last executing test programs: 14.504753821s ago: executing program 2 (id=521): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 13.33603061s ago: executing program 1 (id=527): socket(0x11, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read(r1, &(0x7f0000000240)=""/152, 0x98) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x66, 0xe, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x20}, 0x94) 11.745284183s ago: executing program 1 (id=535): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x1, 0x0) 11.683048196s ago: executing program 1 (id=537): mount(0x0, 0x0, 0x0, 0x80000, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000380)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2bc, &(0x7f00000000c0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1a08050, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="6e863760933eece5c4c0c53bf48d9fec6d369297b5089932dcf50c4d4c260078c9242fc05d95b4451a2ca1766589f71988acb8ee97e8164e2591149c25626804d38dc540586d4c30020f9be9e996346dc1d1b6bd74767eb445b020545b49", @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES8], 0x1, 0x58c, &(0x7f0000000140)="$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") 11.244135522s ago: executing program 1 (id=542): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) 11.128280379s ago: executing program 1 (id=543): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8a00b1, &(0x7f00000005c0)={[{@orlov}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fsname}, {@fowner_gt={'fowner>', 0xee00}}, {@context={'context', 0x3d, 'system_u'}}]}, 0xfe, 0x269, &(0x7f0000000200)="$eJzs3b1rJGUcB/Df7EvWmBCiNja+gIhoIMRCEGy0UQhIEBFBhYiIlSRCTNqslY2FvUoqmyB2RkuxCTb3B+TuUuSaa8IVF+7grthjZnaPzWZDXvZljsznA7szz87ztrDfZyeQmQ2gtGYj4t2IqEbEXETUIyLprvBy/phtF7cmd5cjWq2P7yRZvbyc67SbiohmRLwdUesc29j5/ODe3gev/bRef/X3nc8mx/X+uh0e7H949NvSj38tvrlRab823d52v49hSvq8Vksinh3FYE+IpFb0DDifP6+nuX8uIl7J8l+PSjuyP69N/FePN37t327iaLzzBEah1aqn34HNFlA6lewcOKnMR0S+X6nMz+fn8DeqSXy7uvb93Der6ytfF71SAUOQNPO/e/ff/6fx91RP/m9X8/yfy1sjnikwEmn+P/lo+2a6f1QtejbAWLyQb9L8z325+XrIP5SO/EN5yT+Ul/zDFXDJ7Mo/lJf8Q3nJP1xh9c5Os+/hwfN/v/0fhJefIjBuM9mz738or578F3I9LlCM7vwDAOXSahR8ATJQmKLXHwAAAAAAAAAAAAAAAAAA4KStyd3lzmNcY/7/S8ThexFROz5+IztazX6POOKp7Pnpu0la7bEkbzaQL14asIMB/THkq6+XGherP3NruONf1LUXR9PvD8eLp97bbnMloplWXqjVTn7+k/bn70yn9v/MGQ3rX51vgGFJesrvfDre8Xs93C52/MW9iH/T9Weh3/pXieezbf/1Z7r7FsuX9N2DATsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbB4FAAD//1eqcO0=") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80) fcntl$setstatus(r5, 0x4, 0x2800) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000019080)=0x30) write$FUSE_STATFS(r1, &(0x7f0000005f00)={0x60, 0x0, 0x0, {{0xfffffffffffffffd, 0x17, 0x4, 0x4, 0x8, 0xfffffc00, 0x1, 0x8}}}, 0x60) fadvise64(r1, 0x0, 0x60, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0002444994f6e1ff0600851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb50a00000000000085000000060000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 6.545898558s ago: executing program 2 (id=580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 6.003953219s ago: executing program 2 (id=581): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) 5.727986215s ago: executing program 2 (id=584): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x5c}}, 0x0) 5.559714685s ago: executing program 2 (id=588): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) removexattr(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000400)=@known='user.syz\x00') 5.47607409s ago: executing program 2 (id=590): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 4.046257243s ago: executing program 0 (id=597): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xf}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.094230869s ago: executing program 0 (id=600): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) pread64(r0, &(0x7f00000001c0)=""/144, 0x90, 0x2f) 3.010682174s ago: executing program 0 (id=603): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 2.655935945s ago: executing program 4 (id=607): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 2.634200466s ago: executing program 3 (id=608): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000680), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000080)=0x3, 0x4) 2.531136542s ago: executing program 3 (id=609): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getrlimit(0x2, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) clock_adjtime(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2040000, 0x0) 2.470150106s ago: executing program 4 (id=610): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.507878002s ago: executing program 0 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffe97, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xe2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000100), 0x4001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) unshare(0x22020600) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') lseek(0xffffffffffffffff, 0xffffffffffdffffe, 0x1) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x4000054) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 1.447373156s ago: executing program 4 (id=612): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="062f000000000000000000000700000100050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000400"/27], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001880)={0x0, &(0x7f0000001840)=""/5, 0x0, 0x0, 0x2, r0, 0x4}, 0x38) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/6, 0x6}, 0x40000042) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910180000000000c3000000500000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000320008c71ef28ff4b"], 0xffdd) 1.414019668s ago: executing program 3 (id=613): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b64f8ff00000000b7080000020000007b8af0ff00000000bfa1000000000000070100000b000000bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 1.276002805s ago: executing program 3 (id=614): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 423.683585ms ago: executing program 4 (id=615): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 354.643089ms ago: executing program 0 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=bind=st\\tic:']) 306.024922ms ago: executing program 4 (id=617): openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x300, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 204.049458ms ago: executing program 0 (id=618): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f00000000c0)=ANY=[], 0xffe) 203.868518ms ago: executing program 4 (id=619): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 184.694119ms ago: executing program 3 (id=620): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) write(r0, 0x0, 0x0) 109.184174ms ago: executing program 1 (id=621): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000000}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(r0, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. syzkaller login: [ 65.361875][ T4173] cgroup: Unknown subsys name 'net' [ 65.495710][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.040187][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.624100][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.651324][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 68.715080][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.730001][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 68.757181][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.852214][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.859491][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.868107][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.903069][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.910404][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.919063][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.931436][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.939080][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.947212][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.981634][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.989138][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.997029][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.025105][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.033283][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.041733][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.056897][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.064389][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.072679][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.094775][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.118050][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.125949][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.134887][ T4189] device bridge_slave_0 entered promiscuous mode [ 69.150615][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.157733][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.166616][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.176316][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.204561][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.211940][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.220288][ T4189] device bridge_slave_1 entered promiscuous mode [ 69.229737][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.239228][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.246627][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.255515][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.271485][ T4190] team0: Port device team_slave_0 added [ 69.288685][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.300110][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.317680][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.335074][ T4190] team0: Port device team_slave_1 added [ 69.343392][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.354312][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.412454][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.424266][ T4186] team0: Port device team_slave_0 added [ 69.431440][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.439507][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.465887][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.480169][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.487179][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.513745][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.534797][ T4187] team0: Port device team_slave_0 added [ 69.542911][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.553500][ T4186] team0: Port device team_slave_1 added [ 69.566436][ T4188] team0: Port device team_slave_0 added [ 69.574957][ T4188] team0: Port device team_slave_1 added [ 69.582702][ T4187] team0: Port device team_slave_1 added [ 69.657232][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.664437][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.691124][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.703382][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.711309][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.740172][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.752177][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.759457][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.785454][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.799584][ T4189] team0: Port device team_slave_0 added [ 69.812936][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.820201][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.846435][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.858742][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.865848][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.891888][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.904193][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.911917][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.938168][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.951043][ T4189] team0: Port device team_slave_1 added [ 69.965687][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.975324][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.047765][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.055203][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.062846][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.070986][ T4187] Cannot create hsr debugfs directory [ 70.094884][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.102090][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.108962][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.116660][ T4188] Cannot create hsr debugfs directory [ 70.123207][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.130667][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.157421][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.180126][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.187030][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.193780][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.201530][ T4186] Cannot create hsr debugfs directory [ 70.222455][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.230034][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.256394][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.279203][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 70.279203][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 70.280848][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.285555][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 70.303828][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 70.420803][ T4189] device hsr_slave_0 entered promiscuous mode [ 70.427974][ T4189] device hsr_slave_1 entered promiscuous mode [ 70.434806][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.442621][ T4189] Cannot create hsr debugfs directory [ 70.671299][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.705175][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.714647][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.729589][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.766181][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.793060][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.807469][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.832109][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.857069][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.878084][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.902198][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.913777][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.982965][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.996705][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.017153][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.033145][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.043661][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.063302][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.073829][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.087389][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.115033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.126125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.138340][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.145687][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.162920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.172691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.182079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.192622][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.199768][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.220154][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.231111][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.256509][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.272782][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.287745][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.300663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.322538][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.382384][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.393204][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.404270][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.413954][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.422896][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.431736][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.441825][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.450928][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.467911][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.476540][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.488122][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.488167][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.494774][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.516278][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.533037][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.556464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.567029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.576633][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.583850][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.615307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.625923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.637149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.646816][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.654173][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.667309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.695752][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.711992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.722159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.732505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.752360][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.779497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.791207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.809254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.817308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.827409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.840968][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.855100][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.869158][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.885313][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.894644][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.923536][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.933198][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.941541][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.951857][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.962528][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.972309][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.979458][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.987418][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.010196][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.022821][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.031006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.040436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.049541][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.056710][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.065721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.075233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.083414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.091909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.114102][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.131702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.142788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.153028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.163755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.173232][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.180380][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.189081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.197894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.229167][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.244042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.254849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.264779][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.272065][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.283971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.293561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.303765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.312364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.325344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.341033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.355942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.364584][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 