last executing test programs: 4.469062426s ago: executing program 1 (id=277): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffff7fff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0xceb8, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x207, 0x53cf697b, 0x4, 0x6, 0x9, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x405, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000d65d000008000000000000001012", @ANYRES32=r3, @ANYBLOB="03000116000000000000eaff00001f0000000000", @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="0300000004000000010000000500"/24, @ANYRES32=r3, @ANYBLOB], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000001c0)=ANY=[], 0x0) 3.910104871s ago: executing program 2 (id=282): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0x1a, 0x0, 0x1, 0x95, 0x6, @remote}, 0x14) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x40106183, 0x0) 3.531508675s ago: executing program 0 (id=283): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001540)=""/216, 0xd8}], 0x1, &(0x7f00000016c0)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0x2b1}, &(0x7f0000000280)=0x2, &(0x7f0000001680)=0x3, 0x4997a000, 0x8000000000000000, 0x5, 0x7, 0x0, 0x3}}], 0x58, 0x805}, 0x404c014) pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102363, 0xffffffffffffffd7, 0x6) chdir(&(0x7f0000000140)='./bus\x00') openat$zero(0xffffff9c, &(0x7f0000000300), 0x204400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 3.432368747s ago: executing program 1 (id=285): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) 2.962760662s ago: executing program 2 (id=286): socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r2, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.622572933s ago: executing program 0 (id=287): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) dup(0xffffffffffffffff) 2.436301897s ago: executing program 1 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x18a0002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @enum64={0xd, 0x6, 0x0, 0x13, 0x1, 0x5, [{0xd, 0xfffff000, 0x7}, {0x6, 0x4584, 0x3}, {0x8, 0x73ca, 0x3}, {0xf, 0x0, 0x81}, {0x7, 0xf}, {0x3, 0x9, 0x200}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}]}}, 0x0, 0x8e, 0x0, 0xfffffffc}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000ae480000fd09000084000000010000009436077f0d41a33f2bd799cd6fa3c0593a06000000feffffff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') r2 = fsopen(&(0x7f0000000300)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='\\\x00', 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', '', [{0x20, '--%:{[(:%(/'}, {0x20, '\x00'}, {0x20, '),^'}, {0x20, '&'}, {0x20, '\x00'}, {0x20, 'syz\x00'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '\\.&'}], 0xa, "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"}, 0x176) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="02000000000000f22f52927500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708003eb5534dcc74628e09e51a6816805d97f2ae369a00000000087b8af8ff14002300bfa200000000000007020000f8ffffffb703006f08000000b704000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 2.435887971s ago: executing program 2 (id=289): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 2.372520017s ago: executing program 3 (id=290): socket$kcm(0x21, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='0', 0x1) write$cgroup_type(r2, &(0x7f0000000080), 0x9) 2.083880204s ago: executing program 3 (id=291): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r2 = socket(0x2b, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xb, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(r3, &(0x7f0000000880)=[{&(0x7f0000000600)="d22734a463cd14f8319bf80653276ce071c6a15a89cad401f7d77d60eec7b9403cae41960537249e14b2872f19b98391499746bd2eb60f5f46a4d05d85432152c961319baa1edcc961779156815faf50a894c041a7f462d201a19ee43327e36b07c5ffb164eb13e9041f449970fef7b9eccfa606da5c342e3cf6d331b252f4770e160880eb05c557cf37f9ff805074e31f07d15425a759bad3a2751b45e485ec78d0931d5f8b179ba0c95a8a59988d4e6fc4da10eac230b73862f9c2238af4ea7058", 0xc2}, {&(0x7f0000000700)="e6d83adb1b00a63f9a7d1072437305b59b7ec6a83a91e52944efe7d8c48cc9a0af778207b982004f82207ee0eecdeb8f4daada1f7ea60230e63b93efb2b86ec18724959e2666b939096c3f7ca2f4609c9d9994da691b64c163387cedf553b0ee0e07c1a373c62ac3006634f2a6238127a7f8897a1e055a103476976db6820f8aa7f099aba75c2fa5ec5d196e15d694712ca7a1c00d7519838d95c106bd331096f341089b052f7a644e235abb02da262913ab8a84e1f3fc336b424f904db7f5b925975739001ab17f150bab5773", 0xcd}, {&(0x7f0000000280)="7b80622aed31c56dc43ad2117846dca0ddd4485ae0212cd1a1ff38ba7297d4cfe5eca79039683a7514a8", 0x2a}, {&(0x7f0000000840)="22712465abff7b6f4d8f52547744002000"/28, 0x1c}], 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x14c, 0x1d8, 0x1d8, 0x14c, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0xffffffff, 0xffffff00, 'veth0_to_bridge\x00', 'caif0\x00', {}, {}, 0x5c, 0x1, 0x6c}, 0x9400, 0x70, 0x94, 0x94}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x23c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603000000000000000000000000000500", @ANYRES32], 0x1c}}, 0x40000) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') chdir(0x0) 2.02216069s ago: executing program 1 (id=292): open(0x0, 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0x1a, 0x0, 0x1, 0x95, 0x6, @remote}, 0x14) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) 2.017578158s ago: executing program 3 (id=293): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffff7fff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0xceb8, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x207, 0x53cf697b, 0x4, 0x6, 0x9, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x405, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000d65d00000800000000000000101201", @ANYRES32=r3, @ANYBLOB="03000116000000000000eaff00001f0000000000", @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="0300000004000000010000000500"/24, @ANYRES32=r3, @ANYBLOB], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000001c0)=ANY=[], 0x0) 1.612688574s ago: executing program 2 (id=294): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) sync() r1 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x40002042, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000700)='\x00'/32, 0x20) write(r3, &(0x7f0000000700), 0x0) r4 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./mnt/test2\x00', &(0x7f00000000c0)={0x100, 0xf0, 0x32}, 0x18) unlinkat(r4, &(0x7f0000000140)='./dev\x00', 0x200) 1.552350486s ago: executing program 0 (id=295): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0x1a, 0x0, 0x1, 0x95, 0x6, @remote}, 0x14) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x40106183, 0x0) 1.302759151s ago: executing program 0 (id=296): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001540)=""/216, 0xd8}], 0x1, &(0x7f00000016c0)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0x2b1}, &(0x7f0000000280)=0x2, &(0x7f0000001680)=0x3, 0x4997a000, 0x8000000000000000, 0x5, 0x7, 0x0, 0x3}}], 0x58, 0x805}, 0x404c014) pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102363, 0xffffffffffffffd7, 0x6) chdir(&(0x7f0000000140)='./bus\x00') openat$zero(0xffffff9c, &(0x7f0000000300), 0x204400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 1.042701535s ago: executing program 3 (id=297): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) 812.528601ms ago: executing program 1 (id=298): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r2, r3, r4, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) 640.124281ms ago: executing program 2 (id=299): socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r2, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 342.851069ms ago: executing program 0 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x18a0002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @enum64={0xd, 0x6, 0x0, 0x13, 0x1, 0x5, [{0xd, 0xfffff000, 0x7}, {0x6, 0x4584, 0x3}, {0x8, 0x73ca, 0x3}, {0xf, 0x0, 0x81}, {0x7, 0xf}, {0x3, 0x9, 0x200}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}]}}, 0x0, 0x8e, 0x0, 0xfffffffc}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000ae480000fd09000084000000010000009436077f0d41a33f2bd799cd6fa3c0593a06000000feffffff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') r2 = fsopen(&(0x7f0000000300)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='\\\x00', 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', '', [{0x20, '--%:{[(:%(/'}, {0x20, '\x00'}, {0x20, '),^'}, {0x20, '&'}, {0x20, '\x00'}, {0x20, 'syz\x00'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '\\.&'}], 0xa, "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"}, 0x176) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="02000000000000f22f52927500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708003eb5534dcc74628e09e51a6816805d97f2ae369a00000000087b8af8ff14002300bfa200000000000007020000f8ffffffb703006f08000000b704000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 145.812383ms ago: executing program 0 (id=301): socket$kcm(0x21, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='0', 0x1) write$cgroup_type(r2, &(0x7f0000000080), 0x9) 144.986107ms ago: executing program 3 (id=302): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r2 = socket(0x2b, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xd, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(r3, &(0x7f0000000880)=[{&(0x7f0000000600)="d22734a463cd14f8319bf80653276ce071c6a15a89cad401f7d77d60eec7b9403cae41960537249e14b2872f19b98391499746bd2eb60f5f46a4d05d85432152c961319baa1edcc961779156815faf50a894c041a7f462d201a19ee43327e36b07c5ffb164eb13e9041f449970fef7b9eccfa606da5c342e3cf6d331b252f4770e160880eb05c557cf37f9ff805074e31f07d15425a759bad3a2751b45e485ec78d0931d5f8b179ba0c95a8a59988d4e6fc4da10eac230b73862f9c2238af4ea7058", 0xc2}, {&(0x7f0000000700)="e6d83adb1b00a63f9a7d1072437305b59b7ec6a83a91e52944efe7d8c48cc9a0af778207b982004f82207ee0eecdeb8f4daada1f7ea60230e63b93efb2b86ec18724959e2666b939096c3f7ca2f4609c9d9994da691b64c163387cedf553b0ee0e07c1a373c62ac3006634f2a6238127a7f8897a1e055a103476976db6820f8aa7f099aba75c2fa5ec5d196e15d694712ca7a1c00d7519838d95c106bd331096f341089b052f7a644e235abb02da262913ab8a84e1f3fc336b424f904db7f5b925975739001ab17f150bab5773", 0xcd}, {&(0x7f0000000280)="7b80622aed31c56dc43ad2117846dca0ddd4485ae0212cd1a1ff38ba7297d4cfe5eca79039683a7514a8", 0x2a}, {&(0x7f0000000840)="22712465abff7b6f4d8f52547744002000"/28, 0x1c}], 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x14c, 0x1d8, 0x1d8, 0x14c, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0xffffffff, 0xffffff00, 'veth0_to_bridge\x00', 'caif0\x00', {}, {}, 0x5c, 0x1, 0x6c}, 0x9400, 0x70, 0x94, 0x94}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x23c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603000000000000000000000000000500", @ANYRES32], 