last executing test programs: 1m51.795831151s ago: executing program 3 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x14, 0x4, @loopback}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 1m51.397292088s ago: executing program 3 (id=144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002001100851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x24) 1m51.161879757s ago: executing program 3 (id=146): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) r4 = socket(0x10, 0x80002, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @local, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) 1m50.084644097s ago: executing program 3 (id=148): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000940)=ANY=[], 0x2, 0x376, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x9fd6fb031326140d) timerfd_create(0x0, 0x0) r3 = fsopen(&(0x7f0000000800)='cgroup2\x00', 0x1) rename(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xa4840, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x14e174135c0b87af) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="440000002100df4d2abd700000000000020010000000000000000000140011006e657464657673696d3000000000000008000200640101010c001400", @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1m46.885460981s ago: executing program 3 (id=155): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 1m44.575800646s ago: executing program 3 (id=160): getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) 1m26.893238378s ago: executing program 32 (id=160): getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) 1m12.743953729s ago: executing program 0 (id=207): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x804) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) 1m10.890430679s ago: executing program 0 (id=211): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000022c0)={0x1a, {"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", 0x1000}}, 0x1006) setrlimit(0xf, &(0x7f0000000000)={0x10, 0x4}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x20000023893) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000260000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000080)={0x204, 0x65, 0x9, 0x200, 0x2}) 1m9.900249894s ago: executing program 0 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, 0x0, 0x4) write$binfmt_misc(r4, 0x0, 0xfffffecc) close_range(r4, r4, 0x0) vmsplice(r3, &(0x7f00000004c0)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0x8) 1m8.472418212s ago: executing program 0 (id=214): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000002d80)=""/53, 0x0, 0x7000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x32, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x32, 0x37, 0x65, 0x61, 0x61, 0x38, 0x39, 0x64]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x35}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r5) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000800)={0x2, 0x6, 0x1, 0x1, 0x1, [0x9fd4, 0x4, 0xd8, 0x6]}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x1021) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000840)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 1m5.484521661s ago: executing program 0 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x8012, r3, 0x2000) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x400000000000247, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close(r4) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x17c1) 1m4.324492974s ago: executing program 0 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, 0x0, 0x4) write$binfmt_misc(r3, 0x0, 0xfffffecc) close_range(r3, r3, 0x0) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0x8) 49.229916544s ago: executing program 33 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, 0x0, 0x4) write$binfmt_misc(r3, 0x0, 0xfffffecc) close_range(r3, r3, 0x0) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0x8) 15.288806568s ago: executing program 1 (id=294): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r0, 0x0, r0, &(0x7f0000000100)='./mnt\x00') fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x1}) eventfd2(0xa9a, 0x80000) r1 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, 0x0) 13.990345335s ago: executing program 5 (id=240): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/33, 0x21}, 0x2}, {{&(0x7f00000005c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/81, 0x51}], 0x1}, 0x7}], 0x3, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setregid(0x0, 0x0) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) splice(r1, 0x0, r2, 0x0, 0x400c5, 0x5) 12.837965378s ago: executing program 5 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000002c0)={0x74, r1, 0x1, 0x70bd2a, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x4, 0xc78}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x1}}, 0x0, @random=0x7, 0x80, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xfe, 0x9, 0x6afb}}, @void, @void, @val={0x72, 0x6}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xfff9, 0x4, 0x12, 0x10, 0x6]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x2c048010) 11.967927713s ago: executing program 5 (id=302): r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000082c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000800)=@generic={0x0, 0x7}, 0x18) 11.642898617s ago: executing program 2 (id=303): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) writev(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_generic(0x11, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x1c, 0x3fc, 0x0, 0x3, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ptrace$setregs(0xf, r2, 0xfffffffffffffc01, &(0x7f0000000700)="9e18868437595e0c6b722fa01d9a7c0af6ed09d8431ff3316272aeaf7a405e2730ac38a3bedd64ca91df3042f4569050afa9cb79efd1212627bfcdc538c13e9f4a15b9cc0cf8aafa19da50b77d0835319dc34a001ff3fc71fbc1de5c45f7cba533675d67e5e73a78c6265b347f") ftruncate(0xffffffffffffffff, 0x81ff) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0xffffffac) 10.632228626s ago: executing program 1 (id=305): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e000000200"/122], 0x590) close(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x40) r3 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r3, 0x61e1, 0x0) 10.434364459s ago: executing program 2 (id=306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.090679506s ago: executing program 4 (id=308): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/33, 0x21}, 0x2}, {{&(0x7f00000005c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/81, 0x51}], 0x1}, 0x7}], 0x3, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setregid(0x0, 0x0) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) splice(r0, 0x0, r1, 0x0, 0x400c5, 0x5) 10.016972018s ago: executing program 1 (id=309): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_pidfd_open(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x408cd, 0x0) 4.811773667s ago: executing program 2 (id=310): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) r4 = socket(0x10, 0x80002, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @local, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) 4.773055184s ago: executing program 1 (id=311): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1010000, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file0\x00', 0x48008, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in=@private=0xa010100, 0x4e23, 0x5, 0x4e22, 0x5, 0xa, 0x80, 0x20, 0xc}, {0x1000, 0x70d09ffb, 0x8, 0x4, 0x7fffffffffffffff, 0x6, 0x7e9, 0x1}, {0x9, 0xff, 0x1, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d2, 0x6c}, 0xa, @in6=@mcast1, 0x3507, 0x1, 0x0, 0x1, 0x4, 0x2, 0x1}}, 0xe8) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xeda0bb86e16ab71c, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x10, 0x1) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x200008001]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680), 0x4000, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'bond0\x00'}, @IFLA_PORT_SELF={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x44, 0x0, 0x1, 0x3}, 0x10) socket$netlink(0x10, 0x3, 0x4) 4.73762664s ago: executing program 4 (id=312): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000022c0)={0x1a, {"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", 0x1000}}, 0x1006) setrlimit(0xf, &(0x7f0000000000)={0x10, 0x4}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x20000023893) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000260000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000080)={0x204, 0x65, 0x9, 0x200, 0x2}) 3.831039131s ago: executing program 4 (id=313): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2.326428202s ago: executing program 2 (id=314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendfile(r0, r0, 0x0, 0x0) 2.116807147s ago: executing program 1 (id=315): syz_emit_ethernet(0xa2, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800412000940000000000019078ac1e0001ac1414aa890f9a00000000ac141438640101000100831fa100000000ac1e0101ac1e0101ac1414aa0a010101640101020000000005009078e00000e0420000000000000000110000ac1414aa00000000830300070300442c00030a01010200"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r4, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) 2.028629622s ago: executing program 4 (id=316): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) 1.727921532s ago: executing program 2 (id=317): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 1.653995974s ago: executing program 2 (id=318): syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4}]}]}, 