72.371349][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 72.378971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.387570][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 72.411566][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.428685][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 72.432623][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.442922][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 72.458106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.474671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.483886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.503467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.526170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.541520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.550749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.560919][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.568020][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.577368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.587621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.596689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.606175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.615197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.624298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.634275][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.641689][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.649868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.658634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.669745][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.696379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.704679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.714937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.724227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.734063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.743685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.753028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.796920][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.825130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.837701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.856180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.870756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.913352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.933693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.982772][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.995437][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.015530][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.036142][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.046180][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.057111][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.071709][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.084482][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.095732][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.109601][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.126522][ T4186] device veth0_vlan entered promiscuous mode [ 73.159299][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.173046][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.181767][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.196563][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.205291][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.224367][ T4186] device veth1_vlan entered promiscuous mode [ 73.244851][ T4187] device veth0_vlan entered promiscuous mode [ 73.262132][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.270887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.281874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.309654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.318756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.326304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.335341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.344301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.367042][ T4187] device veth1_vlan entered promiscuous mode [ 73.390437][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.465247][ T4186] device veth0_macvtap entered promiscuous mode [ 73.494442][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.511457][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.526857][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.535734][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.554669][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.571876][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.583672][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.597215][ T4187] device veth0_macvtap entered promiscuous mode [ 73.615384][ T4186] device veth1_macvtap entered promiscuous mode [ 73.626547][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.641699][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.656532][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.668521][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.680708][ T4187] device veth1_macvtap entered promiscuous mode [ 73.694834][ T4190] device veth0_vlan entered promiscuous mode [ 73.715959][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.730372][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.739509][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.747973][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.757417][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.765281][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.786804][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.802663][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.815047][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.834940][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.861176][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.872354][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.893819][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.902530][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.911857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.921648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.931136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.943033][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.958082][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.971312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.983744][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.993276][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.010848][ T4190] device veth1_vlan entered promiscuous mode [ 74.020342][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.032548][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.045337][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.055121][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.064550][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.074413][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.084125][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.104542][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.113819][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.126893][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.136746][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.146031][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.156005][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.202625][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.214293][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.237245][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.246621][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.260089][ T4190] device veth0_macvtap entered promiscuous mode [ 74.304323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.315638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.324939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.335185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.343606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.356520][ T4190] device veth1_macvtap entered promiscuous mode [ 74.374020][ T4188] device veth0_vlan entered promiscuous mode [ 74.392220][ T4189] device veth0_vlan entered promiscuous mode [ 