last executing test programs: 8.230524723s ago: executing program 0 (id=462): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) close(r0) r1 = io_uring_setup(0xab2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) 7.055414652s ago: executing program 0 (id=476): sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x76118df0ecf74945) 6.995177598s ago: executing program 0 (id=479): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc, {0x5, 0x9, 0x401, 0x2}}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8, {0x7, 0x3, 0x1000, 0xfffe}}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x10f414}], @NL80211_ATTR_FILS_KEK={0x44, 0xf2, "498aff84ec24b5c9b1844c44bef9533ba5d55b89ac1c7a1adfd42d1a588473fb821ea00ad0cc995d9bf354cf68ea371787dc997d2964623cfdbe839efdd227e3"}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc0}, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) remap_file_pages(&(0x7f0000471000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x3) 6.937491333s ago: executing program 4 (id=480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002480)={0x14}, 0x14}}, 0x0) 6.830372372s ago: executing program 4 (id=482): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x274}}, 0x0) 6.442454683s ago: executing program 4 (id=485): r0 = io_uring_setup(0xb3e, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.442080918s ago: executing program 0 (id=486): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 5.67447247s ago: executing program 0 (id=489): r0 = memfd_create(&(0x7f00000002c0)='\xc0\xecFEesE\xf6k^\x15\xad\x10\xf2\xe0\xe0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d};lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%R\xf8\xc2\xff%\xa4\x88\x92X\xd0\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2)$\x1f&\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xdem\xbe\x7f2\x02\x00\x00\x00\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3`\xea\x16\xc6\xce\x83\xab\x05\x19-\x80\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x03D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17\xdc\xee\x9b1}\r4\xac\x93|IN\x92\xff\xa9\x93\xed\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\x00\x00\xf7\xff\x00\x90\xe73\xee\xe4\x97%e\xf28\xabo\xd5M|\x9a\x84\xea;@])q\x16\xcd\t\x00<2\x94\xc6F\xb5+\xc8h_\x00\xdb\x12cfG\xc8\xc3P\xa5\x98\xf9\xe4k', 0x0) fallocate(r0, 0x0, 0x0, 0x8000007) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x0, 0x3) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 5.674162619s ago: executing program 4 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x244) 5.542146243s ago: executing program 4 (id=492): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000000)) 5.48254742s ago: executing program 2 (id=493): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000700)={0xffffffffffffffff}) sendto$llc(r1, 0x0, 0x0, 0x4048011, 0x0, 0xffffffa8) 5.363031454s ago: executing program 2 (id=496): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 5.222480667s ago: executing program 2 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f7000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000bdb200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000050018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.033340322s ago: executing program 4 (id=500): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='cmdline\x00') close_range(r1, 0xffffffffffffffff, 0x0) openat$null(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x14}}, 0x0) 5.023748797s ago: executing program 2 (id=501): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x143, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000000)) 4.124446296s ago: executing program 2 (id=504): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000006840)='./file1\x00', &(0x7f0000006880), 0x0, &(0x7f0000006900)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x8000000, r1, &(0x7f0000000100)='./file1\x00') 3.438504111s ago: executing program 3 (id=513): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x8040, 0x0) dup3(r0, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)) 3.343790474s ago: executing program 3 (id=515): r0 = socket(0x10, 0x2, 0x0) setsockopt$sock_cred(r0, 0x1, 0x4a, &(0x7f0000003ec0), 0xc) 3.246545007s ago: executing program 3 (id=516): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8903, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) 3.162565138s ago: executing program 2 (id=518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window, @timestamp, @mss, @mss], 0x20000282) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = fcntl$dupfd(r0, 0x0, r1) getsockname$inet6(r2, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) 1.034422878s ago: executing program 1 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5450, 0x0) 848.557166ms ago: executing program 0 (id=522): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000010000406c256d00000000000001090224000100000000090419000103000000092100000001220500090581030000000000"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/226, 0xe2}], 0x1, 0xfb, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000005640), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006, 0x4}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d0000000000000000", 0xd1, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) 734.521414ms ago: executing program 1 (id=523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x35bf, &(0x7f0000001440)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$unix(0x1, 0x0, 0x0) close(r1) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140), 0x48) 501.618477ms ago: executing program 3 (id=524): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat(0xffffffffffffff9c, 0x0, 0x4a800, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000940)={'wg1\x00', {0x2, 0x0, @local}}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x8001ff, 