last executing test programs: 7.593200094s ago: executing program 4 (id=407): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, 0x0, 0x0, 0x4}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r4, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)={0x0, 0xf, 0x5, "428a7482a3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000001f80)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x8000, 0x6, 0x4, {0xb, @pix={0x0, 0xfffffffd, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x2}}}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x2a}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xb8, "cd7c500e77fe14495750b4c09b4394c5b505ab8430d1b53ea80ad31c3d52887d9fe518575ac3ac37188eee3009a778d30452dccb6c67857635c404a8c44ad3195c80c31925e4ca4fbb947a0edb06518591c67ae73cd47f1efa4dc63c73ee674e33ffffa01934e5d5ac7f2dbf96eb86de2b8372d10052de27bd4e6b7cb220fa481936967cb59359f38730ebc1462656cf685e26345bd70ea325e78d913a99d1c2560678cb2dbb58034d317d72364bf93c6641803b97925ebf"}, 0x0}) 5.204967526s ago: executing program 1 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x40840) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) init_module(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) syz_open_procfs(0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000180)=""/166, 0xa6}], 0x1, 0xfffffff7, 0xc84d) 4.156466039s ago: executing program 4 (id=463): r0 = socket(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) open_tree(0xffffffffffffff9c, 0x0, 0x801) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8901, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) 3.978462543s ago: executing program 1 (id=466): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], 0x0, 0x200000002700, 0x1, 0x1}}, 0x40) 3.914774694s ago: executing program 1 (id=468): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/39, 0x27, 0x8) 3.854816126s ago: executing program 1 (id=470): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 3.806383887s ago: executing program 0 (id=471): ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x10001, 0x4, 0xc, 0x5, 0xfffffffa, 0xfffffff7}]}) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000200)={r5, r6, r7, 0x0, 0x80000003, 0x0, 0xffffffff, 0x1, 0x5, 0xe, 0xc, 0x10031e}) sendto$inet6(r3, 0x0, 0x0, 0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x6c, 0x7, 0x1, 0x0, "67fdaf0a02bf747e724a0a0840c24f267b385971b23c13ceba5255714c99c80aee245dd2ccde3cf139a80896dfdfab68f20ecd325b2dec6900652139647964f8e245ab3d0bc3d251c447f59307b6b3561e044c83e7745e302e6827ea104671a2b5cb0558f7c2a9ce"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb7a27fa6451278db}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4040840}, 0x24040840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000002118000180140002006970766c616e31000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f00000000c0)={@hyper}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8a100, 0x0) 3.730731408s ago: executing program 0 (id=473): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, 0x0, 0x0, 0x4}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r4, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)={0x0, 0xf, 0x5, "428a7482a3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000001f80)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x8000, 0x6, 0x4, {0xb, @pix={0x0, 0xfffffffd, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x2}}}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x2a}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xb8, "cd7c500e77fe14495750b4c09b4394c5b505ab8430d1b53ea80ad31c3d52887d9fe518575ac3ac37188eee3009a778d30452dccb6c67857635c404a8c44ad3195c80c31925e4ca4fbb947a0edb06518591c67ae73cd47f1efa4dc63c73ee674e33ffffa01934e5d5ac7f2dbf96eb86de2b8372d10052de27bd4e6b7cb220fa481936967cb59359f38730ebc1462656cf685e26345bd70ea325e78d913a99d1c2560678cb2dbb58034d317d72364bf93c6641803b97925ebf"}, 0x0}) 1.759702041s ago: executing program 4 (id=475): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r4, &(0x7f0000001d40)=[{&(0x7f0000000380)=""/217, 0xd9}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r5, &(0x7f0000000200)="89", 0xffe3) sendto$inet(r3, 0x0, 0x0, 0x40, &(0x7f0000000440)={0x2, 0x4e21, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) 1.681377103s ago: executing program 1 (id=476): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) poll(&(0x7f0000000080)=[{r0, 0x202}], 0x1, 0x3ff) 1.531583546s ago: executing program 3 (id=478): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-:__group/myevent ', 0x12) 1.441738598s ago: executing program 3 (id=479): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={0x0, 0x0, 0x4a}, 0x0, 0x0, &(0x7f0000000c80)=""/74) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x194, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x168, 0x2, [@TCA_BPF_ACT={0x164, 0x1, [@m_bpf={0xf4, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0xca, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x40, 0x8, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) r4 = socket(0x1d, 0x6, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x2, {0x0, 0x1, 0x3}, 0x1}, 0x18) lstat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)=@polexpire={0x1d8, 0x1b, 0x400, 0x70bd2a, 0x25dfdbfd, {{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4e22, 0x3acd, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0x33, r5, r6}, {0x8, 0x7, 0x6, 0x3, 0x3, 0x2, 0xb, 0xc440}, {0x4, 0x4, 0x8001, 0xfffffffffffffffb}, 0x4, 0x6e6bbd, 0x2, 0x1, 0x0, 0x3}, 0x24}, [@sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x82, 0x14, {{'blake2b-256-generic\x00'}, 0x1b0, 0xa0, "776c77136f386e473e28b5a8931044170ab1e08691928b9c7443fcb6501ffb733a75501908a47edefe5ed78c1717ff7d6e564d920331"}}, @proto={0x5, 0x19, 0x33}, @algo_crypt={0x48, 0x2, {{'xts-serpent-sse2\x00'}}}, @policy_type={0xa, 0x10, {0x1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x41}}, @coaddr={0x14, 0xe, @in6=@mcast1}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x82, &(0x7f0000000280)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000300)) 1.379564589s ago: executing program 2 (id=480): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/39, 0x27, 0x8) 1.277101822s ago: executing program 3 (id=481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) readv(r4, &(0x7f0000001d40)=[{&(0x7f0000000380)=""/217, 0xd9}], 0x1) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r5, &(0x7f0000000200)="89", 0xffe3) sendto$inet(r3, 0x0, 0x0, 0x40, &(0x7f0000000440)={0x2, 0x4e21, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc000) 1.265269122s ago: executing program 2 (id=482): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x6, @local, 0x2}], 0x17) bind$llc(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0xf, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) 1.220452453s ago: executing program 2 (id=483): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x66, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x35, 0x30, 0x35, 0x39, 0x34, 0x30, 0x33, 0x64, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x37]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x8, 0x31, 0x30, 0x63, 0x34, 0x30, 0x52, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "fd1022334433445566778899aabbccddeeff00112233442233445566778899aabbccddeeff0000000000000000000000000000000000000000fa00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x35, 0x30, 0x64, 0x38, 0x30, 0x30, 0x30, 0x32, 0x66, 0x30, 0x6f, 0x30, 0x31, 0x30, 0x30, 0x3d]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00116233445566778899aabbccdceeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x38, 0x35, 0x30, 0x30, 0x39, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x35, 0xc, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x31, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000440)='2', 0x1, r0) 1.178258994s ago: executing program 4 (id=484): r0 = socket(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) open_tree(0xffffffffffffff9c, 0x0, 0x801) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) 1.159366334s ago: executing program 2 (id=485): r0 = socket(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) open_tree(0xffffffffffffff9c, 0x0, 0x801) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) 859.501781ms ago: executing program 1 (id=486): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x412}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 687.115275ms ago: executing program 0 (id=487): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1e4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_u32={{0x8}, {0x1a8, 0x2, [@TCA_U32_ACT={0x1a4, 