last executing test programs: 57.120009186s ago: executing program 0 (id=62): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 56.934042858s ago: executing program 0 (id=63): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x520, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x44000) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x4974}], 0x1, 0x40010040, 0x0) 56.751953529s ago: executing program 0 (id=65): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0xc5, 0xfa00, {0x3, {0x5, 0x368, "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", 0xb, 0x1, 0x5, 0xbc, 0x0, 0xae, 0x0, 0x1}}}, 0x128) 56.655550623s ago: executing program 0 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 56.486756607s ago: executing program 0 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.150757227s ago: executing program 0 (id=70): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x401) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree_skb\x00', r1, 0x0, 0x5}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) 55.622725998s ago: executing program 32 (id=70): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x401) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree_skb\x00', r1, 0x0, 0x5}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) 49.172561957s ago: executing program 1 (id=104): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8a002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) syz_io_uring_setup(0x5ca0, &(0x7f00000002c0)={0x0, 0xc3e5, 0x10, 0x2, 0x268}, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000009, 0x9, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x2, 0x1, 0x3], 0x5000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.970254773s ago: executing program 1 (id=105): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 47.462482512s ago: executing program 1 (id=116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1a4a, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="8a", 0x1, 0x8001, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) sendto$unix(r1, &(0x7f00000000c0)="a65c3dd209", 0x5, 0xc804, 0x0, 0x0) 46.938966947s ago: executing program 1 (id=120): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 46.170881642s ago: executing program 1 (id=123): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001"], 0x74}}, 0x0) 45.645770972s ago: executing program 1 (id=126): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffbfef}]}) fsync(r0) 45.043329173s ago: executing program 33 (id=126): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffbfef}]}) fsync(r0) 14.80689313s ago: executing program 4 (id=349): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) 14.364953767s ago: executing program 4 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0xa}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(&(0x7f0000000980)='encrypted\x00', &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)='})\x00', 0x0) 14.162455498s ago: executing program 2 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r2, &(0x7f0000000300)="240000001a005f03e494d9ecfd8900a9c4244b4b0a150c000800e6331d8ddcccfe66fcd7", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/6, 0x6}, 0x3}], 0x1, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) 12.744477491s ago: executing program 4 (id=359): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r0, 0x1, 0x9, &(0x7f00000019c0)=""/235, &(0x7f0000001ac0)=0xeb) 11.130501117s ago: executing program 2 (id=362): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x3, 0x0, &(0x7f0000000700)="f8ad48", 0x0, 0x8000000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) r7 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r7, 0x16, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x3, 0x9, 0x6) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007f8000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 7.813964602s ago: executing program 3 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000080)=r0}, 0x20) 7.375296719s ago: executing program 6 (id=378): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 7.025904378s ago: executing program 3 (id=379): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADDR_RESOLV_ENABLE={{0x15}, 0xa}}}, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) 6.997400277s ago: executing program 6 (id=380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) writev(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x20042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x6, 0x100000000000001, 0x8000000004007, 0xac, 0x800, 0x4, {0x0, 0x4, 0x6218, 0x40000000005, 0x4000000000085, 0xd614, 0x9, 0x7fffffff, 0xfffffffa, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x8}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000300)={@mcast2}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, 0x0, 0x20008000) madvise(&(0x7f0000275000/0x2000)=nil, 0xffffffffdfd8afff, 0x15) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) 6.838108332s ago: executing program 3 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203030902120001"], 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.517617724s ago: executing program 6 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) write(r3, &(0x7f00000000c0)="510003000000", 0x6) 5.433891027s ago: executing program 4 (id=385): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f0000000000)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800}}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) sendto$inet(r0, 0x0, 0x0, 0x48015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0x2, 0x10, 0x4000000, 0x5}, 0x14) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) creat(&(0x7f0000000500)='./bus\x00', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="f64d6fb086eba6b8bf9449b0122330eb84499835b53e328c", 0x18}], 0x1}}], 0x1, 0x8000) 4.309580394s ago: executing program 5 (id=386): capset(&(0x7f0000000000)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.948993899s ago: executing program 2 (id=387): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0x0) 3.770578471s ago: executing program 6 (id=388): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0xc4) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000200)={0x2080025, 0xa5a, 0x4, 0x679, 0x3ffffffc}) 3.770243921s ago: executing program 3 (id=389): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@mcast1, @empty, @private0, 0xb, 0x8000, 0x40, 0x400, 0x5, 0x1880012}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000480)="545ff50883b2c08bdafcb4ea390f6ffedbad8920794d45e88c804277ec0870be104e16d074532001a5c2526baa0bd0f6823dcc71cc89474ecf8fc3dcf97936cb3175ae6f237679b985c52618713a584236c8377beda05d408605c29661ac6376559fa843915253ab324efc7a51897cfa80ddcb937a832e0dbd39be1afcb5125b2885a80cd5e8a2b4c3ccf98dc3da350c0fd9a2220d72d825f9b282367d7305d79953a0bf297916954967aae7bfc3fd1bce8f9eeec764bf9bedb1b7664f7b1ad0b55609cb1443704a4b87f2b5276876ef10f0811f", 0xd4}, {&(0x7f0000000300)="e783fb7c01", 0x5}, {&(0x7f0000000580)="fd5c3162d85db98fb34e79ef61027eb3e3992724d0b84b03a5b50d8b0221536a528a7af590641c160aeef854f4473f10adbbfa8ca9502fc0af65d6c9d8912fae15841a168e9f58deb9cf01866a208274006a9557b3cf0fbf75e7918d782f30980d9da4e23b8780b8201f1cded6b39d0dd82c8cabee2ab7d8199e004d5da1a44b4928b9e9961522039de5f57d56bab9e2752e15e3b3d328a6af9d16bcebaeaf3e583a32c7f1945dd5543e1782e50e174f0095cd4b671a8f10ba8355e904f1748fa2", 0xc1}], 0x3, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x60}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000001c0)={0x1, 0x4, 0x7}) tkill(r2, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x1, 0x5ef, &(0x7f0000000d80)="$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") socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xc0d80) socket$inet_tcp(0x2, 0x1, 0x0) 3.689979073s ago: executing program 5 (id=390): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000100)="fb4dfffc", 0x4) 3.588108944s ago: executing program 5 (id=391): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) 3.34576994s ago: executing program 2 (id=392): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) 3.279369297s ago: executing program 5 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) iopl(0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(r0, 0x190) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioperm(0x0, 0x1, 0x1) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/1, 0x1) read(r2, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x1c, r3, 0x321, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xdffffffc], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x7fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) 3.200893755s ago: executing program 6 (id=394): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0xa}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = request_key(&(0x7f0000000980)='encrypted\x00', &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)='})\x00', 0x0) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) socket$netlink(0x10, 0x3, 0x0) r6 = io_uring_setup(0x27d1, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000020000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="280002030c000e0000000000800008000a00000000000000004ebdb8f79a0000000000000052a59f1a83ea81008dc056965cd420d70153fd7238da81ee4d6d339608dcd2f92a177d4f4b23e7c2fe66484137d25fed57b1f3b6ac54fcd83731b3feb77ffbc9e9b4baadd4d96d1520755e33310843acf7286afc4e8c5049704320153ce9cfe896828ebd3a1649acbbfd9204ec519ac2483ebf1fdc030fa447284936b53aff"], 0x38}}, 0x0) 2.950427476s ago: executing program 2 (id=395): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/54, 0x36) getdents64(r0, 0xfffffffffffffffe, 0x29) 2.428054741s ago: executing program 4 (id=396): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f0000000340)={'tunl0\x00', 0x0}) 2.349997883s ago: executing program 5 (id=397): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r2, 0x25, 0x0, @val=@tracing}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd8bc}}}}}, 0x0) 738.281869ms ago: executing program 6 (id=398): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 704.186145ms ago: executing program 5 (id=399): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0xfa09c4119783e9d) io_setup(0x8, 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000a1000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 368.820286ms ago: executing program 3 (id=400): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255, 0x0, 0x2, 0x2bd}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000500)=[@uexit={0x0, 0x18, 0x5}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @in_dx={0x69, 0x20, {0xe38b, 0x6}}, @wrmsr={0x1e, 0x20, {0x3fa, 0x2}}], 0x78}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) 170.342677ms ago: executing program 4 (id=401): capset(&(0x7f0000000000)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000020feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000051000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 55.406043ms ago: executing program 2 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd2(0x1ff, 