last executing test programs: 13.617765371s ago: executing program 3 (id=173): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, 0x0, 0x0) 12.579145508s ago: executing program 3 (id=174): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(r0, &(0x7f0000002000)='./file0\x00', 0x84) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c12, &(0x7f0000000300)={[{}, {@map_acorn}, {@nocompress}, {@map_off}, {@hide}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@check_strict}, {@overriderock}, {@unhide}, {}]}, 0x4, 0xa42, &(0x7f0000001180)="$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") mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, 0x0, 0x1448}, 0x835e, 0x40, 0x0, {0x1}}) io_uring_enter(r2, 0x2800, 0xfffffffa, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/59) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x11) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000000)={0x3, 0x9}) write(0xffffffffffffffff, &(0x7f0000000600)='high-s', 0x6) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x40) truncate(&(0x7f0000000080)='./file1\x00', 0xffffffffffffff01) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000080000000000000004000000"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, 0x0, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 9.339748621s ago: executing program 1 (id=178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xfffffffffffffffe, 0x100000000) 9.246116794s ago: executing program 3 (id=179): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) write(r5, &(0x7f0000000180)="01010101", 0x4) close(r5) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000400)={[&(0x7f00000003c0)='/dev/snd/midiC#D#\x00']}, &(0x7f0000000200), 0x400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 8.928877362s ago: executing program 1 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f0000001ac0)=ANY=[], 0xfca) 8.013932595s ago: executing program 3 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 7.465784439s ago: executing program 1 (id=184): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 7.00758892s ago: executing program 0 (id=186): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 6.045325416s ago: executing program 1 (id=187): fsopen(&(0x7f0000000200)='omfs\x00', 0x0) 5.997616697s ago: executing program 2 (id=188): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(r0, &(0x7f0000002000)='./file0\x00', 0x84) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c12, &(0x7f0000000300)={[{}, {@map_acorn}, {@nocompress}, {@map_off}, {@hide}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@check_strict}, {@overriderock}, {@unhide}, {}]}, 0x4, 0xa42, &(0x7f0000001180)="$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") mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, 0x0, 0x1448}, 0x835e, 0x40, 0x0, {0x1}}) io_uring_enter(r2, 0x2800, 0xfffffffa, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/59) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x11) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000000)={0x3, 0x9}) write(0xffffffffffffffff, &(0x7f0000000600)='high-s', 0x6) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x40) truncate(&(0x7f0000000080)='./file1\x00', 0xffffffffffffff01) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000080000000000000004000000"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, 0x0, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5.975503087s ago: executing program 1 (id=189): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) 5.926264579s ago: executing program 0 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(0x0) chdir(&(0x7f0000000240)='./file0\x00') 5.653769675s ago: executing program 1 (id=191): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r3}, 0x38) 4.409764277s ago: executing program 0 (id=192): ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x401, 0x6, 0xff, 0x2, 0x2, 0x9}) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x3, 0x201) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) syz_usb_connect(0x0, 0x4bc, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 4.210667862s ago: executing program 2 (id=193): socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) 3.963914929s ago: executing program 3 (id=194): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r4, 0x0, 0x0) 3.678248336s ago: executing program 0 (id=195): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 3.453786391s ago: executing program 2 (id=196): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e79") accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$I2C(0x0, 0x9, 0x11b080) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) r3 = msgget$private(0x0, 0x224) msgsnd(r3, 0x0, 0x0, 0x800) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000940), 0x80080, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) msgctl$IPC_INFO(r3, 0x3, 0x0) r5 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 2.964622654s ago: executing program 3 (id=197): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x4809, 0x1, 0x8, 0x7, 0x3}) 2.260457112s ago: executing program 0 (id=198): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 2.200793704s ago: executing program 2 (id=199): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2049c0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.16163677s ago: executing program 2 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40) readahead(r3, 0x6, 0x57b3) syz_genetlink_get_family_id$ethtool(0x0, r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000002600)=""/4113, 0x1011) 1.038492624s ago: executing program 0 (id=201): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) write(r6, &(0x7f0000000180)="01010101", 0x4) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000400)={[&(0x7f00000003c0)='/dev/snd/midiC#D#\x00']}, &(0x7f0000000200), 0x400) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 0s ago: executing program 2 (id=202): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(r0, &(0x7f0000002000)='./file0\x00', 0x84) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c12, &(0x7f0000000300)={[{}, {@map_acorn}, {@nocompress}, {@map_off}, {@hide}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@check_strict}, {@overriderock}, {@unhide}, {}]}, 0x4, 0xa42, &(0x7f0000001180)="$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") mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, 0x0, 0x1448}, 0x835e, 0x40, 0x0, {0x1}}) io_uring_enter(r2, 0x2800, 0xfffffffa, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/59) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x11) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000000)={0x3, 0x9}) write(0xffffffffffffffff, &(0x7f0000000600)='high-s', 0x6) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x40) truncate(&(0x7f0000000080)='./file1\x00', 