0x7, [@m_ife={0x138, 0x1a, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @random="dad6d78a2b85"}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x3, 0x2, 0x2}}}]}, {0xd1, 0x6, "59b69513e97e708c0dc836f724775dbb59b2f21e013426759c817a1bd718849baa0b9d47756ce75b26f113f5bfe81ebbf0e9402c154843e8d984f48c206498de65a138cb2d060aa964127c922df85b876a47f2b35d8bc8e3e0ce3e453511ffd2a310dcb2eae4282c44146c584cc43344d5f1ea9b4df4c64d84ecff6471260be3505bc473c79bf28b98681cf5a02aa5bc1b6f0262ae027793ba124918980b15c3553c551216ea72564c82e90de44c00d59ee2172f0b1b766f5a2ab4a1acdfb8437a423a10e5be87bc5ef9d696fa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x68, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x3d, 0x6, "9528bdfc9d60e78490c2489a54eeb7d4e02a3e269f62d7006763790df25751bbdf32aa85646a039ca3780aa3e4509014382bfde5b07f0576b5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 562.384387ms ago: executing program 0 (id=488): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={0x0, 0x0, 0x4a}, 0x0, 0x0, &(0x7f0000000c80)=""/74) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) r4 = socket(0x1d, 0x6, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x2, {0x0, 0x1, 0x3}, 0x1}, 0x18) lstat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)=@polexpire={0x14c, 0x1b, 0x400, 0x70bd2a, 0x25dfdbfd, {{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4e22, 0x3acd, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0x33, r5, r6}, {0x8, 0x7, 0x6, 0x3, 0x3, 0x2, 0xb, 0xc440}, {0x4, 0x4, 0x8001, 0xfffffffffffffffb}, 0x4, 0x6e6bbd, 0x2, 0x1, 0x0, 0x3}, 0x24}, [@sa_dir={0x5, 0x21, 0x2}, @proto={0x5, 0x19, 0x33}, @algo_crypt={0x48, 0x2, {{'xts-serpent-sse2\x00'}}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x41}}, @coaddr={0x14, 0xe, @in6=@mcast1}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xc2a02) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0xc1205531, &(0x7f0000002680)=""/4078) unshare(0x2c020400) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xffffffffffffffe5) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000300)) 479.188329ms ago: executing program 0 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x100000, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000200)=0x101080, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x0, r2}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0xfdffffff}, 0x10) 412.129611ms ago: executing program 0 (id=490): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, 0x0, &(0x7f0000001580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde61}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x19059) 382.947831ms ago: executing program 3 (id=491): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={0x0, 0x0, 0x4a}, 0x0, 0x0, &(0x7f0000000c80)=""/74) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x194, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x168, 0x2, [@TCA_BPF_ACT={0x164, 0x1, [@m_bpf={0xf4, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0xca, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x40, 0x8, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) r3 = socket(0x1d, 0x6, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x0, 0x1, 0x3}, 0x1}, 0x18) lstat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)=@polexpire={0x1d8, 0x1b, 0x400, 0x70bd2a, 0x25dfdbfd, {{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4e22, 0x3acd, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0x33, r4, r5}, {0x8, 0x7, 0x6, 0x3, 0x3, 0x2, 0xb, 0xc440}, {0x4, 0x4, 0x8001, 0xfffffffffffffffb}, 0x4, 0x6e6bbd, 0x2, 0x1, 0x0, 0x3}, 0x24}, [@sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x82, 0x14, {{'blake2b-256-generic\x00'}, 0x1b0, 0xa0, "776c77136f386e473e28b5a8931044170ab1e08691928b9c7443fcb6501ffb733a75501908a47edefe5ed78c1717ff7d6e564d920331"}}, @proto={0x5, 0x19, 0x33}, @algo_crypt={0x48, 0x2, {{'xts-serpent-sse2\x00'}}}, @policy_type={0xa, 0x10, {0x1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x41}}, @coaddr={0x14, 0xe, @in6=@mcast1}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x82, &(0x7f0000000280)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000300)) 289.406434ms ago: executing program 4 (id=492): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{{0x2, 0x2, @remote}}]}, 0x110) pread64(r0, &(0x7f0000000080)=""/39, 0x27, 0x8) 164.771296ms ago: executing program 3 (id=493): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x6, @local, 0x2}], 0x17) bind$llc(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0xf, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) 138.795237ms ago: executing program 4 (id=494): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r4, &(0x7f0000001d40)=[{&(0x7f0000000380)=""/217, 0xd9}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r5, &(0x7f0000000200)="89", 0xffe3) sendto$inet(r3, 0x0, 0x0, 0x40, &(0x7f0000000440)={0x2, 0x4e21, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) 109.875337ms ago: executing program 2 (id=495): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x66, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x35, 0x30, 0x35, 0x39, 0x34, 0x30, 0x33, 0x64, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x37]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x8, 0x31, 0x30, 0x63, 0x34, 0x30, 0x52, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "fd1022334433445566778899aabbccddeeff00112233442233445566778899aabbccddeeff0000000000000000000000000000000000000000fa00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x35, 0x30, 0x64, 0x38, 0x30, 0x30, 0x30, 0x32, 0x66, 0x30, 0x6f, 0x30, 0x31, 0x30, 0x30, 0x3d]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00116233445566778899aabbccdceeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x38, 0x35, 0x30, 0x30, 0x39, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x35, 0xc, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x31, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000440)='2', 0x1, r0) 36.418909ms ago: executing program 2 (id=496): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='atkbd', 0x5) 0s ago: executing program 3 (id=497): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, 0x0, 0x0, 0x4}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r4, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)={0x0, 0xf, 0x5, "428a7482a3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000001f80)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x8000, 0x6, 0x4, {0xb, @pix={0x0, 0xfffffffd, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x2}}}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x2a}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xb8, "cd7c500e77fe14495750b4c09b4394c5b505ab8430d1b53ea80ad31c3d52887d9fe518575ac3ac37188eee3009a778d30452dccb6c67857635c404a8c44ad3195c80c31925e4ca4fbb947a0edb06518591c67ae73cd47f1efa4dc63c73ee674e33ffffa01934e5d5ac7f2dbf96eb86de2b8372d10052de27bd4e6b7cb220fa481936967cb59359f38730ebc1462656cf685e26345bd70ea325e78d913a99d1c2560678cb2dbb58034d317d72364bf93c6641803b97925ebf"}, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 57.260542][ T4172] cgroup: Unknown subsys name 'net' [ 57.365367][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.582896][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.958566][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 60.069380][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 60.082086][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 60.115762][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 60.125854][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.133349][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.141386][ T4196] device bridge_slave_0 entered promiscuous mode [ 60.155833][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.163295][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.171025][ T4196] device bridge_slave_1 entered promiscuous mode [ 60.179356][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.237168][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.273612][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.347132][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.354532][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.363054][ T4185] device bridge_slave_0 entered promiscuous mode [ 60.370944][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.378161][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.385843][ T4194] device bridge_slave_0 entered promiscuous mode [ 60.396176][ T4196] team0: Port device team_slave_0 added [ 60.413549][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.420771][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.428894][ T4193] device bridge_slave_0 entered promiscuous mode [ 60.436075][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.443264][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.451450][ T4185] device bridge_slave_1 entered promiscuous mode [ 60.458503][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.465562][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.473700][ T4194] device bridge_slave_1 entered promiscuous mode [ 60.481613][ T4196] team0: Port device team_slave_1 added [ 60.493984][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.501198][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.509573][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.516715][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.524010][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.531838][ T4193] device bridge_slave_1 entered promiscuous mode [ 60.560730][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.568047][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.575688][ T4184] device bridge_slave_1 entered promiscuous mode [ 60.600573][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.608358][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.634860][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.648411][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.666888][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.678089][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.690022][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.700201][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.707157][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.733375][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.745870][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.769135][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.793689][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.816413][ T4193] team0: Port device team_slave_0 added [ 60.824599][ T4194] team0: Port device team_slave_0 added [ 60.832315][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.849880][ T4193] team0: Port device team_slave_1 added [ 60.858200][ T4185] team0: Port device team_slave_0 added [ 60.865845][ T4185] team0: Port device team_slave_1 added [ 60.873860][ T4194] team0: Port device team_slave_1 added [ 60.927070][ T4184] team0: Port device team_slave_0 added [ 60.934305][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.941345][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.967537][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.984552][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.991622][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.017932][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.036587][ T4184] team0: Port device team_slave_1 added [ 61.042755][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.049926][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.076562][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.096085][ T4196] device hsr_slave_0 entered promiscuous mode [ 61.103654][ T4196] device hsr_slave_1 entered promiscuous mode [ 61.125532][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.132546][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.158942][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.176230][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.183495][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.209722][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.222428][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.229644][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.256177][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.305543][ T4193] device hsr_slave_0 entered promiscuous mode [ 61.313503][ T4193] device hsr_slave_1 entered promiscuous mode [ 61.320336][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.328517][ T4193] Cannot create hsr debugfs directory [ 61.337722][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.344673][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.370809][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.410509][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.417589][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.443694][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.457119][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.464572][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.471191][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.479065][ T4185] Cannot create hsr debugfs directory [ 61.527542][ T4194] device hsr_slave_0 entered promiscuous mode [ 61.534200][ T4194] device hsr_slave_1 entered promiscuous mode [ 61.541364][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.549343][ T4194] Cannot create hsr debugfs directory [ 61.566605][ T4184] device hsr_slave_0 entered promiscuous mode [ 61.573345][ T4184] device hsr_slave_1 entered promiscuous mode [ 61.580098][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.588040][ T4184] Cannot create hsr debugfs directory [ 61.718254][ T4186] Bluetooth: hci2: command 0x0409 tx timeout [ 61.727966][ T4186] Bluetooth: hci3: command 0x0409 tx timeout [ 61.740469][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 61.755347][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 61.797617][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 61.874337][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.885799][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.905171][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.914099][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.951531][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.960749][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.977798][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.986584][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.064179][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.073066][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.089866][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.103550][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.113588][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.134474][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.144035][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.154067][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.190995][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.208608][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.218338][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.227341][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.234661][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.243410][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.252699][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.262728][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.269841][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.281993][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.290396][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.301891][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.335109][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.347263][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.356527][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.379494][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.389437][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.400072][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.411857][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.420636][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.429771][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.444308][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.465423][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.484170][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.492095][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.500134][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.508021][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.516857][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.525928][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.534590][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.543631][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.552110][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.579520][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.596776][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.607828][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.616310][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.623439][ T4211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.632335][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.641341][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.650340][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.657445][ T4211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.689705][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.704918][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.716396][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.734102][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.745272][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.753966][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.763002][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.772045][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.780905][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.789375][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.798212][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.806513][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.830751][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.864816][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.886511][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.923089][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.934857][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.947708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.956471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.965310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.973152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.992962][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.009519][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.016418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.025841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.047220][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.056900][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.065482][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.072601][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.081785][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.090714][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.103231][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.110349][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.118386][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.144158][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.152215][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.166568][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.175803][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.182913][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.191554][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.200394][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.214626][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.221906][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.229744][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.237750][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.245444][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.264914][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.274015][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.281912][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.295460][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.303457][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.312331][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.326693][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.345414][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.354723][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.365063][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.375637][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.387048][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.396238][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.406503][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.433714][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.442568][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.451698][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.461574][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.468907][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.476483][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.485569][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.494411][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.501517][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.509248][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.519099][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.527894][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.536371][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.545052][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.557224][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.566005][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.583348][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.595941][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.609360][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.621749][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.631413][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.640865][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.649716][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.659544][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.668425][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.678195][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.686563][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.708043][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.716963][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.726406][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.735436][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.751980][ T4196] device veth0_vlan entered promiscuous mode [ 63.771575][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.792266][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.797631][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 63.800362][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.805416][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 63.826635][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.835029][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 63.836302][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.846264][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 63.850212][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.863634][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.872228][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.881774][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.889461][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 63.889687][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.906965][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.919214][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.930017][ T4196] device veth1_vlan entered promiscuous mode [ 63.939016][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.947060][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.956589][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.976884][ T4193] device veth0_vlan entered promiscuous mode [ 64.001008][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.011391][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.029374][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.049869][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.068552][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.098312][ T4193] device veth1_vlan entered promiscuous mode [ 64.113593][ T4196] device veth0_macvtap entered promiscuous mode [ 64.124720][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.133531][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.143147][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.170748][ T4196] device veth1_macvtap entered promiscuous mode [ 64.191427][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.208761][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.216970][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.230218][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.238977][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.249921][ T4193] device veth0_macvtap entered promiscuous mode [ 