last executing test programs: 6.778506944s ago: executing program 0 (id=281): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 6.760604646s ago: executing program 0 (id=282): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.651640494s ago: executing program 0 (id=284): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x121a02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000000000406d041fc7000000000001090224000100000000090400000103000000092100001634543300090581030000060000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r1], 0x120}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kexec_load(0xff0e, 0x0, &(0x7f0000000900), 0x0) 3.385007687s ago: executing program 4 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x38, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 3.384625928s ago: executing program 4 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, r1, 0xd66771a5e8224ded, 0x4, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4008040) 3.318555502s ago: executing program 4 (id=307): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 3.144251677s ago: executing program 0 (id=308): r0 = io_uring_setup(0x4c84, &(0x7f0000000240)={0x0, 0xfeed, 0x40, 0x8001002, 0x3d5}) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xfffffffffffffecd, 0x40010002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x43, 0x32344d59, 0x0, 0xfffffffd, 0x800, 0x7, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="050027bd700000a668bc25ef288195c062ae860000000600000008000300", @ANYRES32=r9, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000002c0)=[{0x20, 0x8, 0x2, 0xfffff038}, {0x20, 0x3, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r11 = socket(0x1e, 0x4, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r13, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x0, 0x40000) close_range(r0, 0xffffffffffffffff, 0x0) 2.73851497s ago: executing program 3 (id=310): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@delchain={0x104, 0x65, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {0xd, 0x4}, {0xa, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0xc4, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0x0, 0xffffffff, 0xffffff00, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x4}, @TCA_FLOWER_ACT={0x88, 0x3, [@m_skbmod={0x84, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa}]}, {0x40, 0x6, "7ca8a4ac021c87b253e9d6943fed67b28f628d78696bfb59fcc172a245c1be745a98a1e6f9e0e115752f261c747408b8dc9bd515004ab1819f3d42ec"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x20008844) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x3f, &(0x7f0000000380)=0x1, 0x4) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x200, 0x0, 0x100312}, &(0x7f00000029c0), &(0x7f0000000300)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) 2.590498292s ago: executing program 1 (id=311): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 2.493621549s ago: executing program 4 (id=312): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.198355013s ago: executing program 0 (id=314): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 2.198115823s ago: executing program 2 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 1.98311901s ago: executing program 2 (id=316): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000000)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x20}, r1}}}], 0x28}}], 0x1, 0x40000000) 1.950106203s ago: executing program 2 (id=317): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/98, 0x62}], 0x1}}], 0x3, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.848984871s ago: executing program 0 (id=318): r0 = syz_open_dev$evdev(0x0, 0x0, 0x1) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x23, 0x5, 0x0) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap$usbfs(&(0x7f0000423000/0x3000)=nil, 0x3000, 0x3000000, 0x30, 0xffffffffffffffff, 0x2) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1001000, 0x0) r9 = openat$vcsu(0xffffff9c, &(0x7f0000002cc0), 0x42080, 0x0) readv(r9, &(0x7f0000004800)=[{&(0x7f0000003580)=""/215, 0xd7}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1.848434321s ago: executing program 3 (id=319): openat$vcsu(0xffffffffffffff9c, 0x0, 0xc000, 0x0) syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x41c}}}, 0x7) 1.778445327s ago: executing program 3 (id=320): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {0x0, 0xfff1}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4000) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.773843817s ago: executing program 2 (id=321): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000000100010000001800000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c908de176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b0009", 0xd4, 0xffffffffffffffff) 1.707081533s ago: executing program 1 (id=322): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1.688023474s ago: executing program 3 (id=323): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) recvmsg(r5, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000500)=0xd0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r7 = dup(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x2, 0x0) epoll_create1(0x0) connect$unix(r8, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r7, 0x0) fadvise64(r6, 0x5ab, 0x4000000000000000, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000300)=0x1c) 1.658929217s ago: executing program 2 (id=324): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.657867416s ago: executing program 1 (id=325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x1, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.510397739s ago: executing program 1 (id=326): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 1.502818719s ago: executing program 1 (id=327): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000000)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x20}, r1}}}], 0x28}}], 0x1, 0x40000000) 1.460504883s ago: executing program 1 (id=328): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYBLOB="91f2ffffff0000000000010000"], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x200200, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.36243174s ago: executing program 4 (id=329): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 258.504679ms ago: executing program 2 (id=330): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@delchain={0x104, 0x65, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {0xd, 0x4}, {0xa, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0xc4, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0x0, 0xffffffff, 0xffffff00, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x4}, @TCA_FLOWER_ACT={0x88, 0x3, [@m_skbmod={0x84, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa}]}, {0x40, 0x6, "7ca8a4ac021c87b253e9d6943fed67b28f628d78696bfb59fcc172a245c1be745a98a1e6f9e0e115752f261c747408b8dc9bd515004ab1819f3d42ec"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x20008844) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x3f, &(0x7f0000000380)=0x1, 0x4) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x200, 0x0, 0x100312}, &(0x7f00000029c0), &(0x7f0000000300)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) 179.592275ms ago: executing program 3 (id=331): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/98, 0x62}], 0x1}}], 0x4, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 35.695927ms ago: executing program 3 (id=332): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 0s ago: executing program 4 (id=333): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {0x0, 0xfff1}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4000) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 0s ago: executing program 0 (id=334): r0 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 30.800562][ T4309] cgroup: Unknown subsys name 'net' [ 31.042738][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.318612][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.044167][ T4325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.051877][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.053359][ T4331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.054840][ T4331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.056672][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.059604][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.061091][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.062585][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.064069][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.064481][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.065319][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.066535][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.067810][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.068894][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.069726][ T4331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.071902][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.072840][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.073094][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.074843][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.075425][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.076855][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.077442][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.078538][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.079829][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.081554][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.082093][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.084192][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.085528][ T4335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.086103][ T4332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.097281][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.235002][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 32.242973][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 32.250058][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 32.264320][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 32.281566][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.282889][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.284375][ T4324] device bridge_slave_0 entered promiscuous mode [ 32.297272][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.298439][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.299940][ T4321] device bridge_slave_0 entered promiscuous mode [ 32.302351][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.303531][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.304904][ T4321] device bridge_slave_1 entered promiscuous mode [ 32.306441][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.307646][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.309048][ T4324] device bridge_slave_1 entered promiscuous mode [ 32.339911][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.342315][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.345264][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.348960][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.350119][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.351827][ T4320] device bridge_slave_0 entered promiscuous mode [ 32.354332][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.360409][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.361554][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.363072][ T4328] device bridge_slave_0 entered promiscuous mode [ 32.364645][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.365738][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.367194][ T4320] device bridge_slave_1 entered promiscuous mode [ 32.378628][ T4324] team0: Port device team_slave_0 added [ 32.380954][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.382030][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.383336][ T4328] device bridge_slave_1 entered promiscuous mode [ 32.387736][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.390115][ T4321] team0: Port device team_slave_0 added [ 32.393616][ T4324] team0: Port device team_slave_1 added [ 32.394730][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 32.402061][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.408447][ T4321] team0: Port device team_slave_1 added [ 32.414649][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.423153][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.424349][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.428439][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.431322][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.432322][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.436054][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.438591][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.456700][ T4320] team0: Port device team_slave_0 added [ 32.457791][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.459130][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.461147][ T4333] device bridge_slave_0 entered promiscuous mode [ 32.463131][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.464255][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.468230][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.477683][ T4320] team0: Port device team_slave_1 added [ 32.478723][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.479957][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.482689][ T4333] device bridge_slave_1 entered promiscuous mode [ 32.486292][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.487347][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.493104][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.496084][ T4328] team0: Port device team_slave_0 added [ 32.571283][ T4324] device hsr_slave_0 entered promiscuous mode [ 32.630447][ T4324] device hsr_slave_1 entered promiscuous mode [ 32.695385][ T4328] team0: Port device team_slave_1 added [ 32.696761][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.697882][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.701946][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.710645][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.711790][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.715550][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.718209][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.727147][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.734784][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.735882][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.739569][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.742351][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.743383][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.746832][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.811614][ T4321] device hsr_slave_0 entered promiscuous mode [ 32.860441][ T4321] device hsr_slave_1 entered promiscuous mode [ 32.900339][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.901576][ T4321] Cannot create hsr debugfs directory [ 32.951284][ T4320] device hsr_slave_0 entered promiscuous mode [ 32.990453][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.040273][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.041450][ T4320] Cannot create hsr debugfs directory [ 33.044002][ T4333] team0: Port device team_slave_0 added [ 33.054598][ T4333] team0: Port device team_slave_1 added [ 33.101353][ T4328] device hsr_slave_0 entered promiscuous mode [ 33.140425][ T4328] device hsr_slave_1 entered promiscuous mode [ 33.180240][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.181507][ T4328] Cannot create hsr debugfs directory [ 33.197667][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.198775][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.202637][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.209735][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.211112][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.214917][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.302004][ T4333] device hsr_slave_0 entered promiscuous mode [ 33.352817][ T4333] device hsr_slave_1 entered promiscuous mode [ 33.390250][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.391478][ T4333] Cannot create hsr debugfs directory [ 33.423693][ T4324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.471374][ T4324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.535681][ T4324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.571363][ T4324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.642819][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.681344][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.724564][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.764490][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.825889][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.872270][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.922935][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.961775][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.005963][ T4328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.041832][ T4328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.086131][ T4328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.090680][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 34.131360][ T4328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.170336][ T4322] Bluetooth: hci1: command 0x0409 tx timeout [ 34.170356][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 34.171470][ T4322] Bluetooth: hci0: command 0x0409 tx timeout [ 34.172419][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 34.175939][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.182581][ T4333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.235470][ T4333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.278302][ T4333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.311789][ T4333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.362980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.365071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.375017][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.385685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.387495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.389122][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.390352][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.392524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.404887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.407259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.408981][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.410049][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.412223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.413910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.415595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.417182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.422917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.435031][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.436239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.437887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.445315][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.446849][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.452872][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.455417][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.456878][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.458237][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.459735][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.467413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.468919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.471513][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.472657][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.474589][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.477851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.487995][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.496475][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.499300][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.500951][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.502437][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.503941][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.505318][ T1771] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.506386][ T1771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.509524][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.513729][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.517302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.526836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.528407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.529801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.535557][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.537315][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.538836][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.541529][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.543319][ T257] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.544411][ T257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.546882][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.550501][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.552208][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.553669][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.555167][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.559097][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.566372][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.568006][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.569413][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.570531][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.572753][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.574375][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.575870][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.577221][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.578701][ T257] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.579866][ T257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.582372][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.587193][ T4321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.588864][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.595020][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.596430][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.598023][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.599207][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.601692][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.603343][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.604865][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.606404][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.607838][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.608873][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.610143][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.612448][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.617543][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.618998][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.623076][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.624415][ T257] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.625445][ T257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.626719][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.628148][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.629503][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.630599][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.632056][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.633776][ T257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.639361][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.644130][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.645691][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.647182][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.648798][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.664986][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.666550][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.668306][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.669877][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.674321][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.676132][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.677737][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.684122][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.686028][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.687643][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.689164][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.691423][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.693037][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.695786][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.706348][ T4320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.708057][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.711580][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.713112][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.715465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.716839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.718536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.719990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.725418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.727101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.728568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.730033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.731747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.733347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.736088][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.737911][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.749341][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.751675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.753202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.755122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.756700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.758160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.759781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.762742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.764080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.769856][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.771533][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.777453][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.778843][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.791444][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.793082][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.797586][ T4324] device veth0_vlan entered promiscuous mode [ 34.815014][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.816686][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.818486][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.819900][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.823692][ T4324] device veth1_vlan entered promiscuous mode [ 34.832885][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.835434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.836987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.838306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.839946][ T4321] device veth0_vlan entered promiscuous mode [ 34.854174][ T4321] device veth1_vlan entered promiscuous mode [ 34.863824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.865370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.866732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.868163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.881825][ T4321] device veth0_macvtap entered promiscuous mode [ 34.884905][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.886345][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.887992][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.889455][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.892502][ T4324] device veth0_macvtap entered promiscuous mode [ 34.898530][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.903662][ T4324] device veth1_macvtap entered promiscuous mode [ 34.905055][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.906523][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.908033][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.909410][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.912769][ T4321] device veth1_macvtap entered promiscuous mode [ 34.931592][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.933132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.934331][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.938861][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.944249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.945762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.947124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.948636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.953341][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.958645][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.962736][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.964339][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.966581][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.968127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.969722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.972666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.974124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.977391][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.978883][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.983687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.985157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.991859][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.993508][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.995586][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.997917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.999471][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.003740][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.005409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.007892][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.009385][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.011334][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.012781][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.017027][ T4324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.018380][ T4324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.019697][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.021458][ T4324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.024643][ T4320] device veth0_vlan entered promiscuous mode [ 35.037817][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.039363][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.041856][ T4320] device veth1_vlan entered promiscuous mode [ 35.053394][ T4328] device veth0_vlan entered promiscuous mode [ 35.058284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.059777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.061799][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.063648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.065275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.066619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.074506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.076118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.078706][ T4328] device veth1_vlan entered promiscuous mode [ 35.097789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.099331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.102748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.104304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.105690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.109076][ T4320] device veth0_macvtap entered promiscuous mode [ 35.111541][ T4320] device veth1_macvtap entered promiscuous mode [ 35.114327][ T4333] device veth0_vlan entered promiscuous mode [ 35.126753][ T4333] device veth1_vlan entered promiscuous mode [ 35.133482][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.135073][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.136655][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.138180][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.141141][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.143898][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.145568][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.147099][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.148678][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.151554][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.155601][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.157089][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.158540][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.160001][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.162338][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.163690][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.165267][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.166845][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.168368][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.178371][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.179783][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.181703][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.183053][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.185961][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.187322][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.189068][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.193780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.195155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.196664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.200915][ T1771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.202162][ T1771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.203881][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.209024][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.211581][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.212889][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.213227][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.215553][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.217460][ T4328] device veth0_macvtap entered promiscuous mode [ 35.224035][ T4328] device veth1_macvtap entered promiscuous mode [ 35.226128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.227495][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.228903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.232413][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.235575][ T4333] device veth0_macvtap entered promiscuous mode [ 35.254989][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.256584][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.258224][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.259981][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.262035][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.263713][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.265763][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.267812][ T4333] device veth1_macvtap entered promiscuous mode [ 35.271554][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.273123][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.274536][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.276060][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.279846][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.282142][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.283784][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.285323][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.286748][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.288345][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.291569][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.302436][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.304118][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.305513][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.306925][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.308331][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.309798][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.314265][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.322575][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.326707][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.328005][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.329856][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.332376][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.334692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.345471][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.347018][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.348534][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.349920][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.470921][ T1771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.472136][ T1771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.474811][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.476471][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.478403][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.480030][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.740139][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.742223][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.743773][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.745462][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.748879][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.754339][ T4437] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 35.757475][ T4437] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 35.760873][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.766224][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.768259][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.781966][ T4333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.783434][ T4333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.784861][ T4333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.786339][ T4333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.807080][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.808558][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.818063][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.936452][ T1771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.938642][ T1771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.181010][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 36.250648][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 36.250772][ T4322] Bluetooth: hci1: command 0x041b tx timeout [ 36.250789][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 36.254993][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 36.292283][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.300846][ T4445] netlink: 'syz.1.7': attribute type 8 has an invalid length. [ 36.319720][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.323230][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.328092][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.332441][ T1771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.333770][ T1771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.338563][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.838655][ T1771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.840057][ T1771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.846419][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.873986][ T4457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.877851][ T4457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.396467][ T4463] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4'. [ 37.408360][ T4462] input: syz1 as /devices/virtual/input/input2 [ 37.643786][ T4462] input: failed to attach handler leds to device input2, error: -6 [ 37.660395][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.749742][ T4473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.758079][ T4473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.853353][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 37.854921][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 37.858217][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 37.859739][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 37.877261][ T7] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 37.878758][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.880014][ T7] usb 1-1: Product: syz [ 37.882359][ T7] usb 1-1: Manufacturer: syz [ 37.883173][ T7] usb 1-1: SerialNumber: syz [ 37.895292][ T7] usb 1-1: config 0 descriptor?? [ 37.901228][ T7] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 38.109678][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 38.123719][ T7] scsi host0: usb-storage 1-1:0.0 [ 38.127979][ T7] usb 1-1: USB disconnect, device number 2 [ 38.250476][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 38.340510][ T4322] Bluetooth: hci0: command 0x040f tx timeout [ 38.341664][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 38.342583][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 38.343643][ T4322] Bluetooth: hci3: command 0x040f tx timeout [ 38.739010][ T4495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.751520][ T4495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.840371][ T4506] syz.4.19 uses obsolete (PF_INET,SOCK_PACKET) [ 39.864110][ T4505] netlink: 172 bytes leftover after parsing attributes in process `syz.3.18'. [ 39.865592][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 39.867454][ T4505] netlink: 172 bytes leftover after parsing attributes in process `syz.3.18'. [ 39.868866][ T4505] netlink: 100 bytes leftover after parsing attributes in process `syz.3.18'. [ 39.870530][ T4505] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18'. [ 39.893461][ T4510] binder: 4509:4510 tried to acquire reference to desc 0, got 1 instead [ 39.896552][ T4510] binder: 4509:4510 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.898707][ T4510] binder: 4510 RLIMIT_NICE not set [ 39.899593][ T4510] binder: undelivered transaction 5, put_user failed [ 39.908324][ T4510] binder: 4509:4510 ioctl c0306201 20000680 returned -14 [ 39.913493][ T22] binder: undelivered TRANSACTION_COMPLETE [ 39.998522][ T4512] tipc: Started in network mode [ 39.999396][ T4512] tipc: Node identity 8aed43ba9ab5, cluster identity 4711 [ 40.004454][ T4512] tipc: Enabled bearer , priority 0 [ 40.006552][ T4512] device syzkaller0 entered promiscuous mode [ 40.116108][ T4512] tipc: Resetting bearer [ 40.126053][ T4511] tipc: Resetting bearer [ 40.380466][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 40.513428][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 40.515630][ T4322] Bluetooth: hci2: command 0x0419 tx timeout [ 40.516628][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 40.517633][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 40.519823][ T4511] tipc: Disabling bearer [ 40.547057][ T4522] binder: 4521:4522 tried to acquire reference to desc 0, got 1 instead [ 40.549819][ T4522] binder: 4521:4522 got reply transaction with bad transaction stack, transaction 11 has target 4521:0 [ 40.551765][ T4522] binder: 4521:4522 transaction reply to 0:0 failed 12/29201/-71, size 0-0 line 2970 [ 40.553841][ T4522] binder: 4521:4522 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.556053][ T4522] binder: 4522 RLIMIT_NICE not set [ 40.556848][ T4522] binder: 4522 RLIMIT_NICE not set [ 40.558095][ T4522] binder: 4522 RLIMIT_NICE not set [ 40.559014][ T4522] binder_alloc: 4521: binder_alloc_buf, no vma [ 40.560387][ T4522] binder: cannot allocate buffer: vma cleared, target dead or dying [ 40.560430][ T4522] binder: 4521:4522 transaction reply to 4521:4522 failed 13/29189/-3, size 0-0 line 3239 [ 40.563625][ T4522] binder: send failed reply for transaction 11 to 4521:4522 [ 40.565773][ T4396] binder: undelivered TRANSACTION_COMPLETE [ 40.566778][ T4396] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.567822][ T4396] binder: undelivered TRANSACTION_ERROR: 29189 [ 40.576780][ T4396] binder: undelivered TRANSACTION_ERROR: 29190 [ 41.129461][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.132415][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.399352][ T4523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.705263][ T4542] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 41.707428][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.708887][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.803086][ T4543] device ipvlan2 entered promiscuous mode [ 42.086592][ T4549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.088151][ T4549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.056864][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.058151][ T4564] binder: 4563:4564 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.058346][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.656668][ T4581] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 43.672597][ T4581] team0: Port device batadv1 added [ 43.677702][ T4583] netlink: 172 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.679192][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.680612][ T4583] netlink: 172 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.681989][ T4583] netlink: 100 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.683259][ T4583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.863520][ T4586] hfsplus: unable to find HFS+ superblock [ 43.902420][ T4588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.909763][ T4588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.445715][ T4606] Zero length message leads to an empty skb [ 45.146447][ T4621] binder_user_error: 2 callbacks suppressed [ 45.146456][ T4621] binder: 4619:4621 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.152885][ T4621] binder: 4621 RLIMIT_NICE not set [ 45.197968][ T4628] binder: 4619:4628 got reply transaction with no transaction stack [ 45.199346][ T4628] binder_debug: 2 callbacks suppressed [ 45.199358][ T4628] binder: 4619:4628 transaction reply to 0:0 failed 17/29201/-71, size 0-0 line 2955 [ 45.317688][ T4638] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 45.417401][ T4642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'. [ 46.030982][ T4383] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.954343][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 46.955877][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:7 Not tainted 6.1.148-syzkaller #0 [ 46.957007][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 46.958428][ T4336] Workqueue: hci3 hci_rx_work [ 46.959081][ T4336] Call trace: [ 46.959523][ T4336] dump_backtrace+0x1c8/0x1f4 [ 46.960165][ T4336] show_stack+0x2c/0x3c [ 46.960771][ T4336] __dump_stack+0x30/0x40 [ 46.961446][ T4336] dump_stack_lvl+0xf8/0x160 [ 46.962193][ T4336] dump_stack+0x1c/0x5c [ 46.962836][ T4336] sysfs_create_dir_ns+0x22c/0x24c [ 46.963640][ T4336] kobject_add_internal+0x5a8/0xb30 [ 46.964426][ T4336] kobject_add+0x134/0x1f8 [ 46.965029][ T4336] device_add+0x3f0/0xf94 [ 