last executing test programs: 1.826490475s ago: executing program 0 (id=278): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000600000d0003006c6973743a736574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000306012400000000000000000a00000505000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 1.742613592s ago: executing program 0 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x10) 1.668339928s ago: executing program 0 (id=284): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x780, 0x144) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "080000000000000000008000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) r4 = syz_io_uring_setup(0xfbb, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10000, 0x5, 0x1a6}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000004, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r5, &(0x7f00000001c0), 0x0, 0x41, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) r10 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) 1.595966371s ago: executing program 2 (id=287): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0xc800) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 1.539338456s ago: executing program 2 (id=289): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x4000) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 1.376665383s ago: executing program 2 (id=293): r0 = syz_io_uring_setup(0x44f, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x10100, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./cgroup/pids.max/../file0\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 1.244137103s ago: executing program 2 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, &(0x7f0000000180)=0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1c98) 1.242977743s ago: executing program 2 (id=300): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) write$cgroup_int(r0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f000092b000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0xe, 0x64, 0x0, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 962.97548ms ago: executing program 3 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 931.519915ms ago: executing program 3 (id=309): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x5a34c9ba18e7fe71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz8FpAlEUBdA7n/mZCQSyTxFTRxaBrLJOE/bhypUd2I7FiIJ8YRwtQV2cs3k8ePfBDc9VcmqttXLb345J9zVmSsm2Jqm/U9Jm6Yd7bH+dbTinbuqSTbKu+U/qe5KPJN3PMCar75Skn48+D+Pyo8vf7qFdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFXQIAAP//s1YVKg==") 811.34311ms ago: executing program 4 (id=311): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/19, 0x13}, 0xffff}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x57f, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 771.173182ms ago: executing program 0 (id=314): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 731.060819ms ago: executing program 4 (id=315): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 720.168105ms ago: executing program 1 (id=316): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 663.587283ms ago: executing program 4 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000306012400000000000000000a00000505000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 590.841913ms ago: executing program 0 (id=318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x10) 590.549554ms ago: executing program 3 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 579.256766ms ago: executing program 4 (id=320): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x28000, 0x0) close_range(r0, r2, 0x0) 519.403293ms ago: executing program 3 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a3000000600050001000700000008000940000000011400088010"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 508.371001ms ago: executing program 0 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) read(r2, &(0x7f00000002c0)=""/200, 0x39) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 493.599516ms ago: executing program 1 (id=323): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e14060200000000", 0x20}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 425.706451ms ago: executing program 4 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 425.534377ms ago: executing program 3 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 424.698127ms ago: executing program 1 (id=326): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f000066f000/0x3000)=nil, 0x3000, 0x13) 414.744684ms ago: executing program 2 (id=327): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000000000}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000000), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") r5 = epoll_create1(0x80000) epoll_pwait(r5, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0xb339, &(0x7f00000000c0)={[0xe]}, 0x8) 206.76244ms ago: executing program 3 (id=328): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 205.867884ms ago: executing program 4 (id=329): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) 116.062271ms ago: executing program 1 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002480)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x448, 0x2, [@TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x1ff, 0x7, 0x17cd, 0x5, 0xe3, 0x6, 0xcf38e02, 0x2, 0xb, 0xfffffffd, 0x7, 0x4, 0x58045a02, 0xfff, 0x1, 0x8, 0x0, 0x1ff, 0x2, 0x3, 0x0, 0x40000000, 0xa899, 0xdd, 0x7, 0xc, 0x0, 0x0, 0x1, 0x2, 0x0, 0x10, 0x7fff, 0x4f, 0x6, 0x74bd, 0xc4, 0x3, 0xc58, 0x9, 0xb, 0xb, 0x3, 0x1, 0x5, 0xaf7f, 0x3, 0x5, 0x3, 0x9, 0x7, 0x8, 0x9, 0x2, 0x87, 0x6, 0x7fffffff, 0xfffffffc, 0x100, 0xfffffffc, 0x8, 0x1, 0x6, 0x81, 0x9, 0xfffffa01, 0x6, 0x8, 0x0, 0x80000000, 0xfffffffa, 0x1000, 0x3, 0x1, 0x6, 0x9, 0x8, 0x5cbfe417, 0x4, 0x80000001, 0xffffffff, 0xfff, 0xa5, 0x3, 0x1, 0x0, 0x200, 0x9, 0x8000, 0x80000000, 0x710000, 0x800, 0x9, 0x74d, 0xd, 0x0, 0x30000, 0x9, 0xa5800000, 0x200, 0x6, 0x8, 0x4, 0xfffffffd, 0x55e3, 0x6, 0x4, 0x10001, 0x9, 0x80000001, 0xffff, 0x0, 0x5, 0x4, 0x0, 0x7, 0x1b, 0x3, 0x9, 0x5, 0xffffff15, 0x6, 0xa98, 0x0, 0x9, 0xfffffff7, 0x10001, 0xc9, 0x10001, 0x1, 0x7, 0x0, 0xffffff9d, 0x2, 0x5c57, 0x9, 0x6, 0x6, 0x1, 0x9, 0x3, 0x1, 0x401, 0x700, 0x10000, 0x7, 0x39c, 0x5, 0x3, 0x10000, 0xfffffffb, 0x5, 0xd3e2, 0x2, 0x8, 0xfbc3, 0x3, 0xfffffffa, 0x80, 0x224, 0x4, 0x2, 0xfffffff8, 0xfffff5d0, 0x80, 0x2, 0x18c1, 0x6, 0x6, 0x7, 0x800, 0x8, 0x5, 0x6, 0x1, 0x101, 0x5, 0x7, 0x1, 0x3, 0x8, 0x5, 0xf1, 0xc00, 0x3, 0x1, 0x6, 0x2, 0x1ff, 0x80000001, 0xffffffff, 0x562, 0x7, 0x4, 0x6b6a, 0x1, 0x6, 0xfffffffc, 0x6, 0xfff, 0x5, 0x7, 0x9, 0x2dac, 0x400, 0x1, 0x4, 0x4, 0x5, 0x8, 0x2, 0x4, 0x10, 0x10001, 0x6, 0x5, 0x9, 0x401, 0x7, 0xa, 0x4, 0x80000000, 0xc, 0x1, 0x6, 0x9, 0xe8, 0x7, 0x6, 0x685, 0x8, 0x9, 0x5, 0xf, 0x6, 0x2, 0x0, 0x1, 0xa4, 0x4, 0x4, 0x0, 0x7, 0xff, 0x6cb2309b, 0x800, 0xbe, 0xff, 0xff, 0x10001, 0x1, 0x8, 0xe, 0x1, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x3, 0xfffffff2, 0x718, {0x1, 0x2, 0x7, 0xe, 0x9, 0x6}, {0x9, 0x2, 0x9, 0x3, 0x1ff, 0x78e5}, 0x10001, 0x8, 0x4}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 43.350572ms ago: executing program 1 (id=331): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 0s ago: executing program 1 (id=332): r0 = socket$inet(0x2, 0x1, 0x100) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 34.938040][ T6461] cgroup: Unknown subsys name 'net' [ 35.184731][ T6461] cgroup: Unknown subsys name 'cpuset' [ 35.188069][ T6461] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.479732][ T6461] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 37.094118][ T6481] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.097723][ T6484] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.098086][ T6484] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.098827][ T6484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.099467][ T6484] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.099946][ T6484] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.100250][ T6484] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.100534][ T6484] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.100795][ T6484] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.100986][ T6484] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.101168][ T6484] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.103472][ T6484] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.103659][ T6484] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.103984][ T6484] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.104483][ T6484] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.104835][ T6484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.105342][ T6484] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.123466][ T6486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.133084][ T6485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.139525][ T6486] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.149591][ T6486] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.159679][ T6486] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.159722][ T6485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.164051][ T6486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.166377][ T6486] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.497521][ T6476] chnl_net:caif_netlink_parms(): no params data found [ 37.499884][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 37.522661][ T6482] chnl_net:caif_netlink_parms(): no params data found [ 37.607164][ T6472] chnl_net:caif_netlink_parms(): no params data found [ 37.616751][ T6473] chnl_net:caif_netlink_parms(): no params data found [ 37.654723][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.654846][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.654972][ T6471] bridge_slave_0: entered allmulticast mode [ 37.655861][ T6471] bridge_slave_0: entered promiscuous mode [ 37.657443][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.657480][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.657560][ T6471] bridge_slave_1: entered allmulticast mode [ 37.658449][ T6471] bridge_slave_1: entered promiscuous mode [ 37.701289][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.703616][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.705691][ T6482] bridge_slave_0: entered allmulticast mode [ 37.708205][ T6482] bridge_slave_0: entered promiscuous mode [ 37.709669][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.709704][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.709785][ T6482] bridge_slave_1: entered allmulticast mode [ 37.710569][ T6482] bridge_slave_1: entered promiscuous mode [ 37.723865][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.723931][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.724019][ T6476] bridge_slave_0: entered allmulticast mode [ 37.724809][ T6476] bridge_slave_0: entered promiscuous mode [ 37.763178][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.764211][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.764320][ T6476] bridge_slave_1: entered allmulticast mode [ 37.765124][ T6476] bridge_slave_1: entered promiscuous mode [ 37.772587][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.776659][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.786210][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.787778][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.843888][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.845784][ T6471] team0: Port device team_slave_0 added [ 37.846971][ T6471] team0: Port device team_slave_1 added [ 37.847172][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.847265][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.847345][ T6472] bridge_slave_0: entered allmulticast mode [ 37.848256][ T6472] bridge_slave_0: entered promiscuous mode [ 37.849307][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.849343][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.849426][ T6472] bridge_slave_1: entered allmulticast mode [ 37.850266][ T6472] bridge_slave_1: entered promiscuous mode [ 37.865570][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.895216][ T6482] team0: Port device team_slave_0 added [ 37.896459][ T6482] team0: Port device team_slave_1 added [ 37.896663][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.896697][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.896788][ T6473] bridge_slave_0: entered allmulticast mode [ 37.897687][ T6473] bridge_slave_0: entered promiscuous mode [ 37.898909][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.898969][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.899064][ T6473] bridge_slave_1: entered allmulticast mode [ 37.899900][ T6473] bridge_slave_1: entered promiscuous mode [ 37.950565][ T6476] team0: Port device team_slave_0 added [ 37.951110][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.951135][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.951160][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.963742][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.964494][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.964518][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.964544][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.986995][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.987044][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.987087][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.988062][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.988085][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.988109][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.994098][ T6473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.995345][ T6476] team0: Port device team_slave_1 added [ 38.009842][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.018730][ T6473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.040899][ T6471] hsr_slave_0: entered promiscuous mode [ 38.041483][ T6471] hsr_slave_1: entered promiscuous mode [ 38.053827][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.053882][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.053908][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.074999][ T6473] team0: Port device team_slave_0 added [ 38.086103][ T6482] hsr_slave_0: entered promiscuous mode [ 38.088111][ T6482] hsr_slave_1: entered promiscuous mode [ 38.090053][ T6482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.091794][ T6482] Cannot create hsr debugfs directory [ 