64.262359][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.273567][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.282675][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.292193][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.312350][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.320286][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.341301][ T4193] device veth1_macvtap entered promiscuous mode [ 64.353391][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.369272][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.376328][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.390109][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.400660][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.408753][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.418021][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.426777][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.436209][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.450754][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.474509][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.485537][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.496921][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.507146][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.529694][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.539716][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.548832][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.563264][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.574027][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.582832][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.594233][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.605066][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.616678][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.627686][ T4194] device veth0_vlan entered promiscuous mode [ 64.651148][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.659264][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.670981][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.682392][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.693038][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.702367][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.711462][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.720647][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.733089][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.742095][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.751246][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.760666][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.782321][ T4194] device veth1_vlan entered promiscuous mode [ 64.795647][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.804793][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.814289][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.860464][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.869619][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.879087][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.908213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.916538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.956894][ T4185] device veth0_vlan entered promiscuous mode [ 64.969646][ T4184] device veth0_vlan entered promiscuous mode [ 64.981435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.989500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.997220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.006866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.022299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.031360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.046496][ T4185] device veth1_vlan entered promiscuous mode [ 65.079808][ T4194] device veth0_macvtap entered promiscuous mode [ 65.087121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.096511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.105947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.114677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.134957][ T4184] device veth1_vlan entered promiscuous mode [ 65.151723][ T4194] device veth1_macvtap entered promiscuous mode [ 65.162652][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.178412][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.210903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.220482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.229130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.237063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.245746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.255290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.264434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.274363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.283913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.305264][ T4185] device veth0_macvtap entered promiscuous mode [ 65.323249][ T4184] device veth0_macvtap entered promiscuous mode [ 65.331904][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.348751][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.360070][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.361834][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.377340][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.388406][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.400912][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.412069][ T4185] device veth1_macvtap entered promiscuous mode [ 65.423614][ T4184] device veth1_macvtap entered promiscuous mode [ 65.435718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.444190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.452674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.461033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.469972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.479717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.490493][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.490511][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.507482][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.514362][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.526020][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.536734][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.548646][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.565068][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.576265][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.586187][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.596972][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.607100][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.617944][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.629507][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.650927][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.658990][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.667771][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.676415][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.685287][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.700110][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.709235][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.718776][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.728125][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.740758][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.751639][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.761811][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.772522][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.782489][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.792942][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.804231][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.818102][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.826941][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.836027][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.844932][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.872587][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.877957][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 65.881493][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 65.900135][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.911686][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 65.920730][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 65.931250][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.942302][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.945584][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.961029][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.965455][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 