last executing test programs: 14.327635595s ago: executing program 0 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000001800)}], 0x1}}], 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4094) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x21) 11.304318403s ago: executing program 0 (id=107): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1, 0x1000000000}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x4, {0x1, 0xff, 0x3}, 0xfe}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 11.198418295s ago: executing program 2 (id=108): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0xad9, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff06"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 9.300889881s ago: executing program 4 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x51) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r1 = fanotify_init(0x1, 0x40000) r2 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x0, 0xd2) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/182, 0xb6}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents64(r0, 0x0, 0x0) 9.209034633s ago: executing program 3 (id=113): syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x0) 9.191168303s ago: executing program 2 (id=114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) 9.166566514s ago: executing program 3 (id=115): socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0xc, &(0x7f0000000100)=0x5, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0), &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000004060100000000000000000002000001050001000700000005000100070000000500010007000000ba00010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 9.050069886s ago: executing program 0 (id=116): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 8.954918908s ago: executing program 4 (id=117): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r2, 0x0, &(0x7f000000c240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000008c0)=0x1, 0x0, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip_vti0\x00'}) 8.518811607s ago: executing program 2 (id=119): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x521, &(0x7f0000000e00)="$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") sysfs$3(0x3) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000280)={[{@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@session={'session', 0x3d, 0x23}}, {@utf8}, {@map_acorn}, {@check_strict}, {@mode={'mode', 0x3d, 0xc9}}, {@cruft}, {@map_off}, {@check_strict}, {@overriderock}, {@block={'block', 0x3d, 0x200}}, {@cruft}, {@nocompress}, {@cruft}, {@session={'session', 0x3d, 0x2e}}, {@sbsector={'sbsector', 0x3d, 0x9}}, {@block={'block', 0x3d, 0x600}}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') pread64(r2, &(0x7f0000001240)=""/102390, 0x18ff6, 0x0) 8.484592077s ago: executing program 0 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7.701846872s ago: executing program 3 (id=121): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x20}, {0x6, 0x4, 0x0, 0x3}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.446135367s ago: executing program 4 (id=122): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffff8ffffffffffffff000000000000000000000000000000000000000000000000000a00000000400000000000000000000000000000000000000000000000050084000500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000003000000000000000000000000000000ff0200000000000000000000000000010000000033"], 0x13c}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) syz_open_procfs(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) accept4(r2, 0x0, 0x0, 0x80000) syz_emit_ethernet(0xa2, &(0x7f0000000000)={@link_local, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "6b92a13774ec4d0e9c7a8e7d7d3de18707fbab6e3dffd37a67ee45cc2f77f830", "8a1fd67822b5127335d55599e25082f8", {"9c0819b1de901baa65999d34cec64ee8", "d2233a28ba87c0dd91c3baa08773528e"}}}}}}}}, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) 7.384982968s ago: executing program 1 (id=123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) 6.344964438s ago: executing program 3 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r3, 0x6, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.760607609s ago: executing program 4 (id=125): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0xad9, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff06"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.209511529s ago: executing program 1 (id=126): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.944498484s ago: executing program 2 (id=127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) 3.831621546s ago: executing program 0 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x51) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r1 = fanotify_init(0x1, 0x40000) r2 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x0, 0xd2) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/182, 0xb6}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents64(r0, 0x0, 0x0) 3.704191158s ago: executing program 3 (id=129): socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r3, 0x0, &(0x7f000000c240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000008c0)=0x1, 0x0, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000000000000000000000001000"}}}]}, 0x48}}, 0x0) 3.572522311s ago: executing program 1 (id=130): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 3.572318561s ago: executing program 1 (id=131): socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0xc, &(0x7f0000000100)=0x5, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0), &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000004060100000000000000000002000001050001000700000005000100070000000500010007000000ba00010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 3.336544956s ago: executing program 4 (id=132): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r2, 0x0, &(0x7f000000c240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000008c0)=0x1, 0x0, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip_vti0\x00'}) 1.951828802s ago: executing program 2 (id=133): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 1.951082243s ago: executing program 0 (id=143): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x62802, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 1.250997205s ago: executing program 3 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000001800)}], 0x1}}], 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4094) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x21) 1.090521809s ago: executing program 1 (id=145): socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r3, 0x0, &(0x7f000000c240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000008c0)=0x1, 