last executing test programs: 9.602826475s ago: executing program 2 (id=244): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) 8.905782952s ago: executing program 2 (id=248): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x2, 0x1, 0xab4e, 0xfffffffffffffffd}) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2be, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, 0x0, 0x26a200, 0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000950000f428fc8fc1a1"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) socket$inet_udp(0x2, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 4.908838722s ago: executing program 1 (id=265): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket(0x2, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 4.003991499s ago: executing program 4 (id=273): r0 = socket(0x10, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.889921575s ago: executing program 3 (id=274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000010280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 3.79035798s ago: executing program 1 (id=275): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x60}], 0x1}}], 0x1, 0x8060) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0xf000}, 0x8) 3.730120684s ago: executing program 2 (id=276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe8, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) 3.694921885s ago: executing program 3 (id=277): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000240)=[{0x2}, {0x4, 0xf, 0x3000}, {0x0, 0x7, 0x1000}, {0x3, 0x2, 0x3800}], 0x20, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) 3.661080358s ago: executing program 1 (id=278): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000074c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0, 0x0, &(0x7f0000002d80)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x27, 0xf0, [@multicast2, @multicast2, @rand_addr=0x64010100, @broadcast, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @local, @private=0xa010100]}, @generic={0x89, 0x2}]}}}], 0x40}}], 0x1, 0x10) 3.526461485s ago: executing program 1 (id=279): syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) setresuid(0xee01, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) unlink(0x0) fchown(r1, 0xffffffffffffffff, 0x0) 3.475048657s ago: executing program 1 (id=280): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x8, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x8016) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.41208246s ago: executing program 2 (id=281): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) 3.377744602s ago: executing program 4 (id=282): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 3.298315166s ago: executing program 2 (id=283): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x2a738, 0x7, 0x6, 0x0, 0x1, 0xcb02}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x8004e200, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x1fab, &(0x7f0000000ac0)={0x0, 0x6f40, 0x40, 0x2, 0x20000d0}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000007c0)='./file0\x00', 0x8401, &(0x7f00000008c0)=ANY=[@ANYBLOB='nocomtress,iocharset=macgreek,showassoc,map=normal,nojoliet,map=off,dmode=0x02,iocharset=utf8,\x00'], 0x0, 0x688, &(0x7f0000000100)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.193617442s ago: executing program 0 (id=284): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.091103357s ago: executing program 0 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.894308367s ago: executing program 2 (id=286): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x2, 0x1, 0xab4e, 0xfffffffffffffffd}) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2be, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, 0x0, 0x26a200, 0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000950000f428fc8fc1a1"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) socket$inet_udp(0x2, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 2.794210893s ago: executing program 3 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x8) syz_open_procfs(0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000180)='./file0/file0/../file0\x00', 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80080}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0xa, 0x1000, &(0x7f0000001cc0)=""/4096, 0x20800, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 2.752596475s ago: executing program 0 (id=288): setfsgid(0xee00) r0 = syz_clone(0x88080000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2) 2.362580596s ago: executing program 0 (id=289): userfaultfd(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$igmp(0x2, 0x3, 0x2) fsopen(&(0x7f0000000200)='overlay\x00', 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x742, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64], 0x20) 2.227258923s ago: executing program 4 (id=290): syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) setresuid(0xee01, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) unlink(0x0) fchown(r1, 0xffffffffffffffff, 0x0) 2.037036243s ago: executing program 0 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe8, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) 1.990521515s ago: executing program 3 (id=292): syz_emit_ethernet(0x46, &(0x7f0000000100)={@multicast, @local, @val={@void, {0x86dd, 0x2, 0x0, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @local, @mcast1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @remote}}}}, 0x0) 1.916983009s ago: executing program 4 (id=293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) 1.818265314s ago: executing program 4 (id=294): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8080, &(0x7f0000000080)={[{@nodots}, {@nodots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@sys_immutable}, {@nodots}, {@nodots}]}, 0x1, 0x209, &(0x7f0000000680)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x45, &(0x7f0000000040)={0x0, 0x0}, 0x8) 1.566985747s ago: executing program 3 (id=295): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r3, 0x0, 0x0, 0x804, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.566167327s ago: executing program 0 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1.226434226s ago: executing program 4 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe8, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 101.773074ms ago: executing program 3 (id=298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=299): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0xf4, 0x1, 0xf259, 0x65, @private2, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x20, 0xf840, 0x80000001, 0xc0000000}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 54.340842][ T4170] cgroup: Unknown subsys name 'net' [ 54.488288][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.948885][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.309836][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 57.391868][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 57.458454][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 57.510468][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.522428][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.530379][ T4186] device bridge_slave_0 entered promiscuous mode [ 57.551583][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.560630][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.568573][ T4186] device bridge_slave_1 entered promiscuous mode [ 57.576543][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 57.623069][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 57.647821][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.655274][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.663685][ T4188] device bridge_slave_0 entered promiscuous mode [ 57.672964][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.694670][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.712355][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.719598][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.728179][ T4184] device bridge_slave_0 entered promiscuous mode [ 57.736089][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.744422][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.752684][ T4188] device bridge_slave_1 entered promiscuous mode [ 57.792326][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.799528][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.808152][ T4184] device bridge_slave_1 entered promiscuous mode [ 57.828474][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.840659][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.855641][ T4186] team0: Port device team_slave_0 added [ 57.898120][ T4186] team0: Port device team_slave_1 added [ 57.915323][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.922603][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.930489][ T4185] device bridge_slave_0 entered promiscuous mode [ 57.954003][ T4188] team0: Port device team_slave_0 added [ 57.962028][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.972535][ T4188] team0: Port device team_slave_1 added [ 57.998122][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.005516][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.014331][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.036702][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.049301][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.056591][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.068460][ T4187] device bridge_slave_0 entered promiscuous mode [ 58.076750][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.083918][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.110576][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.140669][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.147957][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.156507][ T4187] device bridge_slave_1 entered promiscuous mode [ 58.164150][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.171107][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.197905][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.209532][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.219113][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.245802][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.266690][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.294743][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.302359][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.328708][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.343556][ T4184] team0: Port device team_slave_0 added [ 58.351269][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.362506][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.393576][ T4184] team0: Port device team_slave_1 added [ 58.402326][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.428231][ T4185] team0: Port device team_slave_0 added [ 58.447607][ T4186] device hsr_slave_0 entered promiscuous mode [ 58.454801][ T4186] device hsr_slave_1 entered promiscuous mode [ 58.479880][ T4185] team0: Port device team_slave_1 added [ 58.496139][ T4188] device hsr_slave_0 entered promiscuous mode [ 58.503249][ T4188] device hsr_slave_1 entered promiscuous mode [ 58.509915][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.517971][ T4188] Cannot create hsr debugfs directory [ 58.529586][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.537148][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.564352][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.576979][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.584357][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.611060][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.635317][ T4187] team0: Port device team_slave_0 added [ 58.678305][ T4187] team0: Port device team_slave_1 added [ 58.695464][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.702717][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.729149][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.766541][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.774106][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.800620][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.824444][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.831530][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.858700][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.886684][ T4184] device hsr_slave_0 entered promiscuous mode [ 58.894488][ T4184] device hsr_slave_1 entered promiscuous mode [ 58.901236][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.909098][ T4184] Cannot create hsr debugfs directory [ 58.918378][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.925736][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.952654][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.002949][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.010078][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.017883][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.025500][ T4185] Cannot create hsr debugfs directory [ 59.052941][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 59.059682][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 59.061844][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 59.081961][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 59.088594][ T4190] Bluetooth: hci4: command 0x0409 tx timeout [ 59.114380][ T4187] device hsr_slave_0 entered promiscuous mode [ 59.121117][ T4187] device hsr_slave_1 entered promiscuous mode [ 59.128560][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.136756][ T4187] Cannot create hsr debugfs directory [ 59.361136][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.373127][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.383550][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.397216][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.468625][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.481038][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.501692][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.511137][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.568970][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.602705][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.613631][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.628776][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.650933][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.678215][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.700978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.711931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.720130][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.731327][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.753430][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.766028][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.792178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.800908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.810597][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.817939][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.827609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.837251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.846743][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.853877][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.866611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.886360][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.910508][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.920355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.935314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.945166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.957524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.966627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.986444][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.996830][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.006730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.015810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.035174][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.043738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.055735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.067169][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.085479