last executing test programs: 8.487744631s ago: executing program 3 (id=65): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="00100000f5cc"], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x40cd0a, 0x10100}, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e40)}], 0x1}}], 0x1, 0x60c5895) 7.960399675s ago: executing program 1 (id=69): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000780)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='environ\x00') 7.569728385s ago: executing program 2 (id=72): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0xa8) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x0, &(0x7f0000000240)}) r3 = io_uring_setup(0x81, &(0x7f0000000180)={0x0, 0xba47, 0x2, 0x0, 0x1a7}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000000780)={0xfffffffc, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0, 0x4}, 0x20) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x3) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000040)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) r7 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000007c0)={{r7}, "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"}) 6.955751557s ago: executing program 1 (id=74): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) openat(0xffffffffffffffff, 0x0, 0x60000, 0x51) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23", 0x64) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) 6.560609376s ago: executing program 0 (id=75): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) 6.179183565s ago: executing program 0 (id=76): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="000104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40848c0) 4.936864044s ago: executing program 2 (id=77): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 4.619355798s ago: executing program 2 (id=80): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x8}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x1, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x81000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, 0xffffffff, 0xff000000, 'macsec0\x00', 'netdevsim0\x00', {}, {}, 0x73, 0x3, 0x25}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xb6, &(0x7f0000000200)=""/182, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000)=r5, 0x40) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x240408a0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0x0, [0xe4, 0x3, 0xf77, 0x6, 0x7f, 0x7]}, &(0x7f00000003c0)=0x50) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r9, r9, 0x0, 0x200000) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r10, &(0x7f00000000c0)=""/152, 0x98) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) 4.579986951s ago: executing program 1 (id=81): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x6) 4.50007984s ago: executing program 4 (id=82): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(r0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 4.428389647s ago: executing program 4 (id=83): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.370795722s ago: executing program 1 (id=84): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$alg(0x26, 0x5, 0x0) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r4, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r6 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x200000000002, 0x800) r7 = syz_io_uring_setup(0xea7, &(0x7f0000000200)={0x0, 0x79af, 0x10000, 0x0, 0xe2}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index, 0xffffffffffffffff, &(0x7f00000002c0)=""/211, 0xd3, 0x8, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4.30081086s ago: executing program 3 (id=85): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000002f80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x99, 0x20, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x10, 0x3, 0x2, {0xa, 0x25, 0x25, 0x0, 0x6, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0xd6, 0x8, {0xa, 0x25, 0x25, 0xab7, 0x2, 0x8}}}}}}}}]}}, 0x0) 4.139029263s ago: executing program 4 (id=86): syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000180)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 4.053940598s ago: executing program 4 (id=87): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x40, 0x18}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000500)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.009841533s ago: executing program 0 (id=88): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000400)="a51d484e08f505000000f7caaff96b2fc08bfcd111fbdf23ea32db0e8f21d5bc27bd80d85e447511700000000000", 0x2e}], 0x2) 3.851032691s ago: executing program 0 (id=89): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@private=0xa010100}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xf}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x20, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001002abd700000000000e0000002000000000000000000000000e0000001000000000000000000000000000000000000000002"], 0xb8}}, 0x4000) 3.656707975s ago: executing program 0 (id=90): unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x11, 0xd, 0x204}, {0x804, 0x1, 0x1, 0x49, 0x87, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x4}], 0xffffffff}) 3.331479154s ago: executing program 0 (id=91): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000b000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1c00, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.75484805s ago: executing program 3 (id=92): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x3, &(0x7f0000000000)=0x3ff, 0xc, 0x0) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ffd000/0x2000)=nil, 0x2) 1.806481098s ago: executing program 3 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000090603000000000000000000050000400900020073797a310000000005000100070000001800078008"], 0x40}, 0x1, 0x0, 0x0, 0x30004887}, 0x80) 1.713150529s ago: executing program 1 (id=94): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) fcntl$lock(r0, 0x6, &(0x7f0000000580)={0x1, 0x0, 0x6, 0x10000002}) write$UHID_CREATE2(r0, &(0x7f0000000a80)=ANY=[], 0x118) fcntl$lock(r0, 0x6, &(0x7f0000000440)={0x1, 0x1, 0x2, 0xb}) 1.686718975s ago: executing program 2 (id=95): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000200)={0x2, 0x1, 0x3, 0x3}) 1.575152474s ago: executing program 3 (id=96): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.503930786s ago: executing program 2 (id=97): socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) 1.428314155s ago: executing program 1 (id=98): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000480)=ANY=[], 0x0, 0x0}) 695.543511ms ago: executing program 4 (id=99): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r1, 0x0, 0xffff, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 536.779033ms ago: executing program 3 (id=100): socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf64(r0, 0x0, 0x78) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4) landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) io_uring_enter(0xffffffffffffffff, 