38.092415][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.092440][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.092466][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.107444][ T6472] team0: Port device team_slave_0 added [ 38.108297][ T6473] team0: Port device team_slave_1 added [ 38.124927][ T6476] hsr_slave_0: entered promiscuous mode [ 38.126948][ T6476] hsr_slave_1: entered promiscuous mode [ 38.128817][ T6476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.130965][ T6476] Cannot create hsr debugfs directory [ 38.138861][ T6472] team0: Port device team_slave_1 added [ 38.188839][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.188884][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.188910][ T6473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.189867][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.189892][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.189917][ T6473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.215278][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.215364][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.215404][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.245852][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.247940][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.248639][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.275344][ T6473] hsr_slave_0: entered promiscuous mode [ 38.276305][ T6473] hsr_slave_1: entered promiscuous mode [ 38.276633][ T6473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.276660][ T6473] Cannot create hsr debugfs directory [ 38.304847][ T6472] hsr_slave_0: entered promiscuous mode [ 38.305353][ T6472] hsr_slave_1: entered promiscuous mode [ 38.305644][ T6472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.305670][ T6472] Cannot create hsr debugfs directory [ 38.519964][ T6471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.538625][ T6471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.548028][ T6471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.561973][ T6471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.569666][ T6482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.573665][ T6482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.581757][ T6482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.586827][ T6482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.619722][ T6476] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.624842][ T6476] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.628923][ T6476] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.638932][ T6476] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.689927][ T6472] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.695744][ T6472] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.699290][ T6472] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.705534][ T6472] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.746336][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.747653][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.760541][ T6482] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.774796][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.774911][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.778286][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.785914][ T6473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.798526][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.798618][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.799324][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.799363][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.800808][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.800847][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.821345][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.822459][ T6473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.828685][ T6473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.838011][ T6482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.848397][ T6476] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.857377][ T6473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.866178][ T6471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.893272][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.893346][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.898351][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.898411][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.923135][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.975664][ T6472] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.984943][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.985008][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.989261][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.024616][ T6471] veth0_vlan: entered promiscuous mode [ 39.028398][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.028467][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.037525][ T6471] veth1_vlan: entered promiscuous mode [ 39.041269][ T6482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.055899][ T6471] veth0_macvtap: entered promiscuous mode [ 39.059232][ T6471] veth1_macvtap: entered promiscuous mode [ 39.088126][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.094891][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.100948][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.112641][ T6481] Bluetooth: hci2: command tx timeout [ 39.119451][ T6482] veth0_vlan: entered promiscuous mode [ 39.143189][ T6471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.145691][ T6471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.148034][ T6471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.150379][ T6471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.167660][ T6473] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.171176][ T6476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.172473][ T6482] veth1_vlan: entered promiscuous mode [ 39.179269][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.179346][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.192984][ T6481] Bluetooth: hci4: command tx timeout [ 39.193026][ T6480] Bluetooth: hci3: command tx timeout [ 39.193192][ T6481] Bluetooth: hci1: command tx timeout [ 39.193197][ T6480] Bluetooth: hci0: command tx timeout [ 39.208661][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.208754][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.246408][ T6476] veth0_vlan: entered promiscuous mode [ 39.250405][ T6476] veth1_vlan: entered promiscuous mode [ 39.260806][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.260895][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.295006][ T707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.295059][ T707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.301513][ T6476] veth0_macvtap: entered promiscuous mode [ 39.315954][ T6476] veth1_macvtap: entered promiscuous mode [ 39.321099][ T6482] veth0_macvtap: entered promiscuous mode [ 39.330476][ T6473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.335990][ T6473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.346499][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.349513][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.353029][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.368381][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.368439][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.369186][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.372973][ T6482] veth1_macvtap: entered promiscuous mode [ 39.376537][ T6476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.376575][ T6476] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.376603][ T6476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.376630][ T6476] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.397184][ T6471] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.405680][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.405743][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.405762][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.405780][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.406288][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.408090][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.408119][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.408136][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.408154][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.408602][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.409793][ T6482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.409831][ T6482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.409859][ T6482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.409886][ T6482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.416918][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.515728][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.515780][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.531453][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.531502][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.570284][ T6473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.613180][ T681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.613250][ T681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.631012][ T6553] smc: net device bond0 applied user defined pnetid SYZ0 [ 39.633579][ T6553] smc: net device bond0 erased user defined pnetid SYZ0 [ 39.647140][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.647211][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.649442][ T6473] veth0_vlan: entered promiscuous mode [ 39.668661][ T6473] veth1_vlan: entered promiscuous mode [ 39.682156][ T6473] veth0_macvtap: entered promiscuous mode [ 39.686245][ T6473] veth1_macvtap: entered promiscuous mode [ 39.728805][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.728873][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.728907][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.728932][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.728950][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.728968][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.729549][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.737885][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.737917][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.737934][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.737952][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.737969][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.737986][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.738469][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.739700][ T6473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.739739][ T6473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.739768][ T6473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.739797][ T6473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.821514][ T6472] veth0_vlan: entered promiscuous mode [ 39.842438][ T6472] veth1_vlan: entered promiscuous mode [ 39.852880][ T6472] veth0_macvtap: entered promiscuous mode [ 39.855978][ T6472] veth1_macvtap: entered promiscuous mode [ 39.863655][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.866520][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.869285][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.873125][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.875873][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.878762][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.881409][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.884491][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.888287][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.105420][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.105485][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.105503][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.105521][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.105538][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.105556][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.105573][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.105590][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.106044][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.108397][ T332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.108426][ T332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.112652][ T6472] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.112690][ T6472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.112719][ T6472] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.112746][ T6472] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.334265][ T6571] loop1: detected capacity change from 0 to 164 [ 40.435926][ T6571] process 'syz.1.2' launched '/dev/fd/5' with NULL argv: empty string added [ 40.873711][ T681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.873769][ T681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.068255][ T31] audit: type=1326 audit(40.820:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95b728 code=0x7ffc0000 [ 41.068338][ T31] audit: type=1326 audit(40.820:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95b728 code=0x7ffc0000 [ 41.068901][ T31] audit: type=1326 audit(40.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=231 compat=0 ip=0xffffbc95b728 code=0x7ffc0000 [ 41.069538][ T31] audit: type=1326 audit(40.820:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95b728 code=0x7ffc0000 [ 41.116102][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.116155][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.192065][ T6486] Bluetooth: hci2: command tx timeout [ 41.203995][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.204044][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.216385][ T6593] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.218882][ T6593] smc: net device bond0 erased user defined pnetid SYZ0 [ 41.271751][ T6486] Bluetooth: hci0: command tx timeout [ 41.282396][ T6480] Bluetooth: hci3: command tx timeout [ 41.282489][ T6486] Bluetooth: hci1: command tx timeout [ 41.282564][ T6486] Bluetooth: hci4: command tx timeout [ 41.322327][ T6599] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 41.496819][ T6624] netlink: 92 bytes leftover after parsing attributes in process `syz.0.24'. [ 41.570702][ T6628] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.683603][ T6631] loop4: detected capacity change from 0 to 512 [ 41.685771][ T6631] ======================================================= [ 41.685771][ T6631] WARNING: The mand mount option has been deprecated and [ 41.685771][ T6631] and is ignored by this kernel. Remove the mand [ 41.685771][ T6631] option from the mount to silence this warning. [ 41.685771][ T6631] ======================================================= [ 41.686088][ T6631] ext4: Bad value for 'mb_optimize_scan' [ 42.555837][ T6636] loop2: detected capacity change from 0 to 512 [ 42.586853][ T6636] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.593914][ T6636] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.28: bg 0: block 248: padding at end of block bitmap is not set [ 42.611763][ T6636] Quota error (device loop2): write_blk: dquota write failed [ 42.611859][ T6636] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 42.611893][ T6636] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.28: Failed to acquire dquot type 1 [ 42.623749][ T6636] EXT4-fs (loop2): 1 truncate cleaned up [ 42.805346][ T6652] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.952112][ T31] audit: type=1326 audit(42.610:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6653 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95b728 code=0x7ffc0000 [ 42.952194][ T31] audit: type=1326 audit(42.610:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6653 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95b728 code=0x7ffc0000 [ 42.952252][ T31] audit: type=1326 audit(42.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6653 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffbc95b728 code=0x7ffc0000 [ 43.272504][ T6480] Bluetooth: hci2: command tx timeout [ 43.352643][ T6480] Bluetooth: hci3: command tx timeout [ 43.354338][ T6480] Bluetooth: hci4: command tx timeout [ 43.354407][ T6480] Bluetooth: hci1: command tx timeout [ 43.354444][ T6480] Bluetooth: hci0: command tx timeout [ 43.507793][ T6636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.561983][ T6636] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 43.568692][ T6670] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 43.583196][ T6636] Quota error (device loop2): write_blk: dquota write failed [ 43.583326][ T6636] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.28: Failed to acquire dquot type 1 [ 43.597632][ T6636] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 43.744879][ T6680] xt_hashlimit: max too large, truncated to 1048576 [ 43.765017][ T6471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.871030][ T6685] loop1: detected capacity change from 0 to 128 [ 43.879792][ T6686] loop4: detected capacity change from 0 to 512 [ 43.919076][ T6686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.947775][ T6692] vlan2: entered allmulticast mode [ 44.238065][ T6472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.260862][ T6704] loop2: detected capacity change from 0 to 512 [ 44.266688][ T6704] EXT4-fs: Ignoring removed oldalloc option [ 44.286258][ T6704] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 44.322645][ T6704] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 44.322737][ T6704] System zones: 1-12 [ 44.324036][ T6704] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.57: corrupted in-inode xattr: e_value size too large [ 44.324649][ T6704] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.57: couldn't read orphan inode 15 (err -117) [ 44.325920][ T6704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.528461][ T6713] loop3: detected capacity change from 0 to 512 [ 44.531691][ T6713] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.531756][ T6713] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 44.542860][ T6713] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 44.542945][ T6713] System zones: 0-2, 18-18, 34-34 [ 44.543955][ T6713] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.546029][ T6713] EXT4-fs (loop3): 1 truncate cleaned up [ 44.546942][ T6713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.575787][ T6471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.667669][ T6476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.972117][ T6731] netlink: 5 bytes leftover after parsing attributes in process `syz.2.66'. [ 45.041915][ T6731] 0ªX¹¦D: renamed from gretap0 (while UP) [ 45.045971][ T6731] 0ªX¹¦D: entered allmulticast mode [ 45.048057][ T6731] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 45.058702][ T6730] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 45.340486][ T6740] loop0: detected capacity change from 0 to 512 [ 45.352693][ T6481] Bluetooth: hci2: command tx timeout [ 45.358571][ T6740] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 45.378671][ T6740] EXT4-fs (loop0): invalid journal inode [ 45.442188][ T6481] Bluetooth: hci0: command tx timeout [ 45.442271][ T6481] Bluetooth: hci1: command tx timeout [ 45.442318][ T6481] Bluetooth: hci4: command tx timeout [ 45.442361][ T6481] Bluetooth: hci3: command tx timeout [ 45.898871][ T6771] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 45.904911][ T6770] IPVS: stopping master sync thread 6771 ... [ 45.980242][ T6776] loop0: detected capacity change from 0 to 1024 [ 45.980683][ T6776] EXT4-fs: Ignoring removed nobh option [ 45.980710][ T6776] EXT4-fs: Ignoring removed bh option [ 45.993134][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 46.028784][ T6779] loop3: detected capacity change from 0 to 8192 [ 46.044345][ T6776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.059888][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.87'. [ 46.169228][ T6473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.190255][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 46.263033][ T6796] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 46.377046][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 46.515439][ T6816] loop2: detected capacity change from 0 to 8192 [ 46.558001][ T6821] loop0: detected capacity change from 0 to 1024 [ 46.560206][ T6821] EXT4-fs: Ignoring removed nobh option [ 46.563273][ T6821] EXT4-fs: Ignoring removed bh option [ 46.577403][ T6821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.628387][ T6473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.710175][ T6827] loop2: detected capacity change from 0 to 512 [ 46.735456][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.744100][ T6827] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.105: corrupted xattr block 33: invalid ea_ino [ 46.748066][ T6827] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.105: corrupted xattr block 33: invalid ea_ino [ 46.758810][ T6827] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.105: corrupted xattr block 33: invalid ea_ino [ 46.788182][ T6471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.011992][ T24] cfg80211: failed to load regulatory.db [ 47.123714][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 47.180900][ T6848] loop1: detected capacity change from 0 to 8192 [ 47.194568][ T6851] loop0: detected capacity change from 0 to 1024 [ 47.196731][ T6851] EXT4-fs: Ignoring removed nobh option [ 47.198549][ T6851] EXT4-fs: Ignoring removed bh option [ 47.202786][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 47.231288][ T6851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.294917][ T6473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.319661][ T6857] loop4: detected capacity change from 0 to 8192 [ 47.350163][ T6857] syz.4.118: attempt to access beyond end of device [ 47.350163][ T6857] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 47.350919][ T6857] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 47.350950][ T6857] FAT-fs (loop4): Filesystem has been set read-only [ 47.356507][ T6857] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 47.358356][ T6857] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 47.714249][ T6888] loop2: detected capacity change from 0 to 1024 [ 47.716951][ T6888] EXT4-fs: Ignoring removed nobh option [ 47.719918][ T6888] EXT4-fs: Ignoring removed bh option [ 47.729913][ T6878] lo speed is unknown, defaulting to 1000 [ 47.730035][ T6878] lo speed is unknown, defaulting to 1000 [ 47.749266][ T6883] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 47.758606][ T6888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.768425][ T6878] lo speed is unknown, defaulting to 1000 [ 47.770494][ T6878] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.776589][ T6878] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 47.784610][ T6874] lo speed is unknown, defaulting to 1000 [ 47.808452][ T6878] lo speed is unknown, defaulting to 1000 [ 47.809237][ T6878] lo speed is unknown, defaulting to 1000 [ 47.810636][ T6878] lo speed is unknown, defaulting to 1000 [ 47.811325][ T6878] lo speed is unknown, defaulting to 1000 [ 47.842287][ T6471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.866235][ T6878] lo speed is unknown, defaulting to 1000 [ 48.146051][ T6917] loop4: detected capacity change from 0 to 512 [ 48.157158][ T6919] loop2: detected capacity change from 0 to 1024 [ 48.159393][ T6919] EXT4-fs: Ignoring removed nobh option [ 48.161058][ T6919] EXT4-fs: Ignoring removed bh option [ 48.173320][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 48.179499][ T6917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.188038][ T6919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.198821][ T6917] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.143: corrupted xattr block 33: invalid ea_ino [ 48.204471][ T6917] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.143: corrupted xattr block 33: invalid ea_ino [ 48.208635][ T6917] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.143: corrupted xattr block 33: invalid ea_ino [ 48.231392][ T6471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.311468][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 48.469018][ T6939] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 48.471085][ T6933] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #18: comm syz.4.143: corrupted inode contents [ 48.477133][ T6933] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #18: comm syz.4.143: mark_inode_dirty error [ 48.477440][ T6933] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #18: comm syz.4.143: corrupted inode contents [ 48.477637][ T6933] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.143: mark_inode_dirty error [ 48.477827][ T6933] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.143: mark inode dirty (error -117) [ 48.478107][ T6933] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 48.589054][ T6472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.720252][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 48.720328][ T31] audit: type=1326 audit(48.470:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 48.720369][ T31] audit: type=1326 audit(48.470:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 48.745257][ T31] audit: type=1326 audit(48.490:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 48.745336][ T31] audit: type=1326 audit(48.490:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 48.745376][ T31] audit: type=1326 audit(48.490:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 48.745407][ T31] audit: type=1326 audit(48.490:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 48.745438][ T31] audit: type=1326 audit(48.490:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 48.745470][ T31] audit: type=1326 audit(48.490:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 48.745501][ T31] audit: type=1326 audit(48.490:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 48.745531][ T31] audit: type=1326 audit(48.490:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6950 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 48.825472][ T6957] loop1: detected capacity change from 0 to 1024 [ 48.827776][ T6957] EXT4-fs: Ignoring removed nobh option [ 48.829425][ T6957] EXT4-fs: Ignoring removed bh option [ 48.890485][ T6964] netlink: 132 bytes leftover after parsing attributes in process `syz.0.161'. [ 48.904094][ T6957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.914096][ T6959] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 48.952027][ T6482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.955433][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 49.023453][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 49.261547][ T6995] loop0: detected capacity change from 0 to 1024 [ 49.265352][ T6995] EXT4-fs: Ignoring removed nobh option [ 49.267039][ T6995] EXT4-fs: Ignoring removed bh option [ 49.293085][ T6995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.366347][ T6473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.565557][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 49.613784][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 49.618810][ T7024] netlink: 'syz.1.188': attribute type 1 has an invalid length. [ 49.619580][ T7024] netlink: 'syz.1.188': attribute type 2 has an invalid length. [ 49.847954][ T7035] loop2: detected capacity change from 0 to 1024 [ 49.848406][ T7035] EXT4-fs: Ignoring removed nobh option [ 49.848435][ T7035] EXT4-fs: Ignoring removed bh option [ 49.876684][ T7035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.952700][ T6471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.011052][ T7051] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 50.022965][ T7055] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 50.150332][ T7063] loop2: detected capacity change from 0 to 512 [ 50.175347][ T7063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.207756][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 50.228350][ T6471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.490992][ T7077] loop2: detected capacity change from 0 to 1024 [ 50.491466][ T7077] EXT4-fs: Ignoring removed nobh option [ 50.491494][ T7077] EXT4-fs: Ignoring removed bh option [ 50.499186][ T7078] loop0: detected capacity change from 0 to 512 [ 50.524011][ T7077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.533947][ T7078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.543609][ T7078] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.210: corrupted xattr block 33: invalid ea_ino [ 50.547773][ T7078] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.210: corrupted xattr block 33: invalid ea_ino [ 50.552515][ T7078] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.210: corrupted xattr block 33: invalid ea_ino [ 50.556261][ T7078] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.210: corrupted xattr block 33: invalid ea_ino [ 50.566521][ T6471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.585833][ T6473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.635924][ T7084] IPv6: Can't replace route, no match found [ 51.070781][ T7110] loop3: detected capacity change from 0 to 1024 [ 51.071240][ T7110] EXT4-fs: Ignoring removed nobh option [ 51.071268][ T7110] EXT4-fs: Ignoring removed bh option [ 51.120628][ T7110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.180272][ T6476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.185409][ T7118] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 51.301265][ T7132] Zero length message leads to an empty skb [ 51.366348][ T7140] sctp: [Deprecated]: syz.0.233 (pid 7140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 51.366348][ T7140] Use struct sctp_sack_info instead [ 51.455918][ T7148] loop3: detected capacity change from 0 to 512 [ 51.480623][ T7148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 51.483271][ T7148] System zones: 1-12 [ 51.485889][ T7148] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.240: corrupted xattr block 255: invalid header [ 51.490358][ T7148] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 51.493752][ T7148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.497705][ T7148] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.240: corrupted xattr block 255: invalid header [ 51.530434][ T6476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.530525][ T7151] loop2: detected capacity change from 0 to 1024 [ 51.534416][ T7151] EXT4-fs: Ignoring removed nobh option [ 51.534447][ T7151] EXT4-fs: Ignoring removed bh option [ 51.554967][ T7153] 9pnet: Could not find request transport: t [ 51.555421][ T7151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.616435][ T6471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.666699][ T7162] loop2: detected capacity change from 0 to 512 [ 51.716700][ T7162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.757589][ T6471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.889253][ T7183] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.927597][ T7185] loop1: detected capacity change from 0 to 1024 [ 51.928028][ T7185] EXT4-fs: Ignoring removed nobh option [ 51.928057][ T7185] EXT4-fs: Ignoring removed bh option [ 51.954586][ T7185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.030373][ T6482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.354688][ T7212] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.385562][ T7221] lo speed is unknown, defaulting to 1000 [ 52.404813][ T7224] mmap: syz.3.271 (7224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.415682][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.416330][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.473348][ T7212] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.586029][ T7228] __nla_validate_parse: 12 callbacks suppressed [ 52.588024][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 52.615320][ T7212] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.651110][ T7226] lo speed is unknown, defaulting to 1000 [ 52.693290][ T7212] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.963901][ T7212] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.968053][ T7212] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.985554][ T7212] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.990551][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 53.002658][ T7212] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.003776][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 53.114169][ T7257] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 53.235889][ T6525] lo speed is unknown, defaulting to 1000 [ 53.354323][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 53.358617][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 53.474480][ T7286] loop3: detected capacity change from 0 to 2048 [ 53.503908][ T7286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.567417][ T6476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.589023][ T7295] lo speed is unknown, defaulting to 1000 [ 53.724239][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 53.735440][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 53.990334][ T7326] loop3: detected capacity change from 0 to 8192 [ 54.034903][ T7326] loop3: p1 p2 < > p3 p4 < p5 > [ 54.034997][ T7326] loop3: partition table partially beyond EOD, truncated [ 54.035135][ T7326] loop3: p1 size 100663296 extends beyond EOD, truncated [ 54.050002][ T7326] loop3: p2 start 591104 is beyond EOD, truncated [ 54.050090][ T7326] loop3: p3 start 33572980 is beyond EOD, truncated [ 54.052825][ T7326] loop3: p5 size 100663296 extends beyond EOD, truncated [ 54.063249][ T6088] loop3: p1 p2 < > p3 p4 < p5 > [ 54.063309][ T6088] loop3: partition table partially beyond EOD, truncated [ 54.063429][ T6088] loop3: p1 size 100663296 extends beyond EOD, truncated [ 54.069153][ T6088] loop3: p2 start 591104 is beyond EOD, truncated [ 54.069237][ T6088] loop3: p3 start 33572980 is beyond EOD, truncated [ 54.076942][ T6088] loop3: p5 size 100663296 extends beyond EOD, truncated [ 54.126059][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 54.147424][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 54.248092][ T7356] netlink: 'syz.1.323': attribute type 10 has an invalid length. [ 54.318824][ T7361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.325'. [ 54.359637][ T31] kauditd_printk_skb: 82 callbacks suppressed [ 54.359704][ T31] audit: type=1326 audit(54.110:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 54.359742][ T31] audit: type=1326 audit(54.110:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 54.359774][ T31] audit: type=1326 audit(54.110:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 54.359804][ T31] audit: type=1326 audit(54.110:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 54.359835][ T31] audit: type=1326 audit(54.110:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 54.359865][ T31] audit: type=1326 audit(54.110:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff9615b728 code=0x7ffc0000 [ 54.359895][ T31] audit: type=1326 audit(54.110:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9615b75c code=0x7ffc0000 [ 54.372201][ T6490] udevd[6490]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 54.375640][ T31] audit: type=1326 audit(54.130:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff96159df0 code=0x7ffc0000 [ 54.390236][ T31] audit: type=1326 audit(54.140:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff9615b7cc code=0x7ffc0000 [ 54.390797][ T31] audit: type=1326 audit(54.140:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff96159c54 code=0x7ffc0000 [ 54.393322][ T7367] loop2: detected capacity change from 0 to 2048 [ 54.410795][ T6489] udevd[6489]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 54.430898][ T6488] udevd[6488]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 54.459088][ T7370] udevd[7370]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 54.463613][ T6489] udevd[6489]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 54.480063][ T6465] udevd[6465]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 