0x2) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.sectors\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x4274ce57766fbb8d}) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="3533d2b2d97c768ba9cdd0ea04b4803acbcf65e753d4cd401972fa69ed826de8893dee64f90470a357f29c8ad90ce2a9c9f47dfa2f5805d49b0c7b2f09c83b812eed7a3bf38d2d7f2a59269521332d43433d9b7d44aa3ebd4083034f4263e404", 0x60}, {&(0x7f0000000300)="a0cb23dbb43a4656ae5a7c2f43e1efdbd6c4ac3add97fc038862be17ca4e", 0x1e}, {&(0x7f00000006c0)="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", 0xfe}, {&(0x7f0000000340)="aa391c930b059ed2895b680a06fb6f1bf530cd6bad31026b522820d5ff3363ae4aee66aac94c97905b4fb22edb", 0x2d}], 0x4, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000640)="276f3f1770", 0x5}, {&(0x7f00000007c0)="42a26892f081ab6b599d2604cd1720337d0f653b", 0x14}], 0x3, &(0x7f0000000f80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8ef7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c80)="21626525c5c94e48164d17211c687598221e4b1d2343bdc3906f6e8a770e94", 0x1f}, {&(0x7f00000028c0)="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", 0x201}, {&(0x7f0000000d00)}, {0x0}, {0x0}, {&(0x7f0000000e80)="a3a3ec8d437dd99a53", 0x9}], 0x6}}], 0x3, 0x0) 494.720714ms ago: executing program 1 (id=525): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) 314.45453ms ago: executing program 1 (id=526): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) 296.61855ms ago: executing program 1 (id=527): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = dup(r0) write$khugepaged_scan(r1, &(0x7f00000005c0), 0x8) 234.237954ms ago: executing program 3 (id=528): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000400)="30c0ecf3ec8dacddd1160dcf60220d9c", 0x10}], 0x1) 18.436576ms ago: executing program 3 (id=529): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x3, &(0x7f0000000040)=[{0x35}, {0x20, 0x0, 0x0, 0x4}, {0x6}]}) socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xfffffffffffffeb8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af00, &(0x7f0000000140)) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r2) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000380)={0x0, r2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x8000000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r4 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x2c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) write$6lowpan_control(r4, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) syz_io_uring_setup(0x10d, &(0x7f0000000440), &(0x7f0000000380), &(0x7f0000000280)) 0s ago: executing program 1 (id=530): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @private}, {0x0, @random="8e840519f23a"}, 0x0, {0x2, 0x0, @multicast1}, 'veth1_to_batadv\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. [ 53.582870][ T5214] cgroup: Unknown subsys name 'net' [ 53.715522][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.062762][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.581973][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.591489][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.600495][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.609798][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.617866][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.626400][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.634975][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.641130][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.642366][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.658219][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.659428][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.665669][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.674293][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.680757][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.688273][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.694796][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.700184][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.707988][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.716089][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.721831][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.729397][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.738389][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.743212][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.749192][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.756279][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.771646][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.781804][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.792083][ T4620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.810354][ T4620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.817682][ T4620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.232676][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 59.303668][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 59.340751][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 59.357238][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 59.365949][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 59.447557][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.455453][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.463220][ T5225] bridge_slave_0: entered allmulticast mode [ 59.471083][ T5225] bridge_slave_0: entered promiscuous mode [ 59.499366][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.506638][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.513992][ T5225] bridge_slave_1: entered allmulticast mode [ 59.520731][ T5225] bridge_slave_1: entered promiscuous mode [ 59.577351][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.584772][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.592908][ T5235] bridge_slave_0: entered allmulticast mode [ 59.600079][ T5235] bridge_slave_0: entered promiscuous mode [ 