last executing test programs: 5.427537223s ago: executing program 3 (id=10): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x44) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 4.522235324s ago: executing program 3 (id=16): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.394910531s ago: executing program 0 (id=17): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000003c0)={0x7fff, 0x6, 0x8, {0xf, 0x6}, 0x8, 0x1ff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 4.145764325s ago: executing program 0 (id=21): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0xe2c3, 0x400000000000007c, 0x4) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.825973086s ago: executing program 0 (id=26): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x44) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 3.195660218s ago: executing program 3 (id=28): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) socket(0x1, 0x5, 0x0) r1 = socket$kcm(0x10, 0x4, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r6], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 3.074119179s ago: executing program 4 (id=29): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100000, 0x9, 0x20000000, 0x6, 0x10000008}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 2.735639701s ago: executing program 4 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002238030008000a00", @ANYRES32=r1, @ANYBLOB="2400128009000100626f6e6400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.600663448s ago: executing program 0 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) 2.59270693s ago: executing program 1 (id=36): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x25}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e2400000000000100000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.419528213s ago: executing program 2 (id=37): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) 2.411362034s ago: executing program 4 (id=38): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.34684825s ago: executing program 2 (id=39): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 2.291445039s ago: executing program 1 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c000100002000000000000007000000", @ANYRES32=r1, @ANYBLOB="972ba2080a000200aaaa"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 1.624399632s ago: executing program 0 (id=41): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='huge=a']) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001580)=ANY=[], 0x3d0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000600)="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", 0xc1f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 1.624237418s ago: executing program 1 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.623132046s ago: executing program 3 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100000, 0x9, 0x20000000, 0x6, 0x10000008}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 1.538934667s ago: executing program 2 (id=44): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x1}) 1.509649749s ago: executing program 4 (id=45): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x44) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1.392132895s ago: executing program 2 (id=46): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000003c0)={0x7fff, 0x6, 0x8, {0xf, 0x6}, 0x8, 0x1ff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 1.346972462s ago: executing program 3 (id=47): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x6}, 0x8) 1.307001403s ago: executing program 0 (id=48): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000065000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00009a8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffd7a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x60000726) 1.126107955s ago: executing program 2 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x3b, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000f3c002400000000ff84000000", 0x17}], 0x1}, 0x4005) 1.125345896s ago: executing program 1 (id=50): symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 993.648126ms ago: executing program 1 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 834.127319ms ago: executing program 4 (id=52): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) 736.173913ms ago: executing program 4 (id=53): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) close(r1) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffff2834) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x21, 0x0) 734.679811ms ago: executing program 1 (id=54): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 567.232066ms ago: executing program 2 (id=55): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=56): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 69.793743][ T5819] cgroup: Unknown subsys name 'net' [ 69.888669][ T5819] cgroup: Unknown subsys name 'cpuset' [ 69.897360][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.321645][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.462791][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.469931][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.619545][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.632141][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.635319][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.649077][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.656936][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.669564][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.677691][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.678949][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.686936][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.697012][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.705871][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.715701][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.725314][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.725965][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.742773][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.742816][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.752447][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.760858][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.766217][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.772973][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.780896][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.787707][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.795472][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.807988][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.817831][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.481377][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 