74.404088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.423369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.435295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.443888][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 74.450573][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 74.457904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.465429][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 74.471760][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 74.478808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.495015][ T4188] device veth1_vlan entered promiscuous mode [ 74.529163][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 74.536151][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.547662][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.558528][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.569245][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.581212][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.599954][ T4189] device veth1_vlan entered promiscuous mode [ 74.633740][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.642349][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.651694][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.661400][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.670620][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.680683][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.692699][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.705138][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.715776][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.726807][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.738891][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.757889][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.770544][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.783258][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.793120][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.802953][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.814953][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.824459][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.833786][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.844309][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.867515][ T4189] device veth0_macvtap entered promiscuous mode [ 74.882118][ T4188] device veth0_macvtap entered promiscuous mode [ 74.894847][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.904986][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.914572][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.931245][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.967799][ T4188] device veth1_macvtap entered promiscuous mode [ 74.980122][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.990524][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.005092][ T4189] device veth1_macvtap entered promiscuous mode [ 75.034948][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.049404][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.077289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.084442][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.084577][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.102401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.129941][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.146673][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.157322][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.169439][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.179782][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.190690][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.202482][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.224659][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.235294][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.248062][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.259208][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.270415][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.281328][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.291442][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.302782][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.315167][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.326682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.339374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.349308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.358194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.375328][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.386364][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.403268][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.414763][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.425940][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.436959][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.452708][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.478502][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.486843][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.491929][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.516839][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.530099][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.545258][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.559782][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.574612][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.584868][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.595374][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.607204][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.615915][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.625648][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.636245][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.644985][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.654235][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.666863][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.676343][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.685570][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.694818][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.727732][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.738921][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.747899][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.758669][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.779670][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.814904][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.862460][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.872317][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.889717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.906828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.049089][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.057169][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.104327][ T4308] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.125157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.162326][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.182076][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.200680][ T4310] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.220395][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.237780][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.264226][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.287590][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.322372][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.355966][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.412182][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.519878][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 76.526711][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 76.570102][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 76.609602][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 76.637659][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 76.657268][ T4323] program syz.0.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.866413][ T4334] ======================================================= [ 76.866413][ T4334] WARNING: The mand mount option has been deprecated and [ 76.866413][ T4334] and is ignored by this kernel. Remove the mand [ 76.866413][ T4334] option from the mount to silence this warning. [ 76.866413][ T4334] ======================================================= [ 76.901480][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.075615][ T4334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.643552][ T4387] kvm: pic: level sensitive irq not supported [ 78.643761][ T4387] kvm: pic: non byte read [ 78.700844][ T4387] kvm: pic: non byte read [ 78.877352][ T4397] netlink: 'syz.2.31': attribute type 10 has an invalid length. [ 79.003502][ T4403] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.181203][ T4397] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 80.271504][ T4424] 9pnet_virtio: no channels available for device syz [ 80.366309][ T4428] loop1: detected capacity change from 0 to 512 [ 80.458508][ T4428] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.494727][ T4428] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.520602][ T4428] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.39: corrupted xattr entries [ 80.557274][ T4428] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.572214][ T4428] EXT4-fs (loop1): 1 orphan inode deleted [ 80.578051][ T4428] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 80.941301][ T4444] Invalid ELF header magic: != ELF [ 80.954405][ T4444] Zero length message leads to an empty skb [ 81.757353][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 83.005037][ T4481] device