last executing test programs: 6.347289956s ago: executing program 0 (id=66): madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0xc) 6.22373176s ago: executing program 0 (id=67): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000b3c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="35d7bf24b01e7dad8eda553b9811", 0xe}, {&(0x7f0000000140)="16de61008f82e48354f212", 0xb}, {&(0x7f0000000180)="1e606d89f95359c8039a1ad9ba778cf1998594c07fce224a6beaf005a4bdffeac7259f9bf670acbc5d7cb3b4c05a", 0x2e}], 0x3, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000a80)=""/111, 0xf}, {&(0x7f00000002c0)=""/56, 0x38}], 0x2}}], 0x1, 0x0, 0x0) 6.21316352s ago: executing program 3 (id=68): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000200)=0xa0000) unshare(0x400) r4 = socket$inet6(0xa, 0x2, 0x3a) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c00031000", @ANYBLOB="82862e575d"], 0xf) syz_open_dev$dri(0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @remote, 0x4c}, 0x1c) 5.93305189s ago: executing program 0 (id=69): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x43ec}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1d00030007"], 0xd) 5.874979711s ago: executing program 4 (id=70): syz_emit_ethernet(0x46, &(0x7f000000c700)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x10, 0x3a, 0xff, @dev={0xfb}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 5.61411007s ago: executing program 3 (id=72): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)="86", 0x1}], 0x1}}, {{&(0x7f0000000340)=@l2, 0x80, &(0x7f0000002d40)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f00000004c0)="f76cdca0a76f0158b069b2e5b1b3296fb054b88594c7a48e82c2094d84a70dad26d3a4f50d3cc1adfc8c3de21bf9d71942f067b28f764bd8f6ddddda7e6af40a369368fe32fe21dca2d60cb74c9c7e5e9fb01da01e10d1c090f5cbb53648bf142f0f7e0589fb4c066d6ec8ea9e8196a445176aba0b6dc5c671c6eae9b1141b76ed9bd48ce064653462385f330bc8ddcec17d2a110e73f471353e61d2c5f84c8b77d008bae4c166c8ff58c0aa01c30ea00c34f3262bb211017c0873a00b3b420745cd2587090e7b9361beca54083566a06c4fb806b14e5fcee2c2d5ac59229dc1506b773bbd2e9402fec19a4a0e25", 0xffffffa1}, {&(0x7f0000000140)="f443ee0131c797401b0305d96a13", 0xe}, {&(0x7f00000003c0)="05ba606403a099d90dbb00f448f711126647a8c7ea3d2f07432932432e814cfa99ca949d2d415b98aeb540ec136c10a27321f2c03b7cdca2764507a0a1e3da8fd5c78bed2b90f601b7d3246ddb9d9ee4963d957d9f2742", 0x57}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f0000001780)="1cdcf99da337e88b055e89d3c6bd35b18eccbc6f9221f275747c10a741e7c8db77093d98e2a87a1246f2930a02f3139425653ef3bc52f4277124ca0e4987074cbe85cecfc9aa0e95a799445cfff5c3304da49d05edb4de9c25c3cb1de47c7f1e08471c13eaa5e283407cc6e36fe67e67bcd38c118f4e32c3966583e9ac904441e44ace1a493a9b6f4a73e3ddc01d4e3c7cf0917e2a86f81fa8054d2586f0bf1d8f42725f0417598b8ca878443035dd3baba34a8d42cc19ff6c7e04daf62001a177c31dafedbb36f2fa3cb64906f4e5ae1640b4e4820914e579bc2a63077b137b3e209d5ade59d1df89f1a7c9b2332841361f7f79", 0xf4}, {&(0x7f0000001980)="55f6bbaacd30ca7e94fc391348c95441efb1e22dc5a0eebcb77668d6926738d515cc60481e9e5ecfa58ce12df2501e87ed49876abe519912606e95a5a32a00003152d0944eb493611c3e00000000000000005abfd921ab7af5e1c05712d066215455eb943ad1c0a43eb6dafc5bd01d146e5c39f20a93ae12b98c0bd0e3014f7423155b0c82a6c7dfb5979db8128f40ac6d23e9d583f538cb6af89f", 0x57}, {&(0x7f0000001a40)="becb76cd1cf9cfa980b158756132a52bd02b7f8f6e25673254d4dec83e2ac396f63a6b5e014775acd3eb19ff11aaa2189e5cff0b32d9f6ff52c35c6e92c6f2e1a709950c058d42417ad0d7fb6907a10926d591327c3305b3c4b77562b2b5d428ac89f01446f64e0a8a7697d12a4fdaa632e7d1478df09ef870b372f9e573db15afe8edf8d6115b5610f7493bb23d4c2af25de472666977fad3711aadc743caee9e5a2fa0b2e67f6a68e7a362d61ab879db1945a8f17425037667f0572c651618863938d8d6ad591d52ffc026ed0290ed7a423a27a699b79c104b4daae4bf5aa27d18e00fb7572de85b341d9578ec3cb264ce20510f82050568eae9557d5fbed9b810f80f956bb0c64e64ad4c8568371d4a4d0de82d211128340d5ad0ba926882677ccec91cb0f18132c152e3a2344bc5386dfd880dee02ab9ece27d048189e88c7b59db4f0b5e20ae4cb8086d19942065ce52a3267e4e7142104c27ec51c3bc94b5cf511ac622d5d09ba73202fe27653bc28c2045c0f4b90ceff4ba197ca3d975da850a8daf528730d3d1369326e79855ecd875c2767963c9e034868c3a087d395b0af7e85c7d70c9f76ae0ef9a56a2cddd11e7875e3384ffeb79b37c3f358826f2909920e0159d217e6799d740c637039c2a1b7113b48dcea7d0abc8b4f1977c8b010c0f72759e1c42a098e81bfca8f6ce0d7093b2e98a367f2fceec6ea7b96713defcbcc0563c65c7aba4f76d2b4aa6df3e2b9b4d4228ac2a935cb60f4c4711055e0bcfbe6ae1cf9180faa44dda8c48fea2296a8d2488f394450928f1057359bbb62355377e6a220116ec671d493329045ccdedebee49fb3e32c61ce2ec600d1d3b3462c368d68c5797924b16a470bf5caeb633613958231e782b14af3796c8d2787c34bd1bc1f7be8ff5c4c39e3dbf35db48381d0f47b376aaba5302450218ff4da8cea6aa9100d5bfeb16f64a9ada926e32bb18b7a9cc415d960c3cdcd16b5cee5646fc3eec2c59689c5869e998b6a40709683acf9c9858ae05e114f22135927bb78c86c9259d433b9bcfad87a0cd4ad22762a6e212d52ded8d1d24bae69ea9b818aefbb98018a0b54d2087e6457afb7e5e040f108da2e4dd1e7b58dea3ae3a6cbb9660ef1758982d023cef1e13fb44a7c8755b383be6846c3f36a9f7f25dc70f9daedd6baa3c356dac97fcbc2bb04bb0d72b7597d4f8d0967ec252fad4b43895562498e853204602fb1ca064c104ddfbce1683e5fc276204933b619edae88c39408142894c74384ca25e696b9b2da8ab094b14e7d5beda3b84774eac2ab919011a43864dad947b7f17c3f732bac07b9264171d17eca14d0dac3cdab2ef40a9f388f8edee88357373509433a20893f77d24274ba54bcc211382090c435f734bae94a8cac1f070699f412cd8bd580e1e083e3df5ea9165c1d9b7c5c81ab0fbd842ba73d027bc1a301edd1763d788c3a0914f66d280a97b9254218c66101d380b849f3e299c420c0a7eb46f318fd23fd845dddf4afeadbf3933f5c73e769a9efc40b74aeaf9547e971d544b3342fec05b479340886792196c044a0b4fb6134f9f387da781a1fd9c94759debedad91b3e26420a376c1848dc3a2c90a68e785c652e9bb7c8165b58db85ca8e115edd7d98aa593dda5cb7ce0b931759363ecc546d3cc0040c98f19e6c5c692a1b081d52f05d6ef0631c048dbc7319c0ab0573fc80bb005378fe3a44438ef48c2e15b623bff6026ea223601a6adae980fcbda7aeb1c63b1e1330d9cfa4c16e845a74a02855e83e6a1a80275772b23f24371dac6474bb6c6e4e886eb7725ace0be1062e5536a0b0dc33b79e3fd67d61b19f43542d5a1f6d83ba5bebd02d42ebc9b660ed6b14f04fcda0dc634aaba006fc95162b564bb8fc254a8608bf0fac503934edf43e57123a35e2d0dce826c242a790629d1988863e69f0a187032cea924d1e185211ebded4c7cc81f44d269b2f0e6ba814bcc10adfa91828e1a2cbad5dfa8287ce2ca6e2b5f16b4bd5c39e9e79352e9183baed9185461494007b24e55c9624f8fad0107baf785d89e77ea8d3488e59c95361db46c0b87ee84f09eeec25e3c6f716c1db3c9c6892d7c0b0658dc2aaa51cc33fe753ff179637eaa39e34ffd017b66f8138625bed6c918bc7725d08e36f1c1f31b8678d77cff55a6e0f632e7e9862cab41e9bfddd40cd5283874d1e9cb610fa39f46e2f3ebb1b3af5770c86a5ecc0cc93a42d61e23e0e18ade165627c8deb582126fd3bdb79c0e36ae39fb3d3876b970c36cf9bdb84f49d64dcab29acbae0fdb1c282ba77375e9180e91494b8e408eed7229c7dac92fa3840296f0359ae20ecd2ca35d2b66190a1b5f511e1232769cc12411fe7d4580304d4360a09d0e2eb31bef0b25664a10092bf3474e22c695e7e896f67c68ecc8eb6963b69851091862cf3c4975527937d63b1c601b1066933e592871d50f72497302b431b7dcb723e537bef77f4647fed2f9c35301cd40983995cea4091d9734e05f537b58e350fe30bdcbef96668855e2ff823dc8724eb8c6f108f2757f093d48216e12823d9840b5f4a6f1eef75dc7a1196117cd94db16d34ba2ff7ddd2611c35a5cf618d8362936e7e59df4b751217debc6e50e9bdf02e14ad0a6568565ba017551c23c4ebf033d00bc8a33dea64f3ab10bfabb70bb2e9363452725fed2fd69e68fe4bc533fb383549f7902037087dcb65831438bab99c8b01c319027293c5db4c56fc0e773953c018ca3d45315a60c2148186433ebed72988d02ae739347ee8b981761b728e0678060fadd1b62f5492e281ceb6a429e49817d2995e21a888cb8a4df5101daf7df0a69c67c76920063afbd9a016ff52416bfa5ea5695faf55b0ce3aae654b658d3e87ee6f87a56e74ca2adb944cb32e09b31b586d71c4f16dddd7cb6b6be1ee3fee4a564fdfd6d9e3dd7103060cead19bcc3a860b87814d9d2a7624d3277f6975ad1b0e2e0e74094cc0d4dacf32a439d114a7e0b5ccb7079ede501a773358da105fcd1498dc384bb60f26b94ba25c4dbae7eea7c6817db7b776335ddd476e1bad232ba381b01b086acb167484f0b1f4c8ccda7658735e45202aadcae690c6a511bdb2fffff47c32762fbeec09cf95e3d05ff7e76619c926f8c59fbfaa33fe1fbb89ec0b8aa21f98c6ffd1cd152f007b7dde9ba28d5a63b16895bb52842865c416b6624ca450bfb24a3dc19c2f1837867c9032c6833b1f6c25db7006e271f8eb84ff5bacb5090a5f4114e5421ddbcea9e316adeeb5fe5434250a069461a4de395afd78b2ad950442551fa4d97d72d415d3d17668a747046e0a0f218c80d17f292417bcb27a6f076e7c3960a741a7300303d1975b9f0882c30f42f7896805418744aed2a0461d52163696012da19c1ee54921eef46b89700dceccf04fdd242668ac04570d963c5ef7c84e88af372af9dc50675222805312373e0f9b7701075244624626bac1ce867623dd99fdb4a381f4babec8176855501c49cc4ce2b1f4c0c9b3dc289a24507ebdd108844a76b6e6e855f0db5e6b77d2f5362efd1c92492a39b0c6d52bc3c462e07dcd18d08b3ee10150177a7b4f16e3848d9794bdaaa7528a46945a6f0bb596802f395cf74a212fd0150dcf8594ee3e8947fb965c5e8f6ad522e9265bc06c2da8c6078bd54a05cec2d272cf1110cf3e8c0ddf6d9ae99b2152067a6ddd2f10680aa806e8c1a28024c0941f75611bd91e5d1f4b740e0c8c0dbd428ac007e34577f68d3a1d8bd61b334b3b5f0640110b0fc0f30e626d98838a5dd493783ed3426253ea3fd0f75bc8f5c235e78b62941789fb223f725cd6b7946f896b768131f55d5ef712ea6aaaa54123590926db8679d5245474f711300c7d915487d360f3a0a0062c708697840d427bb0a183ee1ca107353404666192e4d1930b80935c0f86803cc14ca2810d443df3058a3d2e9f2109830b2a98fe6051e4f3bf02167970cb4859b44c839d8d3f8a22ea3d7bc189d5dc8e45cef8072a4840eb5902185928b387048819c8ab8b5f0be7b4bd8cb3b6231d963d815a10fdb0c9e47934bf7461d08288cace7b9cb321219de23840f1194f7d8de5180ccb329b6ca9bff0cb2a6b26396071048e91eada36f1d4ef79750537799c0194ce7e30b4558e48b312b3d6164d64e098e8e0df6c985e2f4afc1f86d8b06d630bcc51c9dbf21