74.560399][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 74.641988][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 74.728431][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 74.804290][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.813273][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.820940][ T5833] bridge_slave_0: entered allmulticast mode [ 74.829623][ T5833] bridge_slave_0: entered promiscuous mode [ 74.850060][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 74.902070][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.909774][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.917138][ T5833] bridge_slave_1: entered allmulticast mode [ 74.926970][ T5833] bridge_slave_1: entered promiscuous mode [ 74.962254][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.969940][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.977811][ T5832] bridge_slave_0: entered allmulticast mode [ 74.985811][ T5832] bridge_slave_0: entered promiscuous mode [ 75.036083][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.043502][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.050982][ T5832] bridge_slave_1: entered allmulticast mode [ 75.059385][ T5832] bridge_slave_1: entered promiscuous mode [ 75.105786][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.113273][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.120904][ T5835] bridge_slave_0: entered allmulticast mode [ 75.128441][ T5835] bridge_slave_0: entered promiscuous mode [ 75.153052][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.180193][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.188653][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.196204][ T5835] bridge_slave_1: entered allmulticast mode [ 75.203543][ T5835] bridge_slave_1: entered promiscuous mode [ 75.224200][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.240126][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.247739][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.256243][ T5831] bridge_slave_0: entered allmulticast mode [ 75.263625][ T5831] bridge_slave_0: entered promiscuous mode [ 75.273068][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.281262][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.288797][ T5831] bridge_slave_1: entered allmulticast mode [ 75.296963][ T5831] bridge_slave_1: entered promiscuous mode [ 75.318685][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.378586][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.430266][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.455334][ T5833] team0: Port device team_slave_0 added [ 75.461422][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.469241][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.476886][ T5841] bridge_slave_0: entered allmulticast mode [ 75.484303][ T5841] bridge_slave_0: entered promiscuous mode [ 75.496193][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.509152][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.543690][ T5833] team0: Port device team_slave_1 added [ 75.550042][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.558054][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.565617][ T5841] bridge_slave_1: entered allmulticast mode [ 75.573043][ T5841] bridge_slave_1: entered promiscuous mode [ 75.583397][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.620159][ T5832] team0: Port device team_slave_0 added [ 75.629403][ T5832] team0: Port device team_slave_1 added [ 75.681481][ T5835] team0: Port device team_slave_0 added [ 75.689984][ T5835] team0: Port device team_slave_1 added [ 75.707506][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.714745][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.741446][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.768367][ T5831] team0: Port device team_slave_0 added [ 75.801255][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.808452][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.835342][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.850385][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.860314][ T5848] Bluetooth: hci4: command tx timeout [ 75.860328][ T51] Bluetooth: hci2: command tx timeout [ 75.860625][ T5842] Bluetooth: hci1: command tx timeout [ 75.866695][ T5850] Bluetooth: hci0: command tx timeout [ 75.872474][ T51] Bluetooth: hci3: command tx timeout [ 75.893275][ T5831] team0: Port device team_slave_1 added [ 75.912678][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.921635][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.950223][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.973484][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.995111][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.002265][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.028997][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.041963][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.049271][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.075817][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.118799][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.126533][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.152862][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.180665][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.188403][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.215137][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.260985][ T5841] team0: Port device team_slave_0 added [ 76.268903][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.276312][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.302709][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.338805][ T5833] hsr_slave_0: entered promiscuous mode [ 76.345895][ T5833] hsr_slave_1: entered promiscuous mode [ 76.355802][ T5841] team0: Port device team_slave_1 added [ 76.396096][ T5832] hsr_slave_0: entered promiscuous mode [ 76.402802][ T5832] hsr_slave_1: entered promiscuous mode [ 76.409856][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 76.415743][ T5832] Cannot create hsr debugfs directory [ 76.472708][ T5831] hsr_slave_0: entered promiscuous mode [ 76.479761][ T5831] hsr_slave_1: entered promiscuous mode [ 76.486637][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 76.492750][ T5831] Cannot create hsr debugfs directory [ 76.500650][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.508136][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.534726][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.588254][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.595386][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.621975][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.639570][ T5835] hsr_slave_0: entered promiscuous mode [ 76.647687][ T5835] hsr_slave_1: entered promiscuous mode [ 76.654549][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 76.660828][ T5835] Cannot create hsr debugfs directory [ 76.924290][ T5841] hsr_slave_0: entered promiscuous mode [ 76.931362][ T5841] hsr_slave_1: entered promiscuous mode [ 76.938785][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 76.944629][ T5841] Cannot create hsr debugfs directory [ 77.408070][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.422091][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.433357][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.445546][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.532693][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.549212][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.571637][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.598558][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.715255][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.728543][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.742192][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.755760][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.840637][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.903950][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.921842][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.935393][ T51] Bluetooth: hci1: command tx timeout [ 77.935434][ T5850] Bluetooth: hci4: command tx timeout [ 77.941063][ T51] Bluetooth: hci3: command tx timeout [ 77.941087][ T51] Bluetooth: hci2: command tx timeout [ 77.941222][ T5842] Bluetooth: hci0: command tx timeout [ 77.978125][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.990206][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.054144][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.104710][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.112745][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.129003][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.159974][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.171156][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.182381][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.198598][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.205847][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.226603][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.298113][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.368869][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.376441][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.417071][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.424302][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.510903][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.622015][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.658141][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.666432][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.709860][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.744634][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.753108][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.790227][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.857159][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.921438][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.928943][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.953695][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.982202][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.989552][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.016449][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.023769][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.036863][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.101180][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.108496][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.227321][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.664142][ T5835] veth0_vlan: entered promiscuous mode [ 79.712160][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.761068][ T5835] veth1_vlan: entered promiscuous mode [ 79.818096][ T5833] veth0_vlan: entered promiscuous mode [ 79.864450][ T5833] veth1_vlan: entered promiscuous mode [ 79.884547][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.896601][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.972909][ T5835] veth0_macvtap: entered promiscuous mode [ 79.987607][ T5832] veth0_vlan: entered promiscuous mode [ 80.002622][ T5835] veth1_macvtap: entered promiscuous mode [ 80.015232][ T5848] Bluetooth: hci0: command tx timeout [ 80.015706][ T51] Bluetooth: hci3: command tx timeout [ 80.021204][ T5151] Bluetooth: hci1: command tx timeout [ 80.021320][ T5850] Bluetooth: hci4: command tx timeout [ 80.039587][ T5842] Bluetooth: hci2: command tx timeout [ 80.062658][ T5832] veth1_vlan: entered promiscuous mode [ 80.093372][ T5833] veth0_macvtap: entered promiscuous mode [ 80.118492][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.153458][ T5833] veth1_macvtap: entered promiscuous mode [ 80.178601][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.216561][ T5831] veth0_vlan: entered promiscuous mode [ 80.232793][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.242597][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.272309][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.298187][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.317887][ T5832] veth0_macvtap: entered promiscuous mode [ 80.327691][ T5831] veth1_vlan: entered promiscuous mode [ 80.335009][ T5841] veth0_vlan: entered promiscuous mode [ 80.348772][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.379011][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.395795][ T5832] veth1_macvtap: entered promiscuous mode [ 80.417836][ T5841] veth1_vlan: entered promiscuous mode [ 80.475237][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.510038][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.548529][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.558676][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.590938][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.630767][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.642622][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.650143][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.663787][ T5831] veth0_macvtap: entered promiscuous mode [ 80.686424][ T743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.710266][ T743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.720413][ T743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.733288][ T5831] veth1_macvtap: entered promiscuous mode [ 80.770495][ T743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.796841][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.814239][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.832318][ T5841] veth0_macvtap: entered promiscuous mode [ 80.911977][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.921425][ T5841] veth1_macvtap: entered promiscuous mode [ 80.942850][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.950362][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.970393][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.982792][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.054379][ T743] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.056203][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.073804][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.082956][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.132188][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.166446][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.217356][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.222498][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.229943][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.276986][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.295239][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.303783][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.383790][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.393085][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.425972][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.446582][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.478196][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.507045][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.512081][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.718072][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.751490][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.834116][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.861129][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.028501][ T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.074271][ T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.102193][ T5842] Bluetooth: hci3: command tx timeout [ 82.103548][ T5848] Bluetooth: hci2: command tx timeout [ 82.107872][ T5842] Bluetooth: hci1: command tx timeout [ 82.114607][ T5850] Bluetooth: hci0: command tx timeout [ 82.119002][ T51] Bluetooth: hci4: command tx timeout [ 82.194049][ T5971] fuse: Bad value for 'fd' [ 82.367238][ T5975] netlink: 'syz.0.1': attribute type 39 has an invalid length. [ 82.633782][ T5981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.689595][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11'. [ 83.204192][ T5995] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.471785][ T6004] fuse: Bad value for 'fd' [ 83.629853][ T6009] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 83.963254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.314899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 84.496568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.545179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.608373][ T6026] syzkaller0: entered promiscuous mode [ 84.615410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.624858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 84.639039][ T6026] syzkaller0: entered allmulticast mode [ 84.789193][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 85.159048][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.33'. [ 85.210584][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36'. [ 85.270855][ T6042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.284929][ T6042] bond0: (slave bond1): Enslaving as an active interface with an up link [ 85.325688][ T6046] bond0: entered promiscuous mode [ 85.348773][ T6046] bond_slave_0: entered promiscuous mode [ 85.362929][ T6046] bond_slave_1: entered promiscuous mode [ 85.388165][ T6046] gretap0: entered promiscuous mode [ 85.398653][ T6046] hsr1: entered promiscuous mode [ 85.953264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.056086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.284297][ T6067] tmpfs: Bad value for 'huge' [ 86.351489][ T6066] syzkaller0: entered promiscuous mode [ 86.374729][ T6066] syzkaller0: entered allmulticast mode [ 86.804576][ T6085] netlink: 11 bytes leftover after parsing attributes in process `syz.2.49'. [ 86.847641][ T803] cfg80211: failed to load regulatory.db [ 86.849855][ T6085] syzkaller0: entered promiscuous mode [ 86.860765][ T6085] syzkaller0: entered allmulticast mode [ 87.285034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 87.591714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.601061][ T6096] node ffff88804adbb9c0 offset 0 parent ffff88804adbb700 shift 0 count 64 values 0 array ffff888059ce8980 list ffff88804adbb9d8 ffff88804adbb9d8 marks 0 0 0 [ 87.718655][ T6096] ------------[ cut here ]------------ [ 87.724293][ T6096] kernel BUG at ./include/linux/xarray.h:1441! [ 87.752036][ T6096] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 87.758502][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) [ 87.768086][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.778429][ T6096] RIP: 0010:hpage_collapse_scan_file+0x4f98/0x5230 [ 87.785404][ T6096] Code: ff 4c 89 e7 48 c7 c6 80 b1 dc 8b e8 82 df f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 01 62 90 ff 48 89 df e8 69 5d 7b 09 90 <0f> 0b e8 f1 61 90 ff 48 89 df 48 c7 c6 80 b1 dc 8b e8 52 df f1 fe [ 87.805292][ T6096] RSP: 0018:ffffc90004ff7120 EFLAGS: 00010246 [ 87.811373][ T6096] RAX: 0000000000000000 RBX: ffff88804adbb9c0 RCX: e6f11c6f4a10a900 [ 87.820161][ T6096] RDX: ffffc9000f422000 RSI: 000000000000b76c RDI: 000000000000b76d [ 87.828398][ T6096] RBP: ffffc90004ff7428 R08: ffffc90004ff6ea7 R09: 1ffff920009fedd4 [ 87.836645][ T6096] R10: dffffc0000000000 R11: fffff520009fedd5 R12: ffffea0001c140f0 [ 87.844754][ T6096] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90004ff7310 [ 87.852730][ T6096] FS: 00007f89393d56c0(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 87.861669][ T6096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.868526][ T6096] CR2: 00007f46e4b4da08 CR3: 000000006449a000 CR4: 00000000003526f0 [ 87.876635][ T6096] Call Trace: [ 87.880022][ T6096] [ 87.883029][ T6096] ? hpage_collapse_scan_file+0x1c1/0x5230 [ 87.889230][ T6096] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 87.895458][ T6096] ? rcu_is_watching+0x15/0xb0 [ 87.900680][ T6096] ? __pfx___schedule+0x10/0x10 [ 87.905666][ T6096] ? lockdep_hardirqs_on+0x7a/0x110 [ 87.911236][ T6096] madvise_collapse+0x451/0xb80 [ 87.916688][ T6096] madvise_vma_behavior+0x1094/0x4460 [ 87.923711][ T6096] ? __schedule+0x167b/0x5590 [ 87.928559][ T6096] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 87.934464][ T6096] ? __pfx___schedule+0x10/0x10 [ 87.939431][ T6096] ? debug_object_assert_init+0x209/0x370 [ 87.946642][ T6096] ? irqentry_exit+0x61a/0x700 [ 87.952051][ T6096] ? lockdep_hardirqs_on+0x7a/0x110 [ 87.957951][ T6096] ? irqentry_exit+0x61a/0x700 [ 87.962827][ T6096] ? rcu_is_watching+0x15/0xb0 [ 87.967699][ T6096] ? lock_is_held_type+0x106/0x150 [ 87.973228][ T6096] ? mas_prev_slot+0xb7b/0xbf0 [ 87.978026][ T6096] ? find_vma_prev+0x123/0x1b0 [ 87.983176][ T6096] ? __pfx_find_vma_prev+0x10/0x10 [ 87.988762][ T6096] madvise_walk_vmas+0x573/0xae0 [ 87.993801][ T6096] ? irqentry_exit+0x61a/0x700 [ 87.998572][ T6096] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 88.004121][ T6096] ? blk_start_plug+0x6e/0x1b0 [ 88.008893][ T6096] madvise_do_behavior+0x386/0x540 [ 88.014241][ T6096] ? __pfx_madvise_do_behavior+0x10/0x10 [ 88.020084][ T6096] ? down_read+0x270/0x2e0 [ 88.024520][ T6096] ? madvise_lock+0x146/0x2e0 [ 88.029217][ T6096] do_madvise+0x1fa/0x2e0 [ 88.034528][ T6096] ? __pfx_do_madvise+0x10/0x10 [ 88.040755][ T6096] ? irqentry_exit+0x61a/0x700 [ 88.045904][ T6096] ? rcu_is_watching+0x15/0xb0 [ 88.050685][ T6096] __x64_sys_madvise+0xa6/0xc0 [ 88.055790][ T6096] do_syscall_64+0x14d/0xf80 [ 88.060495][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.066751][ T6096] ? clear_bhb_loop+0x40/0x90 [ 88.071429][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.077673][ T6096] RIP: 0033:0x7f893b19c799 [ 88.082366][ T6096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.102767][ T6096] RSP: 002b:00007f89393d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 88.111454][ T6096] RAX: ffffffffffffffda RBX: 00007f893b416090 RCX: 00007f893b19c799 [ 88.119691][ T6096] RDX: 0000000000000019 RSI: 0000000000600000 RDI: 0000200000000000 [ 88.127829][ T6096] RBP: 00007f893b232c99 R08: 0000000000000000 R09: 0000000000000000 [ 88.136597][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.145542][ T6096] R13: 00007f893b416128 R14: 00007f893b416090 R15: 00007ffdc633cbb8 [ 88.153625][ T6096] [ 88.156646][ T6096] Modules linked in: [ 88.167927][ T6096] ---[ end trace 0000000000000000 ]--- [ 88.204957][ T6096] RIP: 0010:hpage_collapse_scan_file+0x4f98/0x5230 [ 88.229867][ T6096] Code: ff 4c 89 e7 48 c7 c6 80 b1 dc 8b e8 82 df f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 01 62 90 ff 48 89 df e8 69 5d 7b 09 90 <0f> 0b e8 f1 61 90 ff 48 89 df 48 c7 c6 80 b1 dc 8b e8 52 df f1 fe [ 88.258957][ T6096] RSP: 0018:ffffc90004ff7120 EFLAGS: 00010246 [ 88.269476][ T6096] RAX: 0000000000000000 RBX: ffff88804adbb9c0 RCX: e6f11c6f4a10a900 [ 88.278934][ T6096] RDX: ffffc9000f422000 RSI: 000000000000b76c RDI: 000000000000b76d [ 88.288213][ T6096] RBP: ffffc90004ff7428 R08: ffffc90004ff6ea7 R09: 1ffff920009fedd4 [ 88.297212][ T6096] R10: dffffc0000000000 R11: fffff520009fedd5 R12: ffffea0001c140f0 [ 88.305738][ T6096] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90004ff7310 [ 88.314948][ T6096] FS: 00007f89393d56c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 88.325710][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.336916][ T6096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.343950][ T6096] CR2: 00007f16643e92f8 CR3: 000000006449a000 CR4: 00000000003526f0 [ 88.352380][ T6096] Kernel panic - not syncing: Fatal exception [ 88.359500][ T6096] Kernel Offset: disabled [ 88.363911][ T6096] Rebooting in 86400 seconds..