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.095254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.105150][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.112453][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.150197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.160187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.169045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.202932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.216520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.226335][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.233838][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.242415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.251074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.260183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.269458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.288843][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.300657][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.310771][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.321018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.330484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.339338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.366390][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.376893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.386723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.396532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.404714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.417143][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.427805][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.458581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.476662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.490307][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.497464][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.517865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.527325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.536693][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.543823][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.554445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.562628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.571037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.586857][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.606392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.615674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.639747][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.650550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.662216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.671023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.681619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.690976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.707830][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.726348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.736506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.751001][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.765060][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.787965][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.801526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.813660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.823693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.831371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.839257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.847778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.862509][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.879905][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.900215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.912656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.921244][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.928399][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.949080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.964199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.979549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.988863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.999533][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.006982][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.015481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.023909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.084664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.099353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.110516][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.117919][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.131215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.139548][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 61.142519][ T4173] Bluetooth: hci1: command 0x041b tx timeout [ 61.145956][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 61.152038][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 61.159339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.172693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.181598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.190606][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.190629][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 61.198336][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.214497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.223293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.232899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.241691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.257497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.265349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.289925][ T4188] device veth0_vlan entered promiscuous mode [ 61.301705][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.326313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.335474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.344429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.353640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.362630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.371253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.380294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.389889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.398731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.407992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.417196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.426316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.435321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.444665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.454123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.463246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.471080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.479265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.494709][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.518032][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.525297][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.534970][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.549626][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.560910][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.618555][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.627929][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.639870][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.651516][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.660178][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.669340][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.678381][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.687921][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.699653][ T4188] device veth1_vlan entered promiscuous mode [ 61.721248][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.751151][ T4184] device veth0_vlan entered promiscuous mode [ 61.774741][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.792297][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.812588][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.821480][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.847244][ T4186] device veth0_vlan entered promiscuous mode [ 61.859810][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.870381][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.879910][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.895438][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.909338][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.919535][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.930569][ T4188] device veth0_macvtap entered promiscuous mode [ 61.946626][ T4186] device veth1_vlan entered promiscuous mode [ 61.965078][ T4184] device veth1_vlan entered promiscuous mode [ 61.973411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.981593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.990223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.999271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.007131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.015870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.024067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.041502][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.051441][ T4188] device veth1_macvtap entered promiscuous mode [ 62.066795][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.113038][ T4184] device veth0_macvtap entered promiscuous mode [ 62.135114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.144346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.155044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.163828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.173279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.182182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.201157][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.213514][ T4184] device veth1_macvtap entered promiscuous mode [ 62.224787][ T4186] device veth0_macvtap entered promiscuous mode [ 62.236660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.246331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.256120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.266760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.276248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.285701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.306761][ T4186] device veth1_macvtap entered promiscuous mode [ 62.336836][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.356567][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.371619][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.384424][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.392085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.400159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.409943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.422667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.431516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.440929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.451498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.470886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.479613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.496709][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.508448][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.518410][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.529787][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.541247][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.550781][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.564600][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.581124][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.592646][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.601674][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.610874][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.619905][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.630401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.639108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.647211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.658252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.667158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.676316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.700136][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.710884][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.721829][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.733408][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.747885][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.757764][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.768810][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.777819][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.786967][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.798652][ T4187] device veth0_vlan entered promiscuous mode [ 62.812341][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.820978][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.833586][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.844842][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.854063][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.863255][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.887540][ T4187] device veth1_vlan entered promiscuous mode [ 62.939319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.951365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.998581][ T4187] device veth0_macvtap entered promiscuous mode [ 63.036541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.045410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.054817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.073531][ T4187] device veth1_macvtap entered promiscuous mode [ 63.090489][ T4185] device veth0_vlan entered promiscuous mode [ 63.109602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.133539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.142140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.150570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.158928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.196709][ T4185] device veth1_vlan entered promiscuous mode [ 63.213063][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 63.222259][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 63.228495][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 63.232065][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 63.240703][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.241100][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 63.253676][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.268045][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.268103][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.284438][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.296544][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.306466][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.317292][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.328821][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.354090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.365491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.374809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.384132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.393137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.414713][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.426428][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.438025][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.449767][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.461429][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.473317][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.483784][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.495424][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.506847][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.535635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.545205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.554733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.565220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.575307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.588280][ T4185] device veth0_macvtap entered promiscuous mode [ 63.591997][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.602817][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.604803][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.611643][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.611704][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.638313][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.659036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.669925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.683144][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.683710][ T4185] device veth1_macvtap entered promiscuous mode [ 63.690996][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.723179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.805902][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.831507][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.842592][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.856479][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.867190][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.877793][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.887898][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.898647][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.910380][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.937718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.946262][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.948911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.963156][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.974238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.007915][ T4265] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.009876][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.025364][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.025389][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.025400][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.025413][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.025424][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.025436][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.025447][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.025460][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.026698][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.055447][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.134625][ T728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.142678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.151445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.161131][ T728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.194639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.206142][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.221368][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.232017][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.240779][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.260789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.340210][ T728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.355312][ T728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.411590][ T728] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.533816][ T4273] team0: Port device vlan2 added [ 64.580956][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.604437][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.643586][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.708792][ T728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.729905][ T728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.818265][ T728] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.224875][ T4296] loop1: detected capacity change from 0 to 764 [ 65.237320][ T26] audit: type=1326 audit(1776873161.100:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37101cb819 code=0x7ffc0000 [ 65.290603][ T26] audit: type=1326 audit(1776873161.150:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37101cb819 code=0x7ffc0000 [ 65.293493][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 65.293575][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 65.293713][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 65.293760][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 65.293789][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 65.295606][ T26] audit: type=1326 audit(1776873161.160:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f37101cb819 code=0x7ffc0000 [ 65.297046][ T26] audit: type=1326 audit(1776873161.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37101cb819 code=0x7ffc0000 [ 65.297234][ T26] audit: type=1326 audit(1776873161.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37101cb819 code=0x7ffc0000 [ 65.297509][ T26] audit: type=1326 audit(1776873161.160:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37101cb819 code=0x7ffc0000 [ 65.297674][ T26] audit: type=1326 audit(1776873161.160:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37101cb819 code=0x7ffc0000 [ 65.297971][ T26] audit: type=1326 audit(1776873161.160:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f37101cb819 code=0x7ffc0000 [ 65.298243][ T26] audit: type=1326 audit(1776873161.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f37101cb819 code=0x7ffc0000 [ 65.470794][ T4304] syz.4.12 (4304): /proc/4303/oom_adj is deprecated, please use /proc/4303/oom_score_adj instead. [ 65.940098][ T4310] device syzkaller0 entered promiscuous mode [ 66.545679][ T4327] loop4: detected capacity change from 0 to 128 [ 66.873978][ T4337] loop0: detected capacity change from 0 to 512 [ 66.996352][ T4337] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 67.031606][ T4341] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 67.061635][ T4341] device syzkaller0 entered promiscuous mode [ 67.101831][ T4343] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 67.118786][ T4337] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.119461][ T4348] overlayfs: missing 'lowerdir' [ 67.155882][ T4344] tipc: Started in network mode [ 67.169784][ T4344] tipc: Node identity b2c2bd1b8abe, cluster identity 4711 [ 67.194925][ T4344] tipc: Enabled bearer , priority 0 [ 67.230732][ T4350] device syzkaller0 entered promiscuous mode [ 67.246431][ T4343] tipc: Started in network mode [ 67.257153][ T4343] tipc: Node identity 16ae71a895e6, cluster identity 4711 [ 67.299975][ T4343] tipc: Enabled bearer , priority 0 [ 67.337533][ T4340] tipc: Resetting bearer [ 67.385391][ T4340] tipc: Disabling bearer [ 67.417666][ T4343] tipc: Resetting bearer [ 67.442182][ T4342] tipc: Resetting bearer [ 67.482886][ T4342] tipc: Disabling bearer [ 67.682830][ T4361] block device autoloading is deprecated and will be removed. [ 67.719583][ T4357] md: md2 stopped. [ 68.497697][ T4378] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 68.542125][ T4378] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 68.738242][ T4389] overlayfs: missing 'lowerdir' [ 68.756266][ T4377] syz.2.33 (4377) used greatest stack depth: 21072 bytes left [ 68.901123][ T4393] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 68.943590][ T4393] tipc: Started in network mode [ 68.951690][ T4393] tipc: Node identity 767666deb2d3, cluster identity 4711 [ 68.967998][ T4393] tipc: Enabled bearer , priority 0 [ 68.985332][ T4398] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 68.998389][ T4398] device syzkaller0 entered promiscuous mode [ 69.023914][ T4392] tipc: Disabling bearer [ 69.066232][ T4398] tipc: Enabled bearer , priority 0 [ 69.082830][ T4398] tipc: Resetting bearer [ 69.108263][ T4395] tipc: Resetting bearer [ 69.148608][ T4395] tipc: Disabling bearer [ 69.425557][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.455175][ T4414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.604243][ T4425] loop4: detected capacity change from 0 to 16 [ 69.669705][ T4425] erofs: (device loop4): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 69.699145][ T4427] overlayfs: missing 'lowerdir' [ 69.893052][ T4436] loop4: detected capacity change from 0 to 512 [ 69.899107][ T4433] loop1: detected capacity change from 0 to 512 [ 69.923326][ T4437] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 69.940151][ T4437] tipc: Enabled bearer , priority 0 [ 69.960371][ T4434] tipc: Disabling bearer [ 70.130395][ T4436] FAT-fs (loop4): Directory bread(block 199916) failed [ 70.141993][ T4436] FAT-fs (loop4): Directory bread(block 199917) failed [ 70.148945][ T4436] FAT-fs (loop4): Directory bread(block 199918) failed [ 70.182585][ T4433] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 70.200533][ T4436] FAT-fs (loop4): Directory bread(block 199919) failed [ 70.240441][ T4436] FAT-fs (loop4): Directory bread(block 199920) failed [ 70.245347][ T4442] loop3: detected capacity change from 0 to 256 [ 70.281396][ T4436] FAT-fs (loop4): Directory bread(block 199921) failed [ 70.285765][ T4433] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.318689][ T4436] FAT-fs (loop4): Directory bread(block 199922) failed [ 70.350269][ T4436] FAT-fs (loop4): Directory bread(block 199923) failed [ 70.626105][ T4446] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 70.656359][ T4446] device syzkaller0 entered promiscuous mode [ 70.693792][ T4446] tipc: Started in network mode [ 70.708158][ T4446] tipc: Node identity c6edddc18098, cluster identity 4711 [ 70.720820][ T4446] tipc: Enabled bearer , priority 0 [ 70.786206][ T4446] tipc: Resetting bearer [ 70.911066][ T4445] tipc: Resetting bearer [ 70.930660][ T4445] tipc: Disabling bearer [ 71.172070][ T4461] overlayfs: missing 'lowerdir' [ 71.359799][ T4467] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 71.405630][ T4467] tipc: Enabled bearer , priority 0 [ 71.447704][ T4465] tipc: Disabling bearer [ 71.466693][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.473436][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.939360][ T4484] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 71.965552][ T4484] device syzkaller0 entered promiscuous mode [ 71.976193][ T4484] tipc: Enabled bearer , priority 0 [ 72.028316][ T4490] overlayfs: missing 'lowerdir' [ 72.033855][ T4484] tipc: Resetting bearer [ 72.052860][ T4489] loop3: detected capacity change from 0 to 764 [ 72.068042][ T4483] tipc: Resetting bearer [ 72.111988][ T4483] tipc: Disabling bearer [ 72.390280][ T4502] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 72.422789][ T4502] tipc: Enabled bearer , priority 0 [ 72.447682][ T4500] tipc: Disabling bearer [ 72.680730][ T4514] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 72.720348][ T4518] loop3: detected capacity change from 0 to 512 [ 72.728056][ T4518] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 72.784048][ T4514] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 73.071544][ T4525] loop4: detected capacity change from 0 to 764 [ 73.278725][ T4532] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 73.337953][ T4532] device syzkaller0 entered promiscuous mode [ 73.365005][ T4532] Zero length message leads to an empty skb [ 73.380750][ T4532] tipc: Enabled bearer , priority 0 [ 73.441964][ T4532] tipc: Resetting bearer [ 73.669141][ T4531] tipc: Resetting bearer [ 73.765457][ T4531] tipc: Disabling bearer [ 74.315291][ T4557] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 74.326032][ T4557] tipc: Started in network mode [ 74.330972][ T4557] tipc: Node identity 5669a3a3c4f9, cluster identity 4711 [ 74.338943][ T4557] tipc: Enabled bearer , priority 0 [ 74.350636][ T4556] tipc: Disabling bearer [ 74.519265][ T4562] loop3: detected capacity change from 0 to 512 [ 74.657548][ T4562] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 74.700813][ T4567] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.806108][ T4567] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.865187][ T4573] loop2: detected capacity change from 0 to 764 [ 75.936221][ T4586] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 75.963361][ T4586] device syzkaller0 entered promiscuous mode [ 76.024413][ T4591] tipc: Enabled bearer , priority 0 [ 76.091577][ T4586] tipc: Resetting bearer [ 76.144035][ T4583] tipc: Resetting bearer [ 76.172536][ T4583] tipc: Disabling bearer [ 76.415854][ T4607] loop4: detected capacity change from 0 to 128 [ 76.422594][ T4605] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 76.447424][ T4605] tipc: Enabled bearer , priority 0 [ 76.469083][ T4602] tipc: Disabling bearer [ 77.869989][ T4640] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 77.886136][ T4640] device syzkaller0 entered promiscuous mode [ 77.908552][ T4640] tipc: Enabled bearer , priority 0 [ 77.954745][ T4640] tipc: Resetting bearer [ 78.023874][ T4639] tipc: Resetting bearer [ 78.089083][ T4639] tipc: Disabling bearer [ 78.117420][ T4642] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 78.153186][ T4642] device syzkaller0 entered promiscuous mode [ 78.322255][ T4647] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 78.363113][ T4647] device syzkaller0 entered promiscuous mode [ 78.409346][ T4647] tipc: Enabled bearer , priority 0 [ 78.479507][ T4647] tipc: Resetting bearer [ 78.528460][ T4651] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 78.553338][ T4646] tipc: Resetting bearer [ 78.583344][ T4646] tipc: Disabling bearer [ 78.610764][ T4652] device syzkaller0 entered promiscuous mode [ 78.640370][ T4651] tipc: Enabled bearer , priority 0 [ 78.682427][ T4651] tipc: Resetting bearer [ 78.690966][ T4650] tipc: Resetting bearer [ 78.832898][ T4650] tipc: Disabling bearer [ 79.120591][ T4661] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 79.139493][ T4661] device syzkaller0 entered promiscuous mode [ 79.153912][ T4662] loop3: detected capacity change from 0 to 512 [ 79.207522][ T4661] tipc: Enabled bearer , priority 0 [ 79.233906][ T4662] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 79.253035][ T4660] tipc: Resetting bearer [ 79.367011][ T4660] tipc: Disabling bearer [ 79.757842][ T4672] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 79.824274][ T4672] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 79.856505][ T4675] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 79.866219][ T4675] device syzkaller0 entered promiscuous mode [ 79.889819][ T4675] tipc: Enabled bearer , priority 0 [ 79.923278][ T4675] tipc: Resetting bearer [ 79.941514][ T4674] tipc: Resetting bearer [ 79.976403][ T4674] tipc: Disabling bearer [ 80.147206][ T4685] loop1: detected capacity change from 0 to 764 [ 80.161332][ T4684] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 80.171543][ T4684] device syzkaller0 entered promiscuous mode [ 80.180546][ T4687] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 80.218605][ T4687] device syzkaller0 entered promiscuous mode [ 80.229629][ T4687] tipc: Enabled bearer , priority 0 [ 80.254996][ T4687] tipc: Resetting bearer [ 80.274302][ T4686] tipc: Resetting bearer [ 80.289700][ T4686] tipc: Disabling bearer [ 80.392823][ T4692] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 80.442034][ T4692] device syzkaller0 entered promiscuous mode [ 80.498611][ T4692] tipc: Enabled bearer , priority 0 [ 80.685765][ T4701] loop3: detected capacity change from 0 to 512 [ 80.862916][ T4701] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 81.626938][ T4235] tipc: Node number set to 2458952611 [ 82.183535][ T1335] cfg80211: failed to load regulatory.db [ 82.462565][ T4705] tipc: Resetting bearer [ 82.550149][ T4691] tipc: Resetting bearer [ 82.590259][ T4711] overlayfs: missing 'lowerdir' [ 82.662965][ T4691] tipc: Disabling bearer [ 82.775066][ T4707] device syzkaller0 entered promiscuous mode [ 82.799126][ T4707] tipc: Enabled bearer , priority 0 [ 82.881409][ T4706] tipc: Resetting bearer [ 82.953480][ T4706] tipc: Disabling bearer [ 83.012140][ T4722] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 83.092669][ T4733] device syzkaller0 entered promiscuous mode [ 83.113326][ T4727] device syzkaller0 entered promiscuous mode [ 83.142658][ T4739] loop0: detected capacity change from 0 to 764 [ 83.614512][ T4742] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 83.642385][ T4748] device syzkaller0 entered promiscuous mode [ 84.209144][ T4760] loop1: detected capacity change from 0 to 512 [ 85.712087][ T4760] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 85.762920][ T4767] overlayfs: missing 'lowerdir' [ 86.088093][ T4774] loop1: detected capacity change from 0 to 512 [ 86.100026][ T4772] device syzkaller0 entered promiscuous mode [ 86.149180][ T4772] tipc: Enabled bearer , priority 0 [ 86.184728][ T4772] tipc: Resetting bearer [ 86.213610][ T4774] FAT-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 86.245707][ T4788] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 86.320583][ T4786] device syzkaller0 entered promiscuous mode [ 86.368803][ T4769] tipc: Resetting bearer [ 86.448266][ T4769] tipc: Disabling bearer [ 86.561607][ T4790] device syzkaller0 entered promiscuous mode [ 86.578946][ T4790] tipc: Enabled bearer , priority 0 [ 86.597917][ T4789] tipc: Resetting bearer [ 86.616419][ T4797] loop4: detected capacity change from 0 to 764 [ 86.648155][ T4789] tipc: Disabling bearer [ 86.678830][ T4799] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 86.706378][ T4799] device syzkaller0 entered promiscuous mode [ 86.716863][ T4799] tipc: Enabled bearer , priority 0 [ 86.787439][ T4799] tipc: Resetting bearer [ 86.847800][ T4798] tipc: Resetting bearer [ 86.891180][ T4808] overlayfs: missing 'lowerdir' [ 86.906107][ T4798] tipc: Disabling bearer [ 87.893106][ T4817] loop4: detected capacity change from 0 to 512 [ 87.900699][ T4817] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 88.048021][ T4823] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 88.121188][ T4823] device syzkaller0 entered promiscuous mode [ 88.172299][ T4823] tipc: Enabled bearer , priority 0 [ 88.254538][ T4823] tipc: Resetting bearer [ 88.286957][ T4819] tipc: Resetting bearer [ 88.314128][ T4819] tipc: Disabling bearer [ 88.350375][ T4831] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 88.400379][ T4831] device syzkaller0 entered promiscuous mode [ 88.460645][ T4833] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 88.480358][ T4831] tipc: Enabled bearer , priority 0 [ 88.517000][ T4833] device syzkaller0 entered promiscuous mode [ 88.556082][ T4831] tipc: Resetting bearer [ 88.574108][ T4830] tipc: Resetting bearer [ 88.589103][ T4830] tipc: Disabling bearer [ 88.613762][ T4836] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 88.665763][ T4842] loop2: detected capacity change from 0 to 764 [ 88.672587][ T4836] device syzkaller0 entered promiscuous mode [ 88.700160][ T4836] tipc: Enabled bearer , priority 0 [ 88.749084][ T4844] overlayfs: missing 'workdir' [ 88.794991][ T4835] tipc: Resetting bearer [ 88.864403][ T4835] tipc: Disabling bearer [ 90.085499][ T4865] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 90.168588][ T4865] device syzkaller0 entered promiscuous mode [ 90.225990][ T4871] tipc: Enabled bearer , priority 0 [ 90.258719][ T4873] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 90.284468][ T4865] tipc: Resetting bearer [ 90.319357][ T4873] device syzkaller0 entered promiscuous mode [ 90.341566][ T4864] tipc: Resetting bearer [ 90.380024][ T4864] tipc: Disabling bearer [ 90.554598][ T4877] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 90.576571][ T4879] overlayfs: missing 'workdir' [ 90.602085][ T4877] device syzkaller0 entered promiscuous mode [ 90.707883][ T4885] loop2: detected capacity change from 0 to 764 [ 90.731383][ T4888] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 90.744237][ T4888] device syzkaller0 entered promiscuous mode [ 90.774089][ T4888] tipc: Enabled bearer , priority 0 [ 90.791096][ T4886] tipc: Resetting bearer [ 90.850459][ T4886] tipc: Disabling bearer [ 92.065172][ T4910] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 92.083043][ T4910] device syzkaller0 entered promiscuous mode [ 92.109676][ T4915] overlayfs: missing 'workdir' [ 92.129977][ T4914] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 92.164572][ T4914] tipc: Enabled bearer , priority 0 [ 92.243199][ T4914] tipc: Resetting bearer [ 92.276668][ T4920] device syzkaller0 entered promiscuous mode [ 92.302711][ T4921] loop1: detected capacity change from 0 to 512 [ 92.312673][ T4913] tipc: Disabling bearer [ 92.426271][ T4921] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 92.458407][ T4926] device syzkaller0 entered promiscuous mode [ 92.496386][ T4926] tipc: Enabled bearer , priority 0 [ 92.525953][ T4925] tipc: Resetting bearer [ 92.538089][ T4930] loop3: detected capacity change from 0 to 764 [ 92.627817][ T4925] tipc: Disabling bearer [ 94.403975][ T4954] tbf_change: 2 callbacks suppressed [ 94.403991][ T4954] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 94.435752][ T4954] device syzkaller0 entered promiscuous mode [ 94.619826][ T4961] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 94.689595][ T4961] device syzkaller0 entered promiscuous mode [ 94.784916][ T4965] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 94.829394][ T4965] tipc: Enabled bearer , priority 0 [ 94.930001][ T4965] tipc: Resetting bearer [ 94.952450][ T4968] device syzkaller0 entered promiscuous mode [ 94.983058][ T4964] tipc: Disabling bearer [ 94.996831][ T4974] loop2: detected capacity change from 0 to 764 [ 95.004129][ T4968] tipc: Enabled bearer , priority 0 [ 95.098450][ T4967] tipc: Resetting bearer [ 95.154673][ T4967] tipc: Disabling bearer [ 96.544248][ T5000] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 96.560418][ T5000] device syzkaller0 entered promiscuous mode [ 96.567877][ T4999] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 96.569225][ T4999] device syzkaller0 entered promiscuous mode [ 96.869458][ T5012] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 96.880322][ T5006] loop2: detected capacity change from 0 to 512 [ 96.891598][ T5012] device syzkaller0 entered promiscuous mode [ 96.908047][ T5012] tipc: Enabled bearer , priority 0 [ 96.930095][ T5011] tipc: Resetting bearer [ 96.963724][ T5013] loop4: detected capacity change from 0 to 764 [ 96.978566][ T5011] tipc: Disabling bearer [ 96.984261][ T5006] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 97.042473][ T5017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 97.555054][ T5034] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 98.487561][ T5034] device syzkaller0 entered promiscuous mode [ 98.651037][ T5045] loop4: detected capacity change from 0 to 16 [ 99.371710][ C1] sched: RT throttling activated [ 99.608270][ T5045] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 99.630238][ T5044] fuse: Bad value for 'fd' [ 100.763580][ T5060] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 100.808171][ T5060] device syzkaller0 entered promiscuous mode [ 100.854450][ T5060] tipc: Enabled bearer , priority 0 [ 100.932605][ T5060] tipc: Resetting bearer [ 100.964029][ T5059] tipc: Resetting bearer [ 101.025531][ T5059] tipc: Disabling bearer [ 101.310550][ T5071] loop4: detected capacity change from 0 to 764 [ 101.329093][ T5073] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 101.398724][ T5073] tipc: Enabled bearer , priority 0 [ 101.418651][ T5073] tipc: Resetting bearer [ 101.449730][ T26] audit: type=1326 audit(1776873198.305:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5076 comm="syz.0.272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f370cd82819 code=0x0 [ 101.480065][ T5072] tipc: Disabling bearer [ 101.860614][ T5092] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 101.898868][ T5092] device syzkaller0 entered promiscuous mode [ 101.930590][ T5092] tipc: Enabling of bearer rejected, failed to enable media [ 102.269164][ T5109] loop2: detected capacity change from 0 to 764 [ 102.481569][ T5113] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 102.527127][ T5113] tipc: Enabled bearer , priority 0 [ 102.564101][ T5113] tipc: Resetting bearer [ 102.598194][ T5112] tipc: Disabling bearer [ 102.781138][ T5118] loop2: detected capacity change from 0 to 512 [ 102.914494][ T5118] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 103.538954][ T4188] ODEBUG: Out of memory. ODEBUG disabled [ 103.611580][ T5133] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 103.683763][ T5133] device