0x0, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000000000000000000000001000"}}}]}, 0x48}}, 0x0) 1.089631659s ago: executing program 4 (id=135): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 880.922203ms ago: executing program 2 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.244' (ED25519) to the list of known hosts. [ 62.890968][ T4173] cgroup: Unknown subsys name 'net' [ 63.022469][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.509078][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.525841][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 66.604547][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.637189][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.672263][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 66.754435][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 66.771719][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.779004][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.787853][ T4185] device bridge_slave_0 entered promiscuous mode [ 66.800269][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.807574][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.815373][ T4185] device bridge_slave_1 entered promiscuous mode [ 66.894891][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.904941][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.912349][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.920341][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.932145][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.939349][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.947536][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.963565][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.973064][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.980229][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.989330][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.002885][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.010765][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.018791][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.083810][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.091162][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.099245][ T4183] device bridge_slave_0 entered promiscuous mode [ 67.123691][ T4185] team0: Port device team_slave_0 added [ 67.132420][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.141877][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.149209][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.157499][ T4183] device bridge_slave_1 entered promiscuous mode [ 67.166348][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.175642][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.182856][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.191200][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.199924][ T4185] team0: Port device team_slave_1 added [ 67.207928][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.227080][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.236666][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.243758][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.251869][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.324472][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.342465][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.354826][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.364866][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.372058][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.398180][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.412397][ T4192] team0: Port device team_slave_0 added [ 67.420135][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.431388][ T4189] team0: Port device team_slave_0 added [ 67.444585][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.451806][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.477785][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.499245][ T4192] team0: Port device team_slave_1 added [ 67.513455][ T4189] team0: Port device team_slave_1 added [ 67.553708][ T4184] team0: Port device team_slave_0 added [ 67.561573][ T4184] team0: Port device team_slave_1 added [ 67.570506][ T4183] team0: Port device team_slave_0 added [ 67.609486][ T4183] team0: Port device team_slave_1 added [ 67.615933][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.622924][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.649747][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.661828][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.669788][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.696389][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.708135][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.715101][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.741161][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.768490][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.775480][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.801848][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.814021][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.821104][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.847641][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.859312][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.866620][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.892569][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.940188][ T4185] device hsr_slave_0 entered promiscuous mode [ 67.947774][ T4185] device hsr_slave_1 entered promiscuous mode [ 67.955334][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.962993][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.989363][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.019708][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.026698][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.033769][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.041814][ T4184] Cannot create hsr debugfs directory [ 68.052256][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.059599][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.086056][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.108965][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.115940][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.122406][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.130656][ T4192] Cannot create hsr debugfs directory [ 68.206836][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.213627][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.220459][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.226896][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 68.228173][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 68.235393][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 