857][ T4294] usb 2-1: Product: syz [ 86.236477][ T4294] usb 2-1: Manufacturer: syz [ 86.241139][ T4294] usb 2-1: SerialNumber: syz [ 86.455369][ T3583] tipc: Node number set to 2130706433 [ 86.510426][ T4294] sisusb 2-1:75.194: Invalid USB2VGA device [ 86.545204][ T4294] sisusb: probe of 2-1:75.194 failed with error -22 [ 86.685034][ T129] cfg80211: failed to load regulatory.db [ 86.741195][ T4294] usb 2-1: USB disconnect, device number 2 [ 86.972337][ T4341] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 86.984971][ T4341] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 87.113947][ T4341] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 87.128475][ T4341] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 87.162164][ T4341] usb 1-1: USB disconnect, device number 2 [ 87.707148][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 88.008459][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 91.737475][ T4477] xt_NFQUEUE: number of queues (3) out of range (got 65536) [ 93.882215][ T4478] syz.4.41 (4478): drop_caches: 2 [ 94.173087][ T4491] netlink: set zone limit has 8 unknown bytes [ 95.059942][ T4502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.49'. [ 95.073983][ T4502] device bond_slave_0 entered promiscuous mode [ 95.080508][ T4502] device bond_slave_1 entered promiscuous mode [ 95.839501][ T4518] dccp_close: ABORT with 65487 bytes unread [ 96.091124][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 96.828741][ T4522] [ 96.831128][ T4522] ====================================================== [ 96.838172][ T4522] WARNING: possible circular locking dependency detected [ 96.845221][ T4522] 6.1.122-syzkaller #0 Tainted: G W [ 96.851831][ T4522] ------------------------------------------------------ [ 96.858868][ T4522] syz.0.53/4522 is trying to acquire lock: [ 96.864693][ T4522] ffff88807b180910 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe5/0xad0 [ 96.876192][ T4522] [ 96.876192][ T4522] but task is already holding lock: [ 96.883584][ T4522] ffff888024dc0130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530 [ 96.892605][ T4522] [ 96.892605][ T4522] which lock already depends on the new lock. [ 96.892605][ T4522] [ 96.903034][ T4522] [ 96.903034][ T4522] the existing dependency chain (in reverse order) is: [ 96.912251][ T4522] [ 96.912251][ T4522] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 96.920065][ T4522] lock_acquire+0x1f8/0x5a0 [ 96.925140][ T4522] lock_sock_nested+0x44/0x100 [ 96.930469][ T4522] smc_listen_out+0x11b/0x3d0 [ 96.935715][ T4522] process_one_work+0x8a9/0x11d0 [ 96.941213][ T4522] worker_thread+0xa47/0x1200 [ 96.946458][ T4522] kthread+0x28d/0x320 [ 96.951075][ T4522] ret_from_fork+0x1f/0x30 [ 96.956024][ T4522] [ 96.956024][ T4522] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 96.966191][ T4522] validate_chain+0x1661/0x5950 [ 96.971570][ T4522] __lock_acquire+0x125b/0x1f80 [ 96.976959][ T4522] lock_acquire+0x1f8/0x5a0 [ 96.981991][ T4522] __flush_work+0xfe/0xad0 [ 96.986928][ T4522] __cancel_work_timer+0x519/0x6a0 [ 96.992644][ T4522] smc_clcsock_release+0x5e/0xe0 [ 96.998105][ T4522] __smc_release+0x678/0x7f0 [ 