0xf8}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.651261105s ago: executing program 4 (id=319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_pidfd_open(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x408cd, 0x0) 1.07951286s ago: executing program 1 (id=320): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/33, 0x21}, 0x2}, {{&(0x7f00000005c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/81, 0x51}], 0x1}, 0x7}], 0x3, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setregid(0x0, 0x0) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) splice(r0, 0x0, r1, 0x0, 0x400c5, 0x5) 0s ago: executing program 4 (id=321): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 77.102955][ T5760] cgroup: Unknown subsys name 'net' [ 77.238228][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.861581][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.464092][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.473895][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.490016][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.509903][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.519435][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.539390][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.560326][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.575070][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.587150][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.594923][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.602934][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.610953][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.628202][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.637509][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.637867][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.646662][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.653655][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.667483][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.668362][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.675715][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.683841][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.696787][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.697058][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.712126][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.161255][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 81.219064][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.319438][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 81.392338][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.400947][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.408325][ T5772] bridge_slave_0: entered allmulticast mode [ 81.415758][ T5772] bridge_slave_0: entered promiscuous mode [ 81.434496][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.442097][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.449408][ T5772] bridge_slave_1: entered allmulticast mode [ 81.456421][ T5772] bridge_slave_1: entered promiscuous mode [ 81.464403][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 81.554267][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.561667][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.569305][ T5775] bridge_slave_0: entered allmulticast mode [ 81.576529][ T5775] bridge_slave_0: entered promiscuous mode [ 81.603336][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.610660][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.617861][ T5775] bridge_slave_1: entered allmulticast mode [ 81.625579][ T5775] bridge_slave_1: entered promiscuous mode [ 81.646008][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.660040][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.734551][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.747124][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.777169][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.784698][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.792059][ T5779] bridge_slave_0: entered allmulticast mode [ 81.799964][ T5779] bridge_slave_0: entered promiscuous mode [ 81.846120][ T5772] team0: Port device team_slave_0 added [ 81.856606][ T5775] team0: Port device team_slave_0 added [ 81.863863][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.871289][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.878745][ T5779] bridge_slave_1: entered allmulticast mode [ 81.886358][ T5779] bridge_slave_1: entered promiscuous mode [ 81.893794][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.901585][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.908921][ T5782] bridge_slave_0: entered allmulticast mode [ 81.915941][ T5782] bridge_slave_0: entered promiscuous mode [ 81.926285][ T5772] team0: Port device team_slave_1 added [ 81.933900][ T5775] team0: Port device team_slave_1 added [ 81.950770][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.958038][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.965494][ T5782] bridge_slave_1: entered allmulticast mode [ 81.972986][ T5782] bridge_slave_1: entered promiscuous mode [ 82.057720][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.068261][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.076408][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.102887][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.118014][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.128088][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.135387][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.161746][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.176328][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.186830][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.195620][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.225264][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.247814][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.275424][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.282620][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.309003][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.366925][ T5782] team0: Port device team_slave_0 added [ 82.388258][ T5779] team0: Port device team_slave_0 added [ 82.396831][ T5779] team0: Port device team_slave_1 added [ 82.407269][ T5782] team0: Port device team_slave_1 added [ 82.461517][ T5775] hsr_slave_0: entered promiscuous mode [ 82.468012][ T5775] hsr_slave_1: entered promiscuous mode [ 82.504395][ T5772] hsr_slave_0: entered promiscuous mode [ 82.510977][ T5772] hsr_slave_1: entered promiscuous mode [ 82.517362][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.525894][ T5772] Cannot create hsr debugfs directory [ 82.544476][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.551602][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.577628][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.591304][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.598304][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.625862][ T5783] Bluetooth: hci0: command tx timeout [ 82.631821][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.644880][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.651986][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.678013][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.690240][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.697261][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.723303][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.778677][ T5783] Bluetooth: hci3: command tx timeout [ 82.784476][ T5783] Bluetooth: hci1: command tx timeout [ 82.790832][ T5781] Bluetooth: hci2: command tx timeout [ 82.876637][ T5779] hsr_slave_0: entered promiscuous mode [ 82.883237][ T5779] hsr_slave_1: entered promiscuous mode [ 82.890374][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.898072][ T5779] Cannot create hsr debugfs directory [ 82.951935][ T5782] hsr_slave_0: entered promiscuous mode [ 82.958338][ T5782] hsr_slave_1: entered promiscuous mode [ 82.965141][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.972788][ T5782] Cannot create hsr debugfs directory [ 83.337588][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.356660][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.381363][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.393081][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.436161][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.460638][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.486947][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.522975][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.556382][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.582326][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.596552][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.607668][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.715111][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.740957][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.753825][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.765177][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.853895][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.935535][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.947482][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.964131][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.991228][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.998623][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.012803][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.036766][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.045437][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.052650][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.071319][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.078545][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.106261][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.113984][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.139425][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.146639][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.158642][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.165818][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.190775][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.267479][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.311185][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.318339][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.357281][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.382268][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.389564][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.602007][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.699828][ T5781] Bluetooth: hci0: command tx timeout [ 84.814928][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.859463][ T5781] Bluetooth: hci2: command tx timeout [ 84.864968][ T5781] Bluetooth: hci1: command tx timeout [ 84.870875][ T5783] Bluetooth: hci3: command tx timeout [ 84.897550][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.018125][ T5775] veth0_vlan: entered promiscuous mode [ 85.057753][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.076624][ T5779] veth0_vlan: entered promiscuous mode [ 85.092218][ T5775] veth1_vlan: entered promiscuous mode [ 85.137899][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.145704][ T5779] veth1_vlan: entered promiscuous mode [ 85.183259][ T5775] veth0_macvtap: entered promiscuous mode [ 85.207892][ T5775] veth1_macvtap: entered promiscuous mode [ 85.287269][ T5772] veth0_vlan: entered promiscuous mode [ 85.297747][ T5779] veth0_macvtap: entered promiscuous mode [ 85.311174][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.335547][ T5782] veth0_vlan: entered promiscuous mode [ 85.348037][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.363714][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.372924][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.382574][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.394659][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.414771][ T5779] veth1_macvtap: entered promiscuous mode [ 85.428185][ T5772] veth1_vlan: entered promiscuous mode [ 85.444171][ T5782] veth1_vlan: entered promiscuous mode [ 85.477361][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.492362][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.510780][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.524630][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.535263][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.546739][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.600960][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.621131][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.630574][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.640267][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.706588][ T5782] veth0_macvtap: entered promiscuous mode [ 85.715185][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.741256][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.796910][ T5782] veth1_macvtap: entered promiscuous mode [ 85.833118][ T5772] veth0_macvtap: entered promiscuous mode [ 85.841851][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.864001][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.883799][ T5772] veth1_macvtap: entered promiscuous mode [ 85.909581][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.917962][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.994912][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.005728][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.016970][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.028309][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.041564][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.082732][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.094388][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.105411][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.117198][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.127450][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.149632][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.180328][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.192249][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.203874][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.214199][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.225319][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.237222][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.325756][ T5833] Zero length message leads to an empty skb [ 86.383341][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.395487][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.690597][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.779189][ T5781] Bluetooth: hci0: command tx timeout [ 86.851853][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.940604][ T5783] Bluetooth: hci1: command tx timeout [ 86.946447][ T5781] Bluetooth: hci2: command tx timeout [ 86.952258][ T5783] Bluetooth: hci3: command tx timeout [ 86.967453][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.055409][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.065642][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.081397][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.104515][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.114958][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.128309][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.218482][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.227273][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.257412][ T5835] syz.1.5[5835]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.292215][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.310274][ T5835] loop1: detected capacity change from 0 to 256 [ 87.329573][ T5835] exfat: Deprecated parameter 'namecase' [ 87.331798][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.378491][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.387285][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.404977][ T5835] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 87.521893][ T5837] loop3: detected capacity change from 0 to 256 [ 87.564657][ T5837] ======================================================= [ 87.564657][ T5837] WARNING: The mand mount option has been deprecated and [ 87.564657][ T5837] and is ignored by this kernel. Remove the mand [ 87.564657][ T5837] option from the mount to silence this warning. [ 87.564657][ T5837] ======================================================= [ 87.742688][ T5837] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 87.782486][ T5837] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 1) [ 87.858525][ T5837] exFAT-fs (loop3): failed to load alloc-bitmap [ 87.864968][ T5837] exFAT-fs (loop3): failed to recognize exfat type [ 87.932867][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.943660][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.954511][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.963365][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.865673][ T5086] Bluetooth: hci0: command tx timeout [ 89.018917][ T5086] Bluetooth: hci3: command tx timeout [ 89.018955][ T5783] Bluetooth: hci2: command tx timeout [ 89.028616][ T5086] Bluetooth: hci1: command tx timeout [ 89.320221][ T5845] loop3: detected capacity change from 0 to 512 [ 89.370180][ T5845] EXT4-fs (loop3): 1 truncate cleaned up [ 89.377388][ T5845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.487169][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.331746][ T5854] loop3: detected capacity change from 0 to 512 [ 90.347055][ T5854] journal_path: Lookup failure for './file1' [ 90.353446][ T5854] EXT4-fs: error: could not find journal device path [ 90.942502][ T5859] loop3: detected capacity change from 0 to 512 [ 91.007155][ T5859] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.020569][ T5859] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 91.036072][ T5859] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.10: Corrupt directory, running e2fsck is recommended [ 91.068096][ T5859] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 91.076605][ T5859] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.10: corrupted in-inode xattr: e_name out of bounds [ 91.099784][ T5859] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.10: couldn't read orphan inode 15 (err -117) [ 91.114267][ T5859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.142373][ T5859] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.155376][ T5859] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 91.166043][ T5859] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.10: Corrupt directory, running e2fsck is recommended [ 91.181401][ T5859] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.193475][ T5859] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 91.204021][ T5859] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.10: Corrupt directory, running e2fsck is recommended [ 91.219248][ T5859] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.233847][ T5859] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 91.251575][ T5859] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.10: Corrupt directory, running e2fsck is recommended [ 91.283207][ T5859] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.296699][ T5859] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #2: block 3: comm syz.3.10: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 91.357486][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.522892][ T5862] loop3: detected capacity change from 0 to 4096 [ 91.537463][ T5862] EXT4-fs: inline encryption not supported [ 91.723013][ T5862] EXT4-fs (loop3): Test dummy encryption mode enabled [ 91.737696][ T5862] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c018, mo2=0003] [ 91.774579][ T5862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.955990][ T5862] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 92.001287][ T28] audit: type=1800 audit(1775946202.951:2): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 92.086019][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.204795][ T5872] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.232147][ T9] cfg80211: failed to load regulatory.db [ 92.518824][ T5876] loop3: detected capacity change from 0 to 512 [ 92.672268][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.348649][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.356553][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.412474][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.458719][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.523925][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.837069][ T5888] loop1: detected capacity change from 0 to 16 [ 93.877683][ T5888] erofs: (device loop1): mounted with root inode @ nid 36. [ 93.956392][ T5889] loop2: detected capacity change from 0 to 4096 [ 93.991962][ T5889] EXT4-fs: inline encryption not supported [ 94.039683][ T5889] EXT4-fs: inline encryption not supported [ 94.068541][ T5889] ext4: Unknown parameter 'smackfstransmute' [ 94.361102][ T5897] loop1: detected capacity change from 0 to 512 [ 95.182475][ T5897] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.18: iget: bad i_size value: 38620345925642 [ 95.328608][ T5897] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.18: couldn't read orphan inode 15 (err -117) [ 95.392272][ T5897] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.471415][ T5905] loop2: detected capacity change from 0 to 512 [ 95.501476][ T5905] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.566489][ T5905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.732852][ T5905] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.791793][ T5905] EXT4-fs (loop2): 1 truncate cleaned up [ 95.817520][ T5905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.818827][ T5901] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 96.886783][ T5910] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 96.900373][ T5910] EXT4-fs (loop1): This should not happen!! Data will be lost [ 96.900373][ T5910] [ 96.910245][ T5910] EXT4-fs (loop1): Total free blocks count 0 [ 96.916325][ T5910] EXT4-fs (loop1): Free/Dirty block details [ 96.922415][ T5910] EXT4-fs (loop1): free_blocks=0 [ 96.927467][ T5910] EXT4-fs (loop1): dirty_blocks=7048 [ 96.933009][ T5910] EXT4-fs (loop1): Block reservation details [ 96.939188][ T5910] EXT4-fs (loop1): i_reserved_data_blocks=7048 [ 97.009257][ T5157] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.154788][ T34] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 97.189729][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.225256][ T5157] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 97.261312][ T5157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.289395][ T5157] usb 4-1: Product: syz [ 97.293738][ T5157] usb 4-1: Manufacturer: syz [ 97.298392][ T5157] usb 4-1: SerialNumber: syz [ 97.326664][ T5157] usb 4-1: config 0 descriptor?? [ 97.428723][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.526478][ T5917] loop1: detected capacity change from 0 to 256 [ 97.618579][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 97.638557][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.662503][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.679268][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.701725][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.731662][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.745449][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.767880][ T5919] loop1: detected capacity change from 0 to 128 [ 97.776211][ T5157] usb 4-1: Firmware version (0.0) predates our first public release. [ 97.785963][ T5157] usb 4-1: Please update to version 0.2 or newer [ 97.801475][ T5919] EXT4-fs: inline encryption not supported [ 97.809041][ T5881] usb 1-1: config 0 descriptor?? [ 97.818109][ T5919] EXT4-fs (loop1): Test dummy encryption mode enabled [ 97.841665][ T5919] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.869258][ T5919] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.888707][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 97.902303][ T5919] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.921296][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.939907][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.950585][ T9] usb 3-1: config 0 has no interface number 0 [ 97.956788][ T9] usb 3-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.970158][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 97.984397][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 98.001443][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.009684][ T9] usb 3-1: Product: syz [ 98.016276][ T9] usb 3-1: Manufacturer: syz [ 98.021231][ T9] usb 3-1: SerialNumber: syz [ 98.062768][ T9] usb 3-1: config 0 descriptor?? [ 98.175926][ T5157] usb 4-1: USB disconnect, device number 2 [ 98.214108][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.243710][ T5881] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 98.262291][ T5881] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 98.275719][ T5881] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 98.284652][ T5881] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 98.315353][ T9] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 98.316537][ T5881] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 98.361837][ T9] cx231xx 3-1:0.1: Not found matching IAD interface [ 98.391575][ T9] usb 3-1: USB disconnect, device number 2 [ 98.409062][ T5881] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 98.440371][ T5881] microsoft 0003:045E:07DA.0001: no inputs found [ 98.447047][ T5881] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 98.469421][ T5928] loop1: detected capacity change from 0 to 128 [ 98.499796][ T5881] usb 1-1: USB disconnect, device number 2 [ 98.519730][ T5928] EXT4-fs: inline encryption not supported [ 98.576962][ T5928] EXT4-fs (loop1): Test dummy encryption mode enabled [ 98.653772][ T5928] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.679043][ T5927] fido_id[5927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 98.688075][ T5928] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.899309][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.932319][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.078704][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 99.097370][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.112767][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.126969][ T9] usb 3-1: config 0 has no interface number 0 [ 99.136772][ T9] usb 3-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.154841][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 99.176150][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 99.193214][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.202187][ T9] usb 3-1: Product: syz [ 99.206718][ T9] usb 3-1: Manufacturer: syz [ 99.216933][ T9] usb 3-1: SerialNumber: syz [ 99.236342][ T9] usb 3-1: config 0 descriptor?? [ 99.611401][ T5947] loop0: detected capacity change from 0 to 512 [ 99.664757][ T9] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 99.694164][ T5948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.714768][ T5947] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.32: iget: bad i_size value: 38620345925642 [ 99.730254][ T9] cx231xx 3-1:0.1: Not found matching IAD interface [ 99.773076][ T5947] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.32: couldn't read orphan inode 15 (err -117) [ 99.842885][ T5947] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.884473][ T9] usb 3-1: USB disconnect, device number 3 [ 102.194980][ T5946] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.32: bg 0: block 5: invalid block bitmap [ 102.260843][ T5946] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 102.273517][ T5946] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.273517][ T5946] [ 102.283280][ T5946] EXT4-fs (loop0): Total free blocks count 0 [ 102.289404][ T5946] EXT4-fs (loop0): Free/Dirty block details [ 102.296296][ T5946] EXT4-fs (loop0): free_blocks=0 [ 102.301537][ T5946] EXT4-fs (loop0): dirty_blocks=5768 [ 102.306963][ T5946] EXT4-fs (loop0): Block reservation details [ 102.313026][ T5946] EXT4-fs (loop0): i_reserved_data_blocks=5768 [ 102.375288][ T5963] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 102.486812][ T5968] bridge_slave_0: left allmulticast mode [ 102.492798][ T5968] bridge_slave_0: left promiscuous mode [ 102.499908][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.581755][ T5968] bridge_slave_1: left allmulticast mode [ 102.587618][ T5968] bridge_slave_1: left promiscuous mode [ 102.594069][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.673143][ T5968] bond0: (slave bond_slave_0): Releasing backup interface [ 103.179412][ T5968] bond0: (slave bond_slave_1): Releasing backup interface [ 103.232207][ T5970] loop2: detected capacity change from 0 to 128 [ 103.285176][ T5970] EXT4-fs: inline encryption not supported [ 103.336997][ T5968] team0: Port device team_slave_0 removed [ 103.376744][ T5970] EXT4-fs (loop2): Test dummy encryption mode enabled [ 103.423403][ T5970] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.449159][ T5968] team0: Port device team_slave_1 removed [ 103.455981][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.463710][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.492068][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.499654][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.507347][ T5970] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.596724][ T5968] syz.3.37 (5968) used greatest stack depth: 20296 bytes left [ 103.770695][ T28] audit: type=1400 audit(1775946214.731:3): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5975 comm="syz.3.39" [ 103.791273][ T5976] loop3: detected capacity change from 0 to 512 [ 103.846257][ T5976] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.39: inode has both inline data and extents flags [ 103.861108][ T5976] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.39: couldn't read orphan inode 15 (err -117) [ 103.884196][ T5976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.042113][ T5782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.652290][ T5994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.993733][ T6008] loop1: detected capacity change from 0 to 2048 [ 106.024094][ T6008] EXT4-fs: quotafile must be on filesystem root [ 106.110282][ T5998] loop2: detected capacity change from 0 to 40427 [ 106.179551][ T5915] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.188870][ T5998] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 106.195845][ T5998] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 106.216552][ T5998] F2FS-fs (loop2): invalid crc value [ 106.293925][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.522666][ T6011] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 107.361987][ T5998] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 107.369606][ T5998] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.468098][ T28] audit: type=1800 audit(1775946218.431:4): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.47" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 107.838932][ T5998] syz.2.47: attempt to access beyond end of device [ 107.838932][ T5998] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.921008][ T5998] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 108.160582][ T6042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.388419][ C1] sched: RT throttling activated [ 111.014946][ T6048] xt_hashlimit: size too large, truncated to 1048576 [ 115.226779][ T6079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.526856][ T6091] loop0: detected capacity change from 0 to 512 [ 116.742106][ T6091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.769725][ T6091] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.089335][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.153510][ T6105] loop0: detected capacity change from 0 to 1024 [ 118.200582][ T6105] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.263817][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.460518][ T6105] 9pnet_fd: Insufficient options for proto=fd [ 118.473822][ T6105] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 118.543915][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.833482][ T6116] loop1: detected capacity change from 0 to 40427 [ 121.598613][ T6122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.008368][ T6126] tipc: Started in network mode [ 122.033258][ T6126] tipc: Node identity 00000000000000000000009b02359f01, cluster identity 4711 [ 122.091971][ T6126] tipc: Enabling of bearer rejected, failed to enable media [ 125.728329][ T6184] Illegal XDP return value 89722936 on prog (id 8) dev syz_tun, expect packet loss! [ 125.785660][ T6187] loop1: detected capacity change from 0 to 256 [ 125.793350][ T6187] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.814319][ T6187] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.914160][ T6188] netlink: 'syz.3.104': attribute type 3 has an invalid length. [ 126.682106][ T6193] overlayfs: failed to resolve './file0': -2 [ 127.375149][ T5881] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.394874][ T6198] loop1: detected capacity change from 0 to 512 [ 127.402748][ T6198] EXT4-fs: Ignoring removed i_version option [ 127.409160][ T6198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.685168][ T6209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.868760][ T6198] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.110: bad orphan inode 1 [ 127.880908][ T6198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.989243][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 128.121918][ T5881] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.188512][ T5881] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.200508][ T5881] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 128.220384][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.227117][ T5881] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 128.237369][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.247864][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.266468][ T5881] usb 4-1: config 0 descriptor?? [ 128.439702][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 128.690780][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.707328][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.732595][ T5881] hid (null): global environment stack underflow [ 128.739297][ T5881] hid (null): global environment stack underflow [ 128.747225][ T5881] hid (null): bogus close delimiter [ 128.946344][ T5157] usb 4-1: USB disconnect, device number 3 [ 128.955854][ T5812] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.193614][ T5812] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 129.210599][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.215439][ T6224] loop0: detected capacity change from 0 to 512 [ 129.224933][ T5812] usb 2-1: Product: syz [ 129.230264][ T5812] usb 2-1: Manufacturer: syz [ 129.234951][ T5812] usb 2-1: SerialNumber: syz [ 129.247051][ T6224] EXT4-fs: Ignoring removed orlov option [ 129.255260][ T5812] usb 2-1: config 0 descriptor?? [ 129.266510][ T6224] EXT4-fs (loop0): Test dummy encryption mode enabled [ 129.278515][ T6224] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.321846][ T6224] EXT4-fs (loop0): 1 truncate cleaned up [ 129.338310][ T6224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.752694][ T5812] usb 2-1: Firmware: major: 43, minor: 0, hardware type: ATUSB (0) [ 130.617418][ T5812] usb 2-1: failed to fetch extended address, random address set [ 130.634489][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.691256][ T5812] usb 2-1: USB disconnect, device number 2 [ 131.059800][ T6235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.248172][ T6240] loop0: detected capacity change from 0 to 128 [ 131.357529][ T6240] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 132.871605][ T6245] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 133.085811][ T6249] loop0: detected capacity change from 0 to 1024 [ 133.116420][ T6249] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 133.116420][ T6249] [ 133.183727][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.196121][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.453477][ T5829] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.610109][ T5829] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.656024][ T5829] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 134.703667][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.758727][ T5829] usb 2-1: Product: syz [ 134.762992][ T5829] usb 2-1: Manufacturer: syz [ 134.767623][ T5829] usb 2-1: SerialNumber: syz [ 135.865498][ T5829] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 136.474814][ T5829] usb 2-1: USB disconnect, device number 3 [ 138.346790][ T6276] loop1: detected capacity change from 0 to 128 [ 138.358766][ T5881] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.373668][ T6276] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 138.442219][ T5767] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.833699][ T5881] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 139.873571][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.952939][ T5881] usb 1-1: Product: syz [ 139.988967][ T5881] usb 1-1: Manufacturer: syz [ 139.998541][ T5881] usb 1-1: SerialNumber: syz [ 140.007282][ T6282] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 140.043849][ T5881] usb 1-1: config 0 descriptor?? [ 140.110064][ T5881] usb 1-1: can't set config #0, error -71 [ 140.160156][ T5881] usb 1-1: USB disconnect, device number 3 [ 140.386415][ T6288] loop0: detected capacity change from 0 to 4096 [ 140.409578][ T6288] EXT4-fs: inline encryption not supported [ 140.442945][ T6288] EXT4-fs (loop0): Test dummy encryption mode enabled [ 140.473814][ T6288] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 140.512958][ T6288] System zones: 0-5 [ 140.545261][ T6288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.808642][ T6288] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 143.753048][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.764647][ T6317] loop1: detected capacity change from 0 to 128 [ 144.065496][ T6317] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 145.236855][ T6324] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 146.087959][ T6329] bridge_slave_0: left allmulticast mode [ 146.094306][ T6329] bridge_slave_0: left promiscuous mode [ 146.100339][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.117915][ T6329] bridge_slave_1: left allmulticast mode [ 146.124823][ T6329] bridge_slave_1: left promiscuous mode [ 146.130759][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.163149][ T6329] bond0: (slave bond_slave_0): Releasing backup interface [ 146.266679][ T6329] bond0: (slave bond_slave_1): Releasing backup interface [ 146.480590][ T6329] team0: Port device team_slave_0 removed [ 146.734585][ T6329] team0: Port device team_slave_1 removed [ 146.742434][ T6329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.750129][ T6329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.040617][ T6329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.051664][ T6329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.550855][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 149.371069][ T6352] netlink: 96 bytes leftover after parsing attributes in process `syz.1.162'. [ 149.498575][ T5783] Bluetooth: hci4: command 0x1003 tx timeout [ 149.506639][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 151.470173][ T6360] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 154.483211][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 154.492212][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 158.025922][ T6395] loop1: detected capacity change from 0 to 512 [ 158.063357][ T6395] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.177: iget: bad i_size value: 38620345925642 [ 158.103134][ T6395] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.177: couldn't read orphan inode 15 (err -117) [ 158.121003][ T6395] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.640693][ T6394] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.177: bg 0: block 5: invalid block bitmap [ 164.660483][ T6397] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 164.737453][ T6394] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 164.750267][ T6394] EXT4-fs (loop1): This should not happen!! Data will be lost [ 164.750267][ T6394] [ 164.760902][ T6394] EXT4-fs (loop1): Total free blocks count 0 [ 164.766951][ T6394] EXT4-fs (loop1): Free/Dirty block details [ 164.772997][ T6394] EXT4-fs (loop1): free_blocks=0 [ 164.777987][ T6394] EXT4-fs (loop1): dirty_blocks=16000 [ 164.783485][ T6394] EXT4-fs (loop1): Block reservation details [ 164.789779][ T6394] EXT4-fs (loop1): i_reserved_data_blocks=16000 [ 164.848871][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 164.901092][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 164.901092][ T11] [ 166.075697][ T6345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.398509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 166.411501][ T6416] 9pnet_fd: Insufficient options for proto=fd [ 166.497197][ T5811] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.563930][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.585512][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.599028][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.630192][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.639374][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.646882][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.683137][ T5811] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 166.698701][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.712346][ T5811] usb 1-1: Product: syz [ 166.716667][ T5811] usb 1-1: Manufacturer: syz [ 166.721766][ T5811] usb 1-1: SerialNumber: syz [ 166.731225][ T5811] usb 1-1: config 0 descriptor?? [ 167.275026][ T5811] usb 1-1: Firmware: major: 43, minor: 121, hardware type: ATUSB (0) [ 167.407812][ T6424] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 167.669387][ T5811] usb 1-1: failed to fetch extended address, random address set [ 168.442399][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.728735][ T5086] Bluetooth: hci4: command tx timeout [ 169.186583][ T5811] usb 1-1: USB disconnect, device number 4 [ 169.212651][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.054803][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.532194][ T6448] loop1: detected capacity change from 0 to 512 [ 170.554790][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.624299][ T6448] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.190: iget: bad i_size value: 38620345925642 [ 170.642411][ T6417] chnl_net:caif_netlink_parms(): no params data found [ 170.669044][ T6448] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.190: couldn't read orphan inode 15 (err -117) [ 170.689308][ T6448] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.778557][ T5086] Bluetooth: hci4: command tx timeout [ 170.928633][ T6450] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 172.119836][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 172.230984][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.280422][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.287730][ T6417] bridge_slave_0: entered allmulticast mode [ 172.333841][ T6417] bridge_slave_0: entered promiscuous mode [ 172.370101][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.377295][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.398838][ T6417] bridge_slave_1: entered allmulticast mode [ 172.406359][ T6417] bridge_slave_1: entered promiscuous mode [ 172.988469][ T5086] Bluetooth: hci4: command tx timeout [ 173.873912][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.939073][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.018545][ T5086] Bluetooth: hci4: command tx timeout [ 175.183641][ T6417] team0: Port device team_slave_0 added [ 175.493539][ T6417] team0: Port device team_slave_1 added [ 175.589955][ T6490] ptrace attach of "./syz-executor exec"[5772] was attempted by "./syz-executor exec"[6490] [ 175.669162][ T6490] capability: warning: `syz.0.201' uses 32-bit capabilities (legacy support in use) [ 175.747149][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'. [ 175.770671][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.777712][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.861313][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.894241][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.910900][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.938133][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.118835][ T5880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.203878][ T6417] hsr_slave_0: entered promiscuous mode [ 176.211446][ T6417] hsr_slave_1: entered promiscuous mode [ 176.371807][ T6417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.483117][ T5880] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 176.499688][ T6417] Cannot create hsr debugfs directory [ 176.632521][ T5880] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 176.793547][ T5880] usb 1-1: config 220 has no interface number 2 [ 176.825718][ T5880] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 178.240758][ T61] hsr_slave_0: left promiscuous mode [ 178.267841][ T61] hsr_slave_1: left promiscuous mode [ 178.384033][ T61] veth1_macvtap: left promiscuous mode [ 178.393883][ T5880] usb 1-1: config 220 interface 0 has no altsetting 0 [ 178.401160][ T5880] usb 1-1: config 220 interface 76 has no altsetting 0 [ 178.408077][ T5880] usb 1-1: config 220 interface 1 has no altsetting 0 [ 178.422304][ T61] veth1_vlan: left promiscuous mode [ 178.427974][ T61] veth0_vlan: left promiscuous mode [ 178.738541][ T5880] usb 1-1: string descriptor 0 read error: -71 [ 178.744976][ T5880] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 178.768984][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.791284][ T5880] usb 1-1: can't set config #220, error -71 [ 178.819454][ T5880] usb 1-1: USB disconnect, device number 5 [ 179.044160][ T6524] netlink: set zone limit has 8 unknown bytes [ 183.775194][ T61] bond0 (unregistering): Released all slaves [ 184.043577][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 184.380474][ T6417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.631700][ T6558] loop1: detected capacity change from 0 to 32768 [ 184.828220][ T6558] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.931611][ T6417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.991153][ T6417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.013138][ T6558] XFS (loop1): Ending clean mount [ 185.047481][ T6417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.071592][ T6558] XFS (loop1): Quotacheck needed: Please wait. [ 185.226424][ T6558] XFS (loop1): Quotacheck: Done. [ 185.593834][ T28] audit: type=1800 audit(1775946296.501:5): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.216" name="file0" dev="loop1" ino=4420 res=0 errno=0 [ 185.642847][ T6574] xt_hashlimit: size too large, truncated to 1048576 [ 186.110515][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 187.145576][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.311178][ T6417] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.368281][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.375607][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.527744][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.535002][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.391353][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.700134][ T6417] veth0_vlan: entered promiscuous mode [ 193.726474][ T6417] veth1_vlan: entered promiscuous mode [ 194.704368][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.710885][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.825442][ T6417] veth0_macvtap: entered promiscuous mode [ 194.881788][ T6417] veth1_macvtap: entered promiscuous mode [ 194.933007][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.978780][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.008954][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.038656][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.071073][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.111756][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.148545][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.188471][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.215204][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.265076][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.317043][ T6417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.368485][ T6417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.388713][ T6417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.418474][ T6417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.564675][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.610708][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.712692][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.731815][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.043910][ T6675] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 203.769951][ T5157] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 205.939626][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.973563][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.984279][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.000634][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.012804][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.021868][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.577862][ T5157] usb 5-1: device descriptor read/all, error -71 [ 206.938757][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 206.945051][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 208.229603][ T5783] Bluetooth: hci2: command tx timeout [ 208.273045][ T3454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.298448][ T5783] Bluetooth: hci2: command tx timeout [ 210.489867][ T6789] bridge_slave_0: left allmulticast mode [ 210.495607][ T6789] bridge_slave_0: left promiscuous mode [ 210.501504][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.546217][ T6789] bridge_slave_1: left allmulticast mode [ 210.552330][ T6789] bridge_slave_1: left promiscuous mode [ 210.559103][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.849081][ T6789] bond0: (slave bond_slave_0): Releasing backup interface [ 210.914475][ T6789] bond0: (slave bond_slave_1): Releasing backup interface [ 211.771153][ T6789] team0: Port device team_slave_0 removed [ 211.840019][ T6789] team0: Port device team_slave_1 removed [ 211.846895][ T6789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.854504][ T6789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.898881][ T6789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.906362][ T6789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.194440][ T6747] chnl_net:caif_netlink_parms(): no params data found [ 212.381848][ T5783] Bluetooth: hci2: command tx timeout [ 213.271985][ T3454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.049104][ T3454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.118933][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.126815][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.252685][ T6747] bridge_slave_0: entered allmulticast mode [ 214.374555][ T6747] bridge_slave_0: entered promiscuous mode [ 214.458908][ T5783] Bluetooth: hci2: command tx timeout [ 214.489276][ T6837] random: crng reseeded on system resumption [ 214.499390][ T3454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.578705][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.643003][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.665747][ T6747] bridge_slave_1: entered allmulticast mode [ 214.702569][ T6747] bridge_slave_1: entered promiscuous mode [ 214.841194][ T6747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.881654][ T6747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.175948][ T6747] team0: Port device team_slave_0 added [ 215.252036][ T6747] team0: Port device team_slave_1 added [ 215.789245][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.796301][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.159311][ T6747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.199163][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.206300][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.289316][ T6747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.918216][ T6747] hsr_slave_0: entered promiscuous mode [ 216.959554][ T6747] hsr_slave_1: entered promiscuous mode [ 216.978948][ T6747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.999803][ T6747] Cannot create hsr debugfs directory [ 217.713531][ T6862] netlink: 'syz.2.264': attribute type 3 has an invalid length. [ 218.342415][ T6747] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.384279][ T6747] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.505266][ T6747] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.553491][ T6747] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.683377][ T3454] hsr_slave_0: left promiscuous mode [ 218.699498][ T3454] hsr_slave_1: left promiscuous mode [ 218.722877][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.738585][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.767718][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.783470][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.806509][ T3454] bridge_slave_1: left allmulticast mode [ 218.822950][ T3454] bridge_slave_1: left promiscuous mode [ 218.846735][ T3454] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.169565][ T6887] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 219.197903][ T3454] bridge_slave_0: left allmulticast mode [ 219.211288][ T3454] bridge_slave_0: left promiscuous mode [ 219.217142][ T3454] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.261412][ T6896] xt_hashlimit: size too large, truncated to 1048576 [ 219.325833][ T3454] veth1_macvtap: left promiscuous mode [ 219.373923][ T3454] veth1_vlan: left promiscuous mode [ 219.403174][ T3454] veth0_vlan: left promiscuous mode [ 224.840716][ T3454] team0 (unregistering): Port device team_slave_1 removed [ 224.960472][ T3454] team0 (unregistering): Port device team_slave_0 removed [ 225.038340][ T3454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.132187][ T3454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.394319][ T6940] loop4: detected capacity change from 0 to 131072 [ 226.439869][ T6940] F2FS-fs (loop4): invalid crc value [ 226.461111][ T6940] F2FS-fs (loop4): Found nat_bits in checkpoint [ 226.518093][ T6940] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 227.132730][ T6940] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 227.168201][ T6940] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 227.444570][ T6945] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 227.885712][ T3454] bond0 (unregistering): Released all slaves [ 228.244128][ T6928] bridge1: entered promiscuous mode [ 228.250041][ T6928] bridge1: entered allmulticast mode [ 228.432951][ T6949] fuse: Bad value for 'fd' [ 228.543420][ T6747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.619604][ T6747] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.649576][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.656824][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.771431][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.778682][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.875600][ T6747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.910815][ T6747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.334653][ T6980] netlink: set zone limit has 8 unknown bytes [ 231.625397][ T6983] futex_wake_op: syz.1.287 tries to shift op by 144; fix this program [ 232.015323][ T6747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.538505][ T7012] ipt_REJECT: TCP_RESET invalid for non-tcp [ 235.793375][ T6747] veth0_vlan: entered promiscuous mode [ 235.845512][ T6747] veth1_vlan: entered promiscuous mode [ 235.923458][ T6747] veth0_macvtap: entered promiscuous mode [ 235.976445][ T6747] veth1_macvtap: entered promiscuous mode [ 236.077207][ T6747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.114281][ T6747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.178038][ T6747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.306092][ T6747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.319192][ T7024] random: crng reseeded on system resumption [ 236.378601][ T6747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.420174][ T6747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.442951][ T6747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.478518][ T6747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.502435][ T6747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.539423][ T6747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.015465][ T7031] loop4: detected capacity change from 0 to 512 [ 237.164523][ T7031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.234356][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.255162][ T7031] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.309682][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.393706][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.403377][ T7024] netlink: 116 bytes leftover after parsing attributes in process `syz.4.293'. [ 237.418763][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.556052][ T6417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.975616][ T7117] loop1: detected capacity change from 0 to 128 [ 247.084722][ T7120] bridge_slave_0: left allmulticast mode [ 247.091404][ T7120] bridge_slave_0: left promiscuous mode [ 247.097908][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.634359][ T7117] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 247.767048][ T7120] bridge_slave_1: left allmulticast mode [ 247.772972][ T7120] bridge_slave_1: left promiscuous mode [ 247.779358][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.026335][ T7125] loop4: detected capacity change from 0 to 2048 [ 248.052543][ T7120] bond0: (slave bond_slave_0): Releasing backup interface [ 248.072981][ T7120] bond0: (slave bond_slave_1): Releasing backup interface [ 248.121052][ T7125] EXT4-fs: quotafile must be on filesystem root [ 248.367013][ T7120] team0: Port device team_slave_0 removed [ 248.615950][ T7120] team0: Port device team_slave_1 removed [ 248.623135][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.631221][ T7120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.879921][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.887418][ T7120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.989346][ T7132] netlink: 'syz.4.313': attribute type 3 has an invalid length. [ 249.334417][ T7127] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 251.482800][ T7154] netlink: 64 bytes leftover after parsing attributes in process `syz.2.318'. [ 278.628422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 280.778637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 281.188429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 283.748404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 285.898718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 286.308476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 288.458695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 288.868429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 291.428484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 342.737677][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.088342][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 359.095362][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12/2:b..l [ 359.103562][ C0] rcu: (detected by 0, t=10502 jiffies, g=23717, q=339 ncpus=2) [ 359.111312][ C0] task:kworker/u4:1 state:R running task stack:22152 pid:12 ppid:2 flags:0x00004000 [ 359.123072][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 359.129383][ C0] Call Trace: [ 359.132682][ C0] [ 359.135630][ C0] __schedule+0x1553/0x45a0 [ 359.140180][ C0] ? asan.module_dtor+0x20/0x20 [ 359.145046][ C0] ? mark_lock+0x94/0x320 [ 359.149393][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 359.155409][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 359.160706][ C0] preempt_schedule_irq+0xbf/0x150 [ 359.165821][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 359.171575][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 359.177412][ C0] irqentry_exit+0x67/0x70 [ 359.181842][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.187836][ C0] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 359.193573][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 359.213202][ C0] RSP: 0018:ffffc900001175f8 EFLAGS: 00000206 [ 359.219286][ C0] RAX: 443c403e2dc06f00 RBX: ffff88801ba45a00 RCX: 443c403e2dc06f00 [ 359.227273][ C0] RDX: ffff88801ba45a00 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60 [ 359.235260][ C0] RBP: 0000000000000001 R08: 0001000000000000 R09: 0030004000060003 [ 359.243251][ C0] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: 0000000000000004 [ 359.251238][ C0] R13: 0000000000000246 R14: ffffffff8d1320a0 R15: ffff88801ba46580 [ 359.259277][ C0] rhltable_lookup+0x18b/0x7c0 [ 359.264068][ C0] ? sta_info_hash_lookup+0x60/0x60 [ 359.269284][ C0] ? mutex_lock_nested+0x20/0x20 [ 359.274239][ C0] ? read_lock_is_recursive+0x20/0x20 [ 359.279628][ C0] ? sta_info_get+0x4f/0x2a0 [ 359.284231][ C0] sta_info_get+0x125/0x2a0 [ 359.288768][ C0] ieee80211_ibss_rx_queued_mgmt+0x108e/0x2c80 [ 359.294960][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xe9d/0x2c80 [ 359.301225][ C0] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 359.306973][ C0] ? mark_lock+0x94/0x320 [ 359.311338][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 359.317354][ C0] ? lock_chain_count+0x20/0x20 [ 359.322219][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 359.328133][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 359.333366][ C0] ? skb_dequeue+0x124/0x160 [ 359.337969][ C0] ieee80211_iface_work+0x717/0xc70 [ 359.343185][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.348423][ C0] cfg80211_wiphy_work+0x225/0x260 [ 359.353592][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 359.359328][ C0] process_scheduled_works+0xa5d/0x15d0 [ 359.364978][ C0] ? worker_attach_to_pool+0x380/0x380 [ 359.370514][ C0] ? assign_work+0x3d2/0x5d0 [ 359.375143][ C0] worker_thread+0xa55/0xfc0 [ 359.379775][ C0] kthread+0x2fa/0x390 [ 359.383855][ C0] ? pr_cont_work+0x560/0x560 [ 359.388563][ C0] ? kthread_blkcg+0xd0/0xd0 [ 359.393173][ C0] ret_from_fork+0x48/0x80 [ 359.397601][ C0] ? kthread_blkcg+0xd0/0xd0 [ 359.402201][ C0] ret_from_fork_asm+0x11/0x20 [ 359.407005][ C0] [ 359.410033][ C0] rcu: rcu_preempt kthread starved for 1666 jiffies! g23717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 359.421232][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 359.431228][ C0] rcu: RCU grace-period kthread stack dump: [ 359.437121][ C0] task:rcu_preempt state:R running task stack:26440 pid:17 ppid:2 flags:0x00004000 [ 359.447909][ C0] Call Trace: [ 359.451200][ C0] [ 359.454147][ C0] __schedule+0x1553/0x45a0 [ 359.458705][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x120 [ 359.464619][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 359.470536][ C0] ? asan.module_dtor+0x20/0x20 [ 359.475404][ C0] ? enqueue_timer+0x23d/0x550 [ 359.480194][ C0] ? __mod_timer+0x984/0xdb0 [ 359.484823][ C0] schedule+0xbd/0x170 [ 359.488915][ C0] schedule_timeout+0x188/0x2d0 [ 359.493782][ C0] ? console_conditional_schedule+0x40/0x40 [ 359.499690][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 359.505603][ C0] ? update_process_times+0x1b0/0x1b0 [ 359.510998][ C0] ? prepare_to_swait_event+0x339/0x360 [ 359.516568][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 359.521430][ C0] ? rcu_gp_init+0x1162/0x1560 [ 359.526227][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 359.531091][ C0] ? dump_blkd_tasks+0x810/0x810 [ 359.536040][ C0] ? rcu_gp_init+0x1560/0x1560 [ 359.540814][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 359.545678][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.550890][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 359.556107][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 359.560709][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 359.565830][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 359.570784][ C0] ? __kthread_parkme+0x162/0x1c0 [ 359.575843][ C0] kthread+0x2fa/0x390 [ 359.579940][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 359.585076][ C0] ? kthread_blkcg+0xd0/0xd0 [ 359.589694][ C0] ret_from_fork+0x48/0x80 [ 359.594123][ C0] ? kthread_blkcg+0xd0/0xd0 [ 359.598727][ C0] ret_from_fork_asm+0x11/0x20 [ 359.603536][ C0] [ 359.606591][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 359.612933][ C0] Sending NMI from CPU 0 to CPUs 1: [ 359.618176][ C1] NMI backtrace for cpu 1 [ 359.618202][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 359.618217][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 359.618226][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 359.618252][ C1] Code: 29 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 e3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 359.618265][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 359.618280][ C1] RAX: 5caf4e591375c000 RBX: ffffffff8162a8f1 RCX: 5caf4e591375c000 [ 359.618296][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 359.618307][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 359.618318][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 359.618330][ C1] R13: dffffc0000000000 R14: 1ffff1100344c780 R15: 0000000000000000 [ 359.618341][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 359.618354][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.618365][ C1] CR2: 00007f39a34bb23a CR3: 00000000623fc000 CR4: 00000000003506e0 [ 359.618380][ C1] Call Trace: [ 359.618387][ C1] [ 359.618392][ C1] default_idle+0x13/0x20 [ 359.618413][ C1] default_idle_call+0x6c/0xa0 [ 359.618437][ C1] do_idle+0x221/0x590 [ 359.618461][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 359.618481][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 359.618512][ C1] cpu_startup_entry+0x43/0x60 [ 359.618531][ C1] start_secondary+0xee/0xf0 [ 359.618549][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 359.618579][ C1]