0x7277, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 299.024256ms ago: executing program 4 (id=101): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$packet(0x11, 0x3, 0x300) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod(0x0, 0x8001420, 0xffffffff) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x103000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0x4}, 0x3, 0x800}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x10d) lseek(r6, 0x105, 0x1) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 0s ago: executing program 2 (id=102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x42, {0x7fff, 0xce1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 77.805033][ T5818] cgroup: Unknown subsys name 'net' [ 77.935997][ T5818] cgroup: Unknown subsys name 'cpuset' [ 77.944724][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.579220][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.867139][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.891493][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.902019][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.911305][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.918662][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.919694][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.926461][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.935170][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.950470][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.951882][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.966424][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.967156][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.974843][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.989512][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.991194][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.996950][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.005603][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.019475][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.020252][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.035988][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.043472][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.051842][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.060298][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.069659][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.075170][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.838826][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 82.891567][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 82.961881][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 83.068589][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 83.166821][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 83.238967][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.247307][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.254959][ T5837] bridge_slave_0: entered allmulticast mode [ 83.262598][ T5837] bridge_slave_0: entered promiscuous mode [ 83.278078][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.285530][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.293266][ T5835] bridge_slave_0: entered allmulticast mode [ 83.300830][ T5835] bridge_slave_0: entered promiscuous mode [ 83.326840][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.334315][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.341712][ T5837] bridge_slave_1: entered allmulticast mode [ 83.349174][ T5837] bridge_slave_1: entered promiscuous mode [ 83.368346][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.375814][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.383991][ T5835] bridge_slave_1: entered allmulticast mode [ 83.391873][ T5835] bridge_slave_1: entered promiscuous mode [ 83.486977][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.494401][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.501716][ T5830] bridge_slave_0: entered allmulticast mode [ 83.509166][ T5830] bridge_slave_0: entered promiscuous mode [ 83.554793][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.564937][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.572751][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.580075][ T5830] bridge_slave_1: entered allmulticast mode [ 83.587855][ T5830] bridge_slave_1: entered promiscuous mode [ 83.599079][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.616009][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.624281][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.632074][ T5831] bridge_slave_0: entered allmulticast mode [ 83.639594][ T5831] bridge_slave_0: entered promiscuous mode [ 83.652739][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.679417][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.703846][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.711358][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.718585][ T5831] bridge_slave_1: entered allmulticast mode [ 83.726511][ T5831] bridge_slave_1: entered promiscuous mode [ 83.810266][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.833588][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.841510][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.848819][ T5841] bridge_slave_0: entered allmulticast mode [ 83.856645][ T5841] bridge_slave_0: entered promiscuous mode [ 83.881600][ T5837] team0: Port device team_slave_0 added [ 83.891284][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.903763][ T5835] team0: Port device team_slave_0 added [ 83.910111][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.917667][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.925204][ T5841] bridge_slave_1: entered allmulticast mode [ 83.932882][ T5841] bridge_slave_1: entered promiscuous mode [ 83.944313][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.956665][ T5837] team0: Port device team_slave_1 added [ 83.978132][ T5835] team0: Port device team_slave_1 added [ 84.013196][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.104364][ T5830] team0: Port device team_slave_0 added [ 84.112209][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.119227][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.121619][ T5845] Bluetooth: hci2: command tx timeout [ 84.146539][ T51] Bluetooth: hci1: command tx timeout [ 84.151813][ T5845] Bluetooth: hci3: command tx timeout [ 84.157169][ T5842] Bluetooth: hci4: command tx timeout [ 84.162855][ T5844] Bluetooth: hci0: command tx timeout [ 84.170037][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.190117][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.213362][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.220335][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.246609][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.260521][ T5830] team0: Port device team_slave_1 added [ 84.283699][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.290742][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.317835][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.332521][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.355725][ T5831] team0: Port device team_slave_0 added [ 84.364723][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.372792][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.399252][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.458346][ T5831] team0: Port device team_slave_1 added [ 84.493795][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.500936][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.527089][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.541005][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.548058][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.574423][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.588289][ T5841] team0: Port device team_slave_0 added [ 84.598779][ T5841] team0: Port device team_slave_1 added [ 84.606178][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.613393][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.640188][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.688221][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.695430][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.722026][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.802870][ T5835] hsr_slave_0: entered promiscuous mode [ 84.810142][ T5835] hsr_slave_1: entered promiscuous mode [ 84.829728][ T5837] hsr_slave_0: entered promiscuous mode [ 84.837080][ T5837] hsr_slave_1: entered promiscuous mode [ 84.844095][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 84.850005][ T5837] Cannot create hsr debugfs directory [ 84.857559][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.865331][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.891672][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.948052][ T5831] hsr_slave_0: entered promiscuous mode [ 84.955302][ T5831] hsr_slave_1: entered promiscuous mode [ 84.962160][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 84.967941][ T5831] Cannot create hsr debugfs directory [ 84.975556][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.982751][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.009546][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.040689][ T5830] hsr_slave_0: entered promiscuous mode [ 85.047494][ T5830] hsr_slave_1: entered promiscuous mode [ 85.054704][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 85.060535][ T5830] Cannot create hsr debugfs directory [ 85.332812][ T5841] hsr_slave_0: entered promiscuous mode [ 85.339584][ T5841] hsr_slave_1: entered promiscuous mode [ 85.346654][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 85.352651][ T5841] Cannot create hsr debugfs directory [ 85.891999][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.905903][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.917687][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.940506][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.019800][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.032365][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.045589][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.059804][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.183515][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.196146][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.201591][ T5838] Bluetooth: hci3: command tx timeout [ 86.204909][ T5845] Bluetooth: hci0: command tx timeout [ 86.210357][ T5844] Bluetooth: hci1: command tx timeout [ 86.216099][ T51] Bluetooth: hci4: command tx timeout [ 86.221347][ T5838] Bluetooth: hci2: command tx timeout [ 86.232221][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.247045][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.422399][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.443543][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.465840][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.478716][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.582010][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.622586][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.636480][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.649012][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.671903][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.729208][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.739635][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.790798][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.798765][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.850486][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.857667][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.872785][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.915621][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.943217][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.950459][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.037917][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.045212][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.148584][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.219378][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.226705][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.286720][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.293996][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.371659][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.555250][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.623849][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.631117][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.655668][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.677380][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.684627][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.806251][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.860408][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.893300][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.900760][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.953347][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.960744][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.047635][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.275719][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.286470][ T51] Bluetooth: hci0: command tx timeout [ 88.289219][ T5842] Bluetooth: hci1: command tx timeout [ 88.293688][ T51] Bluetooth: hci2: command tx timeout [ 88.297777][ T5845] Bluetooth: hci3: command tx timeout [ 88.297804][ T5845] Bluetooth: hci4: command tx timeout [ 88.378381][ T5837] veth0_vlan: entered promiscuous mode [ 88.457918][ T5837] veth1_vlan: entered promiscuous mode [ 88.639585][ T5835] veth0_vlan: entered promiscuous mode [ 88.716579][ T5837] veth0_macvtap: entered promiscuous mode [ 88.728374][ T5835] veth1_vlan: entered promiscuous mode [ 88.750407][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.767617][ T5837] veth1_macvtap: entered promiscuous mode [ 88.833584][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.859460][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.887566][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.897672][ T5831] veth0_vlan: entered promiscuous mode [ 88.945929][ T5835] veth0_macvtap: entered promiscuous mode [ 88.956700][ T1104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.966133][ T1104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.991313][ T5835] veth1_macvtap: entered promiscuous mode [ 88.998865][ T1104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.008731][ T1104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.021226][ T5831] veth1_vlan: entered promiscuous mode [ 89.153807][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.169130][ T5830] veth0_vlan: entered promiscuous mode [ 89.219956][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.256208][ T5830] veth1_vlan: entered promiscuous mode [ 89.279072][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.285109][ T5841] veth0_vlan: entered promiscuous mode [ 89.295225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.343273][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.352161][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.368503][ T5831] veth0_macvtap: entered promiscuous mode [ 89.389653][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.398685][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.437323][ T5841] veth1_vlan: entered promiscuous mode [ 89.446735][ T5831] veth1_macvtap: entered promiscuous mode [ 89.473116][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.487385][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.580079][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.611900][ T5830] veth0_macvtap: entered promiscuous mode [ 89.626493][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.648995][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.674531][ T5830] veth1_macvtap: entered promiscuous mode [ 89.676680][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.695439][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.789543][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.818213][ T5841] veth0_macvtap: entered promiscuous mode [ 89.832462][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.841483][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.858396][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.859047][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.867486][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.914276][ T5841] veth1_macvtap: entered promiscuous mode [ 89.976417][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.029484][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.135343][ T196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.164191][ T196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.198265][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.219674][ T5965] delete_channel: no stack [ 90.252601][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.271524][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.309332][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.360948][ T51] Bluetooth: hci1: command tx timeout [ 90.360966][ T5842] Bluetooth: hci4: command tx timeout [ 90.360995][ T5842] Bluetooth: hci3: command tx timeout [ 90.366400][ T51] Bluetooth: hci0: command tx timeout [ 90.371999][ T5844] Bluetooth: hci2: command tx timeout [ 90.665454][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.674741][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.709279][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.726262][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.753694][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.766088][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.872684][ T5955] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.918224][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.935476][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.939997][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.950098][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.038026][ T5955] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.059412][ T5955] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 91.076880][ T5955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.098502][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.108008][ T5981] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.120590][ T5955] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.133998][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.158052][ T5955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 91.170330][ T5955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.178092][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.196260][ T5955] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.247219][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.248805][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.307594][ T5955] usb 3-1: Product: syz [ 91.317793][ T5955] usb 3-1: Manufacturer: syz [ 91.453237][ T5976] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.496657][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.514326][ T5955] cdc_wdm 3-1:1.0: skipping garbage [ 91.534065][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.546466][ T5955] cdc_wdm 3-1:1.0: skipping garbage [ 91.597630][ T5955] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 91.613763][ T5955] cdc_wdm 3-1:1.0: Unknown control protocol [ 91.830712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 91.850640][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 91.857378][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 91.864174][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 91.870838][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 91.872748][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.878395][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 91.892387][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 91.899526][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 91.906648][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 91.913018][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 91.919641][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 91.925887][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 91.932481][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 91.939429][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 91.946144][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 91.952748][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 91.959352][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 91.965802][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 91.972396][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 91.978706][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 91.985300][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 92.030995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.127061][ T803] cfg80211: failed to load regulatory.db [ 92.170716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.180739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 