97.003225][ T4522] smc_close_non_accepted+0xd4/0x1e0 [ 97.009043][ T4522] smc_close_active+0xa75/0xe20 [ 97.014414][ T4522] __smc_release+0xa0/0x7f0 [ 97.019447][ T4522] smc_release+0x2d5/0x530 [ 97.024395][ T4522] sock_close+0xcd/0x230 [ 97.029181][ T4522] __fput+0x3f6/0x8d0 [ 97.033689][ T4522] task_work_run+0x246/0x300 [ 97.038803][ T4522] get_signal+0x15fc/0x17d0 [ 97.043857][ T4522] arch_do_signal_or_restart+0xb0/0x1a10 [ 97.050015][ T4522] exit_to_user_mode_loop+0x6a/0x100 [ 97.055822][ T4522] exit_to_user_mode_prepare+0xb1/0x140 [ 97.061882][ T4522] syscall_exit_to_user_mode+0x60/0x270 [ 97.067951][ T4522] do_syscall_64+0x47/0xb0 [ 97.072900][ T4522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.079360][ T4522] [ 97.079360][ T4522] other info that might help us debug this: [ 97.079360][ T4522] [ 97.089586][ T4522] Possible unsafe locking scenario: [ 97.089586][ T4522] [ 97.097029][ T4522] CPU0 CPU1 [ 97.102386][ T4522] ---- ---- [ 97.107769][ T4522] lock(sk_lock-AF_SMC/1); [ 97.112279][ T4522] lock((work_completion)(&new_smc->smc_listen_work)); [ 97.121761][ T4522] lock(sk_lock-AF_SMC/1); [ 97.128797][ T4522] lock((work_completion)(&new_smc->smc_listen_work)); [ 97.135742][ T4522] [ 97.135742][ T4522] *** DEADLOCK *** [ 97.135742][ T4522] [ 97.143923][ T4522] 2 locks held by syz.0.53/4522: [ 97.148871][ T4522] #0: ffff88805c700810 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 97.159183][ T4522] #1: ffff888024dc0130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530 [ 97.168602][ T4522] [ 97.168602][ T4522] stack backtrace: [ 97.174524][ T4522] CPU: 0 PID: 4522 Comm: syz.0.53 Tainted: G W 6.1.122-syzkaller #0 [ 97.184006][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.194087][ T4522] Call Trace: [ 97.197481][ T4522] [ 97.200457][ T4522] dump_stack_lvl+0x1e3/0x2cb [ 97.205164][ T4522] ? nf_tcp_handle_invalid+0x642/0x642 [ 97.210662][ T4522] ? print_circular_bug+0x12b/0x1a0 [ 97.215866][ T4522] check_noncircular+0x2fa/0x3b0 [ 97.220808][ T4522] ? add_chain_block+0x850/0x850 [ 97.225757][ T4522] ? lockdep_lock+0x11f/0x2a0 [ 97.230467][ T4522] ? rcu_is_watching+0x11/0xb0 [ 97.235230][ T4522] ? _find_first_zero_bit+0xd0/0x100 [ 97.240526][ T4522] validate_chain+0x1661/0x5950 [ 97.245410][ T4522] ? deref_stack_reg+0x17c/0x210 [ 97.250352][ T4522] ? is_bpf_text_address+0x22/0x2a0 [ 97.255560][ T4522] ? __bfs+0x359/0x6e0 [ 97.259634][ T4522] ? reacquire_held_locks+0x660/0x660 [ 97.265003][ T4522] ? check_path+0x40/0x40 [ 97.269339][ T4522] ? noop_count+0x30/0x30 [ 97.273700][ T4522] ? __bfs+0x359/0x6e0 [ 97.277815][ T4522] ? look_up_lock_class+0x77/0x140 [ 97.282939][ T4522] ? register_lock_class+0x100/0x990 [ 97.288242][ T4522] ? check_path+0x21/0x40 [ 97.292599][ T4522] ? check_noncircular+0x1e3/0x3b0 [ 97.297715][ T4522] ? is_dynamic_key+0x260/0x260 [ 97.302577][ T4522] ? mark_lock+0x9a/0x340 [ 97.306964][ T4522] __lock_acquire+0x125b/0x1f80 [ 97.311842][ T4522] lock_acquire+0x1f8/0x5a0 [ 97.316363][ T4522] ? __flush_work+0xe5/0xad0 [ 97.320960][ T4522] ? read_lock_is_recursive+0x10/0x10 [ 97.326464][ T4522] ? reacquire_held_locks+0x660/0x660 [ 97.331845][ T4522] ? reacquire_held_locks+0x660/0x660 [ 97.337273][ T4522] ? reacquire_held_locks+0x660/0x660 [ 97.342657][ T4522] ? __flush_work+0xe5/0xad0 [ 97.347255][ T4522] __flush_work+0xfe/0xad0 [ 97.351673][ T4522] ? __flush_work+0xe5/0xad0 [ 97.356703][ T4522] ? flush_work+0x20/0x20 [ 97.361062][ T4522] ? print_irqtrace_events+0x210/0x210 [ 97.366530][ T4522] ? __cancel_work_timer+0x467/0x6a0 [ 97.371824][ T4522] __cancel_work_timer+0x519/0x6a0 [ 97.376980][ T4522] ? mark_lock+0x9a/0x340 [ 97.381337][ T4522] ? cancel_work_sync+0x20/0x20 [ 97.386279][ T4522] ? __smc_release+0x670/0x7f0 [ 97.391058][ T4522] ? __local_bh_enable_ip+0x164/0x1f0 [ 97.396443][ T4522] ? lockdep_hardirqs_on+0x94/0x130 [ 97.401658][ T4522] ? __local_bh_enable_ip+0x164/0x1f0 [ 97.407073][ T4522] ? __smc_release+0x670/0x7f0 [ 97.411847][ T4522] ? _local_bh_enable+0xa0/0xa0 [ 97.416701][ T4522] ? do_raw_spin_unlock+0x137/0x8a0 [ 97.421900][ T4522] smc_clcsock_release+0x5e/0xe0 [ 97.426851][ T4522] __smc_release+0x678/0x7f0 [ 97.431453][ T4522] smc_close_non_accepted+0xd4/0x1e0 [ 97.436749][ T4522] smc_close_active+0xa75/0xe20 [ 97.441613][ T4522] ? sock_no_sendpage_locked+0x1e0/0x1e0 [ 97.447257][ T4522] __smc_release+0xa0/0x7f0 [ 97.451790][ T4522] smc_release+0x2d5/0x530 [ 97.456206][ T4522] sock_close+0xcd/0x230 [ 97.460473][ T4522] ? sock_mmap+0x90/0x90 [ 97.464799][ T4522] __fput+0x3f6/0x8d0 [ 97.468801][ T4522] task_work_run+0x246/0x300 [ 97.473392][ T4522] ? __might_fault+0xa1/0x110 [ 97.478074][ T4522] ? task_work_cancel+0x2e0/0x2e0 [ 97.483138][ T4522] get_signal+0x15fc/0x17d0 [ 97.487666][ T4522] ? set_fd_set+0x7a/0x90 [ 97.492026][ T4522] ? core_sys_select+0x849/0x900 [ 97.496963][ T4522] ? ptrace_notify+0x370/0x370 [ 97.501739][ T4522] arch_do_signal_or_restart+0xb0/0x1a10 [ 97.507377][ T4522] ? memset+0x1f/0x40 [ 97.511361][ T4522] ? poll_select_finish+0x6bb/0x7b0 [ 97.516581][ T4522] ? pollwake+0x280/0x280 [ 97.520911][ T4522] ? sigprocmask+0x280/0x280 [ 97.525506][ T4522] ? get_sigframe_size+0x10/0x10 [ 97.530448][ T4522] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 97.536434][ T4522] ? exit_to_user_mode_loop+0x39/0x100 [ 97.541894][ T4522] exit_to_user_mode_loop+0x6a/0x100 [ 97.547188][ T4522] exit_to_user_mode_prepare+0xb1/0x140 [ 97.552733][ T4522] syscall_exit_to_user_mode+0x60/0x270 [ 97.558282][ T4522] do_syscall_64+0x47/0xb0 [ 97.562702][ T4522] ? clear_bhb_loop+0x45/0xa0 [ 97.567377][ T4522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.573277][ T4522] RIP: 0033:0x7f0505785d29 [ 97.577705][ T4522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.597760][ T4522] RSP: 002b:00007f0506629038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 97.606177][ T4522] RAX: 0000000000000007 RBX: 00007f0505975fa0 RCX: 00007f0505785d29 [ 97.614145][ T4522] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 97.622113][ T4522] RBP: 00007f0505801b08 R08: 0000000000000000 R09: 0000000000000000 [ 97.630083][ T4522] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000000 [ 97.638069][ T4522] R13: 0000000000000000 R14: 00007f0505975fa0 R15: 00007fff5737a338 [ 97.646046][ T4522] [ 97.797083][ T4540] netlink: zone id is out of range