0x1c}}, 0x40000) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') chdir(0x0) 144.790622ms ago: executing program 2 (id=303): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 62.680875ms ago: executing program 1 (id=304): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0x1a, 0x0, 0x1, 0x95, 0x6, @remote}, 0x14) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x40106183, 0x0) 0s ago: executing program 3 (id=305): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffff7fff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0xceb8, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x207, 0x53cf697b, 0x4, 0x6, 0x9, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x405, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000d65d00000800000000000000101201", @ANYRES32=r3, @ANYBLOB="03000116000000000000eaff00001f0000000000", @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="0300000004000000010000000500"/24, @ANYRES32=r3, @ANYBLOB], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000001c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5575' (ED25519) to the list of known hosts. [ 41.729796][ T5653] cgroup: Unknown subsys name 'net' [ 41.871587][ T5653] cgroup: Unknown subsys name 'cpuset' [ 41.875782][ T5653] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.923894][ T5653] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.951760][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.953286][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.954629][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.958411][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.959775][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.961896][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.964185][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.965201][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.968054][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.969899][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.970796][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.971127][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.973227][ T5735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.975317][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.981229][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.983267][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.985950][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.991392][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.998795][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.002614][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.525243][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.530378][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.533015][ T5731] bridge_slave_0: entered allmulticast mode [ 47.536070][ T5731] bridge_slave_0: entered promiscuous mode [ 47.560450][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.562625][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.564729][ T5731] bridge_slave_1: entered allmulticast mode [ 47.567452][ T5731] bridge_slave_1: entered promiscuous mode [ 47.629986][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.665873][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.687406][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.690206][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.693129][ T5734] bridge_slave_0: entered allmulticast mode [ 47.696929][ T5734] bridge_slave_0: entered promiscuous mode [ 47.701637][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.704000][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.706303][ T5734] bridge_slave_1: entered allmulticast mode [ 47.708985][ T5734] bridge_slave_1: entered promiscuous mode [ 47.724432][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.727046][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.729517][ T5732] bridge_slave_0: entered allmulticast mode [ 47.732867][ T5732] bridge_slave_0: entered promiscuous mode [ 47.762441][ T5731] team0: Port device team_slave_0 added [ 47.766272][ T5731] team0: Port device team_slave_1 added [ 47.768140][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.770765][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.773051][ T5732] bridge_slave_1: entered allmulticast mode [ 47.775697][ T5732] bridge_slave_1: entered promiscuous mode [ 47.792611][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.822684][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.844939][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.847791][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.850254][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.853004][ T5739] bridge_slave_0: entered allmulticast mode [ 47.855947][ T5739] bridge_slave_0: entered promiscuous mode [ 47.867611][ T5734] team0: Port device team_slave_0 added [ 47.871058][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.876614][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.885039][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.891224][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x133000) [ 47.893742][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.901947][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.907005][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.910946][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.913280][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.915639][ T5739] bridge_slave_1: entered allmulticast mode [ 47.918379][ T5739] bridge_slave_1: entered promiscuous mode [ 47.929428][ T5734] team0: Port device team_slave_1 added [ 47.959140][ T1125] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 47.961902][ T1125] ata1: failed to read log page 10h (errno=-5) [ 47.964463][ T1125] ata1.00: exception Emask 0x1 SAct 0xc0000000 SErr 0x0 action 0x0 [ 47.967679][ T1125] ata1.00: irq_stat 0x41000000 [ 47.970626][ T1125] ata1.00: failed command: WRITE FPDMA QUEUED [ 47.973178][ T1125] ata1.00: cmd 61/98:f0:ce:19:08/09:00:00:00:00/40 tag 30 ncq dma 1257472 ou [ 47.973178][ T1125] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 47.980481][ T1125] ata1.00: status: { DRDY } [ 47.980673][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.982493][ T1125] ata1.00: failed command: WRITE FPDMA QUEUED [ 47.987237][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.987750][ T1125] ata1.00: cmd 61/08:f8:36:41:08/00:00:00:00:00/40 tag 31 ncq dma 4096 out [ 47.987750][ T1125] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 47.991010][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.997554][ T1125] ata1.00: status: { DRDY } [ 47.999960][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.001337][ T1125] ata1.00: error: { ABRT } [ 48.009163][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.010295][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.012233][ T1125] ata1.00: configured for UDMA/100 [ 48.014160][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.014176][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.017445][ T1125] ata1: EH complete [ 48.024729][ T5732] team0: Port device team_slave_0 added [ 48.057452][ T5731] hsr_slave_0: entered promiscuous mode [ 48.060871][ T5731] hsr_slave_1: entered promiscuous mode [ 48.064858][ T5732] team0: Port device team_slave_1 added [ 48.081977][ T5739] team0: Port device team_slave_0 added [ 48.085340][ T5739] team0: Port device team_slave_1 added [ 48.087465][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.089759][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.097661][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.102455][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.104694][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.114591][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.163488][ T5734] hsr_slave_0: entered promiscuous mode [ 48.166473][ T5734] hsr_slave_1: entered promiscuous mode [ 48.169624][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 48.172410][ T5734] Cannot create hsr debugfs directory [ 48.227615][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.230657][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.238299][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.258990][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.261093][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.269826][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.305331][ T5732] hsr_slave_0: entered promiscuous mode [ 48.307617][ T5732] hsr_slave_1: entered promiscuous mode [ 48.309852][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.311747][ T5732] Cannot create hsr debugfs directory [ 48.407778][ T5739] hsr_slave_0: entered promiscuous mode [ 48.410107][ T5739] hsr_slave_1: entered promiscuous mode [ 48.412181][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 48.413918][ T5739] Cannot create hsr debugfs directory [ 48.592172][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.601495][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.616631][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.623724][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.626928][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.633037][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.637027][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.643881][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.689881][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.694464][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.698588][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.703064][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.706027][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.710653][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.716315][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.720580][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.767527][ T5732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.772027][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.775172][ T5732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.779411][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.782224][ T5732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.786993][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.795310][ T5732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.803866][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.872672][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.880039][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.896501][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.902212][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.907829][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.910986][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.915457][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.923615][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.927836][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.959913][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.980166][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.982763][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.989526][ T5735] Bluetooth: hci0: command tx timeout [ 48.992639][ T680] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.994937][ T680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.006785][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.013788][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.032779][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.042039][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.048676][ T680] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.050861][ T680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.059011][ T5735] Bluetooth: hci3: command tx timeout [ 49.059062][ T5741] Bluetooth: hci2: command tx timeout [ 49.059230][ T5738] Bluetooth: hci1: command tx timeout [ 49.065201][ T680] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.068088][ T680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.072319][ T680] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.074635][ T680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.080372][ T680] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.082652][ T680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.126124][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.167816][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.174173][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.177047][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.195331][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.198325][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.433265][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.437252][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.445130][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.470012][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.500211][ T5734] veth0_vlan: entered promiscuous mode [ 49.512553][ T5732] veth0_vlan: entered promiscuous mode [ 49.514963][ T5731] veth0_vlan: entered promiscuous mode [ 49.519935][ T5734] veth1_vlan: entered promiscuous mode [ 49.530952][ T5732] veth1_vlan: entered promiscuous mode [ 49.539224][ T5731] veth1_vlan: entered promiscuous mode [ 49.563890][ T5739] veth0_vlan: entered promiscuous mode [ 49.566220][ T5732] veth0_macvtap: entered promiscuous mode [ 49.576152][ T5732] veth1_macvtap: entered promiscuous mode [ 49.586764][ T5734] veth0_macvtap: entered promiscuous mode [ 49.595051][ T5731] veth0_macvtap: entered promiscuous mode [ 49.600520][ T5734] veth1_macvtap: entered promiscuous mode [ 49.603135][ T5739] veth1_vlan: entered promiscuous mode [ 49.610735][ T5731] veth1_macvtap: entered promiscuous mode [ 49.616735][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.630027][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.642344][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.652690][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.659680][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.676225][ T5739] veth0_macvtap: entered promiscuous mode [ 49.682176][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.701316][ T5739] veth1_macvtap: entered promiscuous mode [ 49.718464][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.751360][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.771803][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.778867][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.807064][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.810535][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.828738][ T680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.831299][ T680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.858269][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.866091][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.869996][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.897459][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.901248][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.904360][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.907490][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.941152][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.944136][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.952209][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.957383][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.977712][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.980369][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.982453][ T5732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.983899][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.992049][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.999151][ T5732] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.005732][ T5732] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.007865][ T5731] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.018980][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.022409][ T5731] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.024755][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.048704][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.052124][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.055111][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.058071][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.062027][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.065695][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.070230][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.073383][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.076537][ T5813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.173858][ T5886] smpboot: CPU 1 is now offline [ 50.249196][ T5891] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 50.372977][ T5894] jffs2: notice: (5894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb2000) [ 50.562374][ T5901] overlayfs: missing 'lowerdir' [ 50.884705][ T1125] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 50.890140][ T1125] ata1: failed to read log page 10h (errno=-5) [ 50.892529][ T1125] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 50.895728][ T1125] ata1.00: irq_stat 0x41000000 [ 50.897669][ T1125] ata1.00: failed command: READ FPDMA QUEUED [ 50.917080][ T1125] ata1.00: cmd 60/90:f0:7e:93:03/05:00:00:00:00/40 tag 30 ncq dma 729088 in [ 50.917080][ T1125] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 50.927202][ T1125] ata1.00: status: { DRDY } [ 50.929031][ T1125] ata1.00: error: { ABRT } [ 50.975249][ T1125] ata1.00: configured for UDMA/100 [ 51.030443][ T1125] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 51.047573][ T1125] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 51.052997][ T1125] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 51.058294][ T5741] Bluetooth: hci0: command tx timeout [ 51.066590][ T1125] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 03 93 7e 00 05 90 00 [ 51.073086][ T1125] I/O error, dev sda, sector 234366 op 0x0:(READ) flags 0x80700 phys_seg 13 prio class 2 [ 51.090617][ T1125] ata1: EH complete [ 51.138299][ T5741] Bluetooth: hci2: command tx timeout [ 51.140054][ T5741] Bluetooth: hci3: command tx timeout [ 51.144673][ T5735] Bluetooth: hci1: command tx timeout [ 51.504556][ T5910] overlayfs: missing 'lowerdir' [ 52.623997][ T5936] jffs2: notice: (5936) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 52.655273][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.833861][ T60] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 52.839752][ T60] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 52.847188][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 52.853949][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 52.859598][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 52.870731][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 52.875586][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 52.882000][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 52.891959][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 52.896676][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 52.905204][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 52.922389][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 52.926397][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 52.931755][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 52.945221][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 52.950194][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 52.955000][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 52.967317][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 52.972224][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 52.977009][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 52.999220][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 53.002659][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 53.007238][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 53.011843][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 53.015287][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 53.020227][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 53.031569][ T60] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 53.035480][ T60] usb 7-1: Product: syz [ 53.037352][ T60] usb 7-1: Manufacturer: syz [ 53.039753][ T60] usb 7-1: SerialNumber: syz [ 53.139344][ T5741] Bluetooth: hci0: command tx timeout [ 53.154045][ T60] usb 7-1: config 0 descriptor?? [ 53.218473][ T5738] Bluetooth: hci1: command tx timeout [ 53.218785][ T5735] Bluetooth: hci2: command tx timeout [ 53.221485][ T5741] Bluetooth: hci3: command tx timeout [ 53.408645][ T60] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 53.421180][ T5944] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.424524][ T5944] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.796967][ T5944] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.812749][ T60] usb 7-1: USB disconnect, device number 2 [ 53.829301][ T5944] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.833383][ T5944] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.851138][ T5944] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.854785][ T60] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 53.888034][ T5944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.892576][ T5944] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.915577][ T5944] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.937833][ T5944] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.941503][ T5944] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.952319][ T5944] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.010272][ T5950] jffs2: notice: (5950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 54.085861][ T5955] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 54.124585][ T5962] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 54.159170][ T42] audit: type=1326 audit(1786594813.410:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 54.168539][ T5735] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 54.169555][ T42] audit: type=1326 audit(1786594813.410:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 54.183323][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 54.191389][ T42] audit: type=1326 audit(1786594813.