92.251569][ T5955] usb 3-1: USB disconnect, device number 2 [ 92.389539][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.442014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.582770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.681183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.690112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.699370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.982610][ T5955] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.042175][ T5999] syz.2.16 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.173801][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 93.198668][ T5955] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.237713][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.286984][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 93.339777][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.388335][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.415195][ T5955] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.429339][ T5955] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.439461][ T5955] usb 4-1: Manufacturer: syz [ 93.487870][ T5955] usb 4-1: config 0 descriptor?? [ 93.562240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.204754][ T5955] rc_core: IR keymap rc-hauppauge not found [ 94.236804][ T5955] Registered IR keymap rc-empty [ 94.253471][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.301197][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.388941][ T5955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 94.468967][ T5955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 95.136177][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.181534][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.265081][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.323296][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.379744][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.442159][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.486157][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.540860][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.580947][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.634333][ T5955] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.731863][ T5955] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 95.772292][ T5955] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 95.916872][ T5955] usb 4-1: USB disconnect, device number 2 [ 97.256526][ T6012] syz.3.20 (6012): drop_caches: 2 [ 97.385865][ T6010] loop4: detected capacity change from 0 to 40427 [ 97.493014][ T6010] F2FS-fs (loop4): invalid crc value [ 97.956018][ T6003] syz.2.17 (6003): drop_caches: 2 [ 98.005688][ T6010] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 98.084692][ T6010] F2FS-fs (loop4): Start checkpoint disabled! [ 98.103874][ T6007] syz.1.18 (6007): drop_caches: 2 [ 98.137007][ T6010] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 98.182180][ T6010] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 98.362751][ T29] audit: type=1326 audit(1773575798.348:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.1.25" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b9c799 code=0x0 [ 98.408378][ T29] audit: type=1800 audit(1773575798.348:3): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 98.549115][ T6031] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.889149][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 99.539199][ T6049] syz.4.19: attempt to access beyond end of device [ 99.539199][ T6049] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 99.571099][ T5955] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.666780][ T6049] syz.4.19: attempt to access beyond end of device [ 99.666780][ T6049] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 99.757283][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 99.784547][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 99.814645][ T5955] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 99.835722][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.855755][ T5955] usb 4-1: Product: syz [ 99.864194][ T5955] usb 4-1: Manufacturer: syz [ 99.872340][ T6049] syz.4.19: attempt to access beyond end of device [ 99.872340][ T6049] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 99.886173][ T5955] usb 4-1: SerialNumber: syz [ 99.894574][ T5955] usb 4-1: config 0 descriptor?? [ 99.909923][ T5955] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 100.034279][ T6049] syz.4.19: attempt to access beyond end of device [ 100.034279][ T6049] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 101.077533][ T49] kworker/u8:3: attempt to access beyond end of device [ 101.077533][ T49] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 101.133765][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.133804][ T49] Tainted: [L]=SOFTLOCKUP [ 101.133812][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.133825][ T49] Workqueue: writeback wb_workfn (flush-7:4) [ 101.133858][ T49] Call Trace: [ 101.133867][ T49] [ 101.133876][ T49] dump_stack_lvl+0xe8/0x150 [ 101.133909][ T49] f2fs_handle_critical_error+0x37c/0x540 [ 101.133943][ T49] f2fs_write_end_io+0x1274/0x1740 [ 101.133989][ T49] __submit_merged_bio+0x256/0x700 [ 101.134018][ T49] __submit_merged_write_cond+0x3c9/0x4e0 [ 101.134052][ T49] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 101.134099][ T49] f2fs_write_data_pages+0x287e/0x34f0 [ 101.134126][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 101.134147][ T49] ? lock_release+0x4b/0x3d0 [ 101.134215][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.134261][ T49] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 101.134318][ T49] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 101.134351][ T49] ? __lock_acquire+0x6b5/0x2cf0 [ 101.134377][ T49] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 101.134389][ T49] ? arch_stack_walk+0xe3/0x150 [ 101.134403][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.134420][ T49] do_writepages+0x32e/0x550 [ 101.134440][ T49] ? reacquire_held_locks+0x104/0x190 [ 101.134452][ T49] ? writeback_sb_inodes+0x477/0x1a20 [ 101.134472][ T49] __writeback_single_inode+0x133/0x11a0 [ 101.134488][ T49] ? do_raw_spin_unlock+0xf5/0x210 [ 101.134506][ T49] writeback_sb_inodes+0x992/0x1a20 [ 101.134533][ T49] ? __lock_acquire+0x146e/0x2cf0 [ 101.134558][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 101.134572][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.134610][ T49] ? rcu_is_watching+0x15/0xb0 [ 101.134639][ T49] wb_writeback+0x456/0xb70 [ 101.134657][ T49] ? queue_io+0x1e1/0x4a0 [ 101.134676][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 101.134690][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.134714][ T49] wb_workfn+0x414/0xf50 [ 101.134729][ T49] ? look_up_lock_class+0x57/0x110 [ 101.134751][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 101.134766][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.134782][ T49] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 