last executing test programs: 8.675659006s ago: executing program 2 (id=3): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x801) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) socket(0xa, 0x3, 0x3a) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}}], 0x1, 0x815) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 7.621497056s ago: executing program 0 (id=1): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0xefb6e798ff0ec5, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, 0x0, 0x0) 7.357693705s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x25000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0xdddd0000, 0xeeee0000, 0xb, 0x0, 0x3, 0x1, 0x1, 0x4, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0x4, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4000, 0x8000000, 0xf, 0x5, 0x28, 0x94, 0xa, 0x0, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x60050000, 0x0, 0xffff1000, 0x200300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x4000000000006, 0xc5]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 7.205927466s ago: executing program 3 (id=4): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='map_files\x00') getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r4, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) socket$isdn(0x22, 0x2, 0x26) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x101000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bda7, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) 6.899296118s ago: executing program 2 (id=6): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000001dc0), 0x4d0801, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xa02, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 6.564988314s ago: executing program 4 (id=7): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0x61, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20400d5}, 0x40840) io_submit(0x0, 0x0, &(0x7f0000000140)) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = socket$inet(0x2b, 0x801, 0x0) listen(r4, 0xffffffff) r5 = fsmount(r3, 0x0, 0x1) fchdir(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) 4.316945736s ago: executing program 3 (id=10): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000000)) 3.980562138s ago: executing program 3 (id=11): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 3.640734513s ago: executing program 3 (id=12): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000200)) 2.524214725s ago: executing program 4 (id=16): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e0010", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="a0e5c30000007f62de55dd3238f407c976ec1148eb84a16e2058cd6ff62faf3bd21aa3efbe6da28ee4e47fa2a7f6545acf6d158db43961ba6f23ae1af22c10fe89a422270646f777f01bb53b7976cb5ba8fd6a2ab99c4bf34bcc81b61bb5a1eef0890acdf997995b2b464a71953ab271b1f736f6f4cfac959faba85cf81e9caf5b02a5c20000b33f110f59e89798ac0e3d429ec9720be8056a4a3f83ab53a950efb588afccdeb4b10370a383aaa3fba7dde9e4ed09684eec6463c7113a57"], 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x85, 0x4, 0xcffb}, 0x0, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x434}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) write$tun(r5, 0x0, 0xfdef) write$char_usb(r1, 0x0, 0x0) 1.857134313s ago: executing program 0 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x25000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0xdddd0000, 0xeeee0000, 0xb, 0x0, 0x3, 0x1, 0x1, 0x4, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0x4, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4000, 0x8000000, 0xf, 0x5, 0x28, 0x94, 0xa, 0x0, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x60050000, 0x0, 0xffff1000, 0x200300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x4000000000006, 0xc5]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 1.469465763s ago: executing program 0 (id=19): syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x20044011) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044855}, 0x20000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.44461782s ago: executing program 2 (id=20): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x0, 0x0, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x8000, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0xff, 0x0, 0x3ff3, 0x8, @remote, @private1={0xfc, 0x1, '\x00', 0x5}, 0x0, 0x1, 0xfffffffe}}) 1.085510147s ago: executing program 2 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 911.118817ms ago: executing program 1 (id=25): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000380)=0x6, 0x0, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0xffff}}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 830.400575ms ago: executing program 2 (id=26): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000079107a00000000001da00000010000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x404000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x1, 0x65, 0xe, 0x4e, 0x24, 0xc, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) sendto$inet6(r4, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x80000001, 0x8}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x181000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x20000000) 733.581096ms ago: executing program 1 (id=27): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xa33}], 0x5}}], 0x1, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 647.166947ms ago: executing program 1 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}}, 0x40000c0) 523.744759ms ago: executing program 1 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x25000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0xdddd0000, 0xeeee0000, 0xb, 0x0, 0x3, 0x1, 0x1, 0x4, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0x4, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4000, 0x8000000, 0xf, 0x5, 0x28, 0x94, 0xa, 0x0, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x60050000, 0x0, 0xffff1000, 0x200300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x4000000000006, 0xc5]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 432.914311ms ago: executing program 3 (id=30): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x20000000000001) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) getuid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f00000001c0)) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9b8ea539410b30c71fc03ed9af96702c68a86594c125a41de67225869012a6813df82930108cb0ce6534c9d7a6e292bb46d26c648c7dc0ab99fe0556d1894c78806ee583507a", 