68.240245][ T4189] Cannot create hsr debugfs directory [ 68.240912][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 68.258993][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 68.312319][ T4183] device hsr_slave_0 entered promiscuous mode [ 68.319674][ T4183] device hsr_slave_1 entered promiscuous mode [ 68.326525][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.334086][ T4183] Cannot create hsr debugfs directory [ 68.613045][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.630239][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.639758][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.650413][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.710511][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.733013][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.742787][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.753238][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.848430][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.860873][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.884718][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.892585][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.902230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.914444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.938619][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.954602][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.977216][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.999783][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.008703][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.018151][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.025394][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.033904][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.047344][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.059291][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.076323][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.090638][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.099782][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.109998][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.119879][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.127067][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.136272][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.146124][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.154868][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.162002][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.170901][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.188130][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.197228][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.210883][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.219877][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.228784][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.238088][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.245136][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.276499][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.291994][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.302378][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.312219][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.321002][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.330130][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.352947][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.362635][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.372554][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.381370][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.391933][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.403651][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.413696][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.429526][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.440996][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.455934][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.464372][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.473424][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.484530][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.493820][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.506234][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.520097][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.536245][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.552721][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.561362][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.570233][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.585307][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.594541][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.738492][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.774076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.782176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.797826][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.809626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.820355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.858224][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.882422][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.912805][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.929889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.937508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.944902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.953890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.963340][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.970548][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.980813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.989636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.998200][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.005261][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.013084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.030384][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.055733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.064434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.074104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.084840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.095093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.104488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.114342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.122233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.140078][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.153580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.194950][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.219126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.229758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.239360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.247833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.255482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.265045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.273728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.282816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.291635][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.298745][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.307045][ T4194] Bluetooth: hci4: command 0x041b tx timeout [ 70.313027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.326019][ T4253] Bluetooth: hci2: command 0x041b tx timeout [ 70.330018][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.342490][ T4253] Bluetooth: hci0: command 0x041b tx timeout [ 70.343563][ T4194] Bluetooth: hci1: command 0x041b tx timeout [ 70.355151][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 70.358078][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.385821][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.395427][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.405064][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.412202][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.423002][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.432672][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.442158][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.451053][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.460345][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.467465][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.478818][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.488466][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.497194][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.505948][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.514312][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.521441][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.529682][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.539191][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.562042][ T4185] device veth0_vlan entered promiscuous mode [ 70.573412][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.585090][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.602679][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.614077][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.630413][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.642698][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.650763][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.659036][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.668287][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.677722][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.685420][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.713748][ T4185] device veth1_vlan entered promiscuous mode [ 70.721857][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.731407][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.740183][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.750534][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.759494][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.768511][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.777473][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.786455][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.802899][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.813620][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.831763][ T4192] device veth0_vlan entered promiscuous mode [ 70.846738][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.854980][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.863041][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.872401][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.881077][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.889889][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.898847][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.923610][ T4192] device veth1_vlan entered promiscuous mode [ 70.940114][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.949227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.957681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.965207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.975096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.984188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.999750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.012175][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.032748][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.043712][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.073430][ T4185] device veth0_macvtap entered promiscuous mode [ 71.099935][ T4185] device veth1_macvtap entered promiscuous mode [ 71.131580][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.145482][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.160279][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.172699][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.227370][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.235035][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.251111][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.260344][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.270170][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.273703][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.283548][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.286269][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.299786][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.310497][ T4192] device veth0_macvtap entered promiscuous mode [ 71.324857][ T4184] device veth0_vlan entered promiscuous mode [ 71.335064][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.345547][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.354881][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.364145][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.373093][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.394122][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.402888][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.411575][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.421461][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.431430][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.440361][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.449192][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.463771][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.473459][ T4192] device veth1_macvtap entered promiscuous mode [ 71.487822][ T4184] device