0x80001) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000000)={0x1, r5}) r6 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000480)=r6) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) 0s ago: executing program 3 (id=403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x1, 0x700}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. [ 79.380118][ T5813] cgroup: Unknown subsys name 'net' [ 79.546985][ T5813] cgroup: Unknown subsys name 'cpuset' [ 79.556835][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.085036][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.604506][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.620291][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.630494][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.644432][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.658522][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.661511][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.667255][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.675108][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.683765][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.692084][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.707414][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.710738][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.717052][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.734164][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.734185][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.735434][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.754211][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.768683][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.778654][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.787175][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.787772][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.813687][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.824478][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.853760][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.862693][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.557178][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 84.625123][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 84.728774][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 84.794729][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 84.894356][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 85.002494][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.011482][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.021606][ T5826] bridge_slave_0: entered allmulticast mode [ 85.031226][ T5826] bridge_slave_0: entered promiscuous mode [ 85.073151][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.081146][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.091419][ T5832] bridge_slave_0: entered allmulticast mode [ 85.101022][ T5832] bridge_slave_0: entered promiscuous mode [ 85.108701][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.121360][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.132175][ T5826] bridge_slave_1: entered allmulticast mode [ 85.139801][ T5826] bridge_slave_1: entered promiscuous mode [ 85.182959][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.190909][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.198695][ T5832] bridge_slave_1: entered allmulticast mode [ 85.206592][ T5832] bridge_slave_1: entered promiscuous mode [ 85.253204][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.263646][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.273018][ T5827] bridge_slave_0: entered allmulticast mode [ 85.281237][ T5827] bridge_slave_0: entered promiscuous mode [ 85.347303][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.356452][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.365007][ T5827] bridge_slave_1: entered allmulticast mode [ 85.373031][ T5827] bridge_slave_1: entered promiscuous mode [ 85.398604][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.451533][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.465148][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.476104][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.484382][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.494834][ T5829] bridge_slave_0: entered allmulticast mode [ 85.503137][ T5829] bridge_slave_0: entered promiscuous mode [ 85.511625][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.519251][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.527291][ T5834] bridge_slave_0: entered allmulticast mode [ 85.536915][ T5834] bridge_slave_0: entered promiscuous mode [ 85.560740][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.583925][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.592174][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.600068][ T5829] bridge_slave_1: entered allmulticast mode [ 85.607925][ T5829] bridge_slave_1: entered promiscuous mode [ 85.615868][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.625746][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.635080][ T5834] bridge_slave_1: entered allmulticast mode [ 85.642511][ T5834] bridge_slave_1: entered promiscuous mode [ 85.652859][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.714834][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.740141][ T5826] team0: Port device team_slave_0 added [ 85.778497][ T5149] Bluetooth: hci0: command tx timeout [ 85.796393][ T5832] team0: Port device team_slave_0 added [ 85.805387][ T5826] team0: Port device team_slave_1 added [ 85.815072][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.829102][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.854901][ T5835] Bluetooth: hci1: command tx timeout [ 85.856067][ T5832] team0: Port device team_slave_1 added [ 85.861597][ T5149] Bluetooth: hci3: command tx timeout [ 85.884217][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.898534][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.910985][ T5827] team0: Port device team_slave_0 added [ 85.933731][ T5149] Bluetooth: hci2: command tx timeout [ 85.933787][ T5835] Bluetooth: hci4: command tx timeout [ 85.975855][ T5827] team0: Port device team_slave_1 added [ 85.995556][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.004545][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.034357][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.082750][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.091264][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.119999][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.135554][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.143390][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.173645][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.187625][ T5829] team0: Port device team_slave_0 added [ 86.195894][ T5834] team0: Port device team_slave_0 added [ 86.216126][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.224227][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.253064][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.278487][ T5829] team0: Port device team_slave_1 added [ 86.286661][ T5834] team0: Port device team_slave_1 added [ 86.295555][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.303306][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.334373][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.381749][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.390613][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.421160][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.480738][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.489123][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.518347][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.531050][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.539677][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.568368][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.626270][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.635387][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.664586][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.677818][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.685595][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.715430][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.734870][ T5826] hsr_slave_0: entered promiscuous mode [ 86.741846][ T5826] hsr_slave_1: entered promiscuous mode [ 86.795920][ T5832] hsr_slave_0: entered promiscuous mode [ 86.803026][ T5832] hsr_slave_1: entered promiscuous mode [ 86.810225][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 86.816830][ T5832] Cannot create hsr debugfs directory [ 86.869391][ T5827] hsr_slave_0: entered promiscuous mode [ 86.876767][ T5827] hsr_slave_1: entered promiscuous mode [ 86.883421][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 86.890896][ T5827] Cannot create hsr debugfs directory [ 86.975360][ T5829] hsr_slave_0: entered promiscuous mode [ 86.982834][ T5829] hsr_slave_1: entered promiscuous mode [ 86.989929][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 86.995966][ T5829] Cannot create hsr debugfs directory [ 87.060231][ T5834] hsr_slave_0: entered promiscuous mode [ 87.071050][ T5834] hsr_slave_1: entered promiscuous mode [ 87.080909][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 87.087558][ T5834] Cannot create hsr debugfs directory [ 87.613418][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.638699][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.650653][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.676867][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.761989][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.777557][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.807983][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.821123][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.859021][ T5835] Bluetooth: hci0: command tx timeout [ 87.931771][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.939445][ T5835] Bluetooth: hci3: command tx timeout [ 87.939488][ T5835] Bluetooth: hci1: command tx timeout [ 87.967126][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.983219][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.014233][ T5835] Bluetooth: hci4: command tx timeout [ 88.020015][ T5149] Bluetooth: hci2: command tx timeout [ 88.026471][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.150006][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.162890][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.175868][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.187648][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.278648][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.344943][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.365028][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.383183][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.397022][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.417579][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.445820][ T4068] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.454925][ T4068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.498195][ T4068] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.508670][ T4068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.557572][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.638943][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.671911][ T4068] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.679491][ T4068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.704368][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.727469][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.735566][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.810432][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.833269][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.877615][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.886144][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.928023][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.935909][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.967277][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.997709][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.005425][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.041728][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.050278][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.132013][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.216276][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.250176][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.257726][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.310007][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.368075][ T4068] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.376557][ T4068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.622111][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.655802][ T5826] veth0_vlan: entered promiscuous mode [ 89.699966][ T5826] veth1_vlan: entered promiscuous mode [ 89.796491][ T5826] veth0_macvtap: entered promiscuous mode [ 89.838821][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.850653][ T5826] veth1_macvtap: entered promiscuous mode [ 89.905810][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.933762][ T5149] Bluetooth: hci0: command tx timeout [ 89.977574][ T5827] veth0_vlan: entered promiscuous mode [ 90.006054][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.023792][ T5149] Bluetooth: hci1: command tx timeout [ 90.023799][ T5835] Bluetooth: hci3: command tx timeout [ 90.029891][ T5827] veth1_vlan: entered promiscuous mode [ 90.052606][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.076999][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.095111][ T5149] Bluetooth: hci2: command tx timeout [ 90.095121][ T5835] Bluetooth: hci4: command tx timeout [ 90.110603][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.140751][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.171274][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.197920][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.275307][ T5832] veth0_vlan: entered promiscuous mode [ 90.319105][ T5834] veth0_vlan: entered promiscuous mode [ 90.377733][ T5832] veth1_vlan: entered promiscuous mode [ 90.427125][ T5834] veth1_vlan: entered promiscuous mode [ 90.439367][ T5827] veth0_macvtap: entered promiscuous mode [ 90.454936][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.463352][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.500201][ T5827] veth1_macvtap: entered promiscuous mode [ 90.550203][ T5832] veth0_macvtap: entered promiscuous mode [ 90.575231][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.584885][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.586944][ T5832] veth1_macvtap: entered promiscuous mode [ 90.646640][ T5834] veth0_macvtap: entered promiscuous mode [ 90.659100][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.676560][ T5834] veth1_macvtap: entered promiscuous mode [ 90.695295][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.718534][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.750817][ T2974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.776787][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.821158][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.833417][ T2974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.850017][ T2974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.862443][ T5829] veth0_vlan: entered promiscuous mode [ 90.881497][ T2974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.894767][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.918817][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.968989][ T5829] veth1_vlan: entered promiscuous mode [ 90.982537][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.994035][ T5951] loop2: detected capacity change from 0 to 512 [ 90.994703][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.029374][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.041947][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.062362][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.087713][ T5951] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.100626][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.119553][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.137184][ T5951] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 91.164050][ T5951] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.6: Corrupt directory, running e2fsck is recommended [ 91.187030][ T5951] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 91.202685][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.203844][ T5951] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.6: corrupted in-inode xattr: e_name out of bounds [ 91.236342][ T5951] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6: couldn't read orphan inode 15 (err -117) [ 91.257882][ T5951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.314611][ T5951] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #2: block 3: comm syz.2.6: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 91.356816][ T5951] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #2: comm syz.2.6: directory missing '.' [ 91.397056][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.409541][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.411701][ T5829] veth0_macvtap: entered promiscuous mode [ 91.449462][ T5829] veth1_macvtap: entered promiscuous mode [ 91.465417][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.586144][ T5956] loop2: detected capacity change from 0 to 128 [ 91.600355][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.612285][ T5956] ======================================================= [ 91.612285][ T5956] WARNING: The mand mount option has been deprecated and [ 91.612285][ T5956] and is ignored by this kernel. Remove the mand [ 91.612285][ T5956] option from the mount to silence this warning. [ 91.612285][ T5956] ======================================================= [ 91.614639][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.668604][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.682387][ T5956] EXT4-fs (loop2): Test dummy encryption mode enabled [ 91.705982][ T5956] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.723141][ T5956] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.749878][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.759777][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.833629][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.834304][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.848789][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.893294][ T2974] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.907670][ T2974] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.936936][ T2974] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.949541][ T2974] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.020277][ T5149] Bluetooth: hci0: command tx timeout [ 92.029417][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.060026][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.095418][ T5149] Bluetooth: hci3: command tx timeout [ 92.102520][ T5149] Bluetooth: hci1: command tx timeout [ 92.127149][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.161672][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.175908][ T5149] Bluetooth: hci2: command tx timeout [ 92.177172][ T5835] Bluetooth: hci4: command tx timeout [ 92.291293][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.315128][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.420476][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.485529][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.536898][ T5967] loop1: detected capacity change from 0 to 128 [ 92.626197][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.129512][ T5979] loop4: detected capacity change from 0 to 128 [ 93.179229][ T5979] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 93.312199][ T5979] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 93.373790][ T5979] FAT-fs (loop4): Filesystem has been set read-only [ 93.416622][ T5979] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 93.997106][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 94.240844][ T5996] nbd: socks must be embedded in a SOCK_ITEM attr [ 94.275152][ T5889] block nbd64: NBD_DISCONNECT [ 94.772887][ T6002] loop0: detected capacity change from 0 to 4096 [ 94.782673][ T6009] fuseblk: Bad value for 'fd' [ 94.825448][ T5902] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.842816][ T6002] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 94.943039][ T6002] ntfs3(loop0): ino=1a, mi_enum_attr [ 94.980900][ T6002] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 95.028308][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 95.070478][ T5902] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 95.090951][ T5902] usb 2-1: config 0 has no interface number 0 [ 95.121458][ T5902] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.166956][ T5902] usb 2-1: config 0 interface 85 has no altsetting 0 [ 95.203071][ T5902] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 95.264120][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.302842][ T5902] usb 2-1: Product: syz [ 95.314942][ T5902] usb 2-1: Manufacturer: syz [ 95.332813][ T6013] loop2: detected capacity change from 0 to 512 [ 95.340146][ T5902] usb 2-1: SerialNumber: syz [ 95.347481][ T6017] sd 0:0:1:0: device reset [ 95.375083][ T6013] EXT4-fs: Ignoring removed oldalloc option [ 95.403397][ T5902] usb 2-1: config 0 descriptor?? [ 95.438036][ T6013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.672020][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.731708][ T6023] syz_tun: entered allmulticast mode [ 95.764817][ T6021] syz_tun: left allmulticast mode [ 95.918059][ T5902] appletouch 2-1:0.85: Geyser mode initialized. [ 95.922819][ T6030] loop4: detected capacity change from 0 to 512 [ 95.955771][ T6030] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.970068][ T5902] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5 [ 96.014413][ T6030] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.137363][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 96.162336][ T6028] loop0: detected capacity change from 0 to 8192 [ 96.185951][ T6030] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.200157][ T5902] usb 2-1: USB disconnect, device number 2 [ 96.278132][ T6030] EXT4-fs (loop4): 1 truncate cleaned up [ 96.290568][ T6030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.360670][ T6030] EXT4-fs (loop4): shut down requested (1) [ 96.421197][ T5902] appletouch 2-1:0.85: input: appletouch disconnected [ 96.476482][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.508817][ T6039] loop2: detected capacity change from 0 to 764 [ 96.571114][ T6039] rock: directory entry would overflow storage [ 96.597490][ T6039] rock: sig=0x4f50, size=4, remaining=3 [ 96.624681][ T6039] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 96.878010][ T6042] fuseblk: Bad value for 'fd' [ 97.150334][ T6046] Zero length message leads to an empty skb [ 97.245480][ T6057] loop1: detected capacity change from 0 to 16 [ 97.330198][ T6057] erofs (device loop1): mounted with root inode @ nid 36. [ 97.484786][ T10] cfg80211: failed to load regulatory.db [ 97.742290][ T6069] netlink: 188 bytes leftover after parsing attributes in process `syz.1.43'. [ 97.783078][ T6069] netlink: 'syz.1.43': attribute type 5 has an invalid length. [ 97.922092][ T6076] loop3: detected capacity change from 0 to 64 [ 98.083290][ T6080] fuseblk: Bad value for 'fd' [ 98.344108][ T5971] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.444576][ T6093] loop1: detected capacity change from 0 to 1024 [ 98.517420][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.539625][ T5971] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 98.551029][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.585584][ T5971] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 98.609156][ T5971] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 98.617657][ T5971] usb 5-1: Manufacturer: syz [ 98.634950][ T5971] usb 5-1: config 0 descriptor?? [ 98.787058][ T153] hfsplus: b-tree write err: -5, ino 4 [ 98.808854][ T5971] rc_core: IR keymap rc-hauppauge not found [ 98.821494][ T5971] Registered IR keymap rc-empty [ 98.842225][ T5971] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 98.949035][ T5971] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 98.975411][ T6103] netlink: 'syz.1.57': attribute type 5 has an invalid length. [ 99.024386][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.166892][ T6110] loop1: detected capacity change from 0 to 128 [ 99.215884][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.287997][ T6110] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.315287][ T6110] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.317903][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.359663][ T6108] loop0: detected capacity change from 0 to 4096 [ 99.406745][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 99.417289][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 99.428287][ T10] usb 4-1: Manufacturer: syz [ 99.440128][ T10] usb 4-1: config 0 descriptor?? [ 99.442639][ T6108] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 99.461161][ T5998] usb 5-1: USB disconnect, device number 2 [ 99.554330][ T5827] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.555682][ T6108] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 99.843162][ T6105] loop2: detected capacity change from 0 to 32768 [ 99.881138][ T6105] (syz.2.58,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 99.914893][ T6115] loop1: detected capacity change from 0 to 2048 [ 99.962362][ T6105] (syz.2.58,6105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.038323][ T6115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.151730][ T6105] JBD2: Ignoring recovery information on journal [ 100.171813][ T6126] loop4: detected capacity change from 0 to 128 [ 100.234581][ T6115] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 100.257637][ T6126] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.298021][ T10] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 100.340163][ T6126] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.358292][ T6105] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 100.462696][ T5829] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.507152][ T10] usb 4-1: USB disconnect, device number 2 [ 100.654919][ T6134] netlink: 104 bytes leftover after parsing attributes in process `syz.4.68'. [ 100.730757][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.732866][ T5826] ocfs2: Unmounting device (7,2) on (node local) [ 100.888008][ T3492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.192549][ T3492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.228633][ T6136] loop1: detected capacity change from 0 to 32768 [ 101.240908][ T6136] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.71 (6136) [ 101.268220][ T6136] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.280035][ T6136] BTRFS info (device loop1): using blake2b checksum algorithm [ 101.482299][ T6136] BTRFS info (device loop1): enabling ssd optimizations [ 101.489739][ T6136] BTRFS info (device loop1): turning on async discard [ 101.497903][ T6136] BTRFS info (device loop1): enabling free space tree [ 101.505038][ T6136] BTRFS info (device loop1): use zlib compression, level 3 [ 101.507152][ T3492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.654497][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.745682][ T5827] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.788493][ T3492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.824141][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 101.847222][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.868296][ T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.885761][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.888287][ T6164] loop2: detected capacity change from 0 to 2048 [ 101.900851][ T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.908858][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 101.926137][ T10] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 101.937412][ T10] usb 5-1: Product: syz [ 101.942196][ T10] usb 5-1: Manufacturer: syz [ 101.948967][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.978815][ T10] hub 5-1:4.0: USB hub found [ 101.991013][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.002379][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.098946][ T6164] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.182237][ T10] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 102.282142][ T10] usb 5-1: USB disconnect, device number 3 [ 102.304309][ T6168] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.625877][ T3492] bridge_slave_1: left allmulticast mode [ 102.638395][ T3492] bridge_slave_1: left promiscuous mode [ 102.648935][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.685480][ T3492] bridge_slave_0: left allmulticast mode [ 102.692132][ T3492] bridge_slave_0: left promiscuous mode [ 102.703757][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.750930][ T6176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'. [ 102.809490][ T5998] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.977014][ T5998] usb 4-1: Using ep0 maxpacket: 32 [ 103.038711][ T5998] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.064536][ T5998] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 103.078861][ T5998] usb 4-1: can't read configurations, error -71 [ 103.162147][ T6185] loop2: detected capacity change from 0 to 128 [ 103.315415][ T30] audit: type=1326 audit(1766715610.126:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbd8f749 code=0x7ffc0000 [ 103.320724][ T6188] syz.2.81: attempt to access beyond end of device [ 103.320724][ T6188] loop2: rw=2049, sector=145, nr_sectors = 384 limit=128 [ 103.348842][ T30] audit: type=1326 audit(1766715610.126:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbd8f749 code=0x7ffc0000 [ 103.365851][ T6188] syz.2.81: attempt to access beyond end of device [ 103.365851][ T6188] loop2: rw=2049, sector=537, nr_sectors = 8 limit=128 [ 103.427985][ T6185] syz.2.81: attempt to access beyond end of device [ 103.427985][ T6185] loop2: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 103.438756][ T6188] syz.2.81: attempt to access beyond end of device [ 103.438756][ T6188] loop2: rw=2049, sector=553, nr_sectors = 8 limit=128 [ 103.455082][ T30] audit: type=1326 audit(1766715610.126:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f11dbd8f749 code=0x7ffc0000 [ 103.491063][ T6188] syz.2.81: attempt to access beyond end of device [ 103.491063][ T6188] loop2: rw=2049, sector=569, nr_sectors = 8 limit=128 [ 103.508984][ T6185] syz.2.81: attempt to access beyond end of device [ 103.508984][ T6185] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 103.527876][ T6188] syz.2.81: attempt to access beyond end of device [ 103.527876][ T6188] loop2: rw=2049, sector=585, nr_sectors = 8 limit=128 [ 103.535113][ T6185] syz.2.81: attempt to access beyond end of device [ 103.535113][ T6185] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 103.547234][ T30] audit: type=1326 audit(1766715610.126:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbd8f749 code=0x7ffc0000 [ 103.562843][ T6185] syz.2.81: attempt to access beyond end of device [ 103.562843][ T6185] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 103.583993][ T6188] syz.2.81: attempt to access beyond end of device [ 103.583993][ T6188] loop2: rw=2049, sector=601, nr_sectors = 8 limit=128 [ 103.627058][ T30] audit: type=1326 audit(1766715610.126:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbd8f749 code=0x7ffc0000 [ 103.655526][ T30] audit: type=1326 audit(1766715610.126:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f11dbd8f749 code=0x7ffc0000 [ 103.701413][ T30] audit: type=1326 audit(1766715610.126:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbd8f749 code=0x7ffc0000 [ 103.876112][ T30] audit: type=1326 audit(1766715610.126:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11dbd8f749 code=0x7ffc0000 [ 103.923665][ T30] audit: type=1326 audit(1766715610.126:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbd8f749 code=0x7ffc0000 [ 103.955578][ T30] audit: type=1326 audit(1766715610.126:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11dbd8f749 code=0x7ffc0000 [ 104.041340][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.065489][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.089545][ T3492] bond0 (unregistering): Released all slaves [ 104.103605][ T5149] Bluetooth: hci4: command tx timeout [ 104.187888][ T6182] netlink: 'syz.2.81': attribute type 29 has an invalid length. [ 104.424440][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 104.639771][ T6212] loop4: detected capacity change from 0 to 256 [ 104.652124][ T6210] loop2: detected capacity change from 0 to 4096 [ 104.707864][ T6210] ntfs3(loop2): ino=1a, mi_enum_attr [ 104.770904][ T6212] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 