syzkaller0 entered promiscuous mode [ 83.058383][ T4175] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.126251][ T4483] syz.1.51 uses obsolete (PF_INET,SOCK_PACKET) [ 83.358974][ T4175] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 83.379792][ T4493] loop3: detected capacity change from 0 to 512 [ 83.452761][ T4493] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.555407][ T4493] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.54: corrupted xattr entries [ 83.600188][ T4175] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.617650][ T4175] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.635314][ T4493] EXT4-fs (loop3): 1 orphan inode deleted [ 83.641090][ T4175] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.650534][ T4493] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 83.675550][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.752346][ T4175] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.778374][ T4507] Invalid ELF header magic: != ELF [ 85.585129][ T4175] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.596920][ T4175] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.678426][ T4175] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 85.686075][ T4175] usb 1-1: can't read configurations, error -71 [ 85.731558][ T4516] netlink: 56 bytes leftover after parsing attributes in process `syz.4.57'. [ 85.977934][ T4527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'. [ 86.231919][ T4531] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 86.238888][ T4531] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 86.275750][ T4531] vhci_hcd vhci_hcd.0: Device attached [ 86.303365][ T4535] vhci_hcd: connection closed [ 86.310349][ T9] vhci_hcd: stop threads [ 86.339652][ T9] vhci_hcd: release socket [ 86.350669][ T9] vhci_hcd: disconnect device [ 86.488451][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.657677][ T4550] 9pnet_virtio: no channels available for device syz [ 86.737054][ T4554] binder_alloc: 4552: pid 4552 spamming oneway? 2 buffers allocated for a total size of 5184 [ 86.753032][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 86.769299][ T4553] binder: BINDER_SET_CONTEXT_MGR already set [ 86.786280][ T4553] binder: 4551:4553 ioctl 4018620d 200000004a80 returned -16 [ 86.844025][ T7] cfg80211: failed to load regulatory.db [ 86.888545][ T1108] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 86.902375][ T1108] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 86.914867][ T1108] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.088878][ T1108] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.103682][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.120933][ T1108] usb 2-1: Product: syz [ 87.132119][ T1108] usb 2-1: Manufacturer: syz [ 87.142536][ T1108] usb 2-1: SerialNumber: syz [ 87.204994][ T1108] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 87.217557][ T1108] imon 2-1:155.0: unable to initialize intf0, err -19 [ 87.226511][ T1108] imon:imon_probe: failed to initialize context! [ 87.233283][ T1108] imon 2-1:155.0: unable to register, err -19 [ 87.275555][ T4200] Bluetooth: Wrong link type (-22) [ 87.434989][ T4574] device syzkaller0 entered promiscuous mode [ 87.872170][ T4584] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 87.895063][ T4584] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 87.931956][ T4580] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 87.967177][ T4597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'. [ 87.976650][ T4580] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 89.497666][ T4250] usb 2-1: USB disconnect, device number 2 [ 89.757927][ T4625] process 'syz.3.100' launched './file1' with NULL argv: empty string added [ 89.777010][ T4628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 89.938289][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.184036][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 90.324575][ T23] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 90.384674][ T23] usb 1-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 90.432457][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 90.869814][ T23] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 90.976500][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.165310][ T23] usb 1-1: Product: syz [ 91.395629][ T23] usb 1-1: Manufacturer: syz [ 91.415999][ T23] usb 1-1: SerialNumber: syz [ 91.500002][ T23] usb 1-1: config 0 descriptor?? [ 92.247568][ T23] usb 1-1: USB disconnect, device number 4 [ 93.153057][ T4706] 9pnet_virtio: no channels available for device syz [ 93.165888][ T4704] Bluetooth: hci0: unsupported parameter 255 [ 93.176147][ T4704] Bluetooth: hci0: unsupported parameter 255 [ 93.228989][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.237977][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.963122][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.045441][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.582400][ T4730] 9pnet_virtio: no channels available for device syz [ 95.748450][ T4673] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.757794][ T4673] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.786750][ T4673] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.796329][ T4673] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.947564][ T4680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.116'. [ 96.064264][ T4673] syz.3.112 (4673) used greatest stack depth: 20816 bytes left [ 96.074727][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 96.106210][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.126'. õåéU y·hW#ùíÓ R58ø¬YÇêM[ 96.317656][ T4738] syz.2.133 (4738) used greatest stack depth: 17456 bytes left [ 96.528468][ T4691] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.988304][ T4691] usb 2-1: Using ep0 maxpacket: 8 [ 97.259117][ T4691] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.473727][ T4691] usb 2-1: config 0 has no interfaces? [ 97.561452][ T4775] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.569682][ T4775] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.579141][ T4691] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.595125][ T4691] usb 2-1: config 0 has no interfaces? [ 97.678581][ T4691] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.712589][ T4691] usb 2-1: config 0 has no interfaces? [ 97.804948][ T4775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.826421][ T4775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.938537][ T4691] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.947667][ T4691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.969130][ T4691] usb 2-1: Product: syz [ 97.973520][ T4691] usb 2-1: Manufacturer: syz [ 97.979454][ T4691] usb 2-1: SerialNumber: syz [ 98.000819][ T4691] usb 2-1: config 0 descriptor?? [ 98.282882][ T4745] udc-core: couldn't find an available UDC or it's busy [ 98.296171][ T4745] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.314369][ T7] usb 2-1: USB disconnect, device number 3 [ 98.862482][ T4775] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.871635][ T4775] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.882630][ T4775] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.892006][ T4775] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.242291][ T4802] 9pnet_virtio: no channels available for device syz [ 99.601258][ T4819] block device autoloading is deprecated and will be removed. [ 99.877516][ T4826] netlink: 'syz.2.161': attribute type 1 has an invalid length. [ 99.942238][ T4826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.045091][ T4826] device gretap1 entered promiscuous mode [ 100.166026][ T4826] bond1: (slave gretap1): making interface the new active one [ 100.262680][ T4826] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 100.292435][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 100.306961][ T4842] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.166'. [ 100.321837][ T4837] device veth0_to_bond entered promiscuous mode [ 100.329028][ T4837] device veth0_to_bond left promiscuous mode [ 100.416305][ T4837] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 101.096807][ T4841] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 101.139334][ T4841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.148096][ T4842] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.166'. [ 101.250319][ T4851] device syzkaller0 entered promiscuous mode [ 101.426662][ T4864] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.168'. [ 101.450009][ T4858] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.168'. [ 101.625234][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 101.658538][ T4699] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.727305][ T4879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.179'. [ 103.585808][ T4890] netlink: 'syz.1.182': attribute type 29 has an invalid length. [ 103.608411][ T4699] usb 1-1: Using ep0 maxpacket: 8 [ 103.678994][ T4890] netlink: 'syz.1.182': attribute type 29 has an invalid length. [ 103.722304][ T4893] netlink: 'syz.2.184': attribute type 10 has an invalid length. [ 103.758557][ T4699] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 103.767301][ T4699] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.815359][ T4699] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.835067][ T4699] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.859621][ T4699] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.887399][ T4699] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.918277][ T4699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.044870][ T4902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.198546][ T4699] usb 1-1: usb_control_msg