veth1_vlan entered promiscuous mode [ 71.513475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.526499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.534594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.544027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.551702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.579368][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.591450][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.606444][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.625324][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.638947][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.650752][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.660521][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.670250][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.679824][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.689271][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.698485][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.708399][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.722852][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.754747][ T4184] device veth0_macvtap entered promiscuous mode [ 71.768971][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.778906][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.787956][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.797924][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.818254][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.827674][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.836932][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.847815][ T4184] device veth1_macvtap entered promiscuous mode [ 71.880100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.889384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.898856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.907812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.916264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.939933][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.954872][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.965219][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.976284][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.989659][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.011474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.022126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.031253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.042031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.053796][ T4189] device veth0_vlan entered promiscuous mode [ 72.062501][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.074273][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.084490][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.095251][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.107445][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.138973][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.144896][ T4189] device veth1_vlan entered promiscuous mode [ 72.151730][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.170377][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.178729][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.187112][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.195783][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.211393][ T4183] device veth0_vlan entered promiscuous mode [ 72.249182][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.260402][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.269016][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.282799][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.290881][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.301029][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.310722][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.320376][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.329362][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.344682][ T4183] device veth1_vlan entered promiscuous mode [ 72.367496][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.376422][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.391969][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 72.395486][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 72.404609][ T318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.411286][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 72.418639][ T4253] Bluetooth: hci2: command 0x040f tx timeout [ 72.420338][ T318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.436124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.444249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.454609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.458416][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 72.467293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.490050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.498980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.579920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.595004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.607983][ T4183] device veth0_macvtap entered promiscuous mode [ 72.617793][ T4189] device veth0_macvtap entered promiscuous mode [ 72.634957][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.648643][ T4189] device veth1_macvtap entered promiscuous mode [ 72.655345][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.665247][ T4183] device veth1_macvtap entered promiscuous mode [ 72.690132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.719772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.736512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.744821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.760322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.784737][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.805347][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.816352][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.833064][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.843156][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.859530][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.887293][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.932286][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.944450][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.986184][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.994288][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.004974][ T4298] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.007139][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.046831][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.066274][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.081013][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.091486][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.108405][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.124820][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.157136][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.165194][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.190412][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.202086][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.212759][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.224415][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.236201][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.251298][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.262186][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.274773][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.292706][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.303613][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.365900][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.451884][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.548696][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.654544][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.748954][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.788723][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.815029][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.916879][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.013499][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.024052][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.034192][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.047379][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.057547][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.068314][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.079567][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.108295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.143413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.181675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.203376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.217976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.238061][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.269999][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.280356][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.306050][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.496062][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.525012][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.526110][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 74.545664][ T4237] Bluetooth: hci2: command 0x0419 tx timeout [ 74.552168][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 74.562249][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 74.574143][ T4245] Bluetooth: hci4: command 0x0419 tx timeout [ 74.591000][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.671262][ T318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.676540][ T4253] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.699852][ T318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.719166][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.735427][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.746243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.765431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.863619][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.906010][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.915002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.101641][ T4253] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 75.285026][ T4253] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.454383][ T4337] process 'syz.1.13' launched './file0' with NULL argv: empty string added [ 75.463547][ T4253] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.472921][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 75.482046][ T4253] usb 5-1: Product: syz [ 75.486788][ T4253] usb 5-1: Manufacturer: syz [ 75.491425][ T4253] usb 5-1: SerialNumber: syz [ 75.501157][ T4253] usb 5-1: config 0 descriptor?? [ 75.563925][ T4253] usb 5-1: selecting invalid altsetting 0 [ 76.055341][ T4341] usb 5-1: selecting invalid altsetting 0 [ 76.061452][ T4341] usb 5-1: 0:0: usb_set_interface failed (-22) [ 76.068605][ T4341] usb 5-1: selecting invalid altsetting 0 [ 76.074401][ T4341] usb 5-1: 0:0: usb_set_interface failed (-22) [ 76.081697][ T4341] usb 5-1: selecting invalid altsetting 0 [ 76.087658][ T4341] usb 5-1: 0:0: usb_set_interface failed (-22) [ 76.906897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 76.925772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.934780][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.943737][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.952654][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.961754][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.982972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.991913][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.000872][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.009787][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.036835][ T4194] usb 5-1: USB disconnect, device number 2 [ 79.135749][ T4314] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.385775][ T4314] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 81.636408][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.645206][ T4314] usb 1-1: Product: syz [ 81.649956][ T4314] usb 1-1: Manufacturer: syz [ 81.654604][ T4314] usb 1-1: SerialNumber: syz [ 81.706776][ T4314] usb 1-1: config 0 descriptor?? [ 81.785792][ T4314] usb 1-1: can't set config #0, error -71 [ 81.808398][ T4314] usb 1-1: USB disconnect, device number 2 [ 81.888832][ T4379] loop0: detected capacity change from 0 to 512 [ 82.049248][ T4379] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.22: casefold flag without casefold feature [ 82.077577][ T4379] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.22: couldn't read orphan inode 15 (err -117) [ 82.099612][ T4379] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.380281][ T4402] loop3: detected capacity change from 0 to 512 [ 84.204989][ T4402] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.282371][ T4412] loop2: detected capacity change from 0 to 2048 [ 84.283959][ T4410] loop1: detected capacity change from 0 to 4096 [ 84.344353][ T4410] ntfs3: Unknown parameter 'hide_dot_files' [ 84.387236][ T4412] loop2: p1 < > p3 p4 < > [ 84.401729][ T4412] loop2: p3 start 4284289 is beyond EOD, truncated [ 84.487489][ T3562] loop2: p1 < > p3 p4 < > [ 84.493422][ T3562] loop2: p3 start 4284289 is beyond EOD, truncated [ 87.798311][ T1111] cfg80211: failed to load