105.046941][ T6216] loop3: detected capacity change from 0 to 4096 [ 105.082541][ T6222] loop1: detected capacity change from 0 to 512 [ 105.147966][ T6222] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 105.161328][ T6222] EXT4-fs (loop1): invalid journal inode [ 105.168667][ T6222] EXT4-fs (loop1): can't get journal size [ 105.202648][ T6222] EXT4-fs (loop1): 1 truncate cleaned up [ 105.229736][ T6212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.294791][ T6222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.648934][ T6212] bond1 (unregistering): Released all slaves [ 105.697796][ T3492] hsr_slave_0: left promiscuous mode [ 105.715936][ T3492] hsr_slave_1: left promiscuous mode [ 105.763603][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.774209][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.812313][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.818265][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.830492][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.882174][ T6232] loop1: detected capacity change from 0 to 64 [ 105.922267][ T3492] veth1_macvtap: left promiscuous mode [ 105.943413][ T3492] veth0_macvtap: left promiscuous mode [ 105.952151][ T6232] Trying to free block not in datazone [ 105.960428][ T3492] veth1_vlan: left promiscuous mode [ 105.973346][ T3492] veth0_vlan: left promiscuous mode [ 106.233837][ T5149] Bluetooth: hci4: command tx timeout [ 106.400081][ T6234] loop1: detected capacity change from 0 to 32768 [ 106.409318][ T6234] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.100 (6234) [ 106.436789][ T6234] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 106.448353][ T6234] BTRFS info (device loop1): using blake2b checksum algorithm [ 106.628190][ T6234] BTRFS info (device loop1): enabling ssd optimizations [ 106.635672][ T6234] BTRFS info (device loop1): turning on async discard [ 106.643157][ T6234] BTRFS info (device loop1): enabling free space tree [ 106.650693][ T6234] BTRFS info (device loop1): use zlib compression, level 3 [ 106.784365][ T6252] capability: warning: `syz.3.101' uses deprecated v2 capabilities in a way that may be insecure [ 107.137572][ T5827] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 107.267782][ T6257] binder: 6256:6257 ioctl 4018620d 0 returned -22 [ 107.528301][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 107.571478][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 108.155220][ T6162] chnl_net:caif_netlink_parms(): no params data found [ 108.164424][ T5998] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.253754][ T5149] Bluetooth: hci4: command tx timeout [ 108.364867][ T5998] usb 2-1: Using ep0 maxpacket: 32 [ 108.386324][ T5998] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.409382][ T5998] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.428338][ T5998] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.445425][ T5998] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 108.461306][ T5998] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 108.477975][ T5998] usb 2-1: Product: syz [ 108.482801][ T5998] usb 2-1: Manufacturer: syz [ 108.496355][ T5998] usb 2-1: SerialNumber: syz [ 108.514699][ T5998] usb 2-1: config 0 descriptor?? [ 108.749219][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 108.793649][ T5998] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 108.821603][ T5998] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 108.874532][ T5998] usb 2-1: USB disconnect, device number 3 [ 109.017626][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.043738][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.064884][ T6162] bridge_slave_0: entered allmulticast mode [ 109.105598][ T6162] bridge_slave_0: entered promiscuous mode [ 109.131428][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.174707][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.182855][ T6162] bridge_slave_1: entered allmulticast mode [ 109.218117][ T6162] bridge_slave_1: entered promiscuous mode [ 109.408684][ T6299] loop4: detected capacity change from 0 to 4096 [ 109.464813][ T6162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.517582][ T6162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.579111][ T6305] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.736083][ T6162] team0: Port device team_slave_0 added [ 109.771128][ T6162] team0: Port device team_slave_1 added [ 109.950823][ T6162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.980580][ T6162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.031986][ T6315] loop1: detected capacity change from 0 to 512 [ 110.049607][ T6317] loop4: detected capacity change from 0 to 128 [ 110.063762][ T6315] EXT4-fs (loop1): Test dummy encryption mode enabled [ 110.081500][ T6292] loop3: detected capacity change from 0 to 32768 [ 110.089088][ T6315] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.103294][ T6162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.121601][ T6292] (syz.3.112,6292,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.154247][ T6292] (syz.3.112,6292,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.164276][ T6162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.183727][ T6162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.205673][ T6315] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.120: bad orphan inode 131083 [ 110.213934][ T6162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.267589][ T6317] bio_check_eod: 3579 callbacks suppressed [ 110.267609][ T6317] syz.4.121: attempt to access beyond end of device [ 110.267609][ T6317] loop4: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 110.291287][ T6315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.344081][ T5149] Bluetooth: hci4: command tx timeout [ 110.360292][ T6292] JBD2: Ignoring recovery information on journal [ 110.372182][ T6317] syz.4.121: attempt to access beyond end of device [ 110.372182][ T6317] loop4: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 110.419246][ T6317] Buffer I/O error on dev loop4, logical block 87, lost async page write [ 110.431162][ T6315] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 110.487176][ T6317] syz.4.121: attempt to access beyond end of device [ 110.487176][ T6317] loop4: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 110.503402][ T6317] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 110.521224][ T6315] overlayfs: upper fs needs to support d_type. [ 110.535287][ T6292] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.553337][ T6315] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 110.570174][ T6317] syz.4.121: attempt to access beyond end of device [ 110.570174][ T6317] loop4: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 110.597814][ T6162] hsr_slave_0: entered promiscuous mode [ 110.622506][ T6162] hsr_slave_1: entered promiscuous mode [ 110.651238][ T6162] debugfs: 'hsr0' already exists in 'hsr' [ 110.668327][ T5827] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /26/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 110.680038][ T6162] Cannot create hsr debugfs directory [ 110.716247][ T6317] syz.4.121: attempt to access beyond end of device [ 110.716247][ T6317] loop4: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 110.778341][ T6317] Buffer I/O error on dev loop4, logical block 91, lost async page write [ 110.821187][ T6317] syz.4.121: attempt to access beyond end of device [ 110.821187][ T6317] loop4: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 110.867033][ T6317] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 111.050993][ T5832] ocfs2: Unmounting device (7,3) on (node local) [ 111.099859][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.410951][ T3456] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.709794][ T3456] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.886703][ T3456] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.906602][ T5971] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.945407][ T6349] loop2: detected capacity change from 0 to 1024 [ 111.966452][ T6349] EXT4-fs: Ignoring removed orlov option [ 112.053116][ T6349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.069472][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.083264][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.105298][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.118168][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.131283][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.134048][ T5971] usb 4-1: Using ep0 maxpacket: 16 [ 112.207437][ T3456] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.233069][ T5971] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.289544][ T5971] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 112.310377][ T5971] usb 4-1: config 1 has no interface number 0 [ 112.318671][ T5971] usb 4-1: config 1 interface 138 altsetting 252 bulk endpoint 0xC has invalid maxpacket 16 [ 112.331457][ T5971] usb 4-1: config 1 interface 138 has no altsetting 0 [ 112.347824][ T5971] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 112.386054][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.393781][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.420262][ T5971] usb 4-1: Product: syz [ 112.443870][ T5971] usb 4-1: Manufacturer: syz [ 112.451279][ T5971] usb 4-1: SerialNumber: syz [ 112.508671][ T6342] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.795656][ T5971] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.814591][ T6370] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 112.829079][ T6162] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.899282][ T6162] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.007047][ T5971] usb 4-1: USB disconnect, device number 5 [ 113.088476][ T6162] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.149777][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.169610][ T6162] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.485085][ T6396] loop4: detected capacity change from 0 to 128 [ 113.525682][ T3456] bridge_slave_1: left allmulticast mode [ 113.532540][ T3456] bridge_slave_1: left promiscuous mode [ 113.594804][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.690765][ T3456] bridge_slave_0: left allmulticast mode [ 113.736736][ T3456] bridge_slave_0: left promiscuous mode [ 113.753143][ T6402] loop3: detected capacity change from 0 to 256 [ 113.799787][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.847024][ T6402] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.943963][ T6407] loop2: detected capacity change from 0 to 2048 [ 113.998288][ T6409] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.136254][ T6402] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 114.158089][ T6402] FAT-fs (loop3): Filesystem has been set read-only [ 114.174916][ T5149] Bluetooth: hci0: command tx timeout [ 114.574809][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.586937][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.598606][ T3456] bond0 (unregistering): Released all slaves [ 115.004801][ T6351] chnl_net:caif_netlink_parms(): no params data found [ 115.074104][ T3456] hsr_slave_0: left promiscuous mode [ 115.099601][ T3456] hsr_slave_1: left promiscuous mode [ 115.117084][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.126866][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.136116][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.144872][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.182736][ T3456] veth1_macvtap: left promiscuous mode [ 115.205080][ T3456] veth0_macvtap: left promiscuous mode [ 115.222635][ T3456] veth1_vlan: left promiscuous mode [ 115.236556][ T3456] veth0_vlan: left promiscuous mode [ 115.935921][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.123682][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 116.142128][ T10] usb 5-1: config 0 has no interfaces? [ 116.158782][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.184757][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.211475][ T10] usb 5-1: config 0 descriptor?? [ 116.253554][ T5149] Bluetooth: hci0: command tx timeout [ 116.440804][ T6449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'. [ 116.521664][ T6474] loop3: detected capacity change from 0 to 4096 [ 116.537207][ T6474] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 116.575855][ T6474] ntfs3(loop3): ino=1a, mi_enum_attr [ 116.581877][ T6474] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 116.599923][ T6474] ntfs3(loop3): ino=1a, mi_enum_attr [ 116.606636][ T6474] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 116.638382][ T6474] netlink: 14 bytes leftover after parsing attributes in process `syz.3.160'. [ 116.778950][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 116.826648][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 117.445888][ T57] usb 5-1: USB disconnect, device number 4 [ 117.589790][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.611978][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.625510][ T6474] bond0 (unregistering): Released all slaves [ 117.741385][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.749915][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.758682][ T6351] bridge_slave_0: entered allmulticast mode [ 117.768840][ T6351] bridge_slave_0: entered promiscuous mode [ 117.780032][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.788272][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.796237][ T6351] bridge_slave_1: entered allmulticast mode [ 117.812634][ T6351] bridge_slave_1: entered promiscuous mode [ 117.956538][ T6351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.989032][ T6351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.137817][ T6162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.151757][ T6351] team0: Port device team_slave_0 added [ 118.168649][ T6351] team0: Port device team_slave_1 added [ 118.328449][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.336481][ T5149] Bluetooth: hci0: command tx timeout [ 118.373551][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.449045][ T6492] loop4: detected capacity change from 0 to 1024 [ 118.460187][ T6351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.486683][ T6162] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.524535][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.555735][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.669573][ T6351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.683557][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.697425][ T6492] loop4: detected capacity change from 0 to 4096 [ 118.742957][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.750888][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.791681][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.799366][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.816828][ T6492] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 118.867027][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.902378][ T5829] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22. [ 118.908139][ T10] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 118.961237][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.013441][ T10] usb 4-1: config 0 descriptor?? [ 119.080826][ T6351] hsr_slave_0: entered promiscuous mode [ 119.094513][ T6351] hsr_slave_1: entered promiscuous mode [ 119.102825][ T6351] debugfs: 'hsr0' already exists in 'hsr' [ 119.112901][ T6351] Cannot create hsr debugfs directory [ 119.481197][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 119.496374][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 119.541276][ T10] usb 4-1: USB disconnect, device number 6 [ 119.823061][ T6523] loop4: detected capacity change from 0 to 128 [ 119.856611][ T6523] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.941116][ T6523] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.133314][ T2974] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.354343][ T6351] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.421885][ T5149] Bluetooth: hci0: command tx timeout [ 120.451243][ T6351] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.552384][ T6351] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.636272][ T6351] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.678629][ T6162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.899172][ T6541] loop3: detected capacity change from 0 to 32768 [ 120.910075][ T6541] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.176 (6541) [ 120.994809][ T6541] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 121.005729][ T6541] BTRFS info (device loop3): using blake2b checksum algorithm [ 121.194258][ T5971] IPVS: starting estimator thread 0... [ 121.239656][ T6541] BTRFS info (device loop3): enabling ssd optimizations [ 121.248139][ T6541] BTRFS info (device loop3): turning on async discard [ 121.256415][ T6541] BTRFS info (device loop3): enabling free space tree [ 121.264120][ T6541] BTRFS info (device loop3): use zlib compression, level 3 [ 121.343736][ T6568] IPVS: using max 28 ests per chain, 67200 per kthread [ 121.436530][ T5832] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 121.468522][ T6351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.573018][ T6351] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.644751][ T5918] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.666635][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.674428][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.753525][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.763374][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.843861][ T5918] usb 5-1: config 1 has an invalid interface number: 6 but max is 2 [ 121.852459][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.909973][ T5918] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 121.928331][ T5918] usb 5-1: config 1 has no interface number 1 [ 121.949877][ T5918] usb 5-1: too many endpoints for config 1 interface 6 altsetting 0: 102, using maximum allowed: 30 [ 121.988560][ T5918] usb 5-1: config 1 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 122.033448][ T5918] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.049639][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.083225][ T5918] usb 5-1: Product: 閆坼ឆ놲⪓邉順풮夹ｹᱴ垃陽슦돗캋䝑ꉭ黣癲ᤎ佛縿포↲햄冴匆꜋沄츚ᷭ䑣殉又몮笰获﵅Ⅶ [ 122.123121][ T5918] usb 5-1: Manufacturer: ᶑ臶닒퐄ꙑ㙰婄☑捤债竉ꯗ碚뿎꛺毩┫섬﯄㽝苤浄蒠뗪呈빷㣟놨Ჟ괆ᘉ觯䵽ﺸᒜR謔Ꮮ룹㻜磏饄뙝颗輡辇鴹攃媲卬ὃꋣ⥘ꏨ魭ﲪ␭༼눌ꐃ駧燤䞎끽᢭꣨囬낇픡⑀ભ羊뱓焺ภ캁ꏾ▇ᆯᗊ䓧쟲䎏ກ [ 122.220238][ T6162] veth0_vlan: entered promiscuous mode [ 122.282416][ T6162] veth1_vlan: entered promiscuous mode [ 122.443978][ T6162] veth0_macvtap: entered promiscuous mode [ 122.489789][ T6162] veth1_macvtap: entered promiscuous mode [ 122.514621][ T5918] usb 5-1: 0:2 : does not exist [ 122.610863][ T6162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.652061][ T6162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.689307][ T6024] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.699085][ T5918] usb 5-1: USB disconnect, device number 5 [ 122.777688][ T6024] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.812744][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.877165][ T6024] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.935080][ T6024] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.024331][ T6351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.298147][ T6024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.323582][ T6024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.345489][ T6584] Set syz1 is full, maxelem 768 reached [ 123.532408][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.564571][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.599241][ T6613] loop3: detected capacity change from 0 to 64 [ 124.110813][ T6619] loop4: detected capacity change from 0 to 4096 [ 124.113907][ T6620] syzkaller0: entered promiscuous mode [ 124.169276][ T6625] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.190428][ T6620] syzkaller0: entered allmulticast mode [ 124.205998][ T6351] veth0_vlan: entered promiscuous mode [ 124.281853][ T6619] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 124.289049][ T6619] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 124.305527][ T6619] vhci_hcd vhci_hcd.0: Device attached [ 124.340304][ T6627] vhci_hcd: connection closed [ 124.342541][ T6024] vhci_hcd vhci_hcd.4: stop threads [ 124.367967][ T6024] vhci_hcd vhci_hcd.4: release socket [ 124.379128][ T6024] vhci_hcd vhci_hcd.4: disconnect device [ 124.461389][ T6351] veth1_vlan: entered promiscuous mode [ 124.627025][ T6351] veth0_macvtap: entered promiscuous mode [ 124.663421][ T6351] veth1_macvtap: entered promiscuous mode [ 124.730146][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.764305][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.764952][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.816047][ T6024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.865368][ T6024] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.884581][ T6024] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.924413][ T6024] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.963915][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 124.981791][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.004148][ T5838] usb 4-1: config 0 has no interfaces? [ 125.025694][ T5838] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=18.d6 [ 125.043868][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.052404][ T5838] usb 4-1: Product: syz [ 125.078973][ T5838] usb 4-1: Manufacturer: syz [ 125.132990][ T5838] usb 4-1: SerialNumber: syz [ 125.174053][ T5838] r8152-cfgselector 4-1: Unknown version 0x0000 [ 125.217432][ T5838] r8152-cfgselector 4-1: config 0 descriptor?? [ 125.391068][ T4039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.443540][ T4039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.477164][ T6646] loop4: detected capacity change from 0 to 64 [ 125.532145][ T5838] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 125.592454][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.650944][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.321991][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.6.194'. [ 