65.972496][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.985158][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.995120][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.005663][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.015769][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.026520][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.038893][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.051603][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.062593][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.072552][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.083129][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.093322][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.103954][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.113808][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.125161][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.136036][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.149001][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.162580][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.171750][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.185816][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.195845][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.225125][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.236260][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.249748][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.260828][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.459399][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.468345][ T4265] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.475638][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.507053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.511780][ T4267] Zero length message leads to an empty skb [ 66.533561][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.550225][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.560423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.560454][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.592819][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.627892][ T4211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.635745][ T4211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.647492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.656944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.722449][ T4211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.749925][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.771108][ T4211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.814866][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.830387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.846058][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.500630][ T4314] process 'syz.4.20' launched './file1' with NULL argv: empty string added [ 68.209623][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 68.216863][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 68.223322][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 68.229637][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 68.235830][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 69.414323][ T4366] vivid-000: kernel_thread() failed [ 70.253537][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 71.402739][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.409608][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.446502][ T4438] loop0: detected capacity change from 0 to 512 [ 71.547220][ T4438] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.592911][ T4438] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.614299][ T4438] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 71.627693][ T4438] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.646263][ T4438] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 71.653644][ T4438] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.60: couldn't read orphan inode 26 (err -116) [ 71.675844][ T4438] EXT4-fs (loop0): Remounting filesystem read-only [ 71.682546][ T4438] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 72.716812][ T4475] loop2: detected capacity change from 0 to 512 [ 72.898246][ T4475] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.922879][ T4475] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.954633][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.032185][ T4475] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 18: comm syz.2.73: lblock 23 mapped to illegal pblock 18 (length 1) [ 73.836154][ T4525] netlink: 14 bytes leftover after parsing attributes in process `syz.3.87'. [ 73.972169][ T4525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.083377][ T4514] loop3: detected capacity change from 0 to 128 [ 74.083660][ T4525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.141393][ T4525] bond0 (unregistering): Released all slaves [ 74.225506][ T4514] EXT4-fs (loop3): Ignoring removed bh option [ 74.305669][ T4514] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 74.354059][ T4553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.101'. [ 74.376902][ T4514] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.506662][ T4558] loop4: detected capacity change from 0 to 512 [ 74.563825][ T4558] ======================================================= [ 74.563825][ T4558] WARNING: The mand mount option has been deprecated and [ 74.563825][ T4558] and is ignored by this kernel. Remove the mand [ 74.563825][ T4558] option from the mount to silence this warning. [ 74.563825][ T4558] ======================================================= [ 77.561472][ T4700] netlink: 14 bytes leftover after parsing attributes in process `syz.3.152'. [ 77.577663][ T4700] loop3: detected capacity change from 0 to 128 [ 77.621604][ T4700] EXT4-fs (loop3): Ignoring removed bh option [ 77.648837][ T4700] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 77.661929][ T4700] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.912967][ T4712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.156'. [ 77.927240][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.935200][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.843829][ T4717] loop3: detected capacity change from 0 to 1024 [ 78.901573][ T4717] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.912424][ T4717] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.930905][ T4717] EXT4-fs (loop3): can't enable nombcache during remount [ 79.825356][ T4676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.355950][ T4751] loop2: detected capacity change from 0 to 512 [ 80.535737][ T4762] netlink: 80 bytes leftover after parsing attributes in process `syz.4.174'. [ 80.877115][ T4211] Bluetooth: hci5: Frame reassembly failed (-84) [ 80.963197][ T4783] loop1: detected capacity change from 0 to 512 [ 81.114835][ T4783] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 81.127656][ T4783] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.902423][ T4833] loop1: detected capacity change from 0 to 512 [ 82.023456][ T4833] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.198: bg 0: block 5: invalid block bitmap [ 82.046720][ T4833] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 82.056644][ T4833] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.198: invalid indirect mapped block 3 (level 2) [ 82.082689][ T4833] EXT4-fs (loop1): 1 orphan inode deleted [ 82.088761][ T4833] EXT4-fs (loop1): 1 truncate cleaned up [ 82.094636][ T4833] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.917491][ T4231] Bluetooth: hci5: command 0x1003 tx timeout [ 83.023481][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 84.144081][ T4920] capability: warning: `syz.1.227' uses 32-bit capabilities (legacy support in use) [ 84.156854][ T4920] program syz.1.227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.077458][ T4231] Bluetooth: hci5: command 0x1001 tx timeout [ 85.083565][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 85.285279][ T4976] loop3: detected capacity change from 0 to 1024 [ 85.336202][ T4976] EXT4-fs (loop3): Ignoring removed nobh option [ 85.355052][ T4976] EXT4-fs (loop3): Ignoring removed bh option [ 85.367516][ T4976] EXT4-fs (loop3): Ignoring removed nobh option [ 85.402737][ T4976] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,nombcache,mb_optimize_scan=0x0000000000000001,nobh,. Quota mode: none. [ 85.529947][ T4990] syz.1.253 uses obsolete (PF_INET,SOCK_PACKET) [ 86.188835][ T5022] syz.4.265 (5022) used greatest stack depth: 20816 bytes left [ 86.242494][ T5030] device syzkaller0 entered promiscuous mode [ 86.760608][ T1108] cfg80211: failed to load