59.607225][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.614456][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.621987][ T5235] bridge_slave_1: entered allmulticast mode [ 59.629387][ T5235] bridge_slave_1: entered promiscuous mode [ 59.684071][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.694273][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.701788][ T5224] bridge_slave_0: entered allmulticast mode [ 59.709962][ T5224] bridge_slave_0: entered promiscuous mode [ 59.725403][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.746749][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.756851][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.764231][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.771496][ T5224] bridge_slave_1: entered allmulticast mode [ 59.778173][ T5224] bridge_slave_1: entered promiscuous mode [ 59.784531][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.791788][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.799136][ T5237] bridge_slave_0: entered allmulticast mode [ 59.805696][ T5237] bridge_slave_0: entered promiscuous mode [ 59.813676][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.821202][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.828475][ T5237] bridge_slave_1: entered allmulticast mode [ 59.835094][ T5237] bridge_slave_1: entered promiscuous mode [ 59.843253][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.860997][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.868446][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.875748][ T5226] bridge_slave_0: entered allmulticast mode [ 59.882620][ T5226] bridge_slave_0: entered promiscuous mode [ 59.891040][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.923798][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.931073][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.938527][ T5226] bridge_slave_1: entered allmulticast mode [ 59.945544][ T5226] bridge_slave_1: entered promiscuous mode [ 59.981882][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.993921][ T5225] team0: Port device team_slave_0 added [ 60.017276][ T5235] team0: Port device team_slave_0 added [ 60.026175][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.039125][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.050765][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.070611][ T5225] team0: Port device team_slave_1 added [ 60.087264][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.100683][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.111460][ T5235] team0: Port device team_slave_1 added [ 60.150557][ T5237] team0: Port device team_slave_0 added [ 60.181060][ T5224] team0: Port device team_slave_0 added [ 60.189106][ T5226] team0: Port device team_slave_0 added [ 60.206372][ T5237] team0: Port device team_slave_1 added [ 60.220638][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.227612][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.254197][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.267647][ T5224] team0: Port device team_slave_1 added [ 60.276049][ T5226] team0: Port device team_slave_1 added [ 60.293018][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.300171][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.326184][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.345951][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.353306][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.380551][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.409035][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.416023][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.442709][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.479016][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.486087][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.512912][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.528516][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.535486][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.561944][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.574228][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.581284][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.607479][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.619582][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.626554][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.653216][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.665213][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.672466][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.698422][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.724928][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.732359][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.758852][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.824581][ T5225] hsr_slave_0: entered promiscuous mode [ 60.831168][ T5225] hsr_slave_1: entered promiscuous mode [ 60.849495][ T5237] hsr_slave_0: entered promiscuous mode [ 60.853670][ T54] Bluetooth: hci1: command tx timeout [ 60.855230][ T5233] Bluetooth: hci3: command tx timeout [ 60.860899][ T54] Bluetooth: hci0: command tx timeout [ 60.866289][ T5244] Bluetooth: hci4: command tx timeout [ 60.871901][ T4620] Bluetooth: hci2: command tx timeout [ 60.884091][ T5237] hsr_slave_1: entered promiscuous mode [ 60.890497][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.898634][ T5237] Cannot create hsr debugfs directory [ 60.909088][ T5235] hsr_slave_0: entered promiscuous mode [ 60.915248][ T5235] hsr_slave_1: entered promiscuous mode [ 60.921835][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.929602][ T5235] Cannot create hsr debugfs directory [ 60.947139][ T5226] hsr_slave_0: entered promiscuous mode [ 60.954087][ T5226] hsr_slave_1: entered promiscuous mode [ 60.960519][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.968545][ T5226] Cannot create hsr debugfs directory [ 61.024080][ T5224] hsr_slave_0: entered promiscuous mode [ 61.031349][ T5224] hsr_slave_1: entered promiscuous mode [ 61.037331][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.045171][ T5224] Cannot create hsr debugfs directory [ 61.369092][ T5235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.381138][ T5235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.398268][ T5235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.418747][ T5235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.452622][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.465871][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.477170][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.487209][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.551539][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.573223][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.583657][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.594725][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.635720][ T5225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.645597][ T5225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.658977][ T5225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.670988][ T5225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.762305][ T5237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.783729][ T5237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.793565][ T5237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.821434][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.832628][ T5237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.880211][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.897855][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.921946][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.929263][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.966770][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.973889][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.996021][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.007489][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.014669][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.046463][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.053629][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.095683][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.115309][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.164848][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.181061][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.196353][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.203590][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.227382][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.256741][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.263919][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.275473][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.282595][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.291861][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.299109][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.321678][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.377643][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.384800][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.395684][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.402795][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.464209][ T5237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.496031][ T5237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.599910][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.752428][ T5235] veth0_vlan: entered promiscuous mode [ 62.832970][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.843863][ T5235] veth1_vlan: entered promiscuous mode [ 62.886744][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.929029][ T4620] Bluetooth: hci2: command tx timeout [ 62.934484][ T4620] Bluetooth: hci0: command tx timeout [ 62.951252][ T54] Bluetooth: hci4: command tx timeout [ 62.951274][ T5244] Bluetooth: hci3: command tx timeout [ 62.956663][ T54] Bluetooth: hci1: command tx timeout [ 63.010742][ T5235] veth0_macvtap: entered promiscuous mode [ 63.023402][ T5235] veth1_macvtap: entered promiscuous mode [ 63.043957][ T5226] veth0_vlan: entered promiscuous mode [ 63.062150][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.074306][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.086033][ T5224] veth0_vlan: entered promiscuous mode [ 63.100743][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.111739][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.135854][ T5226] veth1_vlan: entered promiscuous mode [ 63.162142][ T5235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.175923][ T5235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.185518][ T5235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.194836][ T5235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.223782][ T5224] veth1_vlan: entered promiscuous mode [ 63.274572][ T5226] veth0_macvtap: entered promiscuous mode [ 63.293713][ T5226] veth1_macvtap: entered promiscuous mode [ 63.314126][ T5224] veth0_macvtap: entered promiscuous mode [ 63.342146][ T5237] veth0_vlan: entered promiscuous mode [ 63.357487][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.374217][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.387488][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.413366][ T5237] veth1_vlan: entered promiscuous mode [ 63.444834][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.455977][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.470733][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.480194][ T5224] veth1_macvtap: entered promiscuous mode [ 