126.737398][ T6167] udevd[6167]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 126.862942][ T6167] udevd[6167]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 127.376914][ T5971] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.395698][ T6714] Illegal XDP return value 4294967274 on prog (id 14) dev N/A, expect packet loss! [ 127.555210][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 127.603934][ T5971] usb 5-1: config 1 interface 0 has no altsetting 0 [ 127.632880][ T5971] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=96.c5 [ 127.712811][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.763116][ T5971] usb 5-1: Product: syz [ 127.782757][ T5971] usb 5-1: Manufacturer: syz [ 127.816037][ T5971] usb 5-1: SerialNumber: syz [ 128.080951][ T5971] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 128.118194][ T5971] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 128.172259][ T5971] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 128.218595][ T5971] usb 5-1: USB disconnect, device number 6 [ 128.602633][ T6750] netlink: 20 bytes leftover after parsing attributes in process `syz.5.215'. [ 128.965099][ T6037] udevd[6037]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 129.009626][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 130.968990][ T6506] Set syz1 is full, maxelem 65536 reached [ 132.332428][ T6874] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 132.403222][ T6870] kvm: kvm [6869]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 132.490442][ T6870] kvm: kvm [6869]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 133.314580][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.323140][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.266740][ T6992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.302'. [ 136.592583][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 138.053600][ T7043] syz.2.318 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 138.419373][ T7024] process 'syz.3.312' launched '/dev/fd/4' with NULL argv: empty string added [ 139.313646][ T5918] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 139.503735][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 139.535863][ T5918] usb 7-1: config 1 interface 0 has no altsetting 0 [ 139.574741][ T5918] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=96.c5 [ 139.623591][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.653551][ T5918] usb 7-1: Product: syz [ 139.660327][ T5918] usb 7-1: Manufacturer: syz [ 139.687294][ T5918] usb 7-1: SerialNumber: syz [ 139.753429][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 139.753446][ T30] audit: type=1326 audit(1766715646.556:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690fd8f749 code=0x7ffc0000 [ 139.873623][ T30] audit: type=1326 audit(1766715646.566:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690fd8f749 code=0x7ffc0000 [ 139.990854][ T5918] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 140.010244][ T5918] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 140.030816][ T30] audit: type=1326 audit(1766715646.566:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690fd8f749 code=0x7ffc0000 [ 140.036887][ T5918] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 140.166112][ T30] audit: type=1326 audit(1766715646.566:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f690fd8f749 code=0x7ffc0000 [ 140.234717][ T30] audit: type=1326 audit(1766715646.566:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690fd8f749 code=0x7ffc0000 [ 140.326064][ T5918] usb 7-1: USB disconnect, device number 2 [ 140.371633][ T30] audit: type=1326 audit(1766715646.566:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690fd8f749 code=0x7ffc0000 [ 140.444709][ T30] audit: type=1326 audit(1766715646.566:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f690fd8f749 code=0x7ffc0000 [ 140.527438][ T30] audit: type=1326 audit(1766715646.566:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f690fd8f749 code=0x7ffc0000 [ 143.232873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.233213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.293751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 143.293792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 143.335662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.437814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.438039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.533943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 143.542911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.642529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.642892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.012049][ T5149] Bluetooth: hci0: command tx timeout [ 145.726977][ T7215] loop6: detected capacity change from 0 to 2048 [ 145.744978][ T7215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.834355][ T30] audit: type=1800 audit(1766715653.646:39): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.360" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 147.558426][ T7245] loop6: detected capacity change from 0 to 256 [ 147.616251][ T7245] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.708576][ T7245] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 147.762367][ T7245] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 147.846763][ T7245] exFAT-fs (loop6): failed to load alloc-bitmap [ 147.884446][ T7245] exFAT-fs (loop6): failed to recognize exfat type [ 147.944494][ T5835] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 148.113256][ T7256] loop3: detected capacity change from 0 to 512 [ 148.170316][ T7256] EXT4-fs: inline encryption not supported [ 148.264846][ T7256] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 148.305806][ T7256] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.373: invalid indirect mapped block 2683928664 (level 1) [ 148.364058][ T7271] loop5: detected capacity change from 0 to 1024 [ 148.444841][ T7256] EXT4-fs (loop3): 1 truncate cleaned up [ 148.489797][ T7256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.705446][ T7276] EXT4-fs (loop3): shut down requested (1) [ 148.797254][ T30] audit: type=1800 audit(1766715655.606:40): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.373" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 149.419393][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.012201][ T7297] loop5: detected capacity change from 0 to 512 [ 150.030777][ T7294] loop6: detected capacity change from 0 to 512 [ 150.108509][ T7297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.158589][ T7294] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.380: inode has both inline data and extents flags [ 150.213857][ T7297] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.244057][ T7294] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.380: couldn't read orphan inode 15 (err -117) [ 150.276258][ T7294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.377896][ T30] audit: type=1326 audit(1766715657.186:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.5.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f690fd8f749 code=0x0 [ 150.511172][ T5903] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.113549][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 151.125631][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.150683][ T5903] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.164904][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.167167][ T6162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.176514][ T5903] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.245400][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.271628][ T5903] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.332700][ T5903] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 151.378307][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.413703][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.422198][ T5903] usb 4-1: Product: syz [ 151.481777][ T5903] usb 4-1: Manufacturer: syz [ 151.505540][ T5903] usb 4-1: SerialNumber: syz [ 151.559639][ T5903] r8152-cfgselector 4-1: Unknown version 0x0000 [ 151.593709][ T5903] r8152-cfgselector 4-1: config 0 descriptor?? [ 151.681834][ T7322] loop4: detected capacity change from 0 to 512 [ 152.408922][ T7322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.610685][ T7327] Bluetooth: MGMT ver 1.23 [ 152.795132][ T7322] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.903051][ T5903] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 153.295493][ T7340] loop6: detected capacity change from 0 to 1024 [ 153.306033][ T7340] EXT4-fs: inline encryption not supported [ 153.351722][ T7340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.689480][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.510403][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.092561][ T7366] loop2: detected capacity change from 0 to 256 [ 156.224390][ T7366] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.303362][ T7366] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 156.495461][ T7366] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 156.564207][ T7366] exFAT-fs (loop2): failed to load alloc-bitmap [ 156.597100][ T7366] exFAT-fs (loop2): failed to recognize exfat type [ 156.623592][ T5937] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 156.803602][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 156.857592][ T5937] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 156.873675][ T5937] usb 6-1: config 0 has no interface number 0 [ 156.880973][ T5937] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 261.963514][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 261.970638][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10/1:b..l P6351/1:b..l [ 261.979959][ C1] rcu: (detected by 1, t=10502 jiffies, g=20973, q=662 ncpus=2) [ 261.987680][ C1] task:syz-executor state:R running task stack:19496 pid:6351 tgid:6351 ppid:6344 task_flags:0x400140 flags:0x00080000 [ 262.002161][ C1] Call Trace: [ 262.005718][ C1] [ 262.008867][ C1] __schedule+0x150e/0x5070 [ 262.013541][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 262.018762][ C1] ? __pfx___schedule+0x10/0x10 [ 262.023632][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 262.028841][ C1] ? kernel_text_address+0xa5/0xe0 [ 262.033983][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 262.039387][ C1] preempt_schedule_irq+0xb5/0x150 [ 262.044597][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 262.050944][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 262.056847][ C1] irqentry_exit+0x5d8/0x660 [ 262.061534][ C1] ? rcu_is_watching+0x15/0xb0 [ 262.066310][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 262.071908][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x37/0x90 [ 262.078368][ C1] Code: 08 b0 9f 92 65 8b 15 58 f5 dd 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 6c 16 00 00 00 74 4e 8b 91 48 16 00 00 <83> fa 03 75 43 48 8b 91 50 16 00 00 44 8b 89 4c 