returned -32 [ 104.214149][ T4699] usbtmc 1-1:16.0: can't read capabilities [ 104.587577][ T4895] netlink: 'syz.1.182': attribute type 29 has an invalid length. [ 105.009595][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.198453][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.340556][ T4304] usb 1-1: USB disconnect, device number 5 [ 105.421291][ T21] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 105.437815][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.594198][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.618577][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.638702][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.651884][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.653904][ T21] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.693766][ T21] usb 2-1: Product: syz [ 105.697745][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.705197][ T21] usb 2-1: Manufacturer: syz [ 105.721523][ T21] usb 2-1: SerialNumber: syz [ 105.726228][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.751913][ T13] usb 5-1: config 0 descriptor?? [ 105.759995][ T21] usb 2-1: config 0 descriptor?? [ 105.805365][ T21] usb 2-1: selecting invalid altsetting 0 [ 106.023149][ T4942] tipc: Started in network mode [ 106.056350][ T4942] tipc: Node identity de64495162fa, cluster identity 4711 [ 106.083369][ T21] usb 2-1: USB disconnect, device number 4 [ 106.105751][ T4942] tipc: Enabled bearer , priority 0 [ 106.129055][ T4944] device syzkaller0 entered promiscuous mode [ 106.177575][ T4942] tipc: Resetting bearer [ 106.255241][ T4939] tipc: Resetting bearer [ 106.267708][ T13] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 106.306374][ T4939] tipc: Disabling bearer [ 106.345969][ T13] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 108.528221][ C0] sched: RT throttling activated [ 108.675513][ T4974] loop1: detected capacity change from 0 to 512 [ 108.757424][ T4974] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.894015][ T4974] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.209: corrupted xattr entries [ 108.968991][ T4974] EXT4-fs (loop1): 1 orphan inode deleted [ 108.988368][ T4974] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 109.347710][ T4980] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 109.435557][ T4984] Invalid ELF header magic: != ELF [ 109.527975][ T4980] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 109.559908][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 112.155698][ T5000] loop4: detected capacity change from 0 to 128 [ 112.880181][ T5016] Bluetooth: Can't allocate semaphore structure [ 112.994850][ T5020] netlink: 'syz.3.222': attribute type 9 has an invalid length. [ 113.095034][ T5020] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.222'. [ 113.307805][ T5024] IPv6: addrconf: prefix option has invalid lifetime [ 113.433461][ T21] usb 5-1: USB disconnect, device number 2 [ 113.551409][ T26] audit: type=1326 audit(1769275427.422:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149e87bcb9 code=0x7ffc0000 [ 113.627164][ T26] audit: type=1326 audit(1769275427.462:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149e87bcb9 code=0x7ffc0000 [ 113.750377][ T26] audit: type=1326 audit(1769275427.462:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149e87bcb9 code=0x7ffc0000 [ 113.802664][ T26] audit: type=1326 audit(1769275427.462:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f149e87bcb9 code=0x7ffc0000 [ 113.824930][ T26] audit: type=1326 audit(1769275427.462:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149e87bcb9 code=0x7ffc0000 [ 113.848460][ T26] audit: type=1326 audit(1769275427.462:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149e87bcb9 code=0x7ffc0000 [ 113.870749][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.280515][ T26] audit: type=1326 audit(1769275427.462:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149e87bcb9 code=0x7ffc0000 [ 114.302901][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.454056][ T26] audit: type=1326 audit(1769275427.462:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f149e87bcb9 code=0x7ffc0000 [ 114.486677][ T26] audit: type=1326 audit(1769275427.472:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149e87bcb9 code=0x7ffc0000 [ 114.516851][ T26] audit: type=1326 audit(1769275427.472:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149e87bcb9 code=0x7ffc0000 [ 114.539409][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.870222][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.877829][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.701894][ T5028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.733985][ T5028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.896908][ T5028] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.914163][ T5028] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.924735][ T5028] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.939614][ T5028] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.074505][ T5039] device syzkaller0 entered promiscuous mode [ 116.901414][ T5094] device syzkaller0 entered promiscuous mode [ 117.396845][ T5119] loop4: detected capacity change from 0 to 128 [ 118.143971][ T4445] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 118.566712][ T4445] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.588687][ T5135] binder: BINDER_SET_CONTEXT_MGR already set [ 118.623749][ T5135] binder: 5134:5135 ioctl 4018620d 200000000040 returned -16 [ 118.650119][ T5135] binder: 5134:5135 ioctl c0306201 200000000240 returned -11 [ 118.781418][ T5140] loop3: detected capacity change from 0 to 128 [ 120.124302][ T4304] Bluetooth: hci5: command 0x1003 tx timeout [ 120.148543][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 120.172800][ T5166] binder: BINDER_SET_CONTEXT_MGR already set [ 120.194459][ T5166] binder: 5165:5166 ioctl 4018620d 200000000040 returned -16 [ 120.227726][ T5166] binder: 5165:5166 ioctl c0306201 200000000240 returned -11 [ 120.765580][ T5189] binder: BINDER_SET_CONTEXT_MGR already set [ 120.828961][ T5189] binder: 5186:5189 ioctl 4018620d 200000000040 returned -16 [ 120.950718][ T5195] device syzkaller0 entered promiscuous mode [ 120.963459][ T5198] binder: 5194:5198 ioctl c0306201 200000000240 returned -11 [ 122.028439][ T5225] binder: 5224:5225 ioctl c0306201 200000000240 returned -11 [ 122.256713][ T5229] binder: 5228:5229 ioctl c0306201 200000000240 returned -11 [ 122.273996][ T4258] Bluetooth: hci5: command 0x1001 tx timeout [ 122.280360][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 124.358313][ T4258] Bluetooth: hci5: command 0x1009 tx timeout [ 124.495770][ T5265] device syzkaller0 entered promiscuous mode [ 125.976163][ T5288] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 126.009099][ T5288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.055798][ T5288] bond1: (slave ip6gretap1): making interface the new active one [ 126.107482][ T5288] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 126.124809][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 127.385480][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 127.385517][ T26] audit: type=1326 audit(1769275441.262:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2b63dcb9 code=0x7ffc0000 [ 127.724116][ T26] audit: type=1326 audit(1769275441.322:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2b63dcb9 code=0x7ffc0000 [ 127.845890][ T26] audit: type=1326 audit(1769275441.352:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2b63dcb9 code=0x7ffc0000 [ 127.966751][ T26] audit: type=1326 audit(1769275441.362:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3c2b63dcb9 code=0x7ffc0000 [ 127.995677][ T26] audit: type=1326 audit(1769275441.392:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2b63dcb9 code=0x7ffc0000 [ 128.024948][ T26] audit: type=1326 audit(1769275441.392:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2b63dcb9 code=0x7ffc0000 [ 128.048590][ T26] audit: type=1326 audit(1769275441.392:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2b63dcb9 code=0x7ffc0000 [ 128.071295][ T26] audit: type=1326 audit(1769275441.422:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2b63dcb9 code=0x7ffc0000 [ 128.104020][ T26] audit: type=1326 audit(1769275441.432:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c2b63dcb9 code=0x7ffc0000 [ 128.154139][ T26] audit: type=1326 audit(1769275441.442:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.2.