ad9f19906d19c86063582e6b30406ba974120c7158ab3b86da0ef9c5370eb2d85d12caa6df8d98f0cbb56a199ad4ff2c6b3437c3fe963ad6fd31cbf64bcab75ef7f08af1a2a7a99d084bdb49e8c8cc021fb5ea214b021bdbe4c5cc4a4895f899f392b44fefc25972d61a4284ca1e2469eb2881a7ecfc1e89226012f34924d083dfe13d8a0120792ad97c9196fbd103195db346083d1faa9bd3285365af5b698bbae89e94f7718039b635551e54fdfb21afbf3b00e8a4455101f5e8c254305ab68323da74ca7afcfacc7411056ec626b82b68f766019a9af815b0861ec2154b058dbfb4b39e133df3fa48c691983ff77280018c5238314a25b444d32d27b00be9ed89d282b30eee258734bcd6ed2ed9b86394e53b4dff0f9a551a990f24012c4fc210127aa5b01aa46a7bd7a726fa43668e5d76dbb78089a831b1ec33a1d38adc65a2b8150814cb798aea4141b2cb26dabd60b6a4332b476bb10f6198a5520fb498d71e0d4090e80b5d036c76e49ca83e2a96007cb78d24aeca259b559591f749a2686e80e1f70c81402ad99b342d4c8b9df8201f5421a3dc7b2fd2bac538fa43d156f916f0a51366a0ad507439f32a99d46ebb88871819c0fc5fc54b23633d3721d126d20dad39e0a5da3fb1965ce2896a6adfe3121833d147abf483a9f2c4ec484cee89e14a0ae379b24b4ec4b2c3c641568ae015cffc91dc1fe9d67ca4de3f05cc08c26f4059c6c2abfe9e5f39d9ea0d7198f417bad7cc8717f16000a3e975b760579beda19516baae03b7bcd770499ec9a762de1d49dabda763cab27c4327e1cf78b43d2c66c7a1b03fea2a7b696dd10564b082831b91aa47bf5ddf61ecd469c70113ce0b8baac3df7aa1e9110b73c6a54876a88c17b20a46d89385a7750550e53ce00a507de054244f363a94be627dda2c5d272cddf9c31c211555eb8c448c18e9d2c70dbebc184669cb83814b1a09cb8834291c80f83c7cf7990a328d2e3c98beab5ad08affeb3ee48f6947dd286fa37913ce2c366c50b8cd88e666e0b27a97f4e1139b431d5de942e064bd1c129f9e452ba99bd5ee0bdd17ea9a3e4e8ebeeffb7261a609a2d7313e3ec467c68dfe40ccf166a4916bccab6e52deb9f06d1dd7e6537f14a59430981d6026375c14deaec6593688a9aad730bcc5ccf7ecfdf9437d45860c1144238448fc0aa9eec3396e21b0f577421b0c74ed579a365556f7a39827bf70a8a2c6672eac7cb92a50695ef24f12dd95e0c55ceeaeb30560dd93d92ffe26c320823de1fe0f8dc90e0352d7c0f47083f8bfa23067e109b561141525ff3461e2a658e4045dd3e07cb639a532cd2cfe0e797fbb89ef1f1d8335d3e127c8d8d50117de0b98f3ec25b260a7b43d0576287f7f551576947a2150817f90ce346b0adaad76872a43f1a632f27eba9ab75902b777be4d20a408295ef0ed7998a545d0bd02869b5c4151edb4c812ed7a68729a8b6706029c7c51a1f1aef85f2512da9ea09547360c6cf4bfb1335ac7fdcb087ba2f5fd40352bc762eb13a451cd38b793416c135d127f818890ce3e547433831572aded640d5ab590e8e8e49f32208"}, {&(0x7f0000002a40)="e14b70b134c81742062c89097afe2974d2fcac7c72f40662ed1c0c0eaeff0a7f4509ec9049b86234effa74b4bfe0b709dee2991bcb07bd0e0ffc2db9bfe10d75baa7fd22a925c6323322979d681b78d8440a093523d45cd412000a6468b2879b93d4f263bc82029070c89399e7154ecc32214e43c7983aab7c19cf12d0fd6a66fd38954accf0edfc2ff59cd1b5b87d8c46092b84fa9ed32777e97a47d8e56b1638004a6fc278964690ab901ccde5251b53f0382e55b946ae2f4bbac15c343257b5244e72bd5a97f2a0e9bc838e106c50ce6000385536b9073adf2ccdede93bec043d6832580747f0db342a6f8d243792f77f0750"}, {&(0x7f0000002b40)="71f7d1e4ff6a5391f25752e924c1f2d6766d7356c23973592bb1ac0156df1f681d13e4abef406c4883b7dc7d827fd66ac7afd70972a2168aa42cb815b9ed193632148431480c1fa2cc4c162628db75a6aa41a6df48c817562f2682f6d39c4c8b1ca2ae5b1a195f260204aa7cf3fdee6602dba7f02f56958ce6a7e8a3dc4fedd80f69ae5a927c534756ef10412e3ba3281ae0a995de59d93cf660213f135a6847ff3d82548f17d3e2e31a874f09c2026936c2cb154d16b9cc0212f19e3c609bacf485a2281da91df7a2fc0d7f76f1b0e05129731b1223e32c27a80c8d9614d362aeebaccc03343bba44b941053f53b865e1f3e48ba15d1961b7d0d648"}, {&(0x7f0000002c40)="f756c874be7fcc98f45ffbac441d6eace87ea0ce786c28130902528119ae3ee10cc5fb60c5836c237cad9f1172d1a1da339eca92c15b76fb9ba858bb2f3af9ae87a40cccaa95ecd62d4bdafee00dd2762519185cc86a79644a81a28cebd282e90435f335c9e758dd0b377b96332a9bb38f92482bb7d61842d3f9feb127efe70351531fe8b69e2f6014d1ef9479ed94b122c809de621973345d2639882b0c36f9b238170e6255c0674ef79d5e43e839219a7b21d51fbcaa8fac27ed23bc72dd1fd77c36cd2f7e009e5460d704555abe632c1dbc183c0f33f8e929c44a50460f2b5b5c6bf985ec0f8e4a2a603e565a"}], 0x7}}], 0x2, 0x0) 5.494339204s ago: executing program 0 (id=74): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x200}}) read(r0, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 5.414906917s ago: executing program 4 (id=75): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 5.288509082s ago: executing program 1 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x24f7, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r0, r1, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}) listen(r2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=""/16, 0x0) creat(0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') write$cgroup_pid(r4, &(0x7f0000000000), 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) write$FUSE_ATTR(r4, &(0x7f0000005a40)={0x30, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) syz_usb_connect(0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000067c6fb106d04210847570102030109022f00010000000009040000000e01000005240400010524"], 0x0) 4.996284631s ago: executing program 3 (id=77): madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0xc) 4.824584717s ago: executing program 3 (id=78): openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="480100001a000708ab092504090007000aab0700a90100001d60369321000100fc800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9d", 0x7e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="043ef7148644ab4c55ea160b1f01257b0000c17e7d8c42d13eb059746b2746471e5375f332f2f18b739cc1d9890c0c0a0ec89cefe95cc2db025e3cc974e026507a0fe2c62c79789bf833dc07d6d5edeb0917374376240b49dc0bc288609d5d2ed64009303a79dd", @ANYBLOB="0c009900060000005d0000000a000600ffffffffffff00000a000600ffffffffffff00001400fe0008d970c928fe177414f0b16566f54beb0a00060008021100000100001400fe00ead69555705a75d4b7e5a3bb496c2871"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x800000b, 0x4) 4.189540348s ago: executing program 2 (id=80): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000200)="f1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x1000000000000, 0x0}) 4.084191982s ago: executing program 4 (id=81): socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000084"], 0x30}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000000)) wait4(0x0, &(0x7f0000000040), 0x40000000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x70b}, 0x14}}, 0x0) r2 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x88, 0x1403, 0x1, 0x0, 0x40, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x88}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000180)=""/10, &(0x7f00000001c0)=0xa) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc018935c, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8000, 0x7, 0x8000, 0x8, {{0x30, 0x4, 0x0, 0x3d, 0xc0, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp={0x44, 0x10, 0x7c, 0x0, 0x3, [0x463, 0x7, 0x7]}, @noop, @timestamp_addr={0x44, 0x3c, 0x5, 0x1, 0x4, [{@multicast1, 0x8}, {@multicast1, 0x9}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x1}, {@loopback, 0x7}, {@rand_addr=0x64010100, 0x7b9}, {@loopback, 0x80000000}]}, @timestamp_prespec={0x44, 0x14, 0xf8, 0x3, 0x0, [{@multicast1, 0xffff29b6}, {@local, 0x200000}]}, @timestamp_addr={0x44, 0x2c, 0xf9, 0x1, 0x9, [{@broadcast, 0x1}, {@private=0xa010101, 0xff}, {@local}, {@local, 0x4e}, {@broadcast, 0x81}]}, @timestamp={0x44, 0x14, 0x7f, 0x0, 0x5, [0x10000, 0x7fffffff, 0x6, 0x3]}, @timestamp={0x44, 0x8, 0x39, 0x0, 0x2, [0x4]}]}}}}}) 3.811435051s ago: executing program 4 (id=82): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000200)=0xa0000) unshare(0x400) r3 = socket$inet6(0xa, 0x2, 0x3a) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c00031000", @ANYBLOB="82862e575d"], 0xf) syz_open_dev$dri(0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @remote, 0x4c}, 0x1c) 3.687588236s ago: executing program 3 (id=83): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) 3.176665193s ago: executing program 1 (id=84): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0x14, 0x5, 0x3, 0x0, 0x0, [0x0]}]}}}}}}}}, 0x0) 3.176474693s ago: executing program 2 (id=85): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x3634}], 0x7}, 0x0) 2.955748981s ago: executing program 1 (id=86): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f000000b3c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="35d7bf24b01e7dad8eda553b9811", 0xe}, {&(0x7f0000000140)="16de61008f82e48354f212e7", 0xc}, {&(0x7f0000000180)="1e606d89f95359c8039a1ad9ba778cf1998594c07fce224a6beaf005a4bdffeac7259f9bf670acbc5d7cb3b4c05a26e355b30cedcf4c", 0x36}], 0x3, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000a80)=""/111, 0x50}], 0x1}}], 0x1, 0x0, 0x0) 2.198806756s ago: executing program 2 (id=87): r0 = socket(0x40000000015, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000340)}) statx(0xffffffffffffffff, &(0x7f00000004c0)='.