regulatory.db [ 87.052524][ T5068] hsr0 speed is unknown, defaulting to 1000 [ 87.059706][ T5068] hsr0 speed is unknown, defaulting to 1000 [ 87.067300][ T5068] hsr0 speed is unknown, defaulting to 1000 [ 87.077437][ T5068] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.092483][ T5068] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.129271][ T5068] hsr0 speed is unknown, defaulting to 1000 [ 87.138253][ T5068] hsr0 speed is unknown, defaulting to 1000 [ 87.145522][ T5068] hsr0 speed is unknown, defaulting to 1000 [ 87.153823][ T5068] hsr0 speed is unknown, defaulting to 1000 [ 87.157714][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 87.169569][ T5068] hsr0 speed is unknown, defaulting to 1000 [ 88.032686][ T5110] md/raid10:md0: not clean -- starting background reconstruction [ 88.041369][ T5110] md/raid10:md0: active with 1 out of 2 devices [ 88.051182][ T5110] md0: detected capacity change from 0 to 2048 [ 88.082681][ T5114] md: resync of RAID array md0 [ 88.098556][ T5114] md: md0: resync done. [ 88.137853][ T5115] md: recovery of RAID array md0 [ 88.162021][ T5115] md: md0: recovery done. [ 88.299255][ T5124] loop3: detected capacity change from 0 to 512 [ 88.386015][ T5124] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.427724][ T5124] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.278060][ T5181] autofs4:pid:5181:autofs_fill_super: called with bogus options [ 89.420388][ T5185] TC_ACT_REPEAT abuse ? [ 89.854396][ T5210] loop3: detected capacity change from 0 to 128 [ 89.952573][ T5210] attempt to access beyond end of device [ 89.952573][ T5210] loop3: rw=2049, want=140, limit=128 [ 90.038018][ T5219] attempt to access beyond end of device [ 90.038018][ T5219] loop3: rw=2049, want=142, limit=128 [ 90.070147][ T5219] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 90.110576][ T5219] attempt to access beyond end of device [ 90.110576][ T5219] loop3: rw=2049, want=144, limit=128 [ 90.167932][ T5219] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 90.176436][ T5219] attempt to access beyond end of device [ 90.176436][ T5219] loop3: rw=2049, want=146, limit=128 [ 90.258038][ T5219] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 90.327283][ T5219] attempt to access beyond end of device [ 90.327283][ T5219] loop3: rw=2049, want=250, limit=128 [ 90.419213][ T5210] attempt to access beyond end of device [ 90.419213][ T5210] loop3: rw=2049, want=140, limit=128 [ 91.865481][ T5316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.376'. [ 91.905180][ T5302] md: could not open device unknown-block(0,0). [ 91.920238][ T5302] md: error, md_import_device() returned -6 [ 91.965140][ T5318] netlink: 120 bytes leftover after parsing attributes in process `syz.4.377'. [ 92.352410][ T5335] loop0: detected capacity change from 0 to 1024 [ 92.401184][ T5335] EXT4-fs (loop0): Ignoring removed bh option [ 92.419554][ T5335] EXT4-fs (loop0): Ignoring removed bh option [ 92.460460][ T5335] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 92.506104][ T5335] EXT4-fs error (device loop0): empty_inline_dir:1881: inode #12: block 7: comm syz.0.382: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 92.575851][ T5335] EXT4-fs (loop0): Remounting filesystem read-only [ 92.589532][ T5335] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 92.674476][ T5347] device bond_slave_0 entered promiscuous mode [ 92.680988][ T5347] device bond_slave_1 entered promiscuous mode [ 92.718655][ T5347] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.795420][ T5347] device bond_slave_0 left promiscuous mode [ 92.801451][ T5347] device bond_slave_1 left promiscuous mode [ 93.113939][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 93.196203][ T5387] loop3: detected capacity change from 0 to 256 [ 93.307642][ T5387] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.037512][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.074472][ T26] audit: type=1800 audit(1787774801.065:2): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.401" name="file1" dev="loop3" ino=1048591 res=0 errno=0 [ 94.318580][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 94.340866][ T5433] loop3: detected capacity change from 0 to 512 [ 94.434677][ T5433] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 1: comm syz.3.416: invalid block [ 94.453259][ T7] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 94.467707][ T5433] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.416: couldn't read orphan inode 11 (err -117) [ 94.515474][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.546589][ T5433] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.572777][ T7] usb 5-1: config 0 has no interface number 0 [ 94.602843][ T7] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 94.625794][ T5433] EXT4-fs (loop3): shut down requested (2) [ 94.636763][ T7] usb 5-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.732341][ T5447] program syz.1.423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.827662][ T7] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 94.866552][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.887479][ T7] usb 5-1: Product: syz [ 94.891736][ T7] usb 5-1: Manufacturer: syz [ 94.910361][ T7] usb 5-1: SerialNumber: syz [ 94.943918][ T7] usb 5-1: config 0 descriptor?? [ 94.988702][ T5405] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.012115][ T7] asix: probe of 5-1:0.34 failed with error -22 [ 95.663701][ T5498] bond0: no command found in slaves file - use +ifname or -ifname [ 95.937679][ T5517] udc-core: couldn't find an available UDC or it's busy [ 95.952453][ T5517] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.022930][ T5520] loop2: detected capacity change from 0 to 1024 [ 96.052628][ T5520] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 96.076934][ T5520] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.092141][ T5520] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 96.100834][ T5520] System zones: 0-1, 3-36 [ 96.109872][ T5520] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 96.129151][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.172841][ T5520] capability: warning: `syz.2.450' uses deprecated v2 capabilities in a way that may be insecure [ 96.306098][ C0] unchecked MSR access error: WRMSR to 0x400 (tried to write 0x0000000000000001) at rIP: 0xffffffff812ef852 (__mcheck_cpu_init_clear_banks+0x112/0x1f0) [ 96.321461][ C0] Call Trace: [ 96.324746][ C0] [ 96.327612][ C0] mce_cpu_restart+0xc7/0x1a0 [ 96.332371][ C0] ? mce_restart+0x1c0/0x1c0 [ 96.336948][ C0] flush_smp_call_function_queue+0x2a9/0x760 [ 96.343090][ C0] __sysvec_call_function_single+0x98/0x240 [ 96.349263][ C0] sysvec_call_function_single+0x98/0xc0 [ 96.354886][ C0] [ 96.357803][ C0] [ 96.360908][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 96.367198][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 96.372475][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 96.392956][ C0] RSP: 0018:ffffc900046cf940 EFLAGS: 00000206 [ 96.399015][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4525a73fdf909e00 [ 96.406970][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a42c0 [ 96.415304][ C0] RBP: ffffc900046cfa60 R08: dffffc0000000000 R09: 1ffffffff203de18 [ 96.423277][ C0] R10: dffffc0000000000 R11: fffffbfff203de19 R12: ffff88807a2bb190 [ 96.431245][ C0] R13: 1ffff920008d9f34 R14: 0000000000000246 R15: dffffc0000000000 [ 96.439322][ C0] ? validate_mm+0x593/0xa50 [ 96.443909][ C0] ? read_lock_is_recursive+0x10/0x10 [ 96.449288][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 96.454326][ C0] ? __rwlock_init+0x140/0x140 [ 96.459074][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 96.464269][ C0] _raw_spin_lock+0x2a/0x40 [ 96.468765][ C0] ? validate_mm+0x360/0xa50 [ 96.473347][ C0] validate_mm+0x360/0xa50 [ 96.477773][ C0] __vma_adjust+0x1da9/0x1e30 [ 96.482453][ C0] vma_merge+0xbb4/0xc70 [ 96.486689][ C0] userfaultfd_release+0x36a/0x5a0 [ 96.491792][ C0] ? userfaultfd_ioctl+0x41b0/0x41b0 [ 96.497082][ C0] ? __might_sleep+0xf0/0xf0 [ 96.501658][ C0] ? ima_file_free+0xe5/0x3e0 [ 96.506321][ C0] ? userfaultfd_ioctl+0x41b0/0x41b0 [ 96.511630][ C0] __fput+0x212/0x8c0 [ 96.515605][ C0] task_work_run+0x125/0x1a0 [ 96.520216][ C0] exit_to_user_mode_loop+0x10f/0x130 [ 96.525596][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 96.531135][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 96.536591][ C0] do_syscall_64+0x58/0xa0 [ 96.540991][ C0] ? clear_bhb_loop+0x30/0x80 [ 96.545656][ C0] ? clear_bhb_loop+0x30/0x80 [ 96.550347][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.556227][ C0] RIP: 