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2b63dcb9 code=0x7ffc0000 [ 128.492364][ T5332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.500163][ T5332] IPv6: NLM_F_CREATE should be set when creating new route [ 128.638739][ T5336] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.869613][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 128.880453][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 128.960799][ T5344] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 129.075244][ T5344] kvm: pic: non byte read [ 129.094307][ T5344] kvm: pic: level sensitive irq not supported [ 129.094438][ T5344] kvm: pic: non byte read [ 129.116579][ T5344] kvm: pic: level sensitive irq not supported [ 129.116657][ T5344] kvm: pic: non byte read [ 132.635797][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 132.645401][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 132.834194][ T5390] loop3: detected capacity change from 0 to 128 [ 132.927368][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.933870][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.002415][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.010157][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.569134][ T5335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.634649][ T5335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.665545][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 134.676022][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 135.449037][ T5335] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.458082][ T5335] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.468538][ T5335] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.477548][ T5335] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.634682][ T5418] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 137.273326][ T5469] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.447235][ T5483] loop2: detected capacity change from 0 to 512 [ 137.487356][ T5488] loop0: detected capacity change from 0 to 128 [ 137.502603][ T5483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.535818][ T5491] binder: 5490:5491 ioctl c0306201 200000000240 returned -11 [ 137.566355][ T5483] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.391: corrupted xattr entries [ 137.669197][ T5483] EXT4-fs (loop2): 1 orphan inode deleted [ 137.706645][ T5483] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 138.049542][ T5501] binder: 5500:5501 ioctl c0306201 200000000240 returned -11 [ 138.657912][ T5509] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 138.705686][ T5509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.840184][ T5509] bond1: (slave ip6gretap1): making interface the new active one [ 138.879266][ T5509] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 138.908585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 139.051335][ T5518] qfq: no options [ 139.061605][ T5515] Invalid ELF header magic: != ELF [ 139.365306][ T5527] binder: 5525:5527 ioctl c0306201 200000000240 returned -11 [ 139.482533][ T5529] binder: 5528:5529 ioctl c0306201 200000000240 returned -11 [ 139.507692][ T5531] loop3: detected capacity change from 0 to 128 [ 140.992144][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 141.002329][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 141.026314][ T5551] qfq: no options [ 141.232877][ T5557] binder: 5556:5557 ioctl c0306201 200000000240 returned -11 [ 141.273082][ T5560] binder: 5559:5560 ioctl c0306201 200000000240 returned -11 [ 141.509248][ T5568] loop0: detected capacity change from 0 to 128 [ 142.650970][ T5584] binder: 5583:5584 ioctl c0306201 200000000240 returned -11 [ 142.719283][ T5586] qfq: no options [ 142.824840][ T5592] binder: 5590:5592 ioctl c0306201 200000000240 returned -11 [ 142.969755][ T5597] loop1: detected capacity change from 0 to 512 [ 143.058110][ T5597] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.147705][ T5597] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.434: corrupted xattr entries [ 143.306371][ T5597] EXT4-fs (loop1): 1 orphan inode deleted [ 143.340326][ T5597] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 143.425016][ T5612] loop0: detected capacity change from 0 to 128 [ 143.960177][ T5620] Invalid ELF header magic: != ELF [ 144.338483][ T26] kauditd_printk_skb: 133 callbacks suppressed [ 144.338500][ T26] audit: type=1326 audit(1769275458.212:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7c31cb9 code=0x7ffc0000 [ 144.528292][ T26] audit: type=1326 audit(1769275458.212:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7c31cb9 code=0x7ffc0000 [ 144.593439][ T5633] loop4: detected capacity change from 0 to 128 [ 144.638654][ T26] audit: type=1326 audit(1769275458.272:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcdf7c31cb9 code=0x7ffc0000 [ 144.688336][ T5637] binder: 5635:5637 ioctl c0306201 200000000240 returned -11 [ 144.712672][ T26] audit: type=1326 audit(1769275458.272:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7c31cb9 code=0x7ffc0000 [ 144.737063][ T26] audit: type=1326 audit(1769275458.272:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7c31cb9 code=0x7ffc0000 [ 144.760285][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.962583][ T26] audit: type=1326 audit(1769275458.282:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7c31cb9 code=0x7ffc0000 [ 145.020653][ T5640] binder: 5639:5640 ioctl c0306201 200000000240 returned -11 [ 145.034374][ T26] audit: type=1326 audit(1769275458.282:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7c31cb9 code=0x7ffc0000 [ 145.066843][ T26] audit: type=1326 audit(1769275458.282:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcdf7c31cb9 code=0x7ffc0000 [ 145.739870][ T26] audit: type=1326 audit(1769275458.282:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7c31cb9 code=0x7ffc0000 [ 145.915725][ T26] audit: type=1326 audit(1769275458.282:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcdf7c31cb9 code=0x7ffc0000 [ 145.938475][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.449514][ T5669] binder: 5668:5669 ioctl c0306201 200000000240 returned -11 [ 146.457467][ T5657] device syzkaller0 entered promiscuous mode [ 146.845951][ T5673] kvm [5672]: vcpu2, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xffff8e06, nop [ 146.876697][ T5673] kvm [5672]: vcpu2, guest rIP: 0x9114 ignored wrmsr: 0x11e data 0xfffff327 [ 147.050353][ T5697] loop1: detected capacity change from 0 to 512 [ 147.090620][ T5697] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.128740][ T5697] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.468: corrupted xattr entries [ 147.167569][ T5697] EXT4-fs (loop1): 1 orphan inode deleted [ 147.185431][ T5697] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 147.395837][ T4304] Bluetooth: hci5: command 0x1003 tx timeout [ 147.403048][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 147.437018][ T5705] device syzkaller0 entered promiscuous mode [ 147.531425][ T5707] Invalid ELF header magic: != ELF [ 148.361347][ T5715] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 148.392072][ T5715] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 148.636172][ T5732] loop1: detected capacity change from 0 to 128 [ 149.056453][ T5747] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.576392][ T4258] Bluetooth: hci5: command 0x1001 tx timeout [ 149.600588][ T5745] loop0: detected capacity change from 0 to 512 [ 149.607134][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 149.782443][ T5754] device syzkaller0 entered promiscuous mode [ 149.806783][ T5745] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.861918][ T5745] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.486: corrupted xattr entries [ 149.891401][ T5745] EXT4-fs (loop0): 1 orphan inode deleted [ 149.909724][ T5745] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 149.934863][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.168133][ T5760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 150.233461][ T5760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.259836][ T5745] Invalid ELF header magic: != ELF [ 150.284666][ T5762] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 150.338436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 150.990556][ T5793] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 151.043072][ T5793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.241290][ T5802] binder: 5801:5802 ioctl 4018620d 0 returned -22 [ 151.259282][ T5802] binder: 5801:5802 ioctl c0306201 200000000240 returned -11 [ 151.326315][ T5800] device syzkaller0 entered promiscuous mode [ 151.652960][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 151.767598][ T5822] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 151.790274][ T5822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.874758][ T5827] binder: BINDER_SET_CONTEXT_MGR already set [ 151.894210][ T5827] binder: 5825:5827 ioctl 4018620d 200000000040 returned -16 [ 151.913302][ T5827] binder: 5825:5827 ioctl c0306201 200000000240 returned -11 [ 153.010334][ T5848] loop3: detected capacity change from 0 to 128 [ 153.317452][ T5856] binder: 5854:5856 ioctl 4018620d 0 returned -22 [ 153.527501][ T5856] binder: 5854:5856 ioctl c0306201 200000000240 returned -11 [ 154.200770][ T5869] overlayfs: filesystem on './file0' not supported as upperdir [ 154.387647][ T5876] binder: BINDER_SET_CONTEXT_MGR already set [ 154.417193][ T5876] binder: 5875:5876 ioctl 4018620d 200000000040 returned -16 [ 154.606762][ T5886] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.689070][ T5889] device syzkaller0 entered promiscuous mode [ 156.012952][ T5904] overlayfs: failed to resolve './file1': -2 [ 156.116218][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 156.126381][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 156.174556][ T5908] loop1: detected capacity change from 0 to 128 [ 156.245680][ T5908] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.283999][ T5913] binder: BINDER_SET_CONTEXT_MGR already set [ 156.315861][ T5908] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.339221][ T5913] binder: 5912:5913 ioctl 4018620d 200000000040 returned -16 [ 156.667319][ T5924] loop1: detected capacity change from 0 to 128 [ 157.249501][ T4366] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 157.453796][ T4366] Bluetooth: hci5: Frame reassembly failed (-84) [ 158.344557][ T5948] binder: 5947:5948 ioctl c0306201 0 returned -14 [ 158.386599][ T5948] binder: 5947:5948 ioctl c0306201 200000000240 returned -11 [ 158.394115][ T5950] overlayfs: upper fs does not support file handles, falling back to index=off. [ 158.620431][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'. [ 158.722598][ T5960] loop4: detected capacity change from 0 to 128 [ 158.751269][ T5960] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.813805][ T5960] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.067301][ T5970] binder: 5969:5970 