regulatory.db [ 88.390712][ T4436] loop2: detected capacity change from 0 to 64 [ 88.537506][ T4443] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value [ 89.145123][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 89.349945][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 89.392566][ T4456] loop1: detected capacity change from 0 to 512 [ 90.693280][ T4456] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.764610][ T4466] loop4: detected capacity change from 0 to 4096 [ 90.868584][ T4466] ntfs3: Unknown parameter 'hide_dot_files' [ 91.686679][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 91.701236][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 92.231051][ T4478] UBIFS error (pid: 4478): cannot open "(null)", error -22 [ 92.685742][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.075817][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 93.196354][ T1108] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 93.299069][ T1108] usb 5-1: config 0 has no interface number 0 [ 93.448185][ T1108] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 93.535184][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 93.740800][ T1108] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 94.126466][ T1108] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 94.229032][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.444048][ T1108] usb 5-1: Product: syz [ 94.547712][ T1108] usb 5-1: Manufacturer: syz [ 94.640991][ T1108] usb 5-1: SerialNumber: syz [ 94.880411][ T1108] usb 5-1: config 0 descriptor?? [ 95.683293][ T1108] radio-si470x 5-1:0.35: this is not a si470x device. [ 95.723771][ T4503] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 95.750891][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.825954][ T4503] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 96.026439][ T1108] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 96.132392][ T1108] usb 5-1: USB disconnect, device number 3 [ 98.255864][ T4528] UBIFS error (pid: 4528): cannot open "(null)", error -22 [ 99.297388][ T4526] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value [ 101.634428][ T4558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.80'. [ 101.676741][ T4558] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.417484][ T4581] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value [ 108.441708][ T4600] loop4: detected capacity change from 0 to 512 [ 108.489864][ T4600] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.645338][ T4600] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #16: comm syz.4.92: corrupted inode contents [ 108.661322][ T4600] EXT4-fs error (device loop4): ext4_dirty_inode:6040: inode #16: comm syz.4.92: mark_inode_dirty error [ 108.675951][ T4600] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #16: comm syz.4.92: corrupted inode contents [ 108.724470][ T4600] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.92: mark_inode_dirty error [ 108.790616][ T4600] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #16: comm syz.4.92: corrupted inode contents [ 108.841999][ T4600] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 108.866059][ T4600] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #16: comm syz.4.92: corrupted inode contents [ 108.906265][ T4600] EXT4-fs error (device loop4): ext4_truncate:4273: inode #16: comm syz.4.92: mark_inode_dirty error [ 108.956050][ T4600] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 109.015051][ T4600] EXT4-fs (loop4): 1 truncate cleaned up [ 109.033773][ T4600] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.059421][ T4600] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.205591][ C1] sched: RT throttling activated [ 111.254941][ T4615] loop1: detected capacity change from 0 to 8 [ 111.325168][ T4615] squashfs image failed sanity check [ 111.398433][ T4622] UBIFS error (pid: 4622): cannot open "(null)", error -22 [ 111.934357][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 117.382658][ T4647] loop2: detected capacity change from 0 to 2048 [ 117.426814][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 117.618831][ T4656] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.622032][ T4651] syz.3.104 (4651) used greatest stack depth: 20352 bytes left [ 119.594880][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 119.965991][ T4684] loop2: detected capacity change from 0 to 512 [ 121.150168][ T4684] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.119: corrupted inode contents [ 121.166170][ T4684] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #16: comm syz.2.119: mark_inode_dirty error [ 121.331469][ T4684] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.119: corrupted inode contents [ 121.643618][ T4684] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.119: mark_inode_dirty error [ 122.011317][ T4684] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.119: corrupted inode contents [ 122.413636][ T4684] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 122.698689][ T4684] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.119: corrupted inode contents [ 123.131504][ T4684] EXT4-fs error (device loop2): ext4_truncate:4273: inode #16: comm syz.2.119: mark_inode_dirty error [ 123.544280][ T4684] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 124.323046][ T4684] EXT4-fs (loop2): 1 truncate cleaned up [ 124.329138][ T4684] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.342913][ T4684] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.560327][ T4709] loop4: detected capacity change from 0 to 2048 [ 124.971314][ T4719] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.110148][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 127.421665][ T4489] Bluetooth: hci0: command 0x0401 tx timeout [ 128.556593][ T4753] page:ffffea0001a34500 refcount:4 mapcount:1 mapping:ffff88802a20bb48 index:0x0 pfn:0x68d14 [ 128.567203][ T4753] memcg:ffff888074404000 [ 128.571496][ T4753] aops:shmem_aops ino:11 [ 128.575752][ T4753] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 128.585576][ T4753] raw: 00fff00000080015 ffffea000173a688 ffffea0001a345c8 ffff88802a20bb48 [ 128.594176][ T4753] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888074404000 [ 128.602777][ T4753] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 128.609798][ T4753] page_owner tracks the page as allocated [ 128.615503][ T4753] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4755, ts 127633406838, free_ts 127417805059 [ 128.630261][ T4753] get_page_from_freelist+0x1b77/0x1c60 [ 128.635844][ T4753] __alloc_pages+0x1e1/0x470 [ 128.640431][ T4753] alloc_pages_vma+0x393/0x7c0 [ 128.645191][ T4753] shmem_alloc_and_acct_page+0x427/0xb70 [ 128.650816][ T4753] shmem_getpage_gfp+0x14f4/0x2d40 [ 