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 54.198630][ T42] audit: type=1326 audit(1786594813.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 54.205279][ T42] audit: type=1326 audit(1786594813.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.18" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 54.212498][ T42] audit: type=1326 audit(1786594813.410:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 54.220530][ T42] audit: type=1326 audit(1786594813.410:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.3.18" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 54.427087][ T5969] smpboot: CPU 1 is now offline [ 54.469329][ T5973] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 54.556664][ T5971] netfs: Duplicate cookie detected [ 54.558981][ T5971] netfs: O-cookie c=00000003 [fl=4008 na=0 nA=0 s=-] [ 54.562218][ T5971] netfs: O-cookie V=00000001 [9p,syz,] [ 54.564330][ T5971] netfs: O-key=[8] 'ad37ac0400000000' [ 54.566501][ T5971] netfs: N-cookie c=00000004 [fl=8 na=0 nA=0 s=-] [ 54.569105][ T5971] netfs: N-cookie V=00000001 [9p,syz,] [ 54.571209][ T5971] netfs: N-key=[8] 'ad37ac0400000000' [ 54.854179][ T5741] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 54.915074][ T5982] jffs2: notice: (5982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 55.132995][ T5997] MTD: Couldn't look up './dev/mtdblock0': -2 [ 55.458307][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.179032][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.289614][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 56.488823][ T5738] Bluetooth: hci3: unexpected event for opcode 0x59fe [ 56.608580][ T6021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.621000][ T6021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.623554][ T6021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.914743][ T6021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.932743][ T6021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.097172][ T6045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.103954][ T6045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.106940][ T6045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.112776][ T6045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.741559][ T6051] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 58.830059][ T42] audit: type=1326 audit(1786594818.080:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 58.838733][ T42] audit: type=1326 audit(1786594818.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 58.847792][ T42] audit: type=1326 audit(1786594818.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.2.37" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 58.857271][ T6057] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.859977][ T6057] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.862436][ T6057] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.864880][ T6057] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.002409][ T6068] smpboot: CPU 1 is now offline [ 59.189937][ T6073] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 60.058281][ T5800] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.211340][ T5800] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 60.214963][ T5800] usb 8-1: too many configurations: 48, using maximum allowed: 8 [ 60.220390][ T5800] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 60.223375][ T5800] usb 8-1: can't read configurations, error -61 [ 60.322343][ T6090] netfs: Duplicate cookie detected [ 60.324098][ T6090] netfs: O-cookie c=00000006 [fl=4008 na=0 nA=0 s=-] [ 60.326189][ T6090] netfs: O-cookie V=00000002 [9p,syz,] [ 60.327931][ T6090] netfs: O-key=[8] 'ad37ac0400000000' [ 60.329902][ T6090] netfs: N-cookie c=00000007 [fl=8 na=0 nA=0 s=-] [ 60.332196][ T6090] netfs: N-cookie V=00000002 [9p,syz,] [ 60.333923][ T6090] netfs: N-key=[8] 'ad37ac0400000000' [ 60.358758][ T5800] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.529181][ T5800] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 60.532855][ T5800] usb 8-1: too many configurations: 48, using maximum allowed: 8 [ 60.547165][ T5800] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 60.551258][ T5800] usb 8-1: can't read configurations, error -61 [ 60.564264][ T5800] usb usb8-port1: attempt power cycle [ 60.617850][ T6099] jffs2: notice: (6099) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 60.898405][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.898457][ T5735] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.900277][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.900306][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.938577][ T5800] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.963990][ T5800] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 60.967278][ T5800] usb 8-1: too many configurations: 48, using maximum allowed: 8 [ 60.983099][ T5800] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 60.985760][ T5800] usb 8-1: can't read configurations, error -61 [ 61.119272][ T5800] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 61.157760][ T5800] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 61.164245][ T5800] usb 8-1: too many configurations: 48, using maximum allowed: 8 [ 61.189422][ T5800] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 61.193813][ T5800] usb 8-1: can't read configurations, error -61 [ 61.198653][ T5800] usb usb8-port1: unable to enumerate USB device [ 61.439520][ T6111] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 61.444996][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 61.445010][ T42] audit: type=1326 audit(1786594820.690:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 61.457799][ T42] audit: type=1326 audit(1786594820.700:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 61.469863][ T42] audit: type=1326 audit(1786594820.700:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 61.478731][ T42] audit: type=1326 audit(1786594820.700:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 61.488028][ T42] audit: type=1326 audit(1786594820.700:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 61.496560][ T42] audit: type=1326 audit(1786594820.700:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 61.504620][ T42] audit: type=1326 audit(1786594820.700:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 61.512832][ T42] audit: type=1326 audit(1786594820.700:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 62.948830][ T6133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.955019][ T6133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.957776][ T6133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.959952][ T6133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.082657][ T6139] netfs: Duplicate cookie detected [ 63.084661][ T6139] netfs: O-cookie c=00000009 [fl=4008 na=0 nA=0 s=-] [ 63.086689][ T6139] netfs: O-cookie V=00000003 [9p,syz,] [ 63.088817][ T6139] netfs: O-key=[8] 'ad37ac0400000000' [ 63.090437][ T6139] netfs: N-cookie c=0000000a [fl=8 na=0 nA=0 s=-] [ 63.092438][ T6139] netfs: N-cookie V=00000003 [9p,syz,] [ 63.094106][ T6139] netfs: N-key=[8] 'ad37ac0400000000' [ 63.126856][ T6143] jffs2: notice: (6143) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.270530][ T6147] evm: overlay not supported [ 64.454422][ T6156] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 64.471053][ T42] audit: type=1326 audit(1786594823.720:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 64.490947][ T42] audit: type=1326 audit(1786594823.730:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.1.64" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 64.978375][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.978447][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.978562][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.978644][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.048449][ T6172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.050811][ T6172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.052960][ T6172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.055668][ T6172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.168269][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.348933][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 65.352062][ T24] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 65.355920][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 65.358743][ T24] usb 6-1: can't read configurations, error -61 [ 65.498653][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.499506][ T6181] netfs: Duplicate cookie detected [ 65.503383][ T6181] netfs: O-cookie c=0000000c [fl=4008 na=0 nA=0 s=-] [ 65.505856][ T6181] netfs: O-cookie V=00000004 [9p,syz,] [ 65.507925][ T6181] netfs: O-key=[8] 'ad37ac0400000000' [ 65.509992][ T6181] netfs: N-cookie c=0000000d [fl=8 na=0 nA=0 s=-] [ 65.512175][ T6181] netfs: N-cookie V=00000004 [9p,syz,] [ 65.513905][ T6181] netfs: N-key=[8] 'ad37ac0400000000' [ 65.660711][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 65.663725][ T24] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 65.669136][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 65.672064][ T24] usb 6-1: can't read configurations, error -61 [ 65.676579][ T24] usb usb6-port1: attempt power cycle [ 65.902245][ T6184] jffs2: notice: (6184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 66.038303][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.069254][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 66.072245][ T24] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 66.075986][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 66.079241][ T24] usb 6-1: can't read configurations, error -61 [ 66.218324][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.239530][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 66.243254][ T24] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 66.248032][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 66.251533][ T24] usb 6-1: can't read configurations, error -61 [ 66.254425][ T24] usb usb6-port1: unable to enumerate USB device [ 66.855426][ T6191] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 66.860416][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 66.860428][ T42] audit: type=1326 audit(1786594826.110:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.2.