ioctl c0306201 0 returned -14 [ 159.087176][ T5970] binder: 5969:5970 ioctl c0306201 200000000240 returned -11 [ 160.107919][ T4258] Bluetooth: hci5: command 0x1003 tx timeout [ 160.114303][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 160.447792][ T6000] loop3: detected capacity change from 0 to 16 [ 160.599635][ T6000] erofs: (device loop3): mounted with root inode @ nid 36. [ 160.695992][ T6008] loop0: detected capacity change from 0 to 512 [ 160.745904][ T6008] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.845287][ T6008] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.573: corrupted xattr entries [ 160.884538][ T6008] EXT4-fs (loop0): 1 orphan inode deleted [ 160.903792][ T6008] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 161.191808][ T6027] binder: 6023:6027 ioctl c0306201 0 returned -14 [ 161.267565][ T6027] binder: 6023:6027 ioctl c0306201 200000000240 returned -11 [ 161.336512][ T6034] Invalid ELF header magic: != ELF [ 162.076761][ T6049] device vlan0 entered promiscuous mode [ 162.203914][ T4258] Bluetooth: hci5: command 0x1001 tx timeout [ 162.217810][ T6059] loop3: detected capacity change from 0 to 128 [ 162.227348][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 162.316143][ T6053] loop4: detected capacity change from 0 to 8192 [ 162.355949][ T6063] loop0: detected capacity change from 0 to 256 [ 162.740945][ T6068] binder: 6067:6068 ioctl c0306201 200000000240 returned -11 [ 164.541817][ T4258] Bluetooth: hci5: command 0x1009 tx timeout [ 164.790530][ T6101] binder: 6100:6101 ioctl c0306201 200000000240 returned -11 [ 164.824154][ T6104] loop4: detected capacity change from 0 to 128 [ 164.882955][ T6107] loop3: detected capacity change from 0 to 16 [ 164.916485][ T6107] erofs: (device loop3): mounted with root inode @ nid 36. [ 166.663201][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 166.680370][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 167.387686][ T6148] binder: BINDER_SET_CONTEXT_MGR already set [ 167.394040][ T6148] binder: 6147:6148 ioctl 4018620d 200000000040 returned -16 [ 167.402619][ T6148] binder: 6147:6148 ioctl c0306201 200000000240 returned -11 [ 167.445603][ T6150] tmpfs: Bad value for 'mpol' [ 167.753878][ T6155] page:ffffea00016ca800 refcount:4 mapcount:1 mapping:ffff888073e5f340 index:0x0 pfn:0x5b2a0 [ 167.764788][ T6155] memcg:ffff88802b22c000 [ 167.769067][ T6155] aops:shmem_aops ino:97 [ 167.773392][ T6155] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 167.783329][ T6155] raw: 00fff00000080015 ffffea00016ca788 ffffea00016ca848 ffff888073e5f340 [ 167.791954][ T6155] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88802b22c000 [ 167.800654][ T6155] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 167.807701][ T6155] page_owner tracks the page as allocated [ 167.813455][ T6155] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 6158, ts 167611411954, free_ts 167374422862 [ 167.828464][ T6155] get_page_from_freelist+0x1bbd/0x1ca0 [ 167.834149][ T6155] __alloc_pages+0x1ee/0x480 [ 167.838814][ T6155] alloc_pages_vma+0x393/0x7c0 [ 167.843760][ T6155] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 167.849456][ T6155] shmem_getpage_gfp+0x14f4/0x2d40 [ 167.854644][ T6155] shmem_read_mapping_page_gfp+0x96/0x100 [ 167.860410][ T6155] udmabuf_create+0x895/0x1570 [ 167.865428][ T6155] udmabuf_ioctl+0x1f3/0x300 [ 167.870066][ T6155] __se_sys_ioctl+0xfa/0x170 [ 167.874677][ T6155] do_syscall_64+0x4c/0xa0 [ 167.879119][ T6155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.885061][ T6155] page last free stack trace: [ 167.889747][ T6155] free_unref_page_prepare+0x637/0x6c0 [ 167.895421][ T6155] free_unref_page_list+0x119/0x820 [ 167.900778][ T6155] release_pages+0x186c/0x1be0 [ 167.905562][ T6155] __pagevec_release+0x6d/0xe0 [ 167.910474][ T6155] shmem_undo_range+0x62b/0x1930 [ 167.915717][ T6155] shmem_evict_inode+0x220/0xa40 [ 167.920769][ T6155] evict+0x4c9/0x8d0 [ 167.924689][ T6155] __dentry_kill+0x431/0x650 [ 167.929395][ T6155] dentry_kill+0xb8/0x290 [ 167.933740][ T6155] dput+0xd8/0x1a0 [ 167.937481][ T6155] __fput+0x5ee/0x930 [ 167.941485][ T6155] task_work_run+0x125/0x1a0 [ 167.946191][ T6155] do_exit+0x626/0x20c0 [ 167.950359][ T6155] do_group_exit+0x12e/0x300 [ 167.955051][ T6155] get_signal+0x6ca/0x12c0 [ 167.959495][ T6155] arch_do_signal_or_restart+0xe7/0x12c0 [ 167.965251][ T6155] ------------[ cut here ]------------ [ 167.970732][ T6155] kernel BUG at mm/filemap.c:166! [ 167.975890][ T6155] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 167.982205][ T6155] CPU: 0 PID: 6155 Comm: syz.0.618 Not tainted syzkaller #0 [ 167.989941][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.000340][ T6155] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 168.006785][ T6155] Code: e8 29 15 db ff 4c 89 f7 48 c7 c6 00 00 33 8a e8 8a fb 0d 00 0f 0b e8 13 15 db ff 4c 89 f7 48 c7 c6 40 00 33 8a e8 74 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 14 db ff eb 5d e8 f1 14 db ff 4c 89 f7 [ 168.026408][ T6155] RSP: 0018:ffffc90003cdf688 EFLAGS: 00010046 [ 168.032587][ T6155] RAX: 4deec3a364957b00 RBX: 0000000000000000 RCX: 0000000000000000 [ 168.040588][ T6155] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff5200079bec4 [ 168.048760][ T6155] RBP: 1ffffd40002d9501 R08: ffff8880b902795b R09: fffff5200079be80 [ 168.056763][ T6155] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea00016ca800 [ 168.064756][ T6155] R13: dffffc0000000000 R14: ffffea00016ca800 R15: ffffea00016ca808 [ 168.072746][ T6155] FS: 0000555586737500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 168.081780][ T6155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.088387][ T6155] CR2: 00007f5c6a4c5d58 CR3: 0000000056cb3000 CR4: 00000000003506f0 [ 168.096379][ T6155] Call Trace: [ 168.099692][ T6155] [ 168.102757][ T6155] __delete_from_page_cache+0xbe/0x6d0 [ 168.108245][ T6155] ? _raw_spin_lock_irq+0x86/0xf0 [ 168.113381][ T6155] ? lockdep_hardirqs_off+0x70/0x100 [ 168.118683][ T6155] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 168.125750][ T6155] ? _raw_spin_lock_irq+0xb7/0xf0 [ 168.130794][ T6155] ? _raw_spin_lock_irqsave+0x100/0x100 [ 168.136454][ T6155] ? page_mapping+0x30e/0x440 [ 168.141230][ T6155] delete_from_page_cache+0x121/0x190 [ 168.146708][ T6155] truncate_inode_page+0x8d/0xb0 [ 168.151683][ T6155] shmem_undo_range+0x53c/0x1930 [ 168.156647][ T6155] ? __lock_acquire+0x13bc/0x7d10 [ 168.161689][ T6155] ? shmem_truncate_range+0xa0/0xa0 [ 168.166916][ T6155] ? do_raw_spin_lock+0x128/0x2f0 [ 168.171958][ T6155] ? __rwlock_init+0x140/0x140 [ 168.176994][ T6155] shmem_evict_inode+0x220/0xa40 [ 168.182181][ T6155] ? inode_wait_for_writeback+0x1df/0x220 [ 168.188149][ T6155] ? shmem_free_in_core_inode+0xb0/0xb0 [ 168.193967][ T6155] ? do_raw_spin_lock+0x128/0x2f0 [ 168.199363][ T6155] ? bit_waitqueue+0x30/0x30 [ 168.203987][ T6155] ? do_raw_spin_unlock+0x11d/0x230 [ 168.209287][ T6155] ? shmem_free_in_core_inode+0xb0/0xb0 [ 168.214862][ T6155] evict+0x4c9/0x8d0 [ 168.218881][ T6155] ? proc_nr_inodes+0x320/0x320 [ 168.223768][ T6155] ? do_raw_spin_unlock+0x11d/0x230 [ 168.228995][ T6155] ? _raw_spin_unlock+0x24/0x40 [ 168.233955][ T6155] __dentry_kill+0x431/0x650 [ 168.238560][ T6155] dentry_kill+0xb8/0x290 [ 168.243101][ T6155] dput+0xd8/0x1a0 [ 168.247173][ T6155] __fput+0x5ee/0x930 [ 168.251201][ T6155] task_work_run+0x125/0x1a0 [ 168.255933][ T6155] exit_to_user_mode_loop+0x10f/0x130 [ 168.261377][ T6155] exit_to_user_mode_prepare+0xee/0x180 [ 168.267192][ T6155] syscall_exit_to_user_mode+0x16/0x40 [ 168.272780][ T6155] do_syscall_64+0x58/0xa0 [ 168.277305][ T6155] ? clear_bhb_loop+0x30/0x80 [ 168.282003][ T6155] ? clear_bhb_loop+0x30/0x80 [ 168.286708][ T6155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.292631][ T6155] RIP: 0033:0x7f22d92b2cb9 [ 168.297104][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.316751][ T6155] RSP: 002b:00007ffddf007408 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 168.325274][ T6155] RAX: 0000000000000000 RBX: 00007ffddf0074f0 RCX: 00007f22d92b2cb9 [ 168.333547][ T6155] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 168.341634][ T6155] RBP: 0000000000028e7e R08: 0000000000000001 R09: 0000000000000000 [ 168.349640][ T6155] R10: 0000001b31520000 R11: 0000000000000246 R12: 00007ffddf007530 [ 168.358021][ T6155] R13: 00007f22d952dfac R14: 0000000000028f05 R15: 00007f22d952dfa0 [ 168.366028][ T6155] [ 168.369072][ T6155] Modules linked in: [ 168.373004][ T6155] ---[ end trace 95e15d97660aef91 ]--- [ 168.378472][ T6155] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 168.384935][ T6155] Code: e8 29 15 db ff 4c 89 f7 48 c7 c6 00 00 33 8a e8 8a fb 0d 00 0f 0b e8 13 15 db ff 4c 89 f7 48 c7 c6 40 00 33 8a e8 74 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 14 db ff eb 5d e8 f1 14 db ff 4c 89 f7 [ 168.404838][ T6155] RSP: 0018:ffffc90003cdf688 EFLAGS: 00010046 [ 168.411030][ T6155] RAX: 4deec3a364957b00 RBX: 0000000000000000 RCX: 0000000000000000 [ 168.419148][ T6155] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff5200079bec4 [ 168.427330][ T6155] RBP: 1ffffd40002d9501 R08: ffff8880b902795b R09: fffff5200079be80 [ 168.435375][ T6155] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea00016ca800 [ 168.443360][ T6155] R13: dffffc0000000000 R14: ffffea00016ca800 R15: ffffea00016ca808 [ 168.451441][ T6155] FS: 0000555586737500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 168.460597][ T6155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.467213][ T6155] CR2: 00007f5c6a4c5d58 CR3: 0000000056cb3000 CR4: 00000000003506f0 [ 168.475230][ T6155] Kernel panic - not syncing: Fatal exception [ 168.481617][ T6155] Kernel Offset: disabled [ 168.486064][ T6155] Rebooting in 86400 seconds..