63.510084][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.519941][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.529344][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.539344][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.585399][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.591871][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.604149][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.609194][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.623300][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.634373][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.645279][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.668820][ T5237] veth0_macvtap: entered promiscuous mode [ 63.684417][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.695399][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.706739][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.717686][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.729967][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.760443][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.769563][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.779023][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.787738][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.812212][ T5237] veth1_macvtap: entered promiscuous mode [ 63.827172][ T5225] veth0_vlan: entered promiscuous mode [ 63.837522][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.849142][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.873986][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.885524][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.896900][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.907572][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.918950][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.929484][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.941450][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.958662][ T5225] veth1_vlan: entered promiscuous mode [ 63.998653][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.015816][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.026578][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.038164][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.049146][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.060665][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.071830][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.101829][ T5237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.110890][ T5237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.126089][ T5237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.152118][ T5237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.205857][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.224797][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.254746][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.266252][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.290728][ T5225] veth0_macvtap: entered promiscuous mode [ 64.306443][ T5225] veth1_macvtap: entered promiscuous mode [ 64.365594][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.401861][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.467290][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.477884][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.489718][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.500618][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.511505][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.523294][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.534892][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.547033][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.559518][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.572068][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.580953][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.609296][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.623111][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.628012][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.635948][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.656675][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.673334][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.683888][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.703250][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.714790][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.731111][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.746723][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.791174][ T5225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.810393][ T5225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.833701][ T5225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.842891][ T5225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.936590][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.958302][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.013377][ T54] Bluetooth: hci3: command tx timeout [ 65.018152][ T5244] Bluetooth: hci2: command tx timeout [ 65.019841][ T54] Bluetooth: hci1: command tx timeout [ 65.024331][ T5236] Bluetooth: hci0: command tx timeout [ 65.035794][ T4620] Bluetooth: hci4: command tx timeout [ 65.129625][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.137704][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.229843][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.241622][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.537685][ T5341] netlink: 'syz.0.13': attribute type 29 has an invalid length. [ 65.583006][ T5341] netlink: 'syz.0.13': attribute type 29 has an invalid length. [ 65.619616][ T5341] netlink: 'syz.0.13': attribute type 29 has an invalid length. [ 65.676344][ T5341] netlink: 'syz.0.13': attribute type 29 has an invalid length. [ 65.705346][ T5341] netlink: 'syz.0.13': attribute type 29 has an invalid length. [ 65.726378][ T5341] netlink: 'syz.0.13': attribute type 29 has an invalid length. [ 66.631219][ T5238] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.660961][ T5360] loop4: detected capacity change from 0 to 32768 [ 67.200030][ T29] audit: type=1800 audit(1723578297.090:2): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.21" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 67.227731][ T4620] Bluetooth: hci4: command tx timeout [ 67.234562][ T5236] Bluetooth: hci0: command tx timeout [ 67.240539][ T5233] Bluetooth: hci1: command tx timeout [ 67.246123][ T5233] Bluetooth: hci3: command tx timeout [ 67.259736][ T5244] Bluetooth: hci2: command tx timeout [ 67.511495][ T5400] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.578448][ T5238] usb 3-1: Using ep0 maxpacket: 16 [ 67.593189][ T5238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.604728][ T5238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.615456][ T5238] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.638693][ T5238] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.659808][ T5238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.696239][ T5238] usb 3-1: config 0 descriptor?? [ 68.590283][ T5408] coredump: 33(syz.1.41): written to core: VMAs: 33, size 97218560; core: 60003214 bytes, pos 97226752 [ 68.818596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.840710][ T5238] usbhid 3-1:0.0: can't add hid device: -71 [ 68.866335][ T5238] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 68.914596][ T5238] usb 3-1: USB disconnect, device number 2 [ 69.208825][ T29] audit: type=1326 audit(1723578299.100:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.3.53" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9351f799f9 code=0x0 [ 70.201514][ T5456] netlink: 'syz.1.60': attribute type 2 has an invalid length. [ 70.321714][ T5458] netlink: 'syz.4.62': attribute type 29 has an invalid length. [ 70.358388][ T5458] netlink: 'syz.4.62': attribute type 29 has an invalid length. [ 70.368517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.398474][ T5458] netlink: 'syz.4.62': attribute type 29 has an invalid length. [ 70.448224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.008339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.018616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.488126][ T5244] Bluetooth: hci4: command 0x0405 tx timeout [ 71.795015][ T5488] validate_nla: 3 callbacks suppressed [ 71.795035][ T5488] netlink: 'syz.1.74': attribute type 29 has an invalid length. [ 71.818817][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.825829][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.859401][ T5488] netlink: 'syz.1.74': attribute type 29 has an invalid length. [ 71.898723][ T5488] netlink: 'syz.1.74': attribute type 29 has an invalid length. [ 71.942310][ T5488] netlink: 'syz.1.74': attribute type 29 has an invalid length. [ 71.959330][ T5488] netlink: 'syz.1.74': attribute type 29 has an invalid length. [ 71.988698][ T5488] netlink: 'syz.1.74': attribute type 29 has an invalid length. [ 74.608854][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.801010][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 74.826911][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 74.867034][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 74.884700][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.927310][ T9] usb 2-1: Product: syz [ 74.945745][ T9] usb 2-1: Manufacturer: syz [ 74.964462][ T9] usb 2-1: SerialNumber: syz [ 74.986146][ T9] usb 2-1: config 0 descriptor?? [ 75.007567][ T5565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.037643][ T9] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 76.041860][ T5633] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 76.076499][ T5633] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 76.087446][ T5633] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 76.114125][ T5635] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.131975][ T5633] netlink: 'syz.0.138': attribute type 29 has an invalid length. [ 76.935679][ T46] cfg80211: failed to load regulatory.db [ 77.143964][ T5238] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.295386][ T5677] serio: Serial port pts0 [ 77.350740][ T5238] usb 5-1: Using ep0 maxpacket: 16 [ 77.369439][ T5238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.390913][ T5238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.428508][ T5238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.439275][ T9] usb 2-1: USB disconnect, device number 2 [ 77.488040][ T5238] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.527771][ T5238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.579867][ T5238] usb 5-1: config 0 descriptor?? [ 78.155878][ T5699] Zero length message leads to an empty skb [ 78.227107][ T5238] usbhid 5-1:0.0: can't add hid device: -71 [ 78.245818][ T5238] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 78.268448][ T5238] usb 5-1: USB disconnect, device number 2 [ 78.381746][ T5704] sctp: [Deprecated]: syz.3.168 (pid 5704) Use of int in max_burst socket option deprecated. [ 78.381746][ T5704] Use struct sctp_assoc_value instead [ 78.576951][ T5711] validate_nla: 6 callbacks suppressed [ 78.576973][ T5711] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 78.602303][ T5711] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 78.615655][ T5711] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 78.625829][ T5711] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 78.645532][ T5711] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 78.663857][ T5711] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 79.717159][ T5749] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.578535][ T5812] netlink: 'syz.4.213': attribute type 29 has an invalid length. [ 81.627230][ T5812] netlink: 'syz.4.213': attribute type 29 has an invalid length. [ 81.648702][ T5812] netlink: 'syz.4.213': attribute type 29 has an invalid length. [ 81.677491][ T5812] netlink: 'syz.4.213': attribute type 29 has an invalid length. [ 