0x46, 0xfffffffffffffff9) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 159.703527ms ago: executing program 0 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) close(0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) 146.074063ms ago: executing program 1 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x108}}, 0x0) 0s ago: executing program 1 (id=33): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x48000000, 0x0, 0x14, 0x0, 0x0, 0x0) r2 = socket(0x2b, 0x80801, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x14}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000380)=ANY=[], 0x58) poll(&(0x7f00000000c0)=[{r2, 0x1040}, {r1, 0x2187}], 0x2, 0x403) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.199' (ED25519) to the list of known hosts. [ 82.395901][ T5829] cgroup: Unknown subsys name 'net' [ 82.573589][ T5829] cgroup: Unknown subsys name 'cpuset' [ 82.582625][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.252177][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.633011][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.662624][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.682565][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.693372][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.697112][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.710145][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.717652][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.723556][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.731906][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.736076][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.742423][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.750856][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.755835][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.764863][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.769798][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.779055][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.787338][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.795604][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.804013][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.806493][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.821111][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.830633][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.838194][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.863476][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.874148][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.728629][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.742731][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 87.833972][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.975028][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.070082][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 88.215317][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.223343][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.231396][ T5844] bridge_slave_0: entered allmulticast mode [ 88.239945][ T5844] bridge_slave_0: entered promiscuous mode [ 88.249827][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.257313][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.266243][ T5855] bridge_slave_0: entered allmulticast mode [ 88.274777][ T5855] bridge_slave_0: entered promiscuous mode [ 88.297125][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.304763][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.313184][ T5841] bridge_slave_0: entered allmulticast mode [ 88.322627][ T5841] bridge_slave_0: entered promiscuous mode [ 88.359762][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.367193][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.375172][ T5844] bridge_slave_1: entered allmulticast mode [ 88.383802][ T5844] bridge_slave_1: entered promiscuous mode [ 88.392243][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.400077][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.407718][ T5855] bridge_slave_1: entered allmulticast mode [ 88.415906][ T5855] bridge_slave_1: entered promiscuous mode [ 88.430710][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.438245][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.446351][ T5841] bridge_slave_1: entered allmulticast mode [ 88.454424][ T5841] bridge_slave_1: entered promiscuous mode [ 88.475512][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.482913][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.490381][ T5843] bridge_slave_0: entered allmulticast mode [ 88.498290][ T5843] bridge_slave_0: entered promiscuous mode [ 88.556168][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.563744][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.571291][ T5843] bridge_slave_1: entered allmulticast mode [ 88.579431][ T5843] bridge_slave_1: entered promiscuous mode [ 88.642485][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.670214][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.685267][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.712794][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.739706][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.754512][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.764448][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.772194][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.779677][ T5842] bridge_slave_0: entered allmulticast mode [ 88.787544][ T5842] bridge_slave_0: entered promiscuous mode [ 88.814330][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.865926][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.874081][ T5860] Bluetooth: hci4: command tx timeout [ 88.879947][ T5860] Bluetooth: hci2: command tx timeout [ 88.879959][ T51] Bluetooth: hci3: command tx timeout [ 88.880451][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.898323][ T5842] bridge_slave_1: entered allmulticast mode [ 88.906461][ T5842] bridge_slave_1: entered promiscuous mode [ 88.930321][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.950137][ T5860] Bluetooth: hci1: command tx timeout [ 88.950146][ T51] Bluetooth: hci0: command tx timeout [ 88.982909][ T5855] team0: Port device team_slave_0 added [ 89.005163][ T5841] team0: Port device team_slave_0 added [ 89.028976][ T5844] team0: Port device team_slave_0 added [ 89.038155][ T5855] team0: Port device team_slave_1 added [ 89.060119][ T5841] team0: Port device team_slave_1 added [ 89.069201][ T5843] team0: Port device team_slave_0 added [ 89.078539][ T5844] team0: Port device team_slave_1 added [ 89.102464][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.128094][ T5843] team0: Port device team_slave_1 added [ 89.166796][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.218363][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.225570][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.252634][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.280107][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.287370][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.314416][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.340848][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.347841][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.373975][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.387241][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.394374][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.420628][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.446975][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.454180][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.480677][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.508580][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.515637][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.541677][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.554504][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.561681][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.588020][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.619461][ T5842] team0: Port device team_slave_0 added [ 89.631054][ T5842] team0: Port device team_slave_1 added [ 89.638439][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.645588][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.671571][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.823054][ T5841] hsr_slave_0: entered promiscuous mode [ 89.831291][ T5841] hsr_slave_1: entered promiscuous mode [ 89.844288][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.851809][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.878249][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.913670][ T5855] hsr_slave_0: entered promiscuous mode [ 89.921103][ T5855] hsr_slave_1: entered promiscuous mode [ 89.927919][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 89.934937][ T5855] Cannot create hsr debugfs directory [ 89.945204][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.952445][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.978453][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.056958][ T5844] hsr_slave_0: entered promiscuous mode [ 90.068248][ T5844] hsr_slave_1: entered promiscuous mode [ 90.075847][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 90.082177][ T5844] Cannot create hsr debugfs directory [ 90.148506][ T5843] hsr_slave_0: entered promiscuous mode [ 90.156059][ T5843] hsr_slave_1: entered promiscuous mode [ 90.163349][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 90.169312][ T5843] Cannot create hsr debugfs directory [ 90.342818][ T5842] hsr_slave_0: entered promiscuous mode [ 90.350280][ T5842] hsr_slave_1: entered promiscuous mode [ 90.357142][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 90.363037][ T5842] Cannot create hsr debugfs directory [ 90.949726][ T5860] Bluetooth: hci2: command tx timeout [ 90.950552][ T51] Bluetooth: hci4: command tx timeout [ 90.955214][ T5852] Bluetooth: hci3: command tx timeout [ 90.985016][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.002333][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.015225][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.029017][ T51] Bluetooth: hci0: command tx timeout [ 91.034569][ T5860] Bluetooth: hci1: command tx timeout [ 91.052012][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.124218][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.153478][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.170874][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.203425][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.289792][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.320811][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.340509][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.356513][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.482137][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.497314][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.513480][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.536847][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.720295][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.732548][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.747110][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.761705][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.785319][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.877979][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.901948][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.944265][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.952076][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.999897][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.021849][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.029102][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.077274][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.084690][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.117597][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.124846][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.152774][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.165038][ T808] cfg80211: failed to load regulatory.db [ 92.233046][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.274057][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.327103][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.334297][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.354875][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.400832][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.408023][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.417807][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.425226][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.492022][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.505641][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.512956][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.612113][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.663146][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.670462][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.743800][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.751099][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.984069][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.029043][ T51] Bluetooth: hci2: command tx timeout [ 93.032698][ T5860] Bluetooth: hci3: command tx timeout [ 93.034636][ T51] Bluetooth: hci4: command tx timeout [ 93.114825][ T5860] Bluetooth: hci1: command tx timeout [ 93.114837][ T5852] Bluetooth: hci0: command tx timeout [ 93.150005][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.502233][ T5855] veth0_vlan: entered promiscuous mode [ 93.587153][ T5855] veth1_vlan: entered promiscuous mode [ 93.607545][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.626965][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.702464][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.817120][ T5855] veth0_macvtap: entered promiscuous mode [ 93.867930][ T5843] veth0_vlan: entered promiscuous mode [ 93.876211][ T5855] veth1_macvtap: entered promiscuous mode [ 93.929249][ T5841] veth0_vlan: entered promiscuous mode [ 93.957553][ T5844] veth0_vlan: entered promiscuous mode [ 93.979431][ T5843] veth1_vlan: entered promiscuous mode [ 93.994970][ T5842] veth0_vlan: entered promiscuous mode [ 94.007957][ T5841] veth1_vlan: entered promiscuous mode [ 94.026522][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.055855][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.068197][ T5844] veth1_vlan: entered promiscuous mode [ 94.078170][ T5842] veth1_vlan: entered promiscuous mode [ 94.131670][ T1054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.143602][ T1054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.169506][ T1054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.180412][ T1054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.287711][ T5841] veth0_macvtap: entered promiscuous mode [ 94.302739][ T5843] veth0_macvtap: entered promiscuous mode [ 94.316477][ T5844] veth0_macvtap: entered promiscuous mode [ 94.349878][ T5841] veth1_macvtap: entered promiscuous mode [ 94.373072][ T5843] veth1_macvtap: entered promiscuous mode [ 94.393210][ T5844] veth1_macvtap: entered promiscuous mode [ 94.406140][ T5842] veth0_macvtap: entered promiscuous mode [ 94.456731][ T501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.472938][ T501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.490593][ T5842] veth1_macvtap: entered promiscuous mode [ 94.535190][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.577305][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.603897][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.612238][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.620510][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.632806][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.651414][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.681899][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.717789][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.741699][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.756042][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.766355][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.782755][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.796530][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.806849][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.843227][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.853603][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.868448][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.926104][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.958388][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.969868][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.013684][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.023715][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.058405][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.085111][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.098131][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.108900][ T5852] Bluetooth: hci4: command tx timeout [ 95.115746][ T5852] Bluetooth: hci2: command tx timeout [ 95.115766][ T5860] Bluetooth: hci3: command tx timeout [ 95.183247][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.190678][ T5860] Bluetooth: hci0: command tx timeout [ 95.194795][ T5852] Bluetooth: hci1: command tx timeout [ 95.322288][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.332102][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.414201][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.436192][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.526743][ T501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.544272][ T501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.611162][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.627331][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.663531][ T501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.695372][ T501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.778997][ T501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.813574][ T501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.886764][ T501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.918637][ T501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.001886][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.020918][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.430542][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.276507][ T5983] syzkaller0: entered promiscuous mode [ 97.306886][ T5983] syzkaller0: entered allmulticast mode [ 97.482639][ T5974] delete_channel: no stack [ 100.325355][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.527831][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.559787][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.584610][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.617577][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.699007][ T9] usb 4-1: config 0 descriptor?? [ 101.369627][ T808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.533106][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 101.541531][ T808] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 101.556872][ T808] usb 5-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 101.575618][ T808] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 101.596023][ T808] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 101.620710][ T808] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 101.637306][ T808] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.660568][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.727724][ T808] usbtmc 5-1:16.0: bulk endpoints not found [ 102.910021][ T6039] syz_tun: entered allmulticast mode [ 103.080900][ T809] usb 4-1: USB disconnect, device number 2 [ 103.682030][ T6057] node ffff88807714d8c0 offset 0 parent ffff88807714d600 shift 0 count 64 values 0 array ffff888036192200 list ffff88807714d8d8 ffff88807714d8d8 marks 0 0 0 [ 103.705551][ T6057] ------------[ cut here ]------------ [ 103.712335][ T6057] kernel BUG at ./include/linux/xarray.h:1441! [ 103.721147][ T6057] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 103.727470][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.3.30 Not tainted syzkaller #0 PREEMPT(full) [ 103.736713][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.746893][ T6057] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 103.752992][ T6057] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 103.772646][ T6057] RSP: 0018:ffffc90004d3ee20 EFLAGS: 00010246 [ 103.778757][ T6057] RAX: 0000000000000000 RBX: ffff88807714d8c0 RCX: ab5bfa95b9017e00 [ 103.786931][ T6057] RDX: ffffc9000e742000 RSI: 00000000000069b2 RDI: 00000000000069b3 [ 103.795116][ T6057] RBP: ffffc90004d3f130 R08: ffffc90004d3eba7 R09: 1ffff920009a7d74 [ 103.803556][ T6057] R10: dffffc0000000000 R11: fffff520009a7d75 R12: ffffea0001a508f0 [ 103.811660][ T6057] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90004d3f010 [ 103.819767][ T6057] FS: 00007fdeebd926c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 103.829265][ T6057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.835898][ T6057] CR2: 00007fdeebd91ff8 CR3: 000000005ac84000 CR4: 00000000003526f0 [ 103.844002][ T6057] Call Trace: [ 103.847332][ T6057] [ 103.850300][ T6057] ? collapse_scan_file+0x1c1/0x5230 [ 103.855629][ T6057] ? __pfx___schedule+0x10/0x10 [ 103.860790][ T6057] ? __pfx_collapse_scan_file+0x10/0x10 [ 103.866377][ T6057] ? __lock_acquire+0x6b5/0x2cf0 [ 103.871361][ T6057] ? schedule+0x16e/0x360 [ 103.875811][ T6057] ? __up_read+0x291/0x6b0 [ 103.880301][ T6057] ? __pfx___up_read+0x10/0x10 [ 103.885095][ T6057] collapse_single_pmd+0x22b/0x4510 [ 103.890331][ T6057] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.895660][ T6057] ? debug_object_free+0x2d7/0x490 [ 103.900826][ T6057] ? __flush_work+0xa26/0xc50 [ 103.905627][ T6057] ? __pfx_collapse_single_pmd+0x10/0x10 [ 103.911387][ T6057] ? __flush_work+0x100/0xc50 [ 103.916095][ T6057] ? madvise_collapse+0x18c/0x820 [ 103.921235][ T6057] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 103.928550][ T6057] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.934639][ T6057] madvise_collapse+0x34c/0x820 [ 103.939539][ T6057] madvise_vma_behavior+0x1094/0x4460 [ 103.944964][ T6057] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 103.950824][ T6057] ? __pfx___schedule+0x10/0x10 [ 103.955745][ T6057] ? irqentry_exit+0x61a/0x700 [ 103.960544][ T6057] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.965876][ T6057] ? irqentry_exit+0x61a/0x700 [ 103.970842][ T6057] ? trace_irq_disable+0x3b/0x150 [ 103.976104][ T6057] ? mas_prev_slot+0xb7b/0xbf0 [ 103.980939][ T6057] ? find_vma_prev+0x123/0x1b0 [ 103.985773][ T6057] ? __pfx_find_vma_prev+0x10/0x10 [ 103.991003][ T6057] ? file_ioctl+0x273/0x860 [ 103.995543][ T6057] madvise_walk_vmas+0x573/0xae0 [ 104.000544][ T6057] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 104.006029][ T6057] ? blk_start_plug+0x6e/0x1b0 [ 104.010910][ T6057] madvise_do_behavior+0x386/0x540 [ 104.016067][ T6057] ? __pfx_madvise_do_behavior+0x10/0x10 [ 104.021783][ T6057] ? down_read+0x270/0x2e0 [ 104.026353][ T6057] ? madvise_lock+0x146/0x2e0 [ 104.031067][ T6057] do_madvise+0x1fa/0x2e0 [ 104.035428][ T6057] ? __pfx_do_madvise+0x10/0x10 [ 104.040569][ T6057] ? rcu_is_watching+0x15/0xb0 [ 104.045537][ T6057] ? __pfx_kcov_ioctl+0x10/0x10 [ 104.050424][ T6057] __x64_sys_madvise+0xa6/0xc0 [ 104.055233][ T6057] do_syscall_64+0x14d/0xf80 [ 104.059866][ T6057] ? trace_irq_disable+0x3b/0x150 [ 104.065221][ T6057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.071405][ T6057] ? clear_bhb_loop+0x40/0x90 [ 104.076115][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.082032][ T6057] RIP: 0033:0x7fdeeaf9c799 [ 104.086577][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.106378][ T6057] RSP: 002b:00007fdeebd92028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 104.114901][ T6057] RAX: ffffffffffffffda RBX: 00007fdeeb216090 RCX: 00007fdeeaf9c799 [ 104.122978][ T6057] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 104.131056][ T6057] RBP: 00007fdeeb032c99 R08: 0000000000000000 R09: 0000000000000000 [ 104.139223][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.147237][ T6057] R13: 00007fdeeb216128 R14: 00007fdeeb216090 R15: 00007ffea9e2ae38 [ 104.155266][ T6057] [ 104.158324][ T6057] Modules linked in: [ 104.163656][ T6057] ---[ end trace 0000000000000000 ]--- [ 104.221598][ T6057] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 104.245057][ T6057] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 104.313403][ T809] usb 5-1: USB disconnect, device number 2 [ 104.356132][ T6057] RSP: 0018:ffffc90004d3ee20 EFLAGS: 00010246 [ 104.368675][ T6057] RAX: 0000000000000000 RBX: ffff88807714d8c0 RCX: ab5bfa95b9017e00 [ 104.384938][ T6057] RDX: ffffc9000e742000 RSI: 00000000000069b2 RDI: 00000000000069b3 [ 104.402605][ T6057] RBP: ffffc90004d3f130 R08: ffffc90004d3eba7 R09: 1ffff920009a7d74 [ 104.416958][ T6057] R10: dffffc0000000000 R11: fffff520009a7d75 R12: ffffea0001a508f0 [ 104.430897][ T6057] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90004d3f010 [ 104.443926][ T6057] FS: 00007fdeebd926c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 104.453355][ T6057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.460549][ T6057] CR2: 0000000000000000 CR3: 000000005ac84000 CR4: 00000000003526f0 [ 104.475989][ T6057] Kernel panic - not syncing: Fatal exception [ 104.482895][ T6057] Kernel Offset: disabled [ 104.487230][ T6057] Rebooting in 86400 seconds..