16 00 00 49 c1 e1 [ 262.097986][ C1] RSP: 0018:ffffc9000b30f4e8 EFLAGS: 00000246 [ 262.104071][ C1] RAX: ffffffff823236e3 RBX: dffffc0000000000 RCX: ffff88802f5bdb80 [ 262.112043][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 262.120105][ C1] RBP: 0000000000000000 R08: ffffffff8232358e R09: ffffffff8e13f2e0 [ 262.128095][ C1] R10: 0000000000000009 R11: ffffffff81ad9d50 R12: 0000000000041681 [ 262.136088][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88801cc70800 [ 262.144685][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 262.150848][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 262.157109][ C1] ? __update_page_owner_free_handle+0x183/0x470 [ 262.163467][ C1] __update_page_owner_free_handle+0x183/0x470 [ 262.169630][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 262.175890][ C1] __reset_page_owner+0x85/0x1f0 [ 262.180855][ C1] free_unref_folios+0xdb3/0x14f0 [ 262.186135][ C1] ? __page_cache_release+0x8a6/0xbb0 [ 262.191515][ C1] ? folio_unqueue_deferred_split+0x93/0x230 [ 262.197507][ C1] folios_put_refs+0x584/0x670 [ 262.202297][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 262.207693][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 262.214043][ C1] shmem_undo_range+0x49e/0x1490 [ 262.219001][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 262.224385][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 262.229600][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 262.235039][ C1] ? stack_depot_save_flags+0x40/0x850 [ 262.240645][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 262.245639][ C1] shmem_evict_inode+0x26e/0xa70 [ 262.250604][ C1] ? inode_wait_for_writeback+0x14d/0x370 [ 262.256420][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 262.261885][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 262.267974][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 262.273286][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 262.278842][ C1] evict+0x5f4/0xae0 [ 262.282762][ C1] ? __pfx_evict+0x10/0x10 [ 262.287186][ C1] ? _raw_spin_unlock+0x28/0x50 [ 262.292131][ C1] ? iput+0xcc6/0x1030 [ 262.296221][ C1] do_unlinkat+0x41d/0x5d0 [ 262.300651][ C1] ? __pfx_do_unlinkat+0x10/0x10 [ 262.305863][ C1] ? strncpy_from_user+0x150/0x2c0 [ 262.311027][ C1] ? getname_flags+0x1e5/0x540 [ 262.315820][ C1] __x64_sys_unlink+0x47/0x50 [ 262.320528][ C1] do_syscall_64+0xfa/0xf80 [ 262.325205][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.331472][ C1] ? clear_bhb_loop+0x60/0xb0 [ 262.336172][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.342083][ C1] RIP: 0033:0x7fb67338ecf7 [ 262.346518][ C1] RSP: 002b:00007ffe81cc1e48 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 262.354937][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb67338ecf7 [ 262.362920][ C1] RDX: 00007ffe81cc1e70 RSI: 00007ffe81cc1f00 RDI: 00007ffe81cc1f00 [ 262.370897][ C1] RBP: 00007ffe81cc1f00 R08: 0000000000000000 R09: 0000000000000000 [ 262.378875][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe81cc2f90 [ 262.386854][ C1] R13: 00007fb673413d7d R14: 000055555f4074a8 R15: 0000000000000005 [ 262.394861][ C1] [ 262.397907][ C1] task:kworker/0:1 state:R running task stack:20992 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 262.411578][ C1] Workqueue: events drain_vmap_area_work [ 262.417229][ C1] Call Trace: [ 262.420549][ C1] [ 262.423575][ C1] __schedule+0x150e/0x5070 [ 262.428192][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 262.434108][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 262.440054][ C1] ? __pfx___schedule+0x10/0x10 [ 262.444916][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 262.449870][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 262.455178][ C1] preempt_schedule_irq+0xb5/0x150 [ 262.460330][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 262.466067][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 262.471025][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 262.476883][ C1] irqentry_exit+0x5d8/0x660 [ 262.481495][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.487482][ C1] RIP: 0010:unwind_next_frame+0x2ca/0x23d0 [ 262.493303][ C1] Code: 4a 8d 1c 82 48 83 c3 fc 49 89 d5 48 39 da 0f 86 21 02 00 00 49 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 14 46 <48> bd 00 00 00 00 00 fc ff df e9 8f 01 00 00 31 db e9 d6 17 00 00 [ 262.513043][ C1] RSP: 0018:ffffc900000f72f8 EFLAGS: 00000246 [ 262.519161][ C1] RAX: 0000000000000000 RBX: ffffffff8fc23c3c RCX: ffffffff8fc23c40 [ 262.527133][ C1] RDX: ffffffff9041e414 RSI: ffffffff9041e414 RDI: ffffffff8be07900 [ 262.535117][ C1] RBP: ffffffff8fc23c40 R08: 0000000000000001 R09: ffffffff8e13f2e0 [ 262.543181][ C1] R10: ffffc900000f7418 R11: ffffffff81ad9d50 R12: ffffffff821a1f67 [ 262.551157][ C1] R13: 0000000000000000 R14: ffffc900000f73c8 R15: ffffffff8fc23c3c [ 262.559220][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 262.564513][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 262.570681][ C1] ? unwind_next_frame+0xd4/0x23d0 [ 262.575813][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 262.580934][ C1] ? __free_frozen_pages+0xbc8/0xd30 [ 262.586218][ C1] ? __free_frozen_pages+0xbc8/0xd30 [ 262.591506][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 262.597658][ C1] arch_stack_walk+0x11c/0x150 [ 262.602448][ C1] ? __free_frozen_pages+0xbc8/0xd30 [ 262.607770][ C1] stack_trace_save+0x9c/0xe0 [ 262.612468][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 262.617955][ C1] save_stack+0xf5/0x1f0 [ 262.622209][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 262.627155][ C1] ? __pfx_save_stack+0x10/0x10 [ 262.632021][ C1] ? __free_frozen_pages+0xbc8/0xd30 [ 262.637330][ C1] ? page_ext_put+0x97/0xc0 [ 262.641847][ C1] __reset_page_owner+0x71/0x1f0 [ 262.646796][ C1] __free_frozen_pages+0xbc8/0xd30 [ 262.651924][ C1] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 262.657747][ C1] __apply_to_page_range+0xb66/0x13d0 [ 262.663168][ C1] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 262.669613][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 262.675447][ C1] __kasan_release_vmalloc+0xa2/0xd0 [ 262.680742][ C1] purge_vmap_node+0x214/0x8d0 [ 262.685530][ C1] ? __pfx_purge_vmap_node+0x10/0x10 [ 262.690826][ C1] ? flush_tlb_kernel_range+0x358/0x470 [ 262.696390][ C1] __purge_vmap_area_lazy+0x77a/0xb00 [ 262.701779][ C1] ? process_one_work+0x868/0x15a0 [ 262.706932][ C1] drain_vmap_area_work+0x27/0x40 [ 262.712071][ C1] process_one_work+0x93a/0x15a0 [ 262.717162][ C1] ? __pfx_process_one_work+0x10/0x10 [ 262.722574][ C1] ? assign_work+0x3c7/0x5b0 [ 262.727187][ C1] worker_thread+0x9b0/0xee0 [ 262.731818][ C1] kthread+0x711/0x8a0 [ 262.736350][ C1] ? __pfx_worker_thread+0x10/0x10 [ 262.741480][ C1] ? __pfx_kthread+0x10/0x10 [ 262.746084][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.751299][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 262.756603][ C1] ? __pfx_kthread+0x10/0x10 [ 262.761222][ C1] ret_from_fork+0x599/0xb30 [ 262.765821][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 262.770947][ C1] ? __switch_to_asm+0x39/0x70 [ 262.775724][ C1] ? __switch_to_asm+0x33/0x70 [ 262.780503][ C1] ? __pfx_kthread+0x10/0x10 [ 262.785107][ C1] ret_from_fork_asm+0x1a/0x30 [ 262.789895][ C1] [ 262.792922][ C1] rcu: rcu_preempt kthread starved for 10583 jiffies! g20973 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 262.804115][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 262.814088][ C1] rcu: RCU grace-period kthread stack dump: [ 262.819979][ C1] task:rcu_preempt state:R running task stack:27424 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 262.833572][ C1] Call Trace: [ 262.836860][ C1] [ 262.839804][ C1] __schedule+0x150e/0x5070 [ 262.844348][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 262.849559][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 262.855461][ C1] ? __pfx___schedule+0x10/0x10 [ 262.860420][ C1] ? schedule+0x91/0x360 [ 262.864676][ C1] schedule+0x165/0x360 [ 262.868843][ C1] schedule_timeout+0x12b/0x270 [ 262.873790][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 262.879191][ C1] ? __pfx_process_timeout+0x10/0x10 [ 262.884496][ C1] ? prepare_to_swait_event+0x341/0x380 [ 262.890055][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 262.894918][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 262.899865][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 262.905076][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 262.910366][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 262.915579][ C1] ? finish_swait+0xcd/0x1f0 [ 262.920182][ C1] rcu_gp_kthread+0x99/0x390 [ 262.924779][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 262.929987][ C1] ? __kthread_parkme+0x7b/0x200 [ 262.934948][ C1] ? __kthread_parkme+0x1a1/0x200 [ 262.939987][ C1] kthread+0x711/0x8a0 [ 262.944075][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 262.949279][ C1] ? __pfx_kthread+0x10/0x10 [ 262.953966][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.959260][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 262.964549][ C1] ? __pfx_kthread+0x10/0x10 [ 262.969206][ C1] ret_from_fork+0x599/0xb30 [ 262.973885][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 262.979029][ C1] ? __switch_to_asm+0x39/0x70 [ 262.983886][ C1] ? __switch_to_asm+0x33/0x70 [ 262.988770][ C1] ? __pfx_kthread+0x10/0x10 [ 262.993375][ C1] ret_from_fork_asm+0x1a/0x30 [ 262.998173][ C1] [ 263.001202][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 263.007537][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 263.016493][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.026564][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 263.032306][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 9e 2a 00 f3 0f 1e fa fb f4 48 ee 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 263.052094][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 263.058644][ C1] RAX: af4b269a8d1dda00 RBX: ffffffff819786ba RCX: af4b269a8d1dda00 [ 263.066623][ C1] RDX: 0000000000000001 RSI: ffffffff8d997e54 RDI: ffffffff8be07960 [ 263.075041][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 263.083018][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fa22f70 [ 263.090993][ C1] R13: 1ffff11003adab70 R14: 0000000000000001 R15: 0000000000000001 [ 263.099051][ C1] FS: 0000000000000000(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 263.107982][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.114570][ C1] CR2: 00007f002dd72a60 CR3: 000000001f7d4000 CR4: 00000000003526f0 [ 263.122632][ C1] Call Trace: [ 263.125916][ C1] [ 263.128847][ C1] default_idle+0x13/0x20 [ 263.133181][ C1] default_idle_call+0x73/0xb0 [ 263.137946][ C1] do_idle+0x1ea/0x520 [ 263.142107][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 263.147841][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 263.153056][ C1] ? __pfx_do_idle+0x10/0x10 [ 263.157670][ C1] ? do_idle+0xa/0x520 [ 263.161747][ C1] cpu_startup_entry+0x44/0x60 [ 263.166602][ C1] start_secondary+0x101/0x110 [ 263.171378][ C1] common_startup_64+0x13e/0x147 [ 263.176342][ C1]