101.134812][ T49] ? process_one_work+0x8bb/0x1780 [ 101.134832][ T49] process_one_work+0x9ab/0x1780 [ 101.134862][ T49] ? __pfx_process_one_work+0x10/0x10 [ 101.134881][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.134906][ T49] worker_thread+0xb49/0x1140 [ 101.134923][ T49] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 101.134945][ T49] kthread+0x388/0x470 [ 101.134960][ T49] ? __pfx_worker_thread+0x10/0x10 [ 101.134970][ T49] ? __pfx_kthread+0x10/0x10 [ 101.134985][ T49] ret_from_fork+0x51e/0xb90 [ 101.135005][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 101.135021][ T49] ? __switch_to+0xc7d/0x1450 [ 101.135039][ T49] ? __pfx_kthread+0x10/0x10 [ 101.135054][ T49] ret_from_fork_asm+0x1a/0x30 [ 101.135076][ T49] [ 101.448913][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 101.769558][ T5955] gspca_zc3xx: reg_w_i err -110 [ 102.123592][ T5832] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.299131][ T5832] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 102.313870][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.334132][ T5832] usb 2-1: Product: syz [ 102.343807][ T5832] usb 2-1: Manufacturer: syz [ 102.355429][ T5832] usb 2-1: SerialNumber: syz [ 102.380684][ T5955] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 102.392621][ T5955] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 102.400424][ T5832] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 102.529624][ T5922] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 102.899244][ T6087] kernel read not supported for file /file1 (pid: 6087 comm: syz.2.40) [ 102.931901][ T29] audit: type=1800 audit(1773575802.908:4): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.40" name="file1" dev="mqueue" ino=8930 res=0 errno=0 [ 103.060528][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.069253][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.206301][ T5955] usb 2-1: USB disconnect, device number 2 [ 103.314959][ T42] IPVS: starting estimator thread 0... [ 103.448508][ T6093] IPVS: using max 49 ests per chain, 117600 per kthread [ 103.800797][ T5922] usb 2-1: Service connection timeout for: 256 [ 103.817118][ T5922] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 103.867148][ T5922] ath9k_htc: Failed to initialize the device [ 103.904384][ T5955] usb 2-1: ath9k_htc: USB layer deinitialized [ 104.107778][ T24] usb 4-1: USB disconnect, device number 3 [ 104.267423][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.373967][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.422858][ T5955] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.621103][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 104.657946][ T5955] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 104.695272][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.704065][ T5955] usb 2-1: Product: syz [ 104.708344][ T5955] usb 2-1: Manufacturer: syz [ 104.713228][ T5955] usb 2-1: SerialNumber: syz [ 104.722577][ T5955] usb 2-1: config 0 descriptor?? [ 105.020201][ T5955] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 003 [ 105.628582][ T6111] i2c i2c-1: failure reading data [ 105.631600][ T5922] usb 2-1: USB disconnect, device number 3 [ 105.649472][ T196] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.727274][ T196] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.769951][ T196] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.806687][ T196] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.010767][ T5893] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.146542][ T6117] warning: `syz.4.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.193453][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 106.213271][ T5893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.261708][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.311332][ T5893] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.348784][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.383000][ T5893] usb 3-1: Product: syz [ 106.395416][ T5893] usb 3-1: Manufacturer: syz [ 106.414240][ T5893] usb 3-1: SerialNumber: syz [ 106.461818][ T5893] usb 3-1: 0:2 : does not exist [ 106.698442][ T5893] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 106.740739][ T5832] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.897391][ T5893] usb 3-1: USB disconnect, device number 3 [ 106.933792][ T5832] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.990351][ T5832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.023133][ T5832] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.039432][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.055228][ T5832] usb 5-1: SerialNumber: syz [ 107.128284][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.221211][ T5955] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.352278][ T5832] usb 5-1: 0:2 : does not exist [ 107.420697][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 107.464759][ T5955] usb 1-1: config 0 has no interfaces? [ 107.517915][ T5955] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.546448][ T5832] usb 5-1: USB disconnect, device number 2 [ 107.632400][ T5955] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.667489][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.732774][ T5955] usb 1-1: Manufacturer: syz [ 107.758141][ T5955] usb 1-1: config 0 descriptor?? [ 107.893541][ T6141] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 108.680503][ T6187] netlink: 'syz.1.61': attribute type 10 has an invalid length. [ 109.373056][ T6187] batman_adv: batadv0: Adding interface: netdevsim0 [ 109.381226][ T6187] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.455545][ T6187] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 109.770296][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 110.071290][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.236010][ T6214] syzkaller0: entered allmulticast mode [ 110.253857][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 110.278509][ T29] audit: type=1326 audit(1773575810.258:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.1.69" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fd2b9c799 code=0x0 [ 110.301199][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 110.313164][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.322187][ T10] usb 4-1: Product: syz [ 110.326552][ T10] usb 4-1: Manufacturer: syz [ 110.355615][ T10] usb 4-1: SerialNumber: syz [ 110.389706][ T10] usb 4-1: config 0 descriptor?? [ 110.409820][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 110.413983][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 110.910909][ T5955] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.099046][ T5955] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 111.156101][ T5955] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 111.187303][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.208109][ T5955] usb 5-1: Product: syz [ 111.222624][ T5955] usb 5-1: Manufacturer: syz [ 111.233678][ T5955] usb 5-1: SerialNumber: syz [ 111.318120][ T5955] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 111.481068][ T5922] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.537834][ T5832] usb 1-1: USB disconnect, device number 2 [ 111.651045][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 111.668709][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.704901][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.735056][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 111.756835][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.777173][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.795770][ T5955] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 111.824776][ T5922] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.843051][ T5955] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 111.854064][ T5922] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.875222][ T5955] usb 5-1: media controller created [ 111.883838][ T5922] usb 2-1: Manufacturer: syz [ 111.930525][ T5922] usb 2-1: config 0 descriptor?? [ 111.949525][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.290895][ T5922] rc_core: IR keymap rc-hauppauge not found [ 112.299127][ T5922] Registered IR keymap rc-empty [ 112.304377][ T42] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.318739][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.340778][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.382325][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 112.423459][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 112.451966][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.470913][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.492482][ T42] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.510838][ T42] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 112.522164][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.531316][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.542146][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 112.554144][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 112.568137][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.583676][ T42] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.594000][ T42] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.602696][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.610181][ T42] usb 1-1: Product: syz [ 112.615188][ T42] usb 1-1: Manufacturer: syz [ 112.630917][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.659588][ T42] cdc_wdm 1-1:1.0: skipping garbage [ 112.669441][ T42] cdc_wdm 1-1:1.0: skipping garbage [ 112.675318][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.697255][ T42] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 112.711352][ T42] cdc_wdm 1-1:1.0: Unknown control protocol [ 112.720975][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.760896][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.802166][ T5922] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.856664][ T5922] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 112.880722][ T5922] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 112.929535][ T5922] usb 2-1: USB disconnect, device number 4 [ 113.098073][ T10] gspca_sonixj: reg_w1 err -71 [ 113.150967][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 113.182716][ T10] usb 4-1: USB disconnect, device number 4 [ 113.305854][ T5922] usb 5-1: USB disconnect, device number 3 [ 113.525120][ T5922] usb 1-1: USB disconnect, device number 3 [ 113.759278][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.83'. [ 113.860155][ T6264] Zero length message leads to an empty skb [ 114.094518][ T42] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.281367][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 114.294226][ T6274] hfs: unable to load iocharset "io#harset" [ 114.324734][ T42] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 114.350726][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.385368][ T42] usb 4-1: Product: syz [ 114.390713][ T5957] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.403755][ T42] usb 4-1: Manufacturer: syz [ 114.426725][ T42] usb 4-1: SerialNumber: syz [ 114.566381][ T5957] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 114.584900][ T5957] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 114.619996][ T5957] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 114.646294][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.679296][ T5957] usb 5-1: Product: syz [ 114.695978][ T5957] usb 5-1: Manufacturer: syz [ 114.715679][ T5957] usb 5-1: SerialNumber: syz [ 114.727442][ T42] usb 4-1: BAAD HEADSET c_chmask mismatch [ 114.733525][ T5957] usb 5-1: config 0 descriptor?? [ 114.758257][ T5957] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 114.967235][ T42] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.001013][ T5955] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.041335][ T42] usb 4-1: USB disconnect, device number 5 [ 115.114864][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.190918][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 115.204558][ T5955] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.240079][ T5955] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.275972][ T5955] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 115.299754][ T5955] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 115.335381][ T5955] usb 1-1: Product: syz [ 115.350717][ T5955] usb 1-1: Manufacturer: syz [ 115.399415][ T5955] hub 1-1:4.0: USB hub found [ 115.602378][ T5955] hub 1-1:4.0: 2 ports detected [ 116.819815][ T5955] hub 1-1:4.0: activate --> -90 [ 116.841085][ T5955] usb 5-1: USB disconnect, device number 4 [ 116.980814][ T42] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.003200][ T5832] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.143501][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.154402][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.162860][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 117.175836][ T42] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 117.187393][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.195744][ T5832] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 117.205093][ T42] usb 3-1: Product: syz [ 117.209328][ T5832] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 117.217558][ T42] usb 3-1: Manufacturer: syz [ 117.222266][ T42] usb 3-1: SerialNumber: syz [ 117.227412][ T5832] usb 2-1: Product: syz [ 117.234066][ T5832] usb 2-1: Manufacturer: syz [ 117.239723][ T5832] usb 2-1: SerialNumber: syz [ 117.245778][ T42] usb 3-1: config 0 descriptor?? [ 117.261712][ T42] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 117.273012][ T5832] usb 2-1: config 0 descriptor?? [ 117.287441][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.305002][ T5832] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 117.312549][ T42] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 117.321980][ T42] usb 3-1: media controller created [ 117.347776][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.517295][ T42] DVB: Unable to find symbol tda10046_attach() [ 117.535740][ T42] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 117.553909][ T42] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 117.581249][ T42] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 117.615522][ T42] usb 3-1: USB disconnect, device number 4 [ 117.638909][ T5957] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 117.655596][ T5955] usb 1-1: USB disconnect, device number 4 [ 117.662443][ T5957] usb 1-1-port2: cannot reset (err = -71) [ 117.668471][ T5957] usb 1-1-port2: Cannot enable. Maybe the USB cable is bad? [ 117.688503][ T5957] usb 1-1-port2: attempt power cycle [ 117.920778][ T5832] gspca_zc3xx: reg_w_i err -71 [ 117.925839][ T5832] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 117.974749][ T29] audit: type=1804 audit(1773575817.958:6): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.100" name="/newroot/16/file1" dev="tmpfs" ino=99 res=1 errno=0 [ 117.999160][ T5832] usb 2-1: USB disconnect, device number 5 [ 118.094143][ T6312] node ffff88806b912ec0 offset 0 parent ffff88806b8a7c80 shift 0 count 1 values 0 array ffff888028270fa0 list ffff88806b912ed8 ffff88806b912ed8 marks 0 0 0 [ 118.115103][ T6312] ------------[ cut here ]------------ [ 118.121378][ T6312] kernel BUG at ./include/linux/xarray.h:1441! [ 118.150268][ T6312] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 118.156679][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.3.100 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.167724][ T6312] Tainted: [L]=SOFTLOCKUP [ 118.172240][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.182562][ T6312] RIP: 0010:hpage_collapse_scan_file+0x4f98/0x5230 [ 118.189091][ T6312] Code: ff 4c 89 e7 48 c7 c6 80 b1 dc 8b e8 82 df f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 01 62 90 ff 48 89 df e8 69 5d 7b 09 90 <0f> 0b e8 f1 61 90 ff 48 89 df 48 c7 c6 80 b1 dc 8b e8 52 df f1 fe [ 118.209313][ T6312] RSP: 0018:ffffc9000579f120 EFLAGS: 00010246 [ 118.215393][ T6312] RAX: 0000000000000000 RBX: ffff88806b912ec0 RCX: a5172df02deab300 [ 118.223368][ T6312] RDX: ffffc9000db71000 RSI: 0000000000005e4d RDI: 0000000000005e4e [ 118.231426][ T6312] RBP: ffffc9000579f428 R08: ffffc9000579eea7 R09: 1ffff92000af3dd4 [ 118.239489][ T6312] R10: dffffc0000000000 R11: fffff52000af3dd5 R12: ffffea00015520b0 [ 118.247556][ T6312] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000579f310 [ 118.255556][ T6312] FS: 00007f78eaaac6c0(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 118.264492][ T6312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.271088][ T6312] CR2: 00002000000002c0 CR3: 000000005853e000 CR4: 00000000003526f0 [ 118.279152][ T6312] Call Trace: [ 118.282433][ T6312] [ 118.285461][ T6312] ? hpage_collapse_scan_file+0x1c1/0x5230 [ 118.291323][ T6312] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 118.297489][ T6312] ? __flush_work+0xab9/0xc50 [ 118.302168][ T6312] ? __flush_work+0x100/0xc50 [ 118.306871][ T6312] ? __up_read+0x291/0x6b0 [ 118.311293][ T6312] ? __pfx___up_read+0x10/0x10 [ 118.316148][ T6312] ? madvise_collapse+0x41e/0xb80 [ 118.321175][ T6312] madvise_collapse+0x451/0xb80 [ 118.326033][ T6312] madvise_vma_behavior+0x1094/0x4460 [ 118.331420][ T6312] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 118.337142][ T6312] ? is_bpf_text_address+0x292/0x2b0 [ 118.342433][ T6312] ? is_bpf_text_address+0x26/0x2b0 [ 118.347754][ T6312] ? kernel_text_address+0xa5/0xe0 [ 118.352874][ T6312] ? __kernel_text_address+0xd/0x30 [ 118.358191][ T6312] ? unwind_get_return_address+0x4d/0x90 [ 118.364000][ T6312] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 118.370168][ T6312] ? arch_stack_walk+0xfb/0x150 [ 118.375198][ T6312] ? __lock_acquire+0x6b5/0x2cf0 [ 118.380154][ T6312] ? kvm_sched_clock_read+0x11/0x20 [ 118.385363][ T6312] ? sched_clock+0x3f/0x60 [ 118.389873][ T6312] ? sched_clock_cpu+0x74/0x440 [ 118.394833][ T6312] ? finish_task_switch+0x41f/0xbe0 [ 118.400072][ T6312] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.405280][ T6312] ? mas_prev_slot+0xb7b/0xbf0 [ 118.410058][ T6312] ? find_vma_prev+0x123/0x1b0 [ 118.414828][ T6312] ? __pfx_find_vma_prev+0x10/0x10 [ 118.419950][ T6312] madvise_walk_vmas+0x573/0xae0 [ 118.424890][ T6312] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 118.430355][ T6312] ? blk_start_plug+0x6e/0x1b0 [ 118.435123][ T6312] madvise_do_behavior+0x386/0x540 [ 118.440237][ T6312] ? __pfx_madvise_do_behavior+0x10/0x10 [ 118.445872][ T6312] ? down_read+0x270/0x2e0 [ 118.450401][ T6312] ? madvise_lock+0x146/0x2e0 [ 118.455258][ T6312] do_madvise+0x1fa/0x2e0 [ 118.459595][ T6312] ? __pfx_do_madvise+0x10/0x10 [ 118.464456][ T6312] ? __se_sys_futex+0x3a8/0x450 [ 118.469311][ T6312] ? rcu_is_watching+0x15/0xb0 [ 118.474076][ T6312] __x64_sys_madvise+0xa6/0xc0 [ 118.478849][ T6312] do_syscall_64+0x14d/0xf80 [ 118.483447][ T6312] ? trace_irq_disable+0x3b/0x150 [ 118.488624][ T6312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.494795][ T6312] ? clear_bhb_loop+0x40/0x90 [ 118.499502][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.505635][ T6312] RIP: 0033:0x7f78e9b9c799 [ 118.510156][ T6312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.529977][ T6312] RSP: 002b:00007f78eaaac028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 118.538484][ T6312] RAX: ffffffffffffffda RBX: 00007f78e9e15fa0 RCX: 00007f78e9b9c799 [ 118.546612][ T6312] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000 [ 118.554854][ T6312] RBP: 00007f78e9c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 118.562890][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.570963][ T6312] R13: 00007f78e9e16038 R14: 00007f78e9e15fa0 R15: 00007fff35b0a858 [ 118.579038][ T6312] [ 118.582244][ T6312] Modules linked in: [ 118.588740][ T6312] ---[ end trace 0000000000000000 ]--- [ 118.677477][ T6312] RIP: 0010:hpage_collapse_scan_file+0x4f98/0x5230 [ 118.712216][ T6312] Code: ff 4c 89 e7 48 c7 c6 80 b1 dc 8b e8 82 df f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 01 62 90 ff 48 89 df e8 69 5d 7b 09 90 <0f> 0b e8 f1 61 90 ff 48 89 df 48 c7 c6 80 b1 dc 8b e8 52 df f1 fe [ 118.771968][ T6312] RSP: 0018:ffffc9000579f120 EFLAGS: 00010246 [ 118.790734][ T6312] RAX: 0000000000000000 RBX: ffff88806b912ec0 RCX: a5172df02deab300 [ 118.817404][ T6312] RDX: ffffc9000db71000 RSI: 0000000000005e4d RDI: 0000000000005e4e [ 118.840742][ T6312] RBP: ffffc9000579f428 R08: ffffc9000579eea7 R09: 1ffff92000af3dd4 [ 118.868411][ T6312] R10: dffffc0000000000 R11: fffff52000af3dd5 R12: ffffea00015520b0 [ 118.896158][ T6312] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000579f310 [ 118.922461][ T6312] FS: 00007f78eaaac6c0(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 118.940666][ T6312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.962300][ T6312] CR2: 0000200000332030 CR3: 000000005853e000 CR4: 00000000003526f0 [ 118.990705][ T6312] Kernel panic - not syncing: Fatal exception [ 118.997268][ T6312] Kernel Offset: disabled [ 119.001592][ T6312] Rebooting in 86400 seconds..