0033:0x7f1f7cb9b0d9 [ 96.560630][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.583559][ C0] RSP: 002b:00007ffdf41af2a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 96.592140][ C0] RAX: 0000000000000000 RBX: 00007ffdf41af390 RCX: 00007f1f7cb9b0d9 [ 96.600144][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 96.608116][ C0] RBP: 00000000000177eb R08: 0000000000000001 R09: 0000000000000000 [ 96.616078][ C0] R10: 0000001b31620000 R11: 0000000000000246 R12: 00007ffdf41af3d0 [ 96.624038][ C0] R13: 00007f1f7ce22fac R14: 000000000001783e R15: 00007f1f7ce22fa0 [ 96.632006][ C0] [ 96.635204][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.793943][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 97.014424][ T13] usb 5-1: USB disconnect, device number 2 [ 97.283944][ T5565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.291689][ T5565] IPv6: NLM_F_CREATE should be set when creating new route [ 97.507223][ T5582] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 101.252022][ T5681] [ 101.254380][ T5681] ====================================================== [ 101.261391][ T5681] WARNING: possible circular locking dependency detected [ 101.268437][ T5681] syzkaller #0 Not tainted [ 101.272856][ T5681] ------------------------------------------------------ [ 101.279871][ T5681] syz.2.496/5681 is trying to acquire lock: [ 101.285763][ T5681] ffffffff8cf51008 (serio_mutex){+.+.}-{3:3}, at: drvctl_store+0x2a/0xae0 [ 101.294281][ T5681] [ 101.294281][ T5681] but task is already holding lock: [ 101.301634][ T5681] ffff88802525e1d8 (kn->active#294){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 101.311289][ T5681] [ 101.311289][ T5681] which lock already depends on the new lock. [ 101.311289][ T5681] [ 101.321677][ T5681] [ 101.321677][ T5681] the existing dependency chain (in reverse order) is: [ 101.330672][ T5681] [ 101.330672][ T5681] -> #1 (kn->active#294){++++}-{0:0}: [ 101.338248][ T5681] __kernfs_remove+0x5da/0xcb0 [ 101.343524][ T5681] kernfs_remove_by_name_ns+0x91/0x100 [ 101.349490][ T5681] sysfs_remove_group+0xfd/0x290 [ 101.354938][ T5681] sysfs_remove_groups+0x50/0xa0 [ 101.360385][ T5681] device_remove_attrs+0xc2/0x140 [ 101.365916][ T5681] device_del+0x637/0xa80 [ 101.370751][ T5681] serio_destroy_port+0x34a/0x470 [ 101.376285][ T5681] serio_unregister_port+0x12c/0x150 [ 101.382074][ T5681] userio_char_release+0x7f/0xb0 [ 101.387518][ T5681] __fput+0x212/0x8c0 [ 101.392009][ T5681] task_work_run+0x125/0x1a0 [ 101.397106][ T5681] do_exit+0x635/0x2110 [ 101.401762][ T5681] __x64_sys_exit+0x3c/0x40 [ 101.406769][ T5681] do_syscall_64+0x4c/0xa0 [ 101.411691][ T5681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.418089][ T5681] [ 101.418089][ T5681] -> #0 (serio_mutex){+.+.}-{3:3}: [ 101.425361][ T5681] __lock_acquire+0x2c66/0x7b50 [ 101.430718][ T5681] lock_acquire+0x19e/0x400 [ 101.435755][ T5681] __mutex_lock_common+0x1e5/0x2400 [ 101.441457][ T5681] mutex_lock_interruptible_nested+0x17/0x20 [ 101.447940][ T5681] drvctl_store+0x2a/0xae0 [ 101.452858][ T5681] kernfs_fop_write_iter+0x3a8/0x500 [ 101.458650][ T5681] vfs_write+0x748/0xd70 [ 101.463425][ T5681] ksys_write+0x153/0x260 [ 101.468271][ T5681] do_syscall_64+0x4c/0xa0 [ 101.473187][ T5681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.479606][ T5681] [ 101.479606][ T5681] other info that might help us debug this: [ 101.479606][ T5681] [ 101.489832][ T5681] Possible unsafe locking scenario: [ 101.489832][ T5681] [ 101.497262][ T5681] CPU0 CPU1 [ 101.502604][ T5681] ---- ---- [ 101.507946][ T5681] lock(kn->active#294); [ 101.512267][ T5681] lock(serio_mutex); [ 101.518833][ T5681] lock(kn->active#294); [ 101.525668][ T5681] lock(serio_mutex); [ 101.529720][ T5681] [ 101.529720][ T5681] *** DEADLOCK *** [ 101.529720][ T5681] [ 101.537840][ T5681] 4 locks held by syz.2.496/5681: [ 101.542841][ T5681] #0: ffff888076389c70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 101.552054][ T5681] #1: ffff88805e72a460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 101.560918][ T5681] #2: ffff88805fa0f488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500 [ 101.570644][ T5681] #3: ffff88802525e1d8 (kn->active#294){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 101.580729][ T5681] [ 101.580729][ T5681] stack backtrace: [ 101.586600][ T5681] CPU: 0 PID: 5681 Comm: syz.2.496 Not tainted syzkaller #0 [ 101.593867][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.603919][ T5681] Call Trace: [ 101.607180][ T5681] [ 101.610091][ T5681] dump_stack_lvl+0x188/0x250 [ 101.614756][ T5681] ? load_image+0x410/0x410 [ 101.619251][ T5681] ? show_regs_print_info+0x20/0x20 [ 101.624431][ T5681] ? print_circular_bug+0x12b/0x1a0 [ 101.629615][ T5681] check_noncircular+0x296/0x330 [ 101.634541][ T5681] ? add_chain_block+0x9b0/0x9b0 [ 101.639454][ T5681] ? lockdep_lock+0xf1/0x1f0 [ 101.644031][ T5681] ? mark_lock+0x94/0x320 [ 101.648339][ T5681] ? _find_first_zero_bit+0xd1/0xf0 [ 101.653519][ T5681] __lock_acquire+0x2c66/0x7b50 [ 101.658358][ T5681] ? verify_lock_unused+0x140/0x140 [ 101.663545][ T5681] ? mark_lock+0x94/0x320 [ 101.667852][ T5681] ? mark_lock+0x94/0x320 [ 101.672162][ T5681] lock_acquire+0x19e/0x400 [ 101.676648][ T5681] ? drvctl_store+0x2a/0xae0 [ 101.681222][ T5681] ? __might_sleep+0xf0/0xf0 [ 101.685793][ T5681] ? read_lock_is_recursive+0x10/0x10 [ 101.691144][ T5681] ? verify_lock_unused+0x140/0x140 [ 101.696326][ T5681] __mutex_lock_common+0x1e5/0x2400 [ 101.701511][ T5681] ? drvctl_store+0x2a/0xae0 [ 101.706083][ T5681] ? kernfs_fop_write_iter+0x14f/0x500 [ 101.711534][ T5681] ? drvctl_store+0x2a/0xae0 [ 101.716103][ T5681] ? mutex_lock_io_nested+0x60/0x60 [ 101.721290][ T5681] ? read_lock_is_recursive+0x10/0x10 [ 101.726646][ T5681] ? sysfs_kf_read+0x350/0x350 [ 101.731391][ T5681] mutex_lock_interruptible_nested+0x17/0x20 [ 101.737370][ T5681] drvctl_store+0x2a/0xae0 [ 101.741770][ T5681] ? sysfs_kf_write+0x183/0x2a0 [ 101.746613][ T5681] ? sysfs_kf_read+0x350/0x350 [ 101.751375][ T5681] kernfs_fop_write_iter+0x3a8/0x500 [ 101.756643][ T5681] vfs_write+0x748/0xd70 [ 101.760867][ T5681] ? file_end_write+0x250/0x250 [ 101.765708][ T5681] ? mutex_lock_nested+0x17/0x20 [ 101.770626][ T5681] ? __fdget_pos+0x2bf/0x370 [ 101.775196][ T5681] ? ksys_write+0x70/0x260 [ 101.779591][ T5681] ksys_write+0x153/0x260 [ 101.783901][ T5681] ? __ia32_sys_read+0x80/0x80 [ 101.788643][ T5681] ? lockdep_hardirqs_on+0x94/0x140 [ 101.793821][ T5681] do_syscall_64+0x4c/0xa0 [ 101.798217][ T5681] ? clear_bhb_loop+0x30/0x80 [ 101.802874][ T5681] ? clear_bhb_loop+0x30/0x80 [ 101.807536][ T5681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.813413][ T5681] RIP: 0033:0x7f11220690d9 [ 101.817815][ T5681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.837403][ T5681] RSP: 002b:00007f11202c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.845799][ T5681] RAX: ffffffffffffffda RBX: 00007f11222f0fa0 RCX: 00007f11220690d9 [ 101.853754][ T5681] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000003 [ 101.861706][ T5681] RBP: 00007f1122100024 R08: 0000000000000000 R09: 0000000000000000 [ 101.869660][ T5681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.877634][ T5681] R13: 00007f11222f1038 R14: 00007f11222f0fa0 R15: 00007ffebcf7cbe8 [ 101.885595][ T5681] [ 101.888704][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.925990][ T5680] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 102.118287][ T5681] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 102.197635][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.437489][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 102.557529][ T23] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 102.565632][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.575926][ T23] usb 4-1: config 0 has no interface number 0 [ 102.582585][ T23] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 102.592611][ T23] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.757579][ T23] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 102.766669][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.774718][ T23] usb 4-1: Product: syz [ 102.778906][ T23] usb 4-1: Manufacturer: syz [ 102.783508][ T23] usb 4-1: SerialNumber: syz [ 102.789210][ T23] usb 4-1: config 0 descriptor?? [ 102.807628][ T5680] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.828186][ T23] asix: probe of 4-1:0.34 failed with error -22 [ 103.734768][ T5685] udc-core: couldn't find an available UDC or it's busy [ 103.741801][ T5685] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 104.769709][ T7] usb 4-1: USB disconnect, device number 2