syzkaller0 entered promiscuous mode [ 103.716022][ T5133] tipc: Enabling of bearer rejected, failed to enable media [ 103.740348][ T5138] loop4: detected capacity change from 0 to 128 [ 105.545831][ T5151] page:ffffea0001702240 refcount:4 mapcount:1 mapping:ffff8880695ff340 index:0x0 pfn:0x5c089 [ 105.556361][ T5151] memcg:ffff88802aea8000 [ 105.560637][ T5151] aops:shmem_aops ino:1f [ 105.564906][ T5151] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 105.574742][ T5151] raw: 00fff00000080015 ffffea0001a6e748 ffffea0001cc38c8 ffff8880695ff340 [ 105.583353][ T5151] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88802aea8000 [ 105.591961][ T5151] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 105.599009][ T5151] page_owner tracks the page as allocated [ 105.604921][ T5151] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 5153, ts 105496487417, free_ts 105316705515 [ 105.619788][ T5151] get_page_from_freelist+0x1bbd/0x1ca0 [ 105.625385][ T5151] __alloc_pages+0x1ee/0x480 [ 105.630008][ T5151] alloc_pages_vma+0x393/0x7c0 [ 105.634798][ T5151] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 105.640455][ T5151] shmem_getpage_gfp+0x14f4/0x2d40 [ 105.645585][ T5151] shmem_read_mapping_page_gfp+0x96/0x100 [ 105.651328][ T5151] udmabuf_create+0x895/0x1570 [ 105.656200][ T5151] udmabuf_ioctl+0x1f3/0x300 [ 105.660823][ T5151] __se_sys_ioctl+0xfa/0x170 [ 105.665464][ T5151] do_syscall_64+0x4c/0xa0 [ 105.670026][ T5151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.675942][ T5151] page last free stack trace: [ 105.680628][ T5151] free_unref_page_prepare+0x637/0x6c0 [ 105.686115][ T5151] free_unref_page_list+0x119/0x820 [ 105.691336][ T5151] release_pages+0x186c/0x1be0 [ 105.696127][ T5151] tlb_flush_mmu+0xce/0x180 [ 105.700655][ T5151] unmap_page_range+0x2081/0x2500 [ 105.705697][ T5151] unmap_vmas+0x131/0x250 [ 105.710101][ T5151] exit_mmap+0x3b9/0x640 [ 105.714451][ T5151] __mmput+0x115/0x3b0 [ 105.718556][ T5151] exit_mm+0x588/0x6e0 [ 105.722864][ T5151] do_exit+0x5a9/0x20c0 [ 105.727043][ T5151] do_group_exit+0x12e/0x300 [ 105.731650][ T5151] get_signal+0x6ca/0x12c0 [ 105.736091][ T5151] arch_do_signal_or_restart+0xe7/0x12c0 [ 105.741832][ T5151] exit_to_user_mode_loop+0x9e/0x130 [ 105.747146][ T5151] exit_to_user_mode_prepare+0xee/0x180 [ 105.752711][ T5151] syscall_exit_to_user_mode+0x16/0x40 [ 105.758369][ T5151] ------------[ cut here ]------------ [ 105.763845][ T5151] kernel BUG at mm/filemap.c:166! [ 105.768906][ T5151] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 105.775026][ T5151] CPU: 0 PID: 5151 Comm: syz.3.298 Not tainted syzkaller #0 [ 105.782328][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.792497][ T5151] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 105.799030][ T5151] Code: e8 29 11 db ff 4c 89 f7 48 c7 c6 00 01 33 8a e8 aa fb 0d 00 0f 0b e8 13 11 db ff 4c 89 f7 48 c7 c6 40 01 33 8a e8 94 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 10 db ff eb 5d e8 f1 10 db ff 4c 89 f7 [ 105.803686][ T5152] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 105.818749][ T5151] RSP: 0018:ffffc900039ff688 EFLAGS: 00010046 [ 105.818778][ T5151] RAX: cceb00ad59922200 RBX: 0000000000000000 RCX: 0000000000000000 [ 105.840816][ T5151] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff5200073fec4 [ 105.848895][ T5151] RBP: 1ffffd40002e0449 R08: ffff8880b902795b R09: fffff5200073fe80 [ 105.856890][ T5151] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea0001702240 [ 105.859000][ T5152] device syzkaller0 entered promiscuous mode [ 105.865101][ T5151] R13: dffffc0000000000 R14: ffffea0001702240 R15: ffffea0001702248 [ 105.865120][ T5151] FS: 0000555562187500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 105.865137][ T5151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.865150][ T5151] CR2: 000000110c310a35 CR3: 000000005aeb5000 CR4: 00000000003506f0 [ 105.865168][ T5151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.911214][ T5151] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.919223][ T5151] Call Trace: [ 105.922520][ T5151] [ 105.925476][ T5151] __delete_from_page_cache+0xbe/0x6d0 [ 105.930967][ T5151] ? _raw_spin_lock_irq+0x86/0xf0 [ 105.936032][ T5151] ? lockdep_hardirqs_off+0x70/0x100 [ 105.941351][ T5151] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 105.948420][ T5151] ? _raw_spin_lock_irq+0xb7/0xf0 [ 105.953480][ T5151] ? _raw_spin_lock_irqsave+0x100/0x100 [ 105.959147][ T5151] ? page_mapping+0x30e/0x440 [ 105.963856][ T5151] delete_from_page_cache+0x121/0x190 [ 105.969302][ T5151] truncate_inode_page+0x8d/0xb0 [ 105.974387][ T5151] shmem_undo_range+0x53c/0x1930 [ 105.979410][ T5151] ? __lock_acquire+0x13bc/0x7d10 [ 105.984467][ T5151] ? shmem_truncate_range+0xa0/0xa0 [ 105.989703][ T5151] ? do_raw_spin_lock+0x128/0x2f0 [ 105.994870][ T5151] ? __rwlock_init+0x140/0x140 [ 105.999668][ T5151] shmem_evict_inode+0x220/0xa40 [ 106.004641][ T5151] ? inode_wait_for_writeback+0x1df/0x220 [ 106.010388][ T5151] ? shmem_free_in_core_inode+0xb0/0xb0 [ 106.016061][ T5151] ? do_raw_spin_lock+0x128/0x2f0 [ 106.021208][ T5151] ? bit_waitqueue+0x30/0x30 [ 106.025832][ T5151] ? do_raw_spin_unlock+0x11d/0x230 [ 106.031241][ T5151] ? shmem_free_in_core_inode+0xb0/0xb0 [ 106.036832][ T5151] evict+0x4c9/0x8d0 [ 106.040868][ T5151] ? proc_nr_inodes+0x320/0x320 [ 106.045760][ T5151] ? do_raw_spin_unlock+0x11d/0x230 [ 106.051180][ T5151] ? _raw_spin_unlock+0x24/0x40 [ 106.056070][ T5151] __dentry_kill+0x431/0x650 [ 106.060969][ T5151] dentry_kill+0xb8/0x290 [ 106.065417][ T5151] dput+0xd8/0x1a0 [ 106.069164][ T5151] __fput+0x5ee/0x930 [ 106.073179][ T5151] task_work_run+0x125/0x1a0 [ 106.077803][ T5151] exit_to_user_mode_loop+0x10f/0x130 [ 106.083204][ T5151] exit_to_user_mode_prepare+0xee/0x180 [ 106.088782][ T5151] syscall_exit_to_user_mode+0x16/0x40 [ 106.094280][ T5151] do_syscall_64+0x58/0xa0 [ 106.098717][ T5151] ? clear_bhb_loop+0x30/0x80 [ 106.103415][ T5151] ? clear_bhb_loop+0x30/0x80 [ 106.108130][ T5151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.114056][ T5151] RIP: 0033:0x7f6a6eb11819 [ 106.118514][ T5151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.138233][ T5151] RSP: 002b:00007ffe7557eb48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 106.146859][ T5151] RAX: 0000000000000000 RBX: 00007ffe7557ec30 RCX: 00007f6a6eb11819 [ 106.155128][ T5151] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 106.163124][ T5151] RBP: 0000000000019bcd R08: 0000000000000001 R09: 0000000000000000 [ 106.171135][ T5151] R10: 0000001b31620000 R11: 0000000000000246 R12: 00007ffe7557ec70 [ 106.179119][ T5151] R13: 00007f6a6ed8afac R14: 0000000000019c44 R15: 00007f6a6ed8afa0 [ 106.187209][ T5151] [ 106.190251][ T5151] Modules linked in: [ 106.199285][ T5151] ---[ end trace 779da0f45ce7c072 ]--- [ 106.204772][ T5151] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 106.211271][ T5151] Code: e8 29 11 db ff 4c 89 f7 48 c7 c6 00 01 33 8a e8 aa fb 0d 00 0f 0b e8 13 11 db ff 4c 89 f7 48 c7 c6 40 01 33 8a e8 94 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 10 db ff eb 5d e8 f1 10 db ff 4c 89 f7 [ 106.230886][ T5151] RSP: 0018:ffffc900039ff688 EFLAGS: 00010046 [ 106.236963][ T5151] RAX: cceb00ad59922200 RBX: 0000000000000000 RCX: 0000000000000000 [ 106.245116][ T5151] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff5200073fec4 [ 106.253086][ T5151] RBP: 1ffffd40002e0449 R08: ffff8880b902795b R09: fffff5200073fe80 [ 106.261083][ T5151] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea0001702240 [ 106.269168][ T5151] R13: dffffc0000000000 R14: ffffea0001702240 R15: ffffea0001702248 [ 106.277146][ T5151] FS: 0000555562187500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 106.286072][ T5151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.292690][ T5151] CR2: 000000110c310a35 CR3: 000000005aeb5000 CR4: 00000000003506f0 [ 106.300781][ T5151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.308756][ T5151] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.316845][ T5151] Kernel panic - not syncing: Fatal exception [ 106.323358][ T5151] Kernel Offset: disabled [ 106.327855][ T5151] Rebooting in 86400 seconds..