\x00', 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) 1.900662866s ago: executing program 1 (id=88): madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0xc) 1.703391613s ago: executing program 1 (id=89): prctl$PR_SET_SECUREBITS(0x1c, 0x35) prctl$PR_SET_SECUREBITS(0x1c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) 874.322391ms ago: executing program 0 (id=90): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000b3c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="16de61008f82e48354f212e7", 0xc}, {&(0x7f0000000180)="1e606d89f95359c8039a1ad9ba778cf1998594c07fce224a6beaf005a4bdffeac7259f9bf670acbc5d7cb3b4c05a", 0x2e}], 0x2, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000a80)=""/111, 0xf}, {&(0x7f00000002c0)=""/56, 0x38}], 0x2}}], 0x1, 0x0, 0x0) 856.356421ms ago: executing program 2 (id=91): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)) 597.44271ms ago: executing program 2 (id=92): socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000084"], 0x30}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000000)) wait4(0x0, &(0x7f0000000040), 0x40000000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x70b}, 0x14}}, 0x0) r2 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x88, 0x1403, 0x1, 0x0, 0x40, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x88}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000180)=""/10, &(0x7f00000001c0)=0xa) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc018935c, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8000, 0x7, 0x8000, 0x8, {{0x30, 0x4, 0x0, 0x3d, 0xc0, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp={0x44, 0x10, 0x7c, 0x0, 0x3, [0x463, 0x7, 0x7]}, @noop, @timestamp_addr={0x44, 0x3c, 0x5, 0x1, 0x4, [{@multicast1, 0x8}, {@multicast1, 0x9}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x1}, {@loopback, 0x7}, {@rand_addr=0x64010100, 0x7b9}, {@loopback, 0x80000000}]}, @timestamp_prespec={0x44, 0x14, 0xf8, 0x3, 0x0, [{@multicast1, 0xffff29b6}, {@local, 0x200000}]}, @timestamp_addr={0x44, 0x2c, 0xf9, 0x1, 0x9, [{@broadcast, 0x1}, {@private=0xa010101, 0xff}, {@local}, {@local, 0x4e}, {@broadcast, 0x81}]}, @timestamp={0x44, 0x14, 0x7f, 0x0, 0x5, [0x10000, 0x7fffffff, 0x6, 0x3]}, @timestamp={0x44, 0x8, 0x39, 0x0, 0x2, [0x4]}]}}}}}) 556.250602ms ago: executing program 0 (id=93): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[], 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) socket$xdp(0x2c, 0x3, 0x0) unshare(0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 379.735858ms ago: executing program 4 (id=94): unshare(0x2c060000) unshare(0x24020400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 188.612394ms ago: executing program 2 (id=95): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc45, 0x5112, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 188.359784ms ago: executing program 4 (id=96): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) r1 = creat(0x0, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) recvmmsg(r1, 0x0, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x15) 71.616808ms ago: executing program 3 (id=97): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r2 = accept$alg(r1, 0x0, 0x0) read$alg(r2, &(0x7f0000000080)=""/4114, 0x1012) write$binfmt_script(r2, &(0x7f0000004180), 0xff77) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"}) 0s ago: executing program 1 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x0, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 55.107736][ T3538] cgroup: Unknown subsys name 'net' [ 55.241454][ T3538] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.828674][ T3538] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.548815][ T3556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.557880][ T3562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.566518][ T3562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.574131][ T3562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.581850][ T3563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.582361][ T3562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.590182][ T3563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.597746][ T3562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.604194][ T3563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.611427][ T3562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.624735][ T3563] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.625449][ T3562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.632590][ T3563] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.639407][ T3562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.646319][ T3563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.655445][ T3562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.661380][ T3563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.667504][ T3562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.675047][ T3563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.681390][ T3562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.688186][ T3563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.695498][ T3562] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.701883][ T3563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.710314][ T3562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.715950][ T3563] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.723044][ T3562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.730645][ T3563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.737217][ T3562] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.751663][ T3562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.761015][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.099845][ T3554] chnl_net:caif_netlink_parms(): no params data found [ 58.254240][ T3548] chnl_net:caif_netlink_parms(): no params data found [ 58.290704][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.298152][ T3554] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.307184][ T3554] device bridge_slave_0 entered promiscuous mode [ 58.318940][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.326128][ T3554] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.334222][ T3554] device bridge_slave_1 entered promiscuous mode [ 58.360856][ T3550] chnl_net:caif_netlink_parms(): no params data found [ 58.444119][ T3554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.474990][ T3554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.531239][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.542177][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.551151][ T3548] device bridge_slave_0 entered promiscuous mode [ 58.563130][ T3551] chnl_net:caif_netlink_parms(): no params data found [ 58.576121][ T3554] team0: Port device team_slave_0 added [ 58.600555][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.607838][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.616586][ T3548] device bridge_slave_1 entered promiscuous mode [ 58.629468][ T3554] team0: Port device team_slave_1 added [ 58.646951][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.654055][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.662435][ T3550] device bridge_slave_0 entered promiscuous mode [ 58.699279][ T3560] chnl_net:caif_netlink_parms(): no params data found [ 58.709272][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.717877][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.727536][ T3550] device bridge_slave_1 entered promiscuous mode [ 58.737267][ T3548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.755128][ T3554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.762109][ T3554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.788734][ T3554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.815472][ T3548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.831941][ T3554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.839125][ T3554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.865394][ T3554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.916579][ T3550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.948021][ T3550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.970756][ T3548] team0: Port device team_slave_0 added [ 59.009855][ T3550] team0: Port device team_slave_0 added [ 59.017567][ T3548] team0: Port device team_slave_1 added [ 59.025278][ T3550] team0: Port device team_slave_1 added [ 59.080333][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.087955][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.096235][ T3551] device bridge_slave_0 entered promiscuous mode [ 59.107313][ T3554] device hsr_slave_0 entered promiscuous mode [ 59.114768][ T3554] device hsr_slave_1 entered promiscuous mode [ 59.149372][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.156866][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.165022][ T3551] device bridge_slave_1 entered promiscuous mode [ 59.181577][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.188936][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.197035][ T3560] device bridge_slave_0 entered promiscuous mode [ 59.205196][ T3548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.212152][ T3548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.242293][ T3548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.254195][ T3550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.264613][ T3550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.290796][ T3550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.310753][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.320775][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.329672][ T3560] device bridge_slave_1 entered promiscuous mode [ 59.346872][ T3548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.353826][ T3548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.380175][ T3548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.392373][ T3550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.399385][ T3550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.425473][ T3550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.439233][ T3551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.473227][ T3551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.492301][ T3560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.535563][ T3560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.562676][ T3551] team0: Port device team_slave_0 added [ 59.602506][ T3551] team0: Port device team_slave_1 added [ 59.612201][ T3548] device hsr_slave_0 entered promiscuous mode [ 59.619189][ T3548] device hsr_slave_1 entered promiscuous mode [ 59.626023][ T3548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.633789][ T3548] Cannot create hsr debugfs directory [ 59.653657][ T3550] device hsr_slave_0 entered promiscuous mode [ 59.660909][ T3550] device hsr_slave_1 entered promiscuous mode [ 59.667824][ T3550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.675508][ T3550] Cannot create hsr debugfs directory [ 59.701247][ T3560] team0: Port device team_slave_0 added [ 59.738185][ T3551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.745752][ T3551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.772003][ T3551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.784781][ T3560] team0: Port device team_slave_1 added [ 59.791016][ T3551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.798021][ T3551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.825406][ T3551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.832023][ T3553] Bluetooth: hci0: command tx timeout [ 59.836311][ T48] Bluetooth: hci1: command tx timeout [ 59.841535][ T3556] Bluetooth: hci4: command tx timeout [ 59.847107][ T3565] Bluetooth: hci3: command tx timeout [ 59.852968][ T3553] Bluetooth: hci2: command tx timeout [ 59.975242][ T3560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.982232][ T3560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.009275][ T3560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.028619][ T3551] device hsr_slave_0 entered promiscuous mode [ 60.035665][ T3551] device hsr_slave_1 entered promiscuous mode [ 60.042363][ T3551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.050554][ T3551] Cannot create hsr debugfs directory [ 60.064070][ T3560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.071803][ T3560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.097904][ T3560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.201631][ T3560] device hsr_slave_0 entered promiscuous mode [ 60.211120][ T3560] device hsr_slave_1 entered promiscuous mode [ 60.223047][ T3560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.230683][ T3560] Cannot create hsr debugfs directory [ 60.389905][ T3554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.417780][ T3554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.435683][ T3554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.461324][ T3554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.492887][ T3550] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.514562][ T3550] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.539933][ T3550] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.566260][ T3550] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.636827][ T3548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.657043][ T3548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.685890][ T3548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.703159][ T3554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.716018][ T3548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.732500][ T3551] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.752284][ T3554] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.777987][ T3551] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.790887][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.800756][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.825158][ T3551] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.835198][ T3551] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.854152][ T3550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.881689][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.891167][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.901344][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.908725][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.920607][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.953028][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.963022][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.972490][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.979662][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.987691][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.003388][ T3550] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.027090][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.035984][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.046061][ T3560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.068507][ T3560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.078660][ T3560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.088719][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.098120][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.107461][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.116434][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.125681][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.134138][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.141414][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.150642][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.158972][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.180070][ T3560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.221711][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.231928][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.241522][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.248814][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.257289][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.266534][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.313658][ T3554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.327532][ T3554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.339911][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.350443][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.359922][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.369491][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.378269][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.387214][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.396510][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.405169][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.414868][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.422891][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.471301][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.481347][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.500868][ T3550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.512053][ T3550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.548786][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.560234][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.573228][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.589312][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.629690][ T3551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.641241][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.670153][ T3548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.700565][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.711107][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.737095][ T3551] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.759616][ T3560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.776371][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.791312][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.802543][ T3548] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.836741][ T3560] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.845671][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.855504][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.863995][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.871197][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.880211][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.890078][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.898338][ T48] Bluetooth: hci3: command tx timeout [ 61.903781][ T48] Bluetooth: hci1: command tx timeout [ 61.909378][ T3565] Bluetooth: hci0: command tx timeout [ 61.909453][ T3553] Bluetooth: hci2: command tx timeout [ 61.914850][ T3565] Bluetooth: hci4: command tx timeout [ 