128.655924][ T4753] shmem_read_mapping_page_gfp+0x96/0x100 [ 128.661640][ T4753] udmabuf_create+0x878/0x1540 [ 128.666407][ T4753] udmabuf_ioctl+0x1d1/0x2c0 [ 128.671000][ T4753] __se_sys_ioctl+0xfa/0x170 [ 128.675611][ T4753] do_syscall_64+0x4c/0xa0 [ 128.680033][ T4753] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.685920][ T4753] page last free stack trace: [ 128.690575][ T4753] free_unref_page_prepare+0x637/0x6c0 [ 128.696026][ T4753] free_unref_page_list+0x122/0x7e0 [ 128.701217][ T4753] release_pages+0x184b/0x1bb0 [ 128.705972][ T4753] __pagevec_release+0x6d/0xe0 [ 128.710730][ T4753] shmem_undo_range+0x5cb/0x1880 [ 128.715662][ T4753] shmem_evict_inode+0x20d/0xa00 [ 128.720590][ T4753] evict+0x485/0x870 [ 128.724486][ T4753] __dentry_kill+0x431/0x650 [ 128.729095][ T4753] dentry_kill+0xb8/0x290 [ 128.733442][ T4753] dput+0xd8/0x1a0 [ 128.737177][ T4753] __fput+0x5ee/0x930 [ 128.741175][ T4753] task_work_run+0x125/0x1a0 [ 128.745776][ T4753] do_exit+0x61e/0x20a0 [ 128.749938][ T4753] do_group_exit+0x12e/0x300 [ 128.754538][ T4753] get_signal+0x6ca/0x12c0 [ 128.758972][ T4753] arch_do_signal_or_restart+0xc1/0x1300 [ 128.764686][ T4753] ------------[ cut here ]------------ [ 128.770127][ T4753] kernel BUG at mm/filemap.c:166! [ 128.775174][ T4753] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 128.781266][ T4753] CPU: 1 PID: 4753 Comm: syz.4.135 Not tainted syzkaller #0 [ 128.788542][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.798598][ T4753] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 128.805037][ T4753] Code: e8 39 70 db ff 4c 89 f7 48 c7 c6 e0 e5 12 8a e8 7a db 0d 00 0f 0b e8 23 70 db ff 4c 89 f7 48 c7 c6 20 e6 12 8a e8 64 db 0d 00 <0f> 0b 48 85 ed 75 59 e8 08 70 db ff eb 5d e8 01 70 db ff 4c 89 f7 [ 128.824656][ T4753] RSP: 0018:ffffc900030df688 EFLAGS: 00010046 [ 128.830730][ T4753] RAX: 7da50ddbd2d84d00 RBX: 0000000000000000 RCX: ffff88801d753b80 [ 128.838699][ T4753] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 128.846661][ T4753] RBP: 1ffffd40003468a1 R08: dffffc0000000000 R09: ffffed1017224f24 [ 128.854623][ T4753] R10: ffffed1017224f24 R11: 1ffff11017224f23 R12: ffffea0001a34500 [ 128.862591][ T4753] R13: dffffc0000000000 R14: ffffea0001a34500 R15: ffffea0001a34508 [ 128.870588][ T4753] FS: 000055558dcf7500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 128.879534][ T4753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.886115][ T4753] CR2: 000000110c3ba949 CR3: 000000005da08000 CR4: 00000000003526e0 [ 128.894081][ T4753] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.902052][ T4753] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.910037][ T4753] Call Trace: [ 128.913318][ T4753] [ 128.916252][ T4753] __delete_from_page_cache+0xbf/0x6b0 [ 128.921719][ T4753] ? _raw_spin_lock_irq+0x7a/0xe0 [ 128.926751][ T4753] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 128.933803][ T4753] ? _raw_spin_lock_irq+0xab/0xe0 [ 128.938844][ T4753] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 128.944221][ T4753] ? page_mapping+0x30e/0x440 [ 128.948895][ T4753] delete_from_page_cache+0x121/0x190 [ 128.954261][ T4753] truncate_inode_page+0x8d/0xb0 [ 128.959209][ T4753] shmem_undo_range+0x4dc/0x1880 [ 128.964142][ T4753] ? __lock_acquire+0x13ad/0x7c60 [ 128.969157][ T4753] ? shmem_truncate_range+0xa0/0xa0 [ 128.974358][ T4753] ? do_raw_spin_lock+0x11d/0x280 [ 128.979375][ T4753] ? __rwlock_init+0x140/0x140 [ 128.984130][ T4753] shmem_evict_inode+0x20d/0xa00 [ 128.989071][ T4753] ? _raw_spin_unlock+0x24/0x40 [ 128.993942][ T4753] ? inode_wait_for_writeback+0x1b0/0x200 [ 128.999701][ T4753] ? shmem_free_in_core_inode+0xb0/0xb0 [ 129.005258][ T4753] ? do_raw_spin_lock+0x11d/0x280 [ 129.010283][ T4753] ? bit_waitqueue+0x30/0x30 [ 129.014869][ T4753] ? do_raw_spin_unlock+0x11d/0x230 [ 129.020136][ T4753] ? shmem_free_in_core_inode+0xb0/0xb0 [ 129.025697][ T4753] evict+0x485/0x870 [ 129.029681][ T4753] ? proc_nr_inodes+0x320/0x320 [ 129.034531][ T4753] ? do_raw_spin_unlock+0x11d/0x230 [ 129.039728][ T4753] ? _raw_spin_unlock+0x24/0x40 [ 129.044580][ T4753] __dentry_kill+0x431/0x650 [ 129.049167][ T4753] dentry_kill+0xb8/0x290 [ 129.053501][ T4753] dput+0xd8/0x1a0 [ 129.057231][ T4753] __fput+0x5ee/0x930 [ 129.061212][ T4753] task_work_run+0x125/0x1a0 [ 129.065793][ T4753] exit_to_user_mode_loop+0x10f/0x130 [ 129.071159][ T4753] exit_to_user_mode_prepare+0xb1/0x140 [ 129.076696][ T4753] syscall_exit_to_user_mode+0x16/0x40 [ 129.082327][ T4753] do_syscall_64+0x58/0xa0 [ 129.086875][ T4753] ? clear_bhb_loop+0x30/0x80 [ 129.091549][ T4753] ? clear_bhb_loop+0x30/0x80 [ 129.096220][ T4753] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.102110][ T4753] RIP: 0033:0x7f0005350ba9 [ 129.106518][ T4753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.126111][ T4753] RSP: 002b:00007ffd59e50798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 129.134514][ T4753] RAX: 0000000000000000 RBX: 00007f0005599da0 RCX: 00007f0005350ba9 [ 129.142491][ T4753] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 129.150469][ T4753] RBP: 00007f0005599da0 R08: 00000000000000dc R09: 0000000c59e50a8f [ 129.158448][ T4753] R10: 00007f0005599cb0 R11: 0000000000000246 R12: 000000000001f5f9 [ 129.166404][ T4753] R13: 00007f0005598090 R14: ffffffffffffffff R15: 00007ffd59e508b0 [ 129.174454][ T4753] [ 129.177470][ T4753] Modules linked in: [ 129.181367][ T4753] ---[ end trace c58e2cdbf9d28718 ]--- [ 129.186812][ T4753] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 129.193223][ T4753] Code: e8 39 70 db ff 4c 89 f7 48 c7 c6 e0 e5 12 8a e8 7a db 0d 00 0f 0b e8 23 70 db ff 4c 89 f7 48 c7 c6 20 e6 12 8a e8 64 db 0d 00 <0f> 0b 48 85 ed 75 59 e8 08 70 db ff eb 5d e8 01 70 db ff 4c 89 f7 [ 129.212821][ T4753] RSP: 0018:ffffc900030df688 EFLAGS: 00010046 [ 129.218879][ T4753] RAX: 7da50ddbd2d84d00 RBX: 0000000000000000 RCX: ffff88801d753b80 [ 129.226840][ T4753] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 129.234801][ T4753] RBP: 1ffffd40003468a1 R08: dffffc0000000000 R09: ffffed1017224f24 [ 129.242766][ T4753] R10: ffffed1017224f24 R11: 1ffff11017224f23 R12: ffffea0001a34500 [ 129.250730][ T4753] R13: dffffc0000000000 R14: ffffea0001a34500 R15: ffffea0001a34508 [ 129.258708][ T4753] FS: 000055558dcf7500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 129.267629][ T4753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.274224][ T4753] CR2: 000000110c3ba949 CR3: 000000005da08000 CR4: 00000000003526e0 [ 129.282207][ T4753] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.290172][ T4753] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.298140][ T4753] Kernel panic - not syncing: Fatal exception [ 129.304502][ T4753] Kernel Offset: disabled [ 129.308825][ T4753] Rebooting in 86400 seconds..