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 66.875960][ T42] audit: type=1326 audit(1786594826.110:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.2.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 66.899062][ T42] audit: type=1326 audit(1786594826.120:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.2.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 66.906003][ T42] audit: type=1326 audit(1786594826.120:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.2.75" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 66.912716][ T42] audit: type=1326 audit(1786594826.120:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.2.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 66.919086][ T42] audit: type=1326 audit(1786594826.120:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.2.75" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 66.926622][ T42] audit: type=1326 audit(1786594826.120:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.2.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 66.936729][ T42] audit: type=1326 audit(1786594826.120:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.2.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 67.059648][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.062192][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.062306][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.064525][ T5093] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.077439][ T6214] netfs: Duplicate cookie detected [ 68.080248][ T6214] netfs: O-cookie c=0000000f [fl=4008 na=0 nA=0 s=-] [ 68.083013][ T6214] netfs: O-cookie V=00000005 [9p,syz,] [ 68.085236][ T6214] netfs: O-key=[8] 'ad37ac0400000000' [ 68.087433][ T6214] netfs: N-cookie c=00000010 [fl=8 na=0 nA=0 s=-] [ 68.090055][ T6214] netfs: N-cookie V=00000005 [9p,syz,] [ 68.092313][ T6214] netfs: N-key=[8] 'ad37ac0400000000' [ 68.218661][ T6219] jffs2: notice: (6219) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 68.438802][ T6222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.448377][ T6222] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 68.455070][ T6222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.458045][ T6222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.918368][ T5834] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 70.001422][ T6249] netfs: Duplicate cookie detected [ 70.003648][ T6249] netfs: O-cookie c=00000012 [fl=4008 na=0 nA=0 s=-] [ 70.006377][ T6249] netfs: O-cookie V=00000006 [9p,syz,] [ 70.008748][ T6249] netfs: O-key=[8] 'ad37ac0400000000' [ 70.010968][ T6249] netfs: N-cookie c=00000013 [fl=8 na=0 nA=0 s=-] [ 70.013609][ T6249] netfs: N-cookie V=00000006 [9p,syz,] [ 70.015948][ T6249] netfs: N-key=[8] 'ad37ac0400000000' [ 70.079267][ T5834] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 70.082186][ T5834] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 70.085915][ T5834] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 70.088366][ T5834] usb 6-1: can't read configurations, error -61 [ 70.238537][ T5834] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.404620][ T5834] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 70.409200][ T5834] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 70.424144][ T5834] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 70.427908][ T5834] usb 6-1: can't read configurations, error -61 [ 70.433324][ T5834] usb usb6-port1: attempt power cycle [ 70.498615][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.501283][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.505198][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.507899][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.848505][ T5834] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 70.872994][ T5834] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 70.877325][ T5834] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 70.889219][ T5834] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 70.893030][ T5834] usb 6-1: can't read configurations, error -61 [ 70.903365][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.907867][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.038380][ T5834] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 71.066147][ T5834] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 71.070572][ T5834] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 71.086559][ T5834] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 71.092850][ T5834] usb 6-1: can't read configurations, error -61 [ 71.098002][ T5834] usb usb6-port1: unable to enumerate USB device [ 71.110095][ T6261] jffs2: notice: (6261) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 71.886623][ T42] audit: type=1326 audit(1786594831.130:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 71.908341][ T42] audit: type=1326 audit(1786594831.130:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 71.915068][ T42] audit: type=1326 audit(1786594831.130:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 71.921787][ T42] audit: type=1326 audit(1786594831.130:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 71.929629][ T42] audit: type=1326 audit(1786594831.130:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 71.937410][ T42] audit: type=1326 audit(1786594831.130:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 71.944547][ T42] audit: type=1326 audit(1786594831.130:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 71.951375][ T42] audit: type=1326 audit(1786594831.130:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 72.063385][ T42] audit: type=1326 audit(1786594831.310:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 72.072072][ T42] audit: type=1326 audit(1786594831.310:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 72.588330][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.003221][ T6288] netfs: Duplicate cookie detected [ 73.004959][ T6288] netfs: O-cookie c=00000015 [fl=4008 na=0 nA=0 s=-] [ 73.007040][ T6288] netfs: O-cookie V=00000007 [9p,syz,] [ 73.009145][ T6288] netfs: O-key=[8] 'ad37ac0400000000' [ 73.010862][ T6288] netfs: N-cookie c=00000016 [fl=8 na=0 nA=0 s=-] [ 73.012911][ T6288] netfs: N-cookie V=00000007 [9p,syz,] [ 73.014617][ T6288] netfs: N-key=[8] 'ad37ac0400000000' [ 73.448986][ T6300] jffs2: notice: (6300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 74.538466][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.658458][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.689064][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 74.692755][ T24] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 74.697631][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 74.701116][ T24] usb 7-1: can't read configurations, error -61 [ 74.848349][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.001545][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 75.004898][ T24] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 75.011614][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 75.015206][ T24] usb 7-1: can't read configurations, error -61 [ 75.018068][ T24] usb usb7-port1: attempt power cycle [ 75.041693][ T6326] netfs: Duplicate cookie detected [ 75.043385][ T6326] netfs: O-cookie c=00000018 [fl=4008 na=0 nA=0 s=-] [ 75.045433][ T6326] netfs: O-cookie V=00000008 [9p,syz,] [ 75.047165][ T6326] netfs: O-key=[8] 'ad37ac0400000000' [ 75.049056][ T6326] netfs: N-cookie c=00000019 [fl=8 na=0 nA=0 s=-] [ 75.051087][ T6326] netfs: N-cookie V=00000008 [9p,syz,] [ 75.052784][ T6326] netfs: N-key=[8] 'ad37ac0400000000' [ 75.428326][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 76.160036][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 76.163362][ T24] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 76.167324][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 76.170113][ T24] usb 7-1: can't read configurations, error -61 [ 76.426839][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 76.739333][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.765160][ T6347] jffs2: notice: (6347) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.856655][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=6e.9d [ 77.160659][ T24] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 77.167047][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 77.169640][ T24] usb 7-1: can't read configurations, error -61 [ 77.171897][ T24] usb usb7-port1: unable to enumerate USB device [ 77.649593][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 77.649605][ T42] audit: type=1326 audit(1786594836.900:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.0.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 77.659168][ T6359] netfs: Duplicate cookie detected [ 77.660777][ T6359] netfs: O-cookie c=0000001b [fl=4008 na=0 nA=0 s=-] [ 77.662837][ T6359] netfs: O-cookie V=00000009 [9p,syz,] [ 77.664468][ T6359] netfs: O-key=[8] 'ad37ac0400000000' [ 77.666103][ T6359] netfs: N-cookie c=0000001c [fl=8 na=0 nA=0 s=-] [ 77.667996][ T6359] netfs: N-cookie V=00000009 [9p,syz,] [ 77.669815][ T6359] netfs: N-key=[8] 'ad37ac0400000000' [ 77.671676][ T42] audit: type=1326 audit(1786594836.900:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.0.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 77.678449][ T42] audit: type=1326 audit(1786594836.900:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.0.124" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709efec code=0x7ffc0000 [ 77.685258][ T42] audit: type=1326 audit(1786594836.900:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.0.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 77.695675][ T42] audit: type=1326 audit(1786594836.900:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.0.124" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 77.879161][ T42] audit: type=1326 audit(1786594837.130:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.0.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 77.887884][ T42] audit: type=1326 audit(1786594837.130:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.0.