61.916408][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.933006][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.940955][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.949611][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.000534][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.009826][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.018620][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.027512][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.034674][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.042529][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.051496][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.060622][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.067797][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.075711][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.084708][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.093594][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.101222][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.109000][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.118345][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.126960][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.134044][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.143107][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.151989][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.160634][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.167773][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.175817][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.215264][ T3554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.235906][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.246231][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.255727][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.265336][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.274819][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.283928][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.293204][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.302552][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.311829][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.321459][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.331112][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.340002][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.349024][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.397738][ T3548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.410479][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.419100][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.427479][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.435720][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.444832][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.453347][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.462037][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.470727][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.479632][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.489105][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.498361][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.507224][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.517932][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.526643][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.535678][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.544088][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.552736][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.562924][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.571919][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.579572][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.598344][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.618411][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.633911][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.649250][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.666549][ T3550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.738298][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.747851][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.822595][ T3550] device veth0_vlan entered promiscuous mode [ 62.844684][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.853346][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.865484][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.873425][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.913915][ T3550] device veth1_vlan entered promiscuous mode [ 63.027583][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.039529][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.062146][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.099748][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.118809][ T3550] device veth0_macvtap entered promiscuous mode [ 63.142777][ T3550] device veth1_macvtap entered promiscuous mode [ 63.209850][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.231782][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.256849][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.268842][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.280402][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.293406][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.317826][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.326903][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.339564][ T3550] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.348759][ T3550] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.359437][ T3550] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.368461][ T3550] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.400294][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.408503][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.416696][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.424253][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.432827][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.440454][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.458095][ T3560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.476418][ T3548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.492799][ T3551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.521813][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.530907][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.590631][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.600425][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.609755][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.619152][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.628549][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.637452][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.651362][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.660993][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.712978][ T3554] device veth0_vlan entered promiscuous mode [ 63.720429][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.729612][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.737989][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.746527][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.760893][ T3560] device veth0_vlan entered promiscuous mode [ 63.793824][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.801992][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.811228][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.819834][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.828804][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.837251][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.849791][ T3560] device veth1_vlan entered promiscuous mode [ 63.866514][ T3548] device veth0_vlan entered promiscuous mode [ 63.878904][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.893362][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.902776][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.911471][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.919640][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.920540][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.935310][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.943111][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.952900][ T3554] device veth1_vlan entered promiscuous mode [ 63.970324][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.974856][ T48] Bluetooth: hci1: command tx timeout [ 63.978637][ T3556] Bluetooth: hci4: command tx timeout [ 63.983704][ T48] Bluetooth: hci0: command tx timeout [ 63.989185][ T3553] Bluetooth: hci2: command tx timeout [ 63.994831][ T3565] Bluetooth: hci3: command tx timeout [ 64.007484][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.020966][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.027174][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.040939][ T3551] device veth0_vlan entered promiscuous mode [ 64.053739][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.066037][ T3548] device veth1_vlan entered promiscuous mode [ 64.095560][ T3551] device veth1_vlan entered promiscuous mode [ 64.124943][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.133642][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.150778][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.187623][ T3631] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.190054][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.214773][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.223542][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.248672][ T3554] device veth0_macvtap entered promiscuous mode [ 64.267692][ T3560] device veth0_macvtap entered promiscuous mode [ 64.299608][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.308100][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.321157][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.330238][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.345345][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.362945][ T3560] device veth1_macvtap entered promiscuous mode [ 64.378739][ T3554] device veth1_macvtap entered promiscuous mode [ 64.422004][ T3551] device veth0_macvtap entered promiscuous mode [ 64.436855][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.447399][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.457507][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.466271][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.477332][ T3548] device veth0_macvtap entered promiscuous mode [ 64.500437][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.514359][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.525967][ T3560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.537170][ T3551] device veth1_macvtap entered promiscuous mode [ 64.547608][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.556458][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.565475][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.573379][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.582322][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.606154][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.622015][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.632695][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.649800][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.663580][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.679897][ T3548] device veth1_macvtap entered promiscuous mode [ 64.697420][ T3560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.710054][ T3560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.722122][ T3560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.748939][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.761734][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.770866][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.780341][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.789124][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.799747][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.813061][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.824050][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.835474][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.848026][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.860695][ T3554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.870008][ T3554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.879278][ T3554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.888535][ T3554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.901634][ T3560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.911290][ T3560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.920399][ T3560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.931076][ T3560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.943968][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.953246][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.972538][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.983378][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.993735][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.004674][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.035333][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.045890][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.058369][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.084489][ T3548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.104972][ T3548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.130729][ T3548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.154601][ T3548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.165441][ T3548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.184374][ T3548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.194239][ T3548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.206808][ T3548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.229753][ T3548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.238816][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.259924][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.274932][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.290583][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.303227][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.323325][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.333756][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.345642][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.355921][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.367043][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.382897][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.415482][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.430412][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.454848][ T3548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.471661][ T3548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.483122][ T3548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.499606][ T3548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.515793][ T3548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.532595][ T3548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.543303][ T3548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.562209][ T3548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.577137][ T3548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.600547][ T3551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.623765][ T3551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.632833][ T3551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.644274][ T3551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.657484][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.667539][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.696873][ T3548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.708654][ T3548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.721038][ T3548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.729865][ T3548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.867893][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.879148][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.888945][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.896814][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.941786][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.952747][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.019158][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.044185][ T3618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.054450][ T3565] Bluetooth: hci0: command tx timeout [ 66.055011][ T48] Bluetooth: hci3: command tx timeout [ 66.065329][ T3565] Bluetooth: hci4: command tx timeout [ 66.065364][ T3565] Bluetooth: hci2: command tx timeout [ 66.065393][ T3565] Bluetooth: hci1: command tx timeout [ 66.076524][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.083529][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.098164][ T3618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.122878][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.204939][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.212971][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.264880][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.273365][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.315219][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.331474][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.357908][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.370927][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.391026][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.423626][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.452369][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.490202][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.974837][ T26] audit: type=1326 audit(1719754745.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3702 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ead75b99 code=0x7ffc0000 [ 68.045377][ T26] audit: type=1326 audit(1719754745.330:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3702 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60ead75b99 code=0x7ffc0000 [ 68.122195][ T26] audit: type=1326 audit(1719754745.330:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3702 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ead75b99 code=0x7ffc0000 [ 68.180379][ T26] audit: type=1326 audit(1719754745.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3702 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f60ead75b99 code=0x7ffc0000 [ 68.598806][ T3714] Zero length message leads to an empty skb [ 68.749764][ T26] audit: type=1326 audit(1719754745.