54.490499][ T6488] udevd[6488]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 54.515967][ T6489] udevd[6489]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 54.528702][ T6490] udevd[6490]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 54.565211][ T7372] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.643632][ T7372] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.724026][ T7372] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.729315][ T7384] [ 54.729953][ T7384] ====================================================== [ 54.731758][ T7384] WARNING: possible circular locking dependency detected [ 54.733585][ T7384] 6.15.0-rc2-syzkaller-gc72692105976 #0 Not tainted [ 54.735266][ T7384] ------------------------------------------------------ [ 54.737060][ T7384] syz.1.332/7384 is trying to acquire lock: [ 54.738586][ T7384] ffff0000c5988aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x48/0xa7c [ 54.741366][ T7384] [ 54.741366][ T7384] but task is already holding lock: [ 54.743265][ T7384] ffff0000c5988258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x60/0x9f8 [ 54.745609][ T7384] [ 54.745609][ T7384] which lock already depends on the new lock. [ 54.745609][ T7384] [ 54.748334][ T7384] [ 54.748334][ T7384] the existing dependency chain (in reverse order) is: [ 54.750629][ T7384] [ 54.750629][ T7384] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}: [ 54.752656][ T7384] sock_set_reuseaddr+0x58/0x154 [ 54.754106][ T7384] siw_create_listen+0x164/0xe50 [ 54.755530][ T7384] iw_cm_listen+0x14c/0x204 [ 54.756832][ T7384] rdma_listen+0x8d0/0xb64 [ 54.758093][ T7384] cma_listen_on_dev+0x31c/0x648 [ 54.759517][ T7384] cma_add_one+0x5ec/0xab4 [ 54.760741][ T7384] add_client_context+0x45c/0x7d0 [ 54.762155][ T7384] enable_device_and_get+0x1a8/0x3e8 [ 54.763663][ T7384] ib_register_device+0xe84/0x110c [ 54.765126][ T7384] siw_newlink+0x77c/0xb84 [ 54.766287][ T7384] nldev_newlink+0x484/0x558 [ 54.767584][ T7384] rdma_nl_rcv+0x5c4/0x858 [ 54.768855][ T7384] netlink_unicast+0x668/0x8a4 [ 54.770174][ T7384] netlink_sendmsg+0x708/0xaa4 [ 54.771543][ T7384] ____sys_sendmsg+0x578/0x890 [ 54.772899][ T7384] __sys_sendmsg+0x238/0x304 [ 54.774258][ T7384] __arm64_sys_sendmsg+0x80/0x94 [ 54.775628][ T7384] invoke_syscall+0x98/0x2b8 [ 54.776973][ T7384] el0_svc_common+0x130/0x23c [ 54.778322][ T7384] do_el0_svc+0x48/0x58 [ 54.779501][ T7384] el0_svc+0x54/0x168 [ 54.780662][ T7384] el0t_64_sync_handler+0x84/0x108 [ 54.782020][ T7384] el0t_64_sync+0x198/0x19c [ 54.783300][ T7384] [ 54.783300][ T7384] -> #2 (lock#7){+.+.}-{4:4}: [ 54.785030][ T7384] __mutex_lock_common+0x1f0/0x2604 [ 54.786521][ T7384] mutex_lock_nested+0x2c/0x38 [ 54.787885][ T7384] cma_init+0x2c/0x158 [ 54.789084][ T7384] do_one_initcall+0x254/0xaa4 [ 54.790500][ T7384] do_initcall_level+0x154/0x214 [ 54.791897][ T7384] do_initcalls+0x84/0xf4 [ 54.793114][ T7384] do_basic_setup+0x8c/0xa0 [ 54.794411][ T7384] kernel_init_freeable+0x320/0x474 [ 54.795903][ T7384] kernel_init+0x24/0x2a0 [ 54.797133][ T7384] ret_from_fork+0x10/0x20 [ 54.798440][ T7384] [ 54.798440][ T7384] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 54.800310][ T7384] __mutex_lock_common+0x1f0/0x2604 [ 54.801764][ T7384] mutex_lock_nested+0x2c/0x38 [ 54.803121][ T7384] rtnl_lock+0x20/0x2c [ 54.804310][ T7384] start_sync_thread+0xe0/0x24bc [ 54.805609][ T7384] do_ip_vs_set_ctl+0x558/0xd84 [ 54.807004][ T7384] nf_setsockopt+0x270/0x290 [ 54.808335][ T7384] ip_setsockopt+0x118/0x128 [ 54.809537][ T7384] tcp_setsockopt+0xcc/0xe8 [ 54.810753][ T7384] sock_common_setsockopt+0xb0/0xcc [ 54.812288][ T7384] smc_setsockopt+0x1f8/0xd0c [ 54.813615][ T7384] do_sock_setsockopt+0x2a0/0x4e0 [ 54.815076][ T7384] __arm64_sys_setsockopt+0x170/0x1e0 [ 54.816618][ T7384] invoke_syscall+0x98/0x2b8 [ 54.817935][ T7384] el0_svc_common+0x130/0x23c [ 54.819281][ T7384] do_el0_svc+0x48/0x58 [ 54.820477][ T7384] el0_svc+0x54/0x168 [ 54.821610][ T7384] el0t_64_sync_handler+0x84/0x108 [ 54.823060][ T7384] el0t_64_sync+0x198/0x19c [ 54.824391][ T7384] [ 54.824391][ T7384] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 54.826657][ T7384] __lock_acquire+0x17b8/0x32c4 [ 54.828063][ T7384] lock_acquire+0x150/0x2e8 [ 54.829350][ T7384] __mutex_lock_common+0x1f0/0x2604 [ 54.830807][ T7384] mutex_lock_nested+0x2c/0x38 [ 54.832136][ T7384] smc_switch_to_fallback+0x48/0xa7c [ 54.833646][ T7384] smc_sendmsg+0xfc/0x9f8 [ 54.834893][ T7384] __sys_sendto+0x360/0x4d8 [ 54.836185][ T7384] __arm64_sys_sendto+0xd8/0xf8 [ 54.837562][ T7384] invoke_syscall+0x98/0x2b8 [ 54.838912][ T7384] el0_svc_common+0x130/0x23c [ 54.840209][ T7384] do_el0_svc+0x48/0x58 [ 54.841426][ T7384] el0_svc+0x54/0x168 [ 54.842559][ T7384] el0t_64_sync_handler+0x84/0x108 [ 54.844002][ T7384] el0t_64_sync+0x198/0x19c [ 54.845397][ T7384] [ 54.845397][ T7384] other info that might help us debug this: [ 54.845397][ T7384] [ 54.847945][ T7384] Chain exists of: [ 54.847945][ T7384] &smc->clcsock_release_lock --> lock#7 --> sk_lock-AF_INET [ 54.847945][ T7384] [ 54.851357][ T7384] Possible unsafe locking scenario: [ 54.851357][ T7384] [ 54.853232][ T7384] CPU0 CPU1 [ 54.854475][ T7384] ---- ---- [ 54.855851][ T7384] lock(sk_lock-AF_INET); [ 54.856973][ T7384] lock(lock#7); [ 54.858616][ T7384] lock(sk_lock-AF_INET); [ 54.860481][ T7384] lock(&smc->clcsock_release_lock); [ 54.861856][ T7384] [ 54.861856][ T7384] *** DEADLOCK *** [ 54.861856][ T7384] [ 54.863970][ T7384] 1 lock held by syz.1.332/7384: [ 54.865251][ T7384] #0: ffff0000c5988258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x60/0x9f8 [ 54.867627][ T7384] [ 54.867627][ T7384] stack backtrace: [ 54.869190][ T7384] CPU: 1 UID: 0 PID: 7384 Comm: syz.1.332 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 54.871834][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.874417][ T7384] Call trace: [ 54.875253][ T7384] show_stack+0x2c/0x3c (C) [ 54.876411][ T7384] dump_stack_lvl+0xe4/0x150 [ 54.877600][ T7384] dump_stack+0x1c/0x1028 [ 54.878647][ T7384] print_circular_bug+0x32c/0x334 [ 54.879995][ T7384] check_noncircular+0x15c/0x178 [ 54.881297][ T7384] __lock_acquire+0x17b8/0x32c4 [ 54.882542][ T7384] lock_acquire+0x150/0x2e8 [ 54.883694][ T7384] __mutex_lock_common+0x1f0/0x2604 [ 54.885060][ T7384] mutex_lock_nested+0x2c/0x38 [ 54.886301][ T7384] smc_switch_to_fallback+0x48/0xa7c [ 54.887677][ T7384] smc_sendmsg+0xfc/0x9f8 [ 54.888870][ T7384] __sys_sendto+0x360/0x4d8 [ 54.890014][ T7384] __arm64_sys_sendto+0xd8/0xf8 [ 54.891195][ T7384] invoke_syscall+0x98/0x2b8 [ 54.892292][ T7384] el0_svc_common+0x130/0x23c [ 54.893480][ T7384] do_el0_svc+0x48/0x58 [ 54.894548][ T7384] el0_svc+0x54/0x168 [ 54.895574][ T7384] el0t_64_sync_handler+0x84/0x108 [ 54.896921][ T7384] el0t_64_sync+0x198/0x19c [ 55.012719][ T7372] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.124771][ T7372] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.129089][ T7372] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.131094][ T7372] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.135055][ T7372] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.722197][ T2382] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.723140][ T2382] ieee802154 phy1 wpan1: encryption failed: -22