86.184917][ T5978] netlink: 68 bytes leftover after parsing attributes in process `syz.4.279'. [ 87.414296][ T5995] "syz.4.288" (5995) uses obsolete ecb(arc4) skcipher [ 87.779216][ T6017] netlink: 'syz.4.297': attribute type 29 has an invalid length. [ 87.835801][ T6019] netlink: 'syz.4.297': attribute type 29 has an invalid length. [ 87.862786][ T6017] netlink: 'syz.4.297': attribute type 29 has an invalid length. [ 87.899376][ T6017] netlink: 'syz.4.297': attribute type 29 has an invalid length. [ 87.927497][ T6017] netlink: 'syz.4.297': attribute type 29 has an invalid length. [ 87.958715][ T6017] netlink: 'syz.4.297': attribute type 29 has an invalid length. [ 89.878101][ T5238] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.082333][ T5238] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 90.098051][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.116378][ T5238] usb 4-1: Product: syz [ 90.126514][ T5238] usb 4-1: Manufacturer: syz [ 90.146745][ T5238] usb 4-1: SerialNumber: syz [ 90.163735][ T5238] usb 4-1: config 0 descriptor?? [ 90.191516][ T5238] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 002 [ 90.418961][ T6098] netlink: 'syz.4.333': attribute type 29 has an invalid length. [ 90.438548][ T6098] netlink: 'syz.4.333': attribute type 29 has an invalid length. [ 90.455882][ T6098] netlink: 'syz.4.333': attribute type 29 has an invalid length. [ 90.475838][ T6098] netlink: 'syz.4.333': attribute type 29 has an invalid length. [ 90.608579][ T5238] (null): failure reading functionality [ 90.647895][ T5238] i2c i2c-1: connected i2c-tiny-usb device [ 91.185274][ T6117] serio: Serial port pts0 [ 92.240869][ T6140] coredump: 220(syz.1.348): written to core: VMAs: 33, size 97218560; core: 60003214 bytes, pos 97226752 [ 92.408736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.417240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.427103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 92.435824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.677692][ T5238] usb 4-1: USB disconnect, device number 2 [ 94.814738][ T6197] validate_nla: 2 callbacks suppressed [ 94.814755][ T6197] netlink: 'syz.2.373': attribute type 29 has an invalid length. [ 94.841048][ T6197] netlink: 'syz.2.373': attribute type 29 has an invalid length. [ 94.860027][ T6197] netlink: 'syz.2.373': attribute type 29 has an invalid length. [ 94.871752][ T6197] netlink: 'syz.2.373': attribute type 29 has an invalid length. [ 97.830475][ T6287] serio: Serial port pts0 [ 98.514066][ T6314] capability: warning: `syz.0.424' uses 32-bit capabilities (legacy support in use) [ 98.773909][ T6328] serio: Serial port pts1 [ 98.974903][ T6342] netlink: 'syz.0.435': attribute type 29 has an invalid length. [ 98.996951][ T6342] netlink: 'syz.0.435': attribute type 29 has an invalid length. [ 99.016401][ T6342] netlink: 'syz.0.435': attribute type 29 has an invalid length. [ 99.024918][ T6342] netlink: 'syz.0.435': attribute type 29 has an invalid length. [ 99.100131][ T6348] syz.4.438 uses obsolete (PF_INET,SOCK_PACKET) [ 99.295391][ T6356] netlink: 'syz.4.442': attribute type 29 has an invalid length. [ 99.304856][ T6356] netlink: 'syz.4.442': attribute type 29 has an invalid length. [ 101.198755][ T6427] coredump: 188(syz.3.474): written to core: VMAs: 34, size 97292288; core: 60015558 bytes, pos 97300480 [ 101.598332][ T6438] mmap: syz.0.479 (6438) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.855482][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.272731][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.460722][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.626510][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.668433][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.682965][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.690894][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.710707][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.718740][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.726169][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.988332][ T11] bridge_slave_1: left allmulticast mode [ 104.994243][ T11] bridge_slave_1: left promiscuous mode [ 105.032004][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.090088][ T11] bridge_slave_0: left allmulticast mode [ 105.131645][ T11] bridge_slave_0: left promiscuous mode [ 105.174419][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.014268][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.040668][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.074080][ T11] bond0 (unregistering): Released all slaves [ 106.789218][ T54] Bluetooth: hci1: command tx timeout [ 107.415492][ T6509] chnl_net:caif_netlink_parms(): no params data found [ 107.801735][ T11] hsr_slave_0: left promiscuous mode [ 107.863437][ T11] hsr_slave_1: left promiscuous mode [ 107.898625][ T5282] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.909384][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.942406][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.979367][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.989620][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.008515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.080698][ T11] veth1_macvtap: left promiscuous mode [ 108.094717][ T11] veth0_macvtap: left promiscuous mode [ 108.104510][ T11] veth1_vlan: left promiscuous mode [ 108.113640][ T11] veth0_vlan: left promiscuous mode [ 108.124922][ T5282] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 108.143452][ T5282] usb 1-1: config 0 has no interface number 0 [ 108.153978][ T5282] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.195616][ T5282] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.229239][ T5282] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 108.258601][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.331262][ T5282] usb 1-1: config 0 descriptor?? [ 