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3702 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ead75b99 code=0x7ffc0000 [ 69.244984][ T26] audit: type=1326 audit(1719754745.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3702 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ead75b99 code=0x7ffc0000 [ 69.376283][ T26] audit: type=1326 audit(1719754745.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3702 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f60ead75b99 code=0x7ffc0000 [ 69.814427][ T26] audit: type=1326 audit(1719754745.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3702 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ead75b99 code=0x7ffc0000 [ 70.138165][ T3727] kvm: emulating exchange as write [ 70.694668][ T3596] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.058548][ T26] audit: type=1804 audit(1719754748.370:10): pid=3759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.46" name="/root/syzkaller.r2zpqx/6/bus" dev="sda1" ino=1969 res=1 errno=0 [ 71.115922][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.145161][ T154] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.163164][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.176227][ T3596] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 71.190701][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.197378][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.204029][ T26] audit: type=1804 audit(1719754748.510:11): pid=3760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.46" name="/root/syzkaller.r2zpqx/6/bus" dev="sda1" ino=1969 res=1 errno=0 [ 71.257373][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.322058][ T3596] usb 4-1: config 0 descriptor?? [ 71.434773][ T154] usb 1-1: Using ep0 maxpacket: 16 [ 71.554697][ T154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.584429][ T154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.596303][ T154] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 71.608326][ T154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.619687][ T154] usb 1-1: config 0 descriptor?? [ 71.821513][ T3596] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 71.834779][ T3596] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 71.841806][ T3596] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 71.844438][ T3597] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.854586][ T3596] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 71.862981][ T3596] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 71.886427][ T3596] kye 0003:0458:0138.0001: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 72.034658][ T3596] usb 4-1: USB disconnect, device number 2 [ 72.120275][ T3597] usb 5-1: Using ep0 maxpacket: 32 [ 72.244685][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 72.268419][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 72.456708][ T3597] usb 5-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 72.477855][ T3597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.501995][ T3597] usb 5-1: Product: syz [ 72.517137][ T3597] usb 5-1: Manufacturer: syz [ 72.544502][ T3597] usb 5-1: SerialNumber: syz [ 72.561426][ T154] hid-generic 0003:1038:12B6.0002: unbalanced collection at end of report description [ 72.571736][ T154] hid-generic: probe of 0003:1038:12B6.0002 failed with error -22 [ 72.588103][ T154] usb 1-1: USB disconnect, device number 2 [ 72.597887][ T3597] usb 5-1: config 0 descriptor?? [ 72.656779][ T3597] smsusb:smsusb_probe: board id=8, interface number 0 [ 72.724525][ T3597] smsusb:smsusb_probe: Device initialized with return code -19 [ 72.865965][ T3597] usb 5-1: USB disconnect, device number 2 [ 73.033598][ T3805] ip6gretap0 speed is unknown, defaulting to 1000 [ 73.050607][ T3805] ip6gretap0 speed is unknown, defaulting to 1000 [ 73.112133][ T3805] ip6gretap0 speed is unknown, defaulting to 1000 [ 73.138104][ T3805] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.161485][ T3805] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 73.257699][ T3805] ip6gretap0 speed is unknown, defaulting to 1000 [ 73.276135][ T3805] ip6gretap0 speed is unknown, defaulting to 1000 [ 73.352729][ T3805] ip6gretap0 speed is unknown, defaulting to 1000 [ 73.382077][ T3805] ip6gretap0 speed is unknown, defaulting to 1000 [ 73.413892][ T3805] ip6gretap0 speed is unknown, defaulting to 1000 [ 73.826977][ T3822] Bluetooth: MGMT ver 1.22 [ 74.664599][ T154] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.785457][ T3563] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 74.794066][ T3563] Bluetooth: hci0: Injecting HCI hardware error event [ 74.802780][ T48] Bluetooth: hci0: hardware error 0x00 [ 74.924558][ T154] usb 2-1: Using ep0 maxpacket: 16 [ 75.065639][ T154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.271537][ T154] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 75.284366][ T154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.296564][ T154] usb 2-1: Product: syz [ 75.300850][ T154] usb 2-1: Manufacturer: syz [ 75.306045][ T154] usb 2-1: SerialNumber: syz [ 75.321932][ T154] usb 2-1: config 0 descriptor?? [ 75.452766][ T3859] siw: device registration error -23 [ 75.634650][ T154] usb 2-1: Found UVC 0.00 device syz (046d:0821) [ 75.644192][ T154] usb 2-1: No valid video chain found. [ 75.694802][ T154] usb 2-1: USB disconnect, device number 2 [ 76.308174][ T3869] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 76.854446][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 77.414508][ T48] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 77.423028][ T48] Bluetooth: hci4: Injecting HCI hardware error event [ 77.432692][ T48] Bluetooth: hci4: hardware error 0x00 [ 79.522883][ T3904] syz.1.98 uses obsolete (PF_INET,SOCK_PACKET) [ 79.603966][ T3905] kernel profiling enabled (shift: 3) [ 79.614350][ C0] ================================================================== [ 79.622453][ C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0 [ 79.629617][ C0] Read of size 8 at addr ffffc90004f3f5c0 by task syz.4.96/3902 [ 79.637353][ C0] [ 79.639718][ C0] CPU: 0 PID: 3902 Comm: syz.4.96 Not tainted 6.1.96-syzkaller #0 [ 79.647626][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 79.657701][ C0] Call Trace: [ 79.660992][ C0] [ 79.663849][ C0] dump_stack_lvl+0x1e3/0x2cb [ 79.668579][ C0] ? nf_tcp_handle_invalid+0x642/0x642 [ 79.674076][ C0] ? panic+0x764/0x764 [ 79.678173][ C0] ? _printk+0xd1/0x111 [ 79.682373][ C0] print_report+0x15f/0x4f0 [ 79.686896][ C0] ? __virt_addr_valid+0xb9/0x520 [ 79.691946][ C0] ? profile_pc+0xa4/0xe0 [ 79.696313][ C0] kasan_report+0x136/0x160 [ 79.700837][ C0] ? profile_pc+0xa4/0xe0 [ 79.705195][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 79.711107][ C0] profile_pc+0xa4/0xe0 [ 79.715282][ C0] profile_tick+0xee/0x170 [ 79.719720][ C0] tick_sched_timer+0x390/0x550 [ 79.724583][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 79.730153][ C0] __hrtimer_run_queues+0x5a7/0xe50 [ 79.735388][ C0] ? hrtimer_interrupt+0x980/0x980 [ 79.740527][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 79.746672][ C0] hrtimer_interrupt+0x392/0x980 [ 79.751651][ C0] __sysvec_apic_timer_interrupt+0x156/0x580 [ 79.757657][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 79.763318][ C0] [ 79.766257][ C0] [ 79.769198][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 79.775207][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 79.781741][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 c2 b8 4c f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 67 06 c9 f6 65 8b 05 08 13 6d 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 79.801370][ C0] RSP: 0018:ffffc90004f3f5c0 EFLAGS: 00000206 [ 79.807455][ C0] RAX: 1ba2f03063e56d00 RBX: 1ffff920009e7ebc RCX: ffffffff816ad45a [ 79.815442][ C0] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001 [ 79.823424][ C0] RBP: ffffc90004f3f650 R08: dffffc0000000000 R09: fffffbfff2093859 [ 79.831406][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 79.839387][ C0] R13: 1ffff920009e7eb8 R14: ffffc90004f3f5e0 R15: 0000000000000246 [ 79.847376][ C0] ? mark_lock+0x9a/0x340 [ 79.851742][ C0] ? _raw_spin_unlock+0x40/0x40 [ 79.856609][ C0] ? __wake_up_common+0x2a0/0x4e0 [ 79.861692][ C0] __wake_up_sync_key+0x121/0x1c0 [ 79.866761][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 79.872778][ C0] ? __skb_try_recv_from_queue+0x770/0x770 [ 79.878609][ C0] ? __lock_acquire+0x125b/0x1f80 [ 79.883674][ C0] __unix_dgram_recvmsg+0x5fe/0x1260 [ 79.888995][ C0] ? unix_unhash+0x10/0x10 [ 79.893432][ C0] ? iovec_from_user+0x5d/0x380 [ 79.898307][ C0] ? __might_fault+0xa1/0x110 [ 79.903007][ C0] ? __import_iovec+0x316/0x4c0 [ 79.907881][ C0] ? unix_dgram_recvmsg+0xaf/0xd0 [ 79.912934][ C0] ? unix_dgram_sendmsg+0x2050/0x2050 [ 79.918326][ C0] ____sys_recvmsg+0x285/0x530 [ 79.923111][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 79.928160][ C0] ? __might_fault+0xa1/0x110 [ 79.932863][ C0] do_recvmmsg+0x46d/0xad0 [ 79.937320][ C0] ? futex_wait_queue+0x149/0x1d0 [ 79.942377][ C0] ? __sys_recvmmsg+0x270/0x270 [ 79.947250][ C0] ? futex_wait+0x30e/0x5c0 [ 79.951776][ C0] ? plist_del+0x3ed/0x410 [ 79.956230][ C0] ? futex_wake+0x4ea/0x590 [ 79.960783][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 79.965850][ C0] ? xfd_validate_state+0x6a/0x140 [ 79.970990][ C0] __x64_sys_recvmmsg+0x195/0x240 [ 79.976039][ C0] ? do_recvmmsg+0xad0/0xad0 [ 79.980654][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 79.986680][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 79.990603][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.991888][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 79.991923][ C0] do_syscall_64+0x3b/0xb0 [ 80.009775][ C0] ? clear_bhb_loop+0x45/0xa0 [ 80.014495][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.020428][ C0] RIP: 0033:0x7f7d5f975b99 [ 80.024889][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.044525][ C0] RSP: 002b:00007f7d607f9048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 80.052985][ C0] RAX: ffffffffffffffda RBX: 00007f7d5fb04078 RCX: 00007f7d5f975b99 [ 80.060985][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 80.068978][ C0] RBP: 00007f7d5f9f677e R08: 0000000000000000 R09: 0000000000000000 [ 80.075047][ T3563] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 80.076955][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 80.076972][ C0] R13: 000000000000006e R14: 00007f7d5fb04078 R15: 00007ffc611e24c8 [ 80.076996][ C0] [ 80.077004][ C0] [ 80.077008][ C0] The buggy address belongs to stack of task syz.4.96/3902 [ 80.077022][ C0] and is located at offset 0 in frame: [ 80.077029][ C0] _raw_spin_unlock_irqrestore+0x0/0x130 [ 80.089212][ T3563] Bluetooth: hci3: Injecting HCI hardware error event [ 80.093337][ C0] [ 80.102864][ T3565] Bluetooth: hci3: hardware error 0x00 [ 80.104311][ C0] This frame has 1 object: [ 80.104325][ C0] [32, 40) 'flags.i.i.i.i' [ 80.104336][ C0] [ 80.104342][ C0] The buggy address belongs to the virtual mapping at [ 80.104342][ C0] [ffffc90004f38000, ffffc90004f41000) created by: [ 80.104342][ C0] copy_process+0x637/0x4060 [ 80.104378][ C0] [ 80.170906][ C0] The buggy address belongs to the physical page: [ 80.177437][ C0] page:ffffea000087b640 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21ed9 [ 80.187651][ C0] memcg:ffff888015f41882 [ 80.191939][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.199084][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 80.207869][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888015f41882 [ 80.216485][ C0] page dumped because: kasan: bad access detected [ 80.222942][ C0] page_owner tracks the page as allocated [ 80.228679][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 3862, tgid 3862 (syz.3.83), ts 75803560948, free_ts 75559265611 [ 80.246685][ C0] post_alloc_hook+0x18d/0x1b0 [ 80.251478][ C0] get_page_from_freelist+0x31a1/0x3320 [ 80.257080][ C0] __alloc_pages+0x28d/0x770 [ 80.261697][ C0] __vmalloc_node_range+0x92b/0x1490 [ 80.267104][ C0] dup_task_struct+0x3e5/0x6d0 [ 80.271895][ C0] copy_process+0x637/0x4060 [ 80.276514][ C0] kernel_clone+0x222/0x920 [ 80.281036][ C0] __se_sys_clone3+0x373/0x410 [ 80.285820][ C0] do_syscall_64+0x3b/0xb0 [ 80.290264][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.296275][ C0] page last free stack trace: [ 80.300962][ C0] free_unref_page_prepare+0xf63/0x1120 [ 80.306536][ C0] free_unref_page_list+0x663/0x900 [ 80.311758][ C0] release_pages+0x2836/0x2b40 [ 80.316582][ C0] tlb_flush_mmu+0xfc/0x210 [ 80.321116][ C0] tlb_finish_mmu+0xce/0x1f0 [ 80.325730][ C0] exit_mmap+0x3c3/0x9f0 [ 80.330004][ C0] __mmput+0x115/0x3c0 [ 80.334096][ C0] exit_mm+0x226/0x300 [ 80.338774][ C0] do_exit+0x9f6/0x26a0 [ 80.343048][ C0] __x64_sys_exit+0x3c/0x40 [ 80.347589][ C0] do_syscall_64+0x3b/0xb0 [ 80.352036][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.357955][ C0] [ 80.360288][ C0] Memory state around the buggy address: [ 80.365939][ C0] ffffc90004f3f480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 80.374022][ C0] ffffc90004f3f500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 80.375153][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 80.382175][ C0] >ffffc90004f3f580: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 80.382187][ C0] ^ [ 80.382198][ C0] ffffc90004f3f600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 80.382210][ C0] ffffc90004f3f680: f1 f1 f1 f1 00 00 00 00 00 f3 f3 f3 f3 f3 f3 f3 [ 80.382220][ C0] ================================================================== [ 80.382231][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.382240][ C0] CPU: 0 PID: 3902 Comm: syz.4.96 Not tainted 6.1.96-syzkaller #0 [ 80.382261][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 80.382274][ C0] Call Trace: [ 80.382281][ C0] [ 80.382288][ C0] dump_stack_lvl+0x1e3/0x2cb [ 80.382327][ C0] ? nf_tcp_handle_invalid+0x642/0x642 [ 80.382361][ C0] ? panic+0x764/0x764 [ 80.382381][ C0] ? rcu_is_watching+0x11/0xb0 [ 80.382402][ C0] ? lock_release+0xd6/0xa20 [ 80.382433][ C0] ? vscnprintf+0x59/0x80 [ 80.382460][ C0] panic+0x318/0x764 [ 80.382481][ C0] ? __wake_up_klogd+0xcc/0x100 [ 80.382500][ C0] ? check_panic_on_warn+0x1d/0xa0 [ 80.382525][ C0] ? memcpy_page_flushcache+0xfc/0xfc [ 80.382547][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 80.382572][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 80.382599][ C0] ? _raw_spin_unlock+0x40/0x40 [ 80.382628][ C0] check_panic_on_warn+0x7e/0xa0 [ 80.382651][ C0] ? profile_pc+0xa4/0xe0 [ 80.382679][ C0] end_report+0x66/0x110 [ 80.382697][ C0] kasan_report+0x143/0x160 [ 80.382718][ C0] ? profile_pc+0xa4/0xe0 [ 80.382748][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 80.382775][ C0] profile_pc+0xa4/0xe0 [ 80.382804][ C0] profile_tick+0xee/0x170 [ 80.382832][ C0] tick_sched_timer+0x390/0x550 [ 80.382853][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 80.382873][ C0] __hrtimer_run_queues+0x5a7/0xe50 [ 80.382915][ C0] ? hrtimer_interrupt+0x980/0x980 [ 80.382940][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 80.382973][ C0] hrtimer_interrupt+0x392/0x980 [ 80.383010][ C0] __sysvec_apic_timer_interrupt+0x156/0x580 [ 80.383051][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 80.383075][ C0] [ 80.383082][ C0] [ 80.383089][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.383118][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 80.383146][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 c2 b8 4c f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 67 06 c9 f6 65 8b 05 08 13 6d 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 80.383162][ C0] RSP: 0018:ffffc90004f3f5c0 EFLAGS: 00000206 [ 80.383182][ C0] RAX: 1ba2f03063e56d00 RBX: 1ffff920009e7ebc RCX: ffffffff816ad45a [ 80.383198][ C0] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001 [ 80.383212][ C0] RBP: ffffc90004f3f650 R08: dffffc0000000000 R09: fffffbfff2093859 [ 80.383228][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 80.383242][ C0] R13: 1ffff920009e7eb8 R14: ffffc90004f3f5e0 R15: 0000000000000246 [ 80.383261][ C0] ? mark_lock+0x9a/0x340 [ 80.383294][ C0] ? _raw_spin_unlock+0x40/0x40 [ 80.383317][ C0] ? __wake_up_common+0x2a0/0x4e0 [ 80.383350][ C0] __wake_up_sync_key+0x121/0x1c0 [ 80.383382][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 80.383413][ C0] ? __skb_try_recv_from_queue+0x770/0x770 [ 80.383458][ C0] ? __lock_acquire+0x125b/0x1f80 [ 80.383492][ C0] __unix_dgram_recvmsg+0x5fe/0x1260 [ 80.383522][ C0] ? unix_unhash+0x10/0x10 [ 80.383543][ C0] ? iovec_from_user+0x5d/0x380 [ 80.383569][ C0] ? __might_fault+0xa1/0x110 [ 80.383597][ C0] ? __import_iovec+0x316/0x4c0 [ 80.383625][ C0] ? unix_dgram_recvmsg+0xaf/0xd0 [ 80.383648][ C0] ? unix_dgram_sendmsg+0x2050/0x2050 [ 80.383671][ C0] ____sys_recvmsg+0x285/0x530 [ 80.383698][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 80.383726][ C0] ? __might_fault+0xa1/0x110 [ 80.383753][ C0] do_recvmmsg+0x46d/0xad0 [ 80.383777][ C0] ? futex_wait_queue+0x149/0x1d0 [ 80.383804][ C0] ? __sys_recvmmsg+0x270/0x270 [ 80.383824][ C0] ? futex_wait+0x30e/0x5c0 [ 80.383846][ C0] ? plist_del+0x3ed/0x410 [ 80.383885][ C0] ? futex_wake+0x4ea/0x590 [ 80.383924][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 80.383961][ C0] ? xfd_validate_state+0x6a/0x140 [ 80.383989][ C0] __x64_sys_recvmmsg+0x195/0x240 [ 80.384012][ C0] ? do_recvmmsg+0xad0/0xad0 [ 80.384031][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 80.384056][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 80.384091][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 80.384116][ C0] do_syscall_64+0x3b/0xb0 [ 80.384168][ C0] ? clear_bhb_loop+0x45/0xa0 [ 80.384197][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.384225][ C0] RIP: 0033:0x7f7d5f975b99 [ 80.384243][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.384258][ C0] RSP: 002b:00007f7d607f9048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 80.384279][ C0] RAX: ffffffffffffffda RBX: 00007f7d5fb04078 RCX: 00007f7d5f975b99 [ 80.384294][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 80.384307][ C0] RBP: 00007f7d5f9f677e R08: 0000000000000000 R09: 0000000000000000 [ 80.384320][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 80.384333][ C0] R13: 000000000000006e R14: 00007f7d5fb04078 R15: 00007ffc611e24c8 [ 80.384355][ C0] [ 80.387657][ C0] Kernel Offset: disabled [ 80.927782][ C0] Rebooting in 86400 seconds..