46.965627][ T4336] hci_conn_add_sysfs+0xbc/0x1cc [ 46.966317][ T4336] le_conn_complete_evt+0xa24/0xf8c [ 46.967001][ T4336] hci_le_conn_complete_evt+0x114/0x3f8 [ 46.967812][ T4336] hci_le_meta_evt+0x2c0/0x4a4 [ 46.968495][ T4336] hci_event_packet+0x6ac/0xf08 [ 46.969188][ T4336] hci_rx_work+0x324/0xaa0 [ 46.969820][ T4336] process_one_work+0x7f4/0x13a8 [ 46.970556][ T4336] worker_thread+0x8c8/0xfbc [ 46.971284][ T4336] kthread+0x250/0x2d8 [ 46.971940][ T4336] ret_from_fork+0x10/0x20 [ 46.973806][ T4336] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 46.975869][ T4336] Bluetooth: hci3: failed to register connection device [ 47.055359][ T4681] binder: 4679:4681 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.057668][ T4681] binder: 4681 RLIMIT_NICE not set [ 47.106864][ T4691] binder: 4679:4691 got reply transaction with no transaction stack [ 47.108267][ T4691] binder: 4679:4691 transaction reply to 0:0 failed 19/29201/-71, size 0-0 line 2955 [ 47.169935][ T4694] device syzkaller0 entered promiscuous mode [ 47.211686][ T4694] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 47.897596][ T4710] ceph: No mds server is up or the cluster is laggy [ 47.901171][ T4375] libceph: connect (1)[c::]:6789 error -101 [ 47.902530][ T4375] libceph: mon0 (1)[c::]:6789 connect error [ 47.919621][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.319903][ T4746] binder: BINDER_SET_CONTEXT_MGR already set [ 49.324641][ T4746] binder: 4745:4746 ioctl 4018620d 20004a80 returned -16 [ 49.326268][ T4746] binder: tried to use weak ref as strong ref [ 49.327229][ T4746] binder: 4745:4746 Acquire 1 refcount change on invalid ref 0 ret -22 [ 49.328718][ T4746] binder: 4745:4746 got transaction to invalid handle, 1 [ 49.329718][ T4746] binder: 4746:4745 cannot find target node [ 49.334333][ T4746] binder: 4745:4746 transaction call to 0:0 failed 22/29201/-22, size 0-0 line 3054 [ 49.343183][ T4746] binder: 4745:4746 got reply transaction with no transaction stack [ 49.344541][ T4746] binder: 4745:4746 transaction reply to 0:0 failed 23/29201/-71, size 0-0 line 2955 [ 49.346470][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.366873][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.644835][ T4761] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 49.738339][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.747955][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.783273][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.786348][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.788315][ T4772] netlink: 'syz.3.108': attribute type 10 has an invalid length. [ 49.789504][ T4772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.108'. [ 49.836520][ T4772] team0: Port device geneve0 added [ 49.849524][ T4777] binder: 4776:4777 transaction reply to 0:0 failed 29/29201/-71, size 0-0 line 2970 [ 50.983617][ T4800] binder_user_error: 3 callbacks suppressed [ 50.983629][ T4800] binder: 4799:4800 got transaction to invalid handle, 1 [ 50.986215][ T4800] binder_debug: 6 callbacks suppressed [ 50.986228][ T4800] binder: 4800:4799 cannot find target node [ 50.988713][ T4800] binder: 4799:4800 transaction async to 0:0 failed 31/29201/-22, size 0-0 line 3054 [ 51.508990][ T4808] input: syz1 as /devices/virtual/input/input3 [ 51.616992][ T4818] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 52.130405][ T4311] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.239917][ T4861] vxcan1 speed is unknown, defaulting to 1000 [ 54.251835][ T4861] vxcan1 speed is unknown, defaulting to 1000 [ 54.263198][ T4861] vxcan1 speed is unknown, defaulting to 1000 [ 54.313409][ T4861] infiniband syz2: set active [ 54.314720][ T4383] vxcan1 speed is unknown, defaulting to 1000 [ 54.317022][ T4861] infiniband syz2: added vxcan1 [ 54.351110][ T4861] RDS/IB: syz2: added [ 54.352139][ T4861] smc: adding ib device syz2 with port count 1 [ 54.353454][ T4861] smc: ib device syz2 port 1 has pnetid [ 54.355083][ T4556] vxcan1 speed is unknown, defaulting to 1000 [ 54.364522][ T4861] vxcan1 speed is unknown, defaulting to 1000 [ 54.519767][ T4848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.676321][ T4861] vxcan1 speed is unknown, defaulting to 1000 [ 54.696890][ T4861] vxcan1 speed is unknown, defaulting to 1000 [ 54.738232][ T4861] vxcan1 speed is unknown, defaulting to 1000 [ 54.782037][ T4861] vxcan1 speed is unknown, defaulting to 1000 [ 54.943833][ T4871] erofs: (device nbd1): erofs_read_superblock: cannot find valid erofs superblock [ 56.129014][ T4894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.137330][ T4894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.234727][ T4899] netlink: 60 bytes leftover after parsing attributes in process `syz.4.149'. [ 57.027938][ T4922] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 57.039494][ T4927] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 57.040595][ T4927] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.045029][ T4927] vhci_hcd vhci_hcd.0: Device attached [ 57.047544][ T4928] vhci_hcd: connection closed [ 57.048388][ T257] vhci_hcd: stop threads [ 57.050121][ T257] vhci_hcd: release socket [ 57.051123][ T257] vhci_hcd: disconnect device [ 57.191335][ T4936] vxcan1 speed is unknown, defaulting to 1000 [ 57.636469][ T4952] netlink: 'syz.0.168': attribute type 8 has an invalid length. [ 58.002810][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.024439][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.535904][ T4985] erofs: (device nbd0): erofs_read_superblock: cannot find valid erofs superblock [ 58.842346][ T5000] netlink: 220 bytes leftover after parsing attributes in process `syz.3.188'. [ 59.557667][ T5029] Bluetooth: MGMT ver 1.22 [ 59.559476][ T5029] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 59.809338][ T5047] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 60.021114][ T5056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.032201][ T5056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.080928][ T5057] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 60.674599][ T5067] wg2 speed is unknown, defaulting to 1000 [ 60.681217][ T5067] wg2 speed is unknown, defaulting to 1000 [ 60.683763][ T5067] wg2 speed is unknown, defaulting to 1000 [ 60.688043][ T5067] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.698461][ T5067] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 60.717943][ T5067] wg2 speed is unknown, defaulting to 1000 [ 60.733272][ T5067] wg2 speed is unknown, defaulting to 1000 [ 60.735168][ T5067] wg2 speed is unknown, defaulting to 1000 [ 60.736442][ T5067] wg2 speed is unknown, defaulting to 1000 [ 60.739953][ T5073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.742689][ T5067] wg2 speed is unknown, defaulting to 1000 [ 60.744044][ T5073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.043154][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 61.421095][ T5089] qfq: no options [ 61.635394][ T5111] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 61.838450][ T5116] vxcan1 speed is unknown, defaulting to 1000 [ 61.912033][ T5116] wg2 speed is unknown, defaulting to 1000 [ 62.939213][ T5127] device syzkaller0 entered promiscuous mode [ 62.946774][ T5127] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 63.355827][ T5136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.357435][ T5136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.025087][ T5154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.126527][ T5157] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 64.129171][ T5165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.135076][ T5165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.249854][ T5169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.493628][ T14] cfg80211: failed to load regulatory.db [ 64.501470][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.502655][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.715202][ T5178] netlink: 60 bytes leftover after parsing attributes in process `syz.4.253'. [ 64.800886][ T5183] device ipvlan2 entered promiscuous mode [ 64.890764][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 65.736340][ T5201] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 65.901493][ T5212] netlink: 60 bytes leftover after parsing attributes in process `syz.3.265'. [ 65.936998][ T5211] erofs: (device nbd0): erofs_read_superblock: cannot find valid erofs superblock [ 66.055116][ T5230] netlink: 'syz.4.274': attribute type 10 has an invalid length. [ 66.063547][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.065722][ T5230] device bridge_slave_1 left promiscuous mode [ 66.066887][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.131537][ T5235] ptrace attach of "./syz-executor exec"[4321] was attempted by "./syz-executor exec"[5235] [ 66.134627][ T5230] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 66.299322][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.302597][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.347707][ T78] block nbd3: Attempted send on invalid socket [ 66.349089][ T78] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3 [ 66.353837][ T5239] hfsplus: unable to find HFS+ superblock [ 66.860576][ T5253] netlink: 60 bytes leftover after parsing attributes in process `syz.4.283'. [ 66.978467][ T5257] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 67.265268][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.271635][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.273441][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.274736][ T5263] infiniband syz2: set active [ 67.306229][ T5263] device ipvlan2 left promiscuous mode [ 67.337631][ T4444] vxcan1 speed is unknown, defaulting to 1000 [ 67.344108][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.115894][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.117577][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 68.118899][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.121388][ T22] usb 1-1: config 0 descriptor?? [ 68.188526][ T22] usbhid 1-1:0.0: can't add hid device: -22 [ 68.189540][ T22] usbhid: probe of 1-1:0.0 failed with error -22 [ 68.234521][ T5278] erofs: (device nbd1): erofs_read_superblock: cannot find valid erofs superblock [ 68.310471][ T5285] netlink: 60 bytes leftover after parsing attributes in process `syz.3.295'. [ 69.906849][ T4444] usb 1-1: USB disconnect, device number 3 [ 69.995471][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.996941][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.615644][ T5331] tipc: Cannot configure node identity twice [ 70.700128][ T5330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.309'. [ 70.978412][ T5336] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock [ 71.791000][ T5366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.320'. [ 71.984339][ T5379] binder: 5378:5379 tried to acquire reference to desc 0, got 1 instead [ 71.986344][ T5379] binder: 5378:5379 got transaction with invalid offset (1, min 0 max 72) or object. [ 71.987928][ T5379] binder: 5378:5379 transaction async to 5378:0 failed 36/29201/-22, size 72-24 line 3355 [ 71.990014][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.310178][ C1] sched: RT throttling activated [ 73.497952][ T5396] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 73.614735][ T5404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.333'. [ 73.679276][ T5407] [ 73.679685][ T5407] ====================================================== [ 73.680703][ T5407] WARNING: possible circular locking dependency detected [ 73.681624][ T5407] 6.1.148-syzkaller #0 Not tainted [ 73.682474][ T5407] ------------------------------------------------------ [ 73.683488][ T5407] syz.0.334/5407 is trying to acquire lock: [ 73.684318][ T5407] ffff0000dcf01450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 73.686165][ T5407] [ 73.686165][ T5407] but task is already holding lock: [ 73.687397][ T5407] ffff0000dcf00130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 73.688835][ T5407] [ 73.688835][ T5407] which lock already depends on the new lock. [ 73.688835][ T5407] [ 73.690346][ T5407] [ 73.690346][ T5407] the existing dependency chain (in reverse order) is: [ 73.691693][ T5407] [ 73.691693][ T5407] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 73.692995][ T5407] lock_sock_nested+0x70/0x130 [ 73.693865][ T5407] smc_listen_out+0x114/0x3b0 [ 73.694751][ T5407] smc_listen_work+0x1d0/0xde0 [ 73.695592][ T5407] process_one_work+0x7f4/0x13a8 [ 73.696415][ T5407] worker_thread+0x8c8/0xfbc [ 73.697201][ T5407] kthread+0x250/0x2d8 [ 73.697931][ T5407] ret_from_fork+0x10/0x20 [ 73.698631][ T5407] [ 73.698631][ T5407] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 73.700246][ T5407] __lock_acquire+0x293c/0x6544 [ 73.701144][ T5407] lock_acquire+0x20c/0x644 [ 73.701986][ T5407] __flush_work+0xf4/0x1bc [ 73.702759][ T5407] __cancel_work_timer+0x2ec/0x448 [ 73.703549][ T5407] cancel_work_sync+0x24/0x38 [ 73.704363][ T5407] smc_clcsock_release+0x64/0xe8 [ 73.705274][ T5407] __smc_release+0x568/0x6c4 [ 73.706023][ T5407] smc_close_non_accepted+0xd8/0x260 [ 73.706905][ T5407] smc_close_active+0x954/0xcc8 [ 73.707721][ T5407] __smc_release+0x48c/0x6c4 [ 73.708552][ T5407] smc_release+0x258/0x51c [ 73.709510][ T5407] sock_close+0xb4/0x1f8 [ 73.710255][ T5407] __fput+0x1bc/0x7c0 [ 73.710879][ T5407] ____fput+0x20/0x30 [ 73.711627][ T5407] task_work_run+0x1ec/0x270 [ 73.712415][ T5407] do_notify_resume+0x1f70/0x2b0c [ 73.713340][ T5407] el0_svc+0x98/0x138 [ 73.714132][ T5407] el0t_64_sync_handler+0x84/0xf0 [ 73.715034][ T5407] el0t_64_sync+0x18c/0x190 [ 73.715860][ T5407] [ 73.715860][ T5407] other info that might help us debug this: [ 73.715860][ T5407] [ 73.717473][ T5407] Possible unsafe locking scenario: [ 73.717473][ T5407] [ 73.718570][ T5407] CPU0 CPU1 [ 73.719362][ T5407] ---- ---- [ 73.720193][ T5407] lock(sk_lock-AF_SMC/1); [ 73.721004][ T5407] lock((work_completion)(&new_smc->smc_listen_work)); [ 73.722499][ T5407] lock(sk_lock-AF_SMC/1); [ 73.723682][ T5407] lock((work_completion)(&new_smc->smc_listen_work)); [ 73.724873][ T5407] [ 73.724873][ T5407] *** DEADLOCK *** [ 73.724873][ T5407] [ 73.726100][ T5407] 2 locks held by syz.0.334/5407: [ 73.726974][ T5407] #0: ffff0000e210c410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 73.728534][ T5407] #1: ffff0000dcf00130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 73.729925][ T5407] [ 73.729925][ T5407] stack backtrace: [ 73.730774][ T5407] CPU: 1 PID: 5407 Comm: syz.0.334 Not tainted 6.1.148-syzkaller #0 [ 73.731979][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 73.733505][ T5407] Call trace: [ 73.733982][ T5407] dump_backtrace+0x1c8/0x1f4 [ 73.734685][ T5407] show_stack+0x2c/0x3c [ 73.735248][ T5407] __dump_stack+0x30/0x40 [ 73.735849][ T5407] dump_stack_lvl+0xf8/0x160 [ 73.736670][ T5407] dump_stack+0x1c/0x5c [ 73.737367][ T5407] print_circular_bug+0x148/0x1b0 [ 73.738129][ T5407] check_noncircular+0x240/0x2d4 [ 73.738932][ T5407] __lock_acquire+0x293c/0x6544 [ 73.739659][ T5407] lock_acquire+0x20c/0x644 [ 73.740399][ T5407] __flush_work+0xf4/0x1bc [ 73.741097][ T5407] __cancel_work_timer+0x2ec/0x448 [ 73.741917][ T5407] cancel_work_sync+0x24/0x38 [ 73.742662][ T5407] smc_clcsock_release+0x64/0xe8 [ 73.743434][ T5407] __smc_release+0x568/0x6c4 [ 73.744118][ T5407] smc_close_non_accepted+0xd8/0x260 [ 73.744863][ T5407] smc_close_active+0x954/0xcc8 [ 73.745657][ T5407] __smc_release+0x48c/0x6c4 [ 73.746377][ T5407] smc_release+0x258/0x51c [ 73.747118][ T5407] sock_close+0xb4/0x1f8 [ 73.747913][ T5407] __fput+0x1bc/0x7c0 [ 73.748571][ T5407] ____fput+0x20/0x30 [ 73.749244][ T5407] task_work_run+0x1ec/0x270 [ 73.750005][ T5407] do_notify_resume+0x1f70/0x2b0c [ 73.750775][ T5407] el0_svc+0x98/0x138 [ 73.751397][ T5407] el0t_64_sync_handler+0x84/0xf0 [ 73.752110][ T5407] el0t_64_sync+0x18c/0x190