108.395413][ T29] audit: type=1326 audit(1723578338.290:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.3.529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9351f799f9 code=0x0 [ 108.564429][ T6556] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN PTI [ 108.577230][ T6556] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 108.585758][ T6556] CPU: 0 UID: 0 PID: 6556 Comm: syz.0.522 Not tainted 6.11.0-rc3-next-20240813-syzkaller #0 [ 108.595857][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 108.606120][ T6556] RIP: 0010:__lock_acquire+0x69/0x2040 [ 108.611606][ T6556] Code: b6 04 30 84 c0 0f 85 87 16 00 00 45 31 f6 83 3d 28 c5 a8 0e 00 0f 84 ac 13 00 00 89 54 24 54 89 5c 24 68 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 c9 2c 8c 00 48 be 00 00 00 00 00 fc [ 108.631321][ T6556] RSP: 0018:ffffc90009a9f530 EFLAGS: 00010002 [ 108.637400][ T6556] RAX: 0000000000000004 RBX: 0000000000000001 RCX: 0000000000000001 [ 108.645385][ T6556] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000020 [ 108.653358][ T6556] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 108.661338][ T6556] R10: dffffc0000000000 R11: fffffbfff2030fbe R12: ffff888018399e00 [ 108.669318][ T6556] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000020 [ 108.677279][ T6556] FS: 00007f970a2f56c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 108.686195][ T6556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.692767][ T6556] CR2: 0000000020765000 CR3: 000000002e486000 CR4: 00000000003506f0 [ 108.700725][ T6556] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.708685][ T6556] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.716648][ T6556] Call Trace: [ 108.719916][ T6556] [ 108.722836][ T6556] ? __die_body+0x5f/0xb0 [ 108.727154][ T6556] ? die_addr+0xb0/0xe0 [ 108.731298][ T6556] ? exc_general_protection+0x3dd/0x5d0 [ 108.736840][ T6556] ? asm_exc_general_protection+0x26/0x30 [ 108.742549][ T6556] ? __lock_acquire+0x69/0x2040 [ 108.747388][ T6556] ? tcp_ack_update_rtt+0x7a6/0xea0 [ 108.752589][ T6556] lock_acquire+0x1ed/0x550 [ 108.757102][ T6556] ? send_sigurg+0x5a/0x3d0 [ 108.761597][ T6556] ? __pfx_lock_acquire+0x10/0x10 [ 108.766634][ T6556] ? tcp_ack+0x46e4/0x6bc0 [ 108.771055][ T6556] _raw_read_lock_irqsave+0xdd/0x130 [ 108.776333][ T6556] ? send_sigurg+0x5a/0x3d0 [ 108.780832][ T6556] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 108.786732][ T6556] send_sigurg+0x5a/0x3d0 [ 108.791078][ T6556] sk_send_sigurg+0x6e/0x2f0 [ 108.795678][ T6556] tcp_check_urg+0x207/0x740 [ 108.800268][ T6556] tcp_urg+0x15c/0x450 [ 108.804330][ T6556] ? __pfx_tcp_urg+0x10/0x10 [ 108.809004][ T6556] ? ktime_get+0x9b/0xb0 [ 108.813242][ T6556] tcp_rcv_established+0xfaf/0x2020 [ 108.818519][ T6556] ? ip6_dst_check+0xe7/0x7e0 [ 108.823199][ T6556] ? __pfx_tcp_rcv_established+0x10/0x10 [ 108.828905][ T6556] ? ip6_dst_check+0xe7/0x7e0 [ 108.833577][ T6556] ? ip6_dst_check+0xe7/0x7e0 [ 108.838239][ T6556] ? ip6_dst_check+0x5d9/0x7e0 [ 108.842992][ T6556] tcp_v6_do_rcv+0x5c8/0x13a0 [ 108.847660][ T6556] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 108.852754][ T6556] __release_sock+0x1c8/0x350 [ 108.857423][ T6556] release_sock+0x61/0x1f0 [ 108.861826][ T6556] tcp_sendmsg+0x3a/0x50 [ 108.866052][ T6556] __sock_sendmsg+0xef/0x270 [ 108.870633][ T6556] __sys_sendto+0x3a4/0x4f0 [ 108.875126][ T6556] ? do_sock_setsockopt+0x3e2/0x720 [ 108.880311][ T6556] ? __pfx___sys_sendto+0x10/0x10 [ 108.885319][ T6556] ? do_futex+0x392/0x560 [ 108.889647][ T6556] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.895616][ T6556] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.901945][ T6556] __x64_sys_sendto+0xde/0x100 [ 108.906718][ T6556] do_syscall_64+0xf3/0x230 [ 108.911212][ T6556] ? clear_bhb_loop+0x35/0x90 [ 108.915879][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.921761][ T6556] RIP: 0033:0x7f97095799f9 [ 108.926172][ T6556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.945761][ T6556] RSP: 002b:00007f970a2f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 108.954164][ T6556] RAX: ffffffffffffffda RBX: 00007f9709715f80 RCX: 00007f97095799f9 [ 108.962118][ T6556] RDX: 00000000000000d1 RSI: 0000000020000080 RDI: 0000000000000006 [ 108.970074][ T6556] RBP: 00007f97095e78ee R08: 0000000000000000 R09: 0000000000000000 [ 108.978030][ T6556] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 108.985985][ T6556] R13: 0000000000000000 R14: 00007f9709715f80 R15: 00007ffe7c62ffb8 [ 108.993946][ T6556] [ 108.996948][ T6556] Modules linked in: [ 109.000831][ T6556] ---[ end trace 0000000000000000 ]--- [ 109.006274][ T6556] RIP: 0010:__lock_acquire+0x69/0x2040 [ 109.011739][ T6556] Code: b6 04 30 84 c0 0f 85 87 16 00 00 45 31 f6 83 3d 28 c5 a8 0e 00 0f 84 ac 13 00 00 89 54 24 54 89 5c 24 68 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 c9 2c 8c 00 48 be 00 00 00 00 00 fc [ 109.031333][ T6556] RSP: 0018:ffffc90009a9f530 EFLAGS: 00010002 [ 109.037390][ T6556] RAX: 0000000000000004 RBX: 0000000000000001 RCX: 0000000000000001 [ 109.045431][ T6556] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000020 [ 109.053387][ T6556] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 109.061345][ T6556] R10: dffffc0000000000 R11: fffffbfff2030fbe R12: ffff888018399e00 [ 109.069304][ T6556] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000020 [ 109.077256][ T6556] FS: 00007f970a2f56c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 109.086168][ T6556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.092734][ T6556] CR2: 0000000020765000 CR3: 000000002e486000 CR4: 00000000003506f0 [ 109.100692][ T6556] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.108644][ T6556] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.116604][ T6556] Kernel panic - not syncing: Fatal exception [ 109.122876][ T6556] Kernel Offset: disabled [ 109.127184][ T6556] Rebooting in 86400 seconds..