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 78.828339][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.095253][ T6389] jffs2: notice: (6389) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.015456][ T6398] netfs: Duplicate cookie detected [ 80.017549][ T6398] netfs: O-cookie c=0000001e [fl=4008 na=0 nA=0 s=-] [ 80.020645][ T6398] netfs: O-cookie V=0000000a [9p,syz,] [ 80.023114][ T6398] netfs: O-key=[8] 'ad37ac0400000000' [ 80.025308][ T6398] netfs: N-cookie c=0000001f [fl=8 na=0 nA=0 s=-] [ 80.027979][ T6398] netfs: N-cookie V=0000000a [9p,syz,] [ 80.030488][ T6398] netfs: N-key=[8] 'ad37ac0400000000' [ 80.541730][ T6412] nvme_fabrics: missing parameter 'transport=%s' [ 80.543890][ T6412] nvme_fabrics: missing parameter 'nqn=%s' [ 80.562689][ T42] audit: type=1326 audit(1786594839.810:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 80.574444][ T42] audit: type=1326 audit(1786594839.810:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 80.578895][ T6412] kvm: kvm [6411]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 80.582685][ T42] audit: type=1326 audit(1786594839.810:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 80.908429][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.143735][ T10] cfg80211: failed to load regulatory.db [ 82.283234][ T6437] jffs2: notice: (6437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.369533][ T6441] netfs: Duplicate cookie detected [ 82.371160][ T6441] netfs: O-cookie c=00000021 [fl=4008 na=0 nA=0 s=-] [ 82.373425][ T6441] netfs: O-cookie V=0000000b [9p,syz,] [ 82.375139][ T6441] netfs: O-key=[8] 'ad37ac0400000000' [ 82.376949][ T6441] netfs: N-cookie c=00000022 [fl=8 na=0 nA=0 s=-] [ 82.379182][ T6441] netfs: N-cookie V=0000000b [9p,syz,] [ 82.381400][ T6441] netfs: N-key=[8] 'ad37ac0400000000' [ 84.487939][ T6475] nvme_fabrics: missing parameter 'transport=%s' [ 84.491063][ T6475] nvme_fabrics: missing parameter 'nqn=%s' [ 84.515865][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 84.515880][ T42] audit: type=1326 audit(1786594843.760:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.2.153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 84.526661][ T42] audit: type=1326 audit(1786594843.760:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.2.153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 84.534563][ T6475] kvm: kvm [6472]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 84.538844][ T42] audit: type=1326 audit(1786594843.760:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.2.153" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 84.546475][ T42] audit: type=1326 audit(1786594843.760:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.2.153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 84.554575][ T42] audit: type=1326 audit(1786594843.760:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.2.153" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 85.707343][ T6487] jffs2: notice: (6487) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.504414][ T6512] netfs: Duplicate cookie detected [ 86.506288][ T6512] netfs: O-cookie c=00000024 [fl=4008 na=0 nA=0 s=-] [ 86.508780][ T6512] netfs: O-cookie V=0000000d [9p,syz,] [ 86.511142][ T6512] netfs: O-key=[8] 'ad37ac0400000000' [ 86.513158][ T6512] netfs: N-cookie c=00000025 [fl=8 na=0 nA=0 s=-] [ 86.515062][ T6512] netfs: N-cookie V=0000000d [9p,syz,] [ 86.516724][ T6512] netfs: N-key=[8] 'ad37ac0400000000' [ 87.526533][ T6526] jffs2: notice: (6526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.714310][ T6529] nvme_fabrics: missing parameter 'transport=%s' [ 87.716469][ T6529] nvme_fabrics: missing parameter 'nqn=%s' [ 87.730056][ T42] audit: type=1326 audit(1786594846.980:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 87.744638][ T42] audit: type=1326 audit(1786594846.980:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 87.761436][ T42] audit: type=1326 audit(1786594846.980:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.168" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 87.769860][ T6529] kvm: kvm [6528]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 87.776272][ T42] audit: type=1326 audit(1786594846.980:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 87.795822][ T42] audit: type=1326 audit(1786594846.980:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.2.168" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 88.365988][ T6545] netfs: Duplicate cookie detected [ 88.367638][ T6545] netfs: O-cookie c=00000027 [fl=4008 na=0 nA=0 s=-] [ 88.369838][ T6545] netfs: O-cookie V=0000000e [9p,syz,] [ 88.371598][ T6545] netfs: O-key=[8] 'ad37ac0400000000' [ 88.373420][ T6545] netfs: N-cookie c=00000028 [fl=8 na=0 nA=0 s=-] [ 88.377029][ T6545] netfs: N-cookie V=0000000e [9p,syz,] [ 88.377040][ T6545] netfs: N-key=[8] 'ad37ac0400000000' [ 89.972106][ T6585] jffs2: notice: (6585) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.706512][ T6590] netfs: Duplicate cookie detected [ 90.708330][ T6590] netfs: O-cookie c=0000002a [fl=4008 na=0 nA=0 s=-] [ 90.710471][ T6590] netfs: O-cookie V=0000000f [9p,syz,] [ 90.712222][ T6590] netfs: O-key=[8] 'ad37ac0400000000' [ 90.713833][ T6590] netfs: N-cookie c=0000002b [fl=8 na=0 nA=0 s=-] [ 90.716144][ T6590] netfs: N-cookie V=0000000f [9p,syz,] [ 90.717982][ T6590] netfs: N-key=[8] 'ad37ac0400000000' [ 91.304747][ T6605] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 91.359127][ T42] audit: type=1326 audit(1786594850.610:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 91.371321][ T42] audit: type=1326 audit(1786594850.610:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 91.379304][ T42] audit: type=1326 audit(1786594850.610:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 91.386879][ T42] audit: type=1326 audit(1786594850.610:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 91.393612][ T42] audit: type=1326 audit(1786594850.610:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.187" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 91.400618][ T42] audit: type=1326 audit(1786594850.610:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 91.407220][ T42] audit: type=1326 audit(1786594850.610:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 91.407248][ T42] audit: type=1326 audit(1786594850.610:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.187" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 91.407270][ T42] audit: type=1326 audit(1786594850.610:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 91.407291][ T42] audit: type=1326 audit(1786594850.610:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.3.187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 91.592301][ T6613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.594697][ T6613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.596768][ T6613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.600737][ T6613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.302350][ T6633] netfs: Duplicate cookie detected [ 92.304532][ T6633] netfs: O-cookie c=0000002d [fl=4008 na=0 nA=0 s=-] [ 92.307214][ T6633] netfs: O-cookie V=00000010 [9p,syz,] [ 92.309799][ T6633] netfs: O-key=[8] 'ad37ac0400000000' [ 92.312250][ T6633] netfs: N-cookie c=0000002e [fl=8 na=0 nA=0 s=-] [ 92.314405][ T6633] netfs: N-cookie V=00000010 [9p,syz,] [ 92.316605][ T6633] netfs: N-key=[8] 'ad37ac0400000000' [ 92.699220][ T6641] jffs2: notice: (6641) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 93.551975][ T6652] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 93.630820][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.632829][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.635548][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.637598][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.187672][ T6672] netfs: Duplicate cookie detected [ 94.189723][ T6672] netfs: O-cookie c=00000030 [fl=4008 na=0 nA=0 s=-] [ 94.191979][ T6672] netfs: O-cookie V=00000011 [9p,syz,] [ 94.193677][ T6672] netfs: O-key=[8] 'ad37ac0400000000' [ 94.195440][ T6672] netfs: N-cookie c=00000031 [fl=8 na=0 nA=0 s=-] [ 94.197449][ T6672] netfs: N-cookie V=00000011 [9p,syz,] [ 94.199454][ T6672] netfs: N-key=[8] 'ad37ac0400000000' [ 94.408923][ T6674] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.411507][ T6674] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.413690][ T6674] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.415702][ T6674] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.554795][ T6680] jffs2: notice: (6680) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.453898][ T6695] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 96.136924][ T6709] netfs: Duplicate cookie detected [ 96.139409][ T6709] netfs: O-cookie c=00000033 [fl=4008 na=0 nA=0 s=-] [ 96.143143][ T6709] netfs: O-cookie V=00000012 [9p,syz,] [ 96.145817][ T6709] netfs: O-key=[8] 'ad37ac0400000000' [ 96.148155][ T6709] netfs: N-cookie c=00000034 [fl=8 na=0 nA=0 s=-] [ 96.150867][ T6709] netfs: N-cookie V=00000012 [9p,syz,] [ 96.152948][ T6709] netfs: N-key=[8] 'ad37ac0400000000' [ 96.418425][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.418452][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.428893][ T5735] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.431026][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.635951][ T6723] jffs2: notice: (6723) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.257112][ T6715] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.260346][ T6715] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.263091][ T6715] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.265764][ T6715] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.386288][ T6747] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 98.415222][ T6745] netfs: Duplicate cookie detected [ 98.416826][ T6745] netfs: O-cookie c=00000036 [fl=4008 na=0 nA=0 s=-] [ 98.418970][ T6745] netfs: O-cookie V=00000013 [9p,syz,] [ 98.420701][ T6745] netfs: O-key=[8] 'ad37ac0400000000' [ 98.422457][ T6745] netfs: N-cookie c=00000037 [fl=8 na=0 nA=0 s=-] [ 98.424520][ T6745] netfs: N-cookie V=00000013 [9p,syz,] [ 98.426304][ T6745] netfs: N-key=[8] 'ad37ac0400000000' [ 98.498285][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.298354][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.298460][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.300978][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.397883][ T6772] jffs2: notice: (6772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.774301][ T6765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.781609][ T6765] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.786736][ T6765] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.796413][ T6765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.857627][ T6782] MTD: Couldn't look up './dev/mtdblock0': -2 [ 99.938224][ T6785] netfs: Duplicate cookie detected [ 99.939930][ T6785] netfs: O-cookie c=00000039 [fl=4008 na=0 nA=0 s=-] [ 99.942122][ T6785] netfs: O-cookie V=00000014 [9p,syz,] [ 99.943917][ T6785] netfs: O-key=[8] 'ad37ac0400000000' [ 99.945618][ T6785] netfs: N-cookie c=0000003a [fl=8 na=0 nA=0 s=-] [ 99.947647][ T6785] netfs: N-cookie V=00000014 [9p,syz,] [ 99.949802][ T6785] netfs: N-key=[8] 'ad37ac0400000000' [ 101.058568][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.216215][ T6811] jffs2: notice: (6811) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.858337][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.858393][ T5093] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.860449][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.656627][ T6814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.659163][ T6814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.661549][ T6814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.663534][ T6814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.784334][ T6830] netfs: Duplicate cookie detected [ 102.786064][ T6830] netfs: O-cookie c=0000003c [fl=4008 na=0 nA=0 s=-] [ 102.788274][ T6830] netfs: O-cookie V=00000015 [9p,syz,] [ 102.790022][ T6830] netfs: O-key=[8] 'ad37ac0400000000' [ 102.791747][ T6830] netfs: N-cookie c=0000003d [fl=8 na=0 nA=0 s=-] [ 102.793832][ T6830] netfs: N-cookie V=00000015 [9p,syz,] [ 102.795606][ T6830] netfs: N-key=[8] 'ad37ac0400000000' [ 103.594088][ T6846] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 103.855884][ T6857] jffs2: notice: (6857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.938494][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.738581][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.741250][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.743793][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.749530][ T6870] netfs: Duplicate cookie detected [ 104.751301][ T6870] netfs: O-cookie c=0000003f [fl=4008 na=0 nA=0 s=-] [ 104.753477][ T6870] netfs: O-cookie V=00000016 [9p,syz,] [ 104.755257][ T6870] netfs: O-key=[8] 'ad37ac0400000000' [ 104.756976][ T6870] netfs: N-cookie c=00000040 [fl=8 na=0 nA=0 s=-] [ 104.759093][ T6870] netfs: N-cookie V=00000016 [9p,syz,] [ 104.760849][ T6870] netfs: N-key=[8] 'ad37ac0400000000' [ 104.863429][ T6860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.874940][ T6860] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.879768][ T6860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.883074][ T6860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.469604][ T6884] smpboot: CPU 1 is now offline [ 105.504780][ T6886] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 105.643533][ T6894] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 105.931959][ T6903] jffs2: notice: (6903) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.022437][ T6906] netfs: Duplicate cookie detected [ 106.024194][ T6906] netfs: O-cookie c=00000042 [fl=4008 na=0 nA=0 s=-] [ 106.026534][ T6906] netfs: O-cookie V=00000017 [9p,syz,] [ 106.029671][ T6906] netfs: O-key=[8] 'ad37ac0400000000' [ 106.031782][ T6906] netfs: N-cookie c=00000043 [fl=8 na=0 nA=0 s=-] [ 106.034092][ T6906] netfs: N-cookie V=00000017 [9p,syz,] [ 106.035868][ T6906] netfs: N-key=[8] 'ad37ac0400000000' [ 106.108827][ T5093] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.898363][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.898477][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.902831][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.134497][ T6914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.137556][ T6914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.140717][ T6914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.143564][ T6914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.221578][ T6929] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 107.317717][ T6932] smpboot: CPU 1 is now offline [ 107.326495][ T6932] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 107.500948][ T6940] jffs2: notice: (6940) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.515168][ T6939] netfs: Duplicate cookie detected [ 107.517144][ T6939] netfs: O-cookie c=00000045 [fl=4008 na=0 nA=0 s=-] [ 107.519435][ T6939] netfs: O-cookie V=00000018 [9p,syz,] [ 107.521470][ T6939] netfs: O-key=[8] 'ad37ac0400000000' [ 107.523488][ T6939] netfs: N-cookie c=00000046 [fl=8 na=0 nA=0 s=-] [ 107.525630][ T6939] netfs: N-cookie V=00000018 [9p,syz,] [ 107.527561][ T6939] netfs: N-key=[8] 'ad37ac0400000000' [ 108.428325][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.138465][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.218377][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.221962][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.281518][ T6962] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.292863][ T6962] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.311282][ T6962] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.333579][ T6962] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.442250][ T6975] netfs: Duplicate cookie detected [ 109.443878][ T6975] netfs: O-cookie c=00000048 [fl=4008 na=0 nA=0 s=-] [ 109.446015][ T6975] netfs: O-cookie V=00000019 [9p,syz,] [ 109.447930][ T6975] netfs: O-key=[8] 'ad37ac0400000000' [ 109.449879][ T6975] netfs: N-cookie c=00000049 [fl=8 na=0 nA=0 s=-] [ 109.452609][ T6975] netfs: N-cookie V=00000019 [9p,syz,] [ 109.454842][ T6975] netfs: N-key=[8] 'ad37ac0400000000' [ 109.537793][ T6978] smpboot: CPU 1 is now offline [ 109.572239][ T6983] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 110.335941][ T6999] jffs2: notice: (6999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.579089][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.298357][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.379688][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.379786][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.541217][ T7025] netfs: Duplicate cookie detected [ 111.542941][ T7025] netfs: O-cookie c=0000004b [fl=4008 na=0 nA=0 s=-] [ 111.545108][ T7025] netfs: O-cookie V=0000001a [9p,syz,] [ 111.546893][ T7025] netfs: O-key=[8] 'ad37ac0400000000' [ 111.548790][ T7025] netfs: N-cookie c=0000004c [fl=8 na=0 nA=0 s=-] [ 111.550889][ T7025] netfs: N-cookie V=0000001a [9p,syz,] [ 111.552752][ T7025] netfs: N-key=[8] 'ad37ac0400000000' [ 111.609858][ T7010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.612310][ T7010] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.614537][ T7010] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.616672][ T7010] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.923453][ T7042] smpboot: CPU 1 is now offline [ 111.937502][ T7042] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 111.943703][ T19] ------------[ cut here ]------------ [ 111.944261][ T19] [ 111.944266][ T19] ====================================================== [ 111.944283][ T19] WARNING: possible circular locking dependency detected [ 111.944290][ T19] syzkaller #0 Tainted: G L [ 111.944295][ T19] ------------------------------------------------------ [ 111.944298][ T19] migration/0/19 is trying to acquire lock: [ 111.944304][ T19] ffffffff8eaf3f60 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 111.944360][ T19] [ 111.944360][ T19] but task is already holding lock: [ 111.944363][ T19] ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 111.944386][ T19] [ 111.944386][ T19] which lock already depends on the new lock. [ 111.944386][ T19] [ 111.944391][ T19] [ 111.944391][ T19] the existing dependency chain (in reverse order) is: [ 111.944395][ T19] [ 111.944395][ T19] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 111.944407][ T19] lock_acquire+0x1b9/0x370 [ 111.944417][ T19] _raw_spin_lock_nested+0x31/0x40 [ 111.944431][ T19] raw_spin_rq_lock_nested+0x2c/0x140 [ 111.944441][ T19] _task_rq_lock+0xcf/0x500 [ 111.944451][ T19] cgroup_move_task+0x81/0x320 [ 111.944465][ T19] css_set_move_task+0x285/0x600 [ 111.944475][ T19] cgroup_post_fork+0x1f9/0x9a0 [ 111.944490][ T19] copy_process+0x6b7a/0x8030 [ 111.944503][ T19] kernel_clone+0x176/0x9d0 [ 111.944514][ T19] user_mode_thread+0xcc/0x110 [ 111.944525][ T19] rest_init+0x21/0x260 [ 111.944534][ T19] start_kernel+0x48e/0x490 [ 111.944551][ T19] x86_64_start_reservations+0x24/0x30 [ 111.944566][ T19] x86_64_start_kernel+0x12b/0x130 [ 111.944581][ T19] common_startup_64+0x13e/0x158 [ 111.944599][ T19] [ 111.944599][ T19] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 111.944611][ T19] lock_acquire+0x1b9/0x370 [ 111.944619][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 111.944630][ T19] try_to_wake_up+0xbd/0x1c90 [ 111.944640][ T19] __wake_up_common+0x135/0x1f0 [ 111.944656][ T19] __wake_up+0x31/0x60 [ 111.944668][ T19] tty_port_default_wakeup+0x47/0x60 [ 111.944685][ T19] serial8250_tx_chars+0x68f/0x860 [ 111.944699][ T19] serial8250_handle_irq_locked+0x770/0x9a0 [ 111.944713][ T19] serial8250_handle_irq.part.0+0xb4/0x530 [ 111.944727][ T19] serial8250_default_handle_irq+0xc2/0x280 [ 111.944742][ T19] serial8250_interrupt+0xf8/0x1b0 [ 111.944751][ T19] __handle_irq_event_percpu+0x232/0x880 [ 111.944764][ T19] handle_irq_event+0xab/0x1e0 [ 111.944775][ T19] handle_edge_irq+0x34c/0x950 [ 111.944787][ T19] __common_interrupt+0xd8/0x2f0 [ 111.944798][ T19] common_interrupt+0xb9/0xe0 [ 111.944807][ T19] asm_common_interrupt+0x26/0x40 [ 111.944819][ T19] pv_native_safe_halt+0xf/0x20 [ 111.944832][ T19] default_idle+0x9/0x10 [ 111.944846][ T19] default_idle_call+0x6c/0xb0 [ 111.944860][ T19] do_idle+0x3a7/0x5b0 [ 111.944870][ T19] cpu_startup_entry+0x4f/0x60 [ 111.944881][ T19] start_secondary+0x21d/0x2d0 [ 111.944898][ T19] common_startup_64+0x13e/0x158 [ 111.944912][ T19] [ 111.944912][ T19] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 111.944925][ T19] lock_acquire+0x1b9/0x370 [ 111.944933][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 111.944944][ T19] __wake_up+0x1c/0x60 [ 111.944956][ T19] tty_port_default_wakeup+0x47/0x60 [ 111.944970][ T19] serial8250_tx_chars+0x68f/0x860 [ 111.944984][ T19] serial8250_handle_irq_locked+0x770/0x9a0 [ 111.944999][ T19] serial8250_handle_irq.part.0+0xb4/0x530 [ 111.945014][ T19] serial8250_default_handle_irq+0xc2/0x280 [ 111.945029][ T19] serial8250_interrupt+0xf8/0x1b0 [ 111.945037][ T19] __handle_irq_event_percpu+0x232/0x880 [ 111.945049][ T19] handle_irq_event+0xab/0x1e0 [ 111.945060][ T19] handle_edge_irq+0x34c/0x950 [ 111.945070][ T19] __common_interrupt+0xd8/0x2f0 [ 111.945079][ T19] common_interrupt+0xb9/0xe0 [ 111.945088][ T19] asm_common_interrupt+0x26/0x40 [ 111.945097][ T19] pv_native_safe_halt+0xf/0x20 [ 111.945109][ T19] default_idle+0x9/0x10 [ 111.945123][ T19] default_idle_call+0x6c/0xb0 [ 111.945138][ T19] do_idle+0x3a7/0x5b0 [ 111.945147][ T19] cpu_startup_entry+0x4f/0x60 [ 111.945157][ T19] start_secondary+0x21d/0x2d0 [ 111.945167][ T19] common_startup_64+0x13e/0x158 [ 111.945181][ T19] [ 111.945181][ T19] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 111.945194][ T19] lock_acquire+0x1b9/0x370 [ 111.945202][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 111.945213][ T19] serial8250_console_write+0x177/0x1a50 [ 111.945228][ T19] console_flush_one_record+0x790/0xe50 [ 111.945240][ T19] console_unlock+0x103/0x260 [ 111.945250][ T19] vprintk_emit+0x407/0x6b0 [ 111.945261][ T19] _printk+0xcf/0x110 [ 111.945270][ T19] register_console.cold+0xc0/0x248 [ 111.945280][ T19] univ8250_console_init+0x6f/0x80 [ 111.945294][ T19] console_init+0x3d5/0x5b0 [ 111.945305][ T19] start_kernel+0x314/0x490 [ 111.945319][ T19] x86_64_start_reservations+0x24/0x30 [ 111.945334][ T19] x86_64_start_kernel+0x12b/0x130 [ 111.945348][ T19] common_startup_64+0x13e/0x158 [ 111.945362][ T19] [ 111.945362][ T19] -> #0 (console_owner){....}-{0:0}: [ 111.945374][ T19] check_prev_add+0xeb/0xe60 [ 111.945389][ T19] __lock_acquire+0x136c/0x1a40 [ 111.945398][ T19] lock_acquire+0x1b9/0x370 [ 111.945406][ T19] console_lock_spinning_enable+0x72/0x80 [ 111.945417][ T19] console_flush_one_record+0x739/0xe50 [ 111.945428][ T19] console_unlock+0x103/0x260 [ 111.945438][ T19] vprintk_emit+0x407/0x6b0 [ 111.945449][ T19] _printk+0xcf/0x110 [ 111.945457][ T19] __report_bug.cold+0x34/0x141 [ 111.945470][ T19] report_bug+0xb2/0x220 [ 111.945483][ T19] handle_bug+0x16a/0x2a0 [ 111.945497][ T19] exc_invalid_op+0x17/0x50 [ 111.945504][ T19] asm_exc_invalid_op+0x1a/0x20 [ 111.945513][ T19] update_rq_clock+0x40a/0xd20 [ 111.945523][ T19] __schedule+0x1e2d/0x6730 [ 111.945534][ T19] schedule+0xdd/0x2c0 [ 111.945545][ T19] smpboot_thread_fn+0x893/0xaa0 [ 111.945558][ T19] kthread+0x370/0x450 [ 111.945571][ T19] ret_from_fork+0x72b/0xd50 [ 111.945584][ T19] ret_from_fork_asm+0x1a/0x30 [ 111.945598][ T19] [ 111.945598][ T19] other info that might help us debug this: [ 111.945598][ T19] [ 111.945601][ T19] Chain exists of: [ 111.945601][ T19] console_owner --> &p->pi_lock --> &rq->__lock [ 111.945601][ T19] [ 111.945614][ T19] Possible unsafe locking scenario: [ 111.945614][ T19] [ 111.945617][ T19] CPU0 CPU1 [ 111.945620][ T19] ---- ---- [ 111.945622][ T19] lock(&rq->__lock); [ 111.945628][ T19] lock(&p->pi_lock); [ 111.945634][ T19] lock(&rq->__lock); [ 111.945640][ T19] lock(console_owner); [ 111.945646][ T19] [ 111.945646][ T19] *** DEADLOCK *** [ 111.945646][ T19] [ 111.945648][ T19] 3 locks held by migration/0/19: [ 111.945653][ T19] #0: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 111.945676][ T19] #1: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 111.945697][ T19] #2: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 111.945721][ T19] [ 111.945721][ T19] stack backtrace: [ 111.945729][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.945743][ T19] Tainted: [L]=SOFTLOCKUP [ 111.945747][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.945752][ T19] Stopper: 0x0 <- 0x0 [ 111.945761][ T19] Call Trace: [ 111.945765][ T19] [ 111.945769][ T19] dump_stack_lvl+0x100/0x190 [ 111.945779][ T19] print_circular_bug.cold+0x178/0x1c7 [ 111.945796][ T19] check_noncircular+0x146/0x160 [ 111.945812][ T19] check_prev_add+0xeb/0xe60 [ 111.945827][ T19] __lock_acquire+0x136c/0x1a40 [ 111.945838][ T19] lock_acquire+0x1b9/0x370 [ 111.945846][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 111.945858][ T19] ? console_lock_spinning_enable+0x4a/0x80 [ 111.945871][ T19] console_lock_spinning_enable+0x72/0x80 [ 111.945882][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 111.945898][ T19] console_flush_one_record+0x739/0xe50 [ 111.945911][ T19] ? __pfx_console_flush_one_record+0x10/0x10 [ 111.945925][ T19] ? is_printk_cpu_sync_owner+0x32/0x40 [ 111.945939][ T19] console_unlock+0x103/0x260 [ 111.945951][ T19] ? __pfx_console_unlock+0x10/0x10 [ 111.945963][ T19] ? do_raw_spin_unlock+0x145/0x1e0 [ 111.945975][ T19] ? _printk+0xcf/0x110 [ 111.945984][ T19] vprintk_emit+0x407/0x6b0 [ 111.945996][ T19] ? __pfx_vprintk_emit+0x10/0x10 [ 111.946008][ T19] ? __bfs+0x150/0x2a0 [ 111.946021][ T19] ? rcu_is_watching+0x12/0xc0 [ 111.946035][ T19] _printk+0xcf/0x110 [ 111.946044][ T19] ? __pfx__printk+0x10/0x10 [ 111.946054][ T19] ? rcu_is_watching+0x12/0xc0 [ 111.946065][ T19] ? __report_bug.cold+0x24/0x141 [ 111.946075][ T19] ? __report_bug+0x2ab/0x440 [ 111.946088][ T19] __report_bug.cold+0x34/0x141 [ 111.946097][ T19] ? update_rq_clock+0x40a/0xd20 [ 111.946109][ T19] ? __pfx___report_bug+0x10/0x10 [ 111.946122][ T19] ? pick_eevdf+0x198/0x860 [ 111.946137][ T19] ? update_rq_clock+0x40a/0xd20 [ 111.946147][ T19] report_bug+0xb2/0x220 [ 111.946160][ T19] ? update_rq_clock+0x40a/0xd20 [ 111.946171][ T19] handle_bug+0x16a/0x2a0 [ 111.946186][ T19] exc_invalid_op+0x17/0x50 [ 111.946195][ T19] asm_exc_invalid_op+0x1a/0x20 [ 111.946204][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 111.946216][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 111.946226][ T19] RSP: 0018:ffffc9000045fc28 EFLAGS: 00010046 [ 111.946242][ T19] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 111.946248][ T19] RDX: 0000000000000046 RSI: ffffffff8e17ce3f RDI: ffffffff8c3fe580 [ 111.946254][ T19] RBP: ffffc9000045fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 111.946260][ T19] R10: ffff888024bb5007 R11: 0000001a105c2800 R12: ffffffff9121ee84 [ 111.946288][ T19] R13: ffff88802b33c4e0 R14: ffff88802a858000 R15: ffff88802b23c198 [ 111.946297][ T19] ? update_rq_clock+0x9c/0xd20 [ 111.946309][ T19] __schedule+0x1e2d/0x6730 [ 111.946324][ T19] ? __pfx___schedule+0x10/0x10 [ 111.946335][ T19] ? find_held_lock+0x2b/0x80 [ 111.946347][ T19] ? schedule+0x225/0x2c0 [ 111.946360][ T19] schedule+0xdd/0x2c0 [ 111.946371][ T19] smpboot_thread_fn+0x893/0xaa0 [ 111.946384][ T19] ? kthread+0x13a/0x450 [ 111.946399][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 111.946411][ T19] kthread+0x370/0x450 [ 111.946423][ T19] ? __pfx_kthread+0x10/0x10 [ 111.946437][ T19] ret_from_fork+0x72b/0xd50 [ 111.946449][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 111.946461][ T19] ? __switch_to+0x800/0x10f0 [ 111.946470][ T19] ? __pfx_kthread+0x10/0x10 [ 111.946483][ T19] ret_from_fork_asm+0x1a/0x30 [ 111.946499][ T19] [ 112.297978][ T19] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 112.297988][ T19] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: migration/0/19 [ 112.303538][ T19] Modules linked in: [ 112.304794][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.308132][ T19] Tainted: [L]=SOFTLOCKUP [ 112.309505][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.312653][ T19] Stopper: 0x0 <- 0x0 [ 112.313944][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 112.315772][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 112.322678][ T19] RSP: 0018:ffffc9000045fc28 EFLAGS: 00010046 [ 112.324793][ T19] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 112.327734][ T19] RDX: 0000000000000046 RSI: ffffffff8e17ce3f RDI: ffffffff8c3fe580 [ 112.330504][ T19] RBP: ffffc9000045fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 112.333412][ T19] R10: ffff888024bb5007 R11: 0000001a105c2800 R12: ffffffff9121ee84 [ 112.336084][ T19] R13: ffff88802b33c4e0 R14: ffff88802a858000 R15: ffff88802b23c198 [ 112.338887][ T19] FS: 0000000000000000(0000) GS:ffff888096bf3000(0000) knlGS:0000000000000000 [ 112.342030][ T19] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.344620][ T19] CR2: 0000000000000000 CR3: 000000004cff1000 CR4: 0000000000352ef0 [ 112.347563][ T19] DR0: ffffffffffff7fff DR1: 00000000000001f8 DR2: 0000000000000002 [ 112.350040][ T19] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 112.352586][ T19] Call Trace: [ 112.353648][ T19] [ 112.354653][ T19] __schedule+0x1e2d/0x6730 [ 112.356144][ T19] ? __pfx___schedule+0x10/0x10 [ 112.357995][ T19] ? find_held_lock+0x2b/0x80 [ 112.359865][ T19] ? schedule+0x225/0x2c0 [ 112.361489][ T19] schedule+0xdd/0x2c0 [ 112.363069][ T19] smpboot_thread_fn+0x893/0xaa0 [ 112.364887][ T19] ? kthread+0x13a/0x450 [ 112.366548][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 112.368655][ T19] kthread+0x370/0x450 [ 112.370053][ T19] ? __pfx_kthread+0x10/0x10 [ 112.371785][ T19] ret_from_fork+0x72b/0xd50 [ 112.373604][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 112.375543][ T19] ? __switch_to+0x800/0x10f0 [ 112.377194][ T19] ? __pfx_kthread+0x10/0x10 [ 112.378889][ T19] ret_from_fork_asm+0x1a/0x30 [ 112.380519][ T19] [ 112.381767][ T19] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.384525][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.388440][ T19] Tainted: [L]=SOFTLOCKUP [ 112.390129][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.393760][ T19] Stopper: 0x0 <- 0x0 [ 112.395240][ T19] Call Trace: [ 112.396413][ T19] [ 112.397375][ T19] dump_stack_lvl+0x100/0x190 [ 112.398879][ T19] vpanic+0x552/0x970 [ 112.400147][ T19] ? __pfx_vpanic+0x10/0x10 [ 112.401585][ T19] ? lock_release+0x24d/0x310 [ 112.403081][ T19] panic+0xd1/0xe0 [ 112.404276][ T19] ? __pfx_panic+0x10/0x10 [ 112.405694][ T19] ? check_panic_on_warn+0x1f/0x90 [ 112.407502][ T19] check_panic_on_warn.cold+0x19/0x34 [ 112.409468][ T19] ? update_rq_clock+0x40a/0xd20 [ 112.411251][ T19] __warn.cold+0x191/0x318 [ 112.412675][ T19] __report_bug+0x30f/0x440 [ 112.414120][ T19] ? update_rq_clock+0x40a/0xd20 [ 112.415693][ T19] ? __pfx___report_bug+0x10/0x10 [ 112.417283][ T19] ? pick_eevdf+0x198/0x860 [ 112.418736][ T19] ? update_rq_clock+0x40a/0xd20 [ 112.420291][ T19] report_bug+0xb2/0x220 [ 112.421653][ T19] ? update_rq_clock+0x40a/0xd20 [ 112.423224][ T19] handle_bug+0x16a/0x2a0 [ 112.424628][ T19] exc_invalid_op+0x17/0x50 [ 112.426074][ T19] asm_exc_invalid_op+0x1a/0x20 [ 112.427620][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 112.429357][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 112.435349][ T19] RSP: 0018:ffffc9000045fc28 EFLAGS: 00010046 [ 112.437274][ T19] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 112.439752][ T19] RDX: 0000000000000046 RSI: ffffffff8e17ce3f RDI: ffffffff8c3fe580 [ 112.442219][ T19] RBP: ffffc9000045fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 112.444689][ T19] R10: ffff888024bb5007 R11: 0000001a105c2800 R12: ffffffff9121ee84 [ 112.447164][ T19] R13: ffff88802b33c4e0 R14: ffff88802a858000 R15: ffff88802b23c198 [ 112.449628][ T19] ? update_rq_clock+0x9c/0xd20 [ 112.451172][ T19] __schedule+0x1e2d/0x6730 [ 112.452622][ T19] ? __pfx___schedule+0x10/0x10 [ 112.454160][ T19] ? find_held_lock+0x2b/0x80 [ 112.455687][ T19] ? schedule+0x225/0x2c0 [ 112.457073][ T19] schedule+0xdd/0x2c0 [ 112.458372][ T19] smpboot_thread_fn+0x893/0xaa0 [ 112.459934][ T19] ? kthread+0x13a/0x450 [ 112.461272][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 112.462987][ T19] kthread+0x370/0x450 [ 112.464281][ T19] ? __pfx_kthread+0x10/0x10 [ 112.465766][ T19] ret_from_fork+0x72b/0xd50 [ 112.467238][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 112.468847][ T19] ? __switch_to+0x800/0x10f0 [ 112.470342][ T19] ? __pfx_kthread+0x10/0x10 [ 112.471831][ T19] ret_from_fork_asm+0x1a/0x30 [ 112.473358][ T19] [ 113.553391][ T19] Shutting down cpus with NMI [ 113.555485][ T19] Kernel Offset: disabled [ 113.556826][ T19] Rebooting in 86400 seconds..