0xffffffffffffff01) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000080000000000000004000000"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, 0x0, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 84.204957][ T5762] cgroup: Unknown subsys name 'net' [ 84.315039][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.086814][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.895255][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.906077][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.914295][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.922891][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.932199][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.940504][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.949643][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.958201][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.965461][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.976560][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.984047][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.027246][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.106292][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.114890][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.123076][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.131443][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.140443][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.148105][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.219986][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.229764][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.237812][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.273621][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.281650][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.289130][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.596651][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 88.725828][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 88.793803][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.803298][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.812413][ T5774] bridge_slave_0: entered allmulticast mode [ 88.822624][ T5774] bridge_slave_0: entered promiscuous mode [ 88.858883][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.866241][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.873463][ T5774] bridge_slave_1: entered allmulticast mode [ 88.881889][ T5774] bridge_slave_1: entered promiscuous mode [ 88.949815][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.963201][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.972618][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 89.025008][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.032686][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.040470][ T5773] bridge_slave_0: entered allmulticast mode [ 89.048303][ T5773] bridge_slave_0: entered promiscuous mode [ 89.105718][ T5774] team0: Port device team_slave_0 added [ 89.112499][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.119901][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.127430][ T5773] bridge_slave_1: entered allmulticast mode [ 89.134733][ T5773] bridge_slave_1: entered promiscuous mode [ 89.155140][ T5774] team0: Port device team_slave_1 added [ 89.225149][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.263974][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.288056][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.295085][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.321481][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.350775][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.359078][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.367267][ T5783] bridge_slave_0: entered allmulticast mode [ 89.374487][ T5783] bridge_slave_0: entered promiscuous mode [ 89.383430][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.390809][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.417185][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.436092][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 89.464028][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.471690][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.479647][ T5783] bridge_slave_1: entered allmulticast mode [ 89.487450][ T5783] bridge_slave_1: entered promiscuous mode [ 89.524163][ T5773] team0: Port device team_slave_0 added [ 89.534675][ T5773] team0: Port device team_slave_1 added [ 89.618481][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.642050][ T5774] hsr_slave_0: entered promiscuous mode [ 89.649195][ T5774] hsr_slave_1: entered promiscuous mode [ 89.657448][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.664476][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.690832][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.708252][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.715293][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.744785][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.761817][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.855805][ T5783] team0: Port device team_slave_0 added [ 89.862586][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.873627][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.881348][ T5785] bridge_slave_0: entered allmulticast mode [ 89.888576][ T5785] bridge_slave_0: entered promiscuous mode [ 89.897281][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.904503][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.912242][ T5785] bridge_slave_1: entered allmulticast mode [ 89.919579][ T5785] bridge_slave_1: entered promiscuous mode [ 89.950832][ T5783] team0: Port device team_slave_1 added [ 89.991209][ T5773] hsr_slave_0: entered promiscuous mode [ 89.998335][ T5773] hsr_slave_1: entered promiscuous mode [ 90.004838][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.012799][ T5773] Cannot create hsr debugfs directory [ 90.019190][ T5781] Bluetooth: hci0: command tx timeout [ 90.056380][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.063555][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.089594][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.106091][ T5781] Bluetooth: hci1: command tx timeout [ 90.124419][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.132735][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.159244][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.173028][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.182311][ T5781] Bluetooth: hci2: command tx timeout [ 90.224006][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.336844][ T5781] Bluetooth: hci3: command tx timeout [ 90.346320][ T5785] team0: Port device team_slave_0 added [ 90.381103][ T5783] hsr_slave_0: entered promiscuous mode [ 90.388399][ T5783] hsr_slave_1: entered promiscuous mode [ 90.394899][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.403047][ T5783] Cannot create hsr debugfs directory [ 90.427289][ T5785] team0: Port device team_slave_1 added [ 90.522516][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.532641][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.559136][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.572885][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.581101][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.607445][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.752640][ T5785] hsr_slave_0: entered promiscuous mode [ 90.759440][ T5785] hsr_slave_1: entered promiscuous mode [ 90.765815][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.774615][ T5785] Cannot create hsr debugfs directory [ 90.886766][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.912650][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.951849][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.967507][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.045164][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.094116][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.108275][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.123788][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.241709][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.254323][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.278213][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.288932][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.409818][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.446524][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.457994][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.469816][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.495106][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.534347][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.601346][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.608852][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.635604][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.642865][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.672496][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.717531][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.790633][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.825309][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.852331][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.859591][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.878977][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.899884][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.907256][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.923371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.930749][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.988538][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.001321][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.008651][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.095011][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.102347][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.116829][ T5781] Bluetooth: hci0: command tx timeout [ 92.158840][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.166140][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.178495][ T5781] Bluetooth: hci1: command tx timeout [ 92.256305][ T5781] Bluetooth: hci2: command tx timeout [ 92.349729][ T972] cfg80211: failed to load regulatory.db [ 92.371763][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.383600][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.416469][ T5781] Bluetooth: hci3: command tx timeout [ 92.500784][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.684104][ T5774] veth0_vlan: entered promiscuous mode [ 92.743090][ T5774] veth1_vlan: entered promiscuous mode [ 92.902849][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.923139][ T5774] veth0_macvtap: entered promiscuous mode [ 92.948718][ T5774] veth1_macvtap: entered promiscuous mode [ 92.968424][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.982374][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.080450][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.091158][ T5773] veth0_vlan: entered promiscuous mode [ 93.112570][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.150994][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.162107][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.171110][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.181006][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.195234][ T5773] veth1_vlan: entered promiscuous mode [ 93.218448][ T5783] veth0_vlan: entered promiscuous mode [ 93.240624][ T5785] veth0_vlan: entered promiscuous mode [ 93.257106][ T5785] veth1_vlan: entered promiscuous mode [ 93.283168][ T5783] veth1_vlan: entered promiscuous mode [ 93.408709][ T5785] veth0_macvtap: entered promiscuous mode [ 93.419424][ T5773] veth0_macvtap: entered promiscuous mode [ 93.447982][ T5773] veth1_macvtap: entered promiscuous mode [ 93.459326][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.471950][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.498414][ T5785] veth1_macvtap: entered promiscuous mode [ 93.547217][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.555391][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.559125][ T5783] veth0_macvtap: entered promiscuous mode [ 93.585795][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.600450][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.612770][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.632103][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.643227][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.661592][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.672275][ T5783] veth1_macvtap: entered promiscuous mode [ 93.707654][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.720765][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.731640][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.741519][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.761842][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.773798][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.784924][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.796630][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.809487][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.824192][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.844119][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.855521][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.868803][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.879181][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.890075][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.902906][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.923357][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.935686][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.946824][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.958235][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.970065][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.991111][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.004588][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.020191][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.031091][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.048345][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.064000][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.082737][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.103735][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.124723][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.135097][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.144539][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.169251][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.185064][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.186322][ T5781] Bluetooth: hci0: command tx timeout [ 94.204268][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.213409][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.270286][ T5781] Bluetooth: hci1: command tx timeout [ 94.347618][ T5781] Bluetooth: hci2: command tx timeout [ 94.379112][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.398502][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.472956][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.483311][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.506471][ T5781] Bluetooth: hci3: command tx timeout [ 94.542509][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.551252][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.641391][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.651624][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.755499][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.797337][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.006066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 96.671018][ T5781] Bluetooth: hci0: command tx timeout [ 96.676512][ T5780] Bluetooth: hci2: command tx timeout [ 96.676560][ T5781] Bluetooth: hci3: command tx timeout [ 96.682213][ T51] Bluetooth: hci1: command tx timeout [ 96.880248][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.894031][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.410497][ T5855] syz.3.4[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.523537][ T5855] loop3: detected capacity change from 0 to 1764 [ 97.762724][ T5856] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 98.240985][ T5860] loop2: detected capacity change from 0 to 256 [ 98.248593][ T5860] exfat: Deprecated parameter 'utf8' [ 98.253984][ T5860] exfat: Deprecated parameter 'utf8' [ 98.260488][ T5860] exfat: Deprecated parameter 'utf8' [ 98.265864][ T5860] exfat: Deprecated parameter 'namecase' [ 98.381924][ T5860] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 98.477898][ T5863] 0x200000000007-0x20000000003f : "" [ 98.483621][ T5863] mtd: partition "" is out of reach -- disabled [ 98.569196][ T5863] ftl_cs: FTL header not found. [ 99.797371][ T5880] process 'syz.2.12' launched './file1' with NULL argv: empty string added [ 101.326351][ T5864] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.547426][ T5864] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.608693][ T5864] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.635325][ T5864] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.653384][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.670663][ T5864] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.680022][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.689318][ T5864] usb 3-1: Product: syz [ 101.693694][ T5864] usb 3-1: Manufacturer: syz [ 101.730417][ T5864] cdc_wdm 3-1:1.0: skipping garbage [ 101.737993][ T5864] cdc_wdm 3-1:1.0: skipping garbage [ 101.746372][ T5864] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 102.002321][ T5897] loop0: detected capacity change from 0 to 1764 [ 102.147812][ T5889] loop2: detected capacity change from 0 to 3 [ 102.179317][ T5889] syz.2.17: attempt to access beyond end of device [ 102.179317][ T5889] loop2: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 102.288423][ T5900] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 102.429633][ T5889] SQUASHFS error: Failed to read block 0x0: -5 [ 102.557070][ T5889] unable to read squashfs_super_block [ 102.747961][ T5864] usb 3-1: USB disconnect, device number 2 [ 102.880268][ T5903] 0x200000000007-0x20000000003f : "" [ 102.885790][ T5903] mtd: partition "" is out of reach -- disabled [ 102.910778][ T5903] ftl_cs: FTL header not found. [ 103.849341][ T5910] loop0: detected capacity change from 0 to 256 [ 103.902829][ T5910] exfat: Deprecated parameter 'utf8' [ 103.986108][ T5910] exfat: Deprecated parameter 'utf8' [ 104.008436][ T5910] exfat: Deprecated parameter 'utf8' [ 104.026384][ T5910] exfat: Deprecated parameter 'namecase' [ 104.063958][ T5910] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 106.590241][ T5936] loop3: detected capacity change from 0 to 1764 [ 106.746599][ T5937] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 107.494799][ T5940] 0x200000000007-0x20000000003f : "" [ 107.500290][ T5940] mtd: partition "" is out of reach -- disabled [ 107.598849][ T5940] ftl_cs: FTL header not found. [ 108.654831][ T5948] loop3: detected capacity change from 0 to 256 [ 108.689159][ T5948] exfat: Deprecated parameter 'utf8' [ 108.711520][ T5948] exfat: Deprecated parameter 'utf8' [ 108.729561][ T5948] exfat: Deprecated parameter 'utf8' [ 108.755691][ T5948] exfat: Deprecated parameter 'namecase' [ 108.852610][ T5948] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 111.158486][ T5970] loop2: detected capacity change from 0 to 1764 [ 111.347901][ T5971] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 112.031129][ T5977] loop3: detected capacity change from 0 to 256 [ 112.061432][ T5977] exfat: Deprecated parameter 'utf8' [ 112.103034][ T5977] exfat: Deprecated parameter 'utf8' [ 112.117271][ T5977] exfat: Deprecated parameter 'utf8' [ 112.122725][ T5977] exfat: Deprecated parameter 'namecase' [ 112.213524][ T5977] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 113.775994][ T5786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.691328][ T5786] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.744482][ T5786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.798182][ T6004] loop3: detected capacity change from 0 to 1764 [ 114.845078][ T5786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.001180][ T5786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.386286][ T6006] loop2: detected capacity change from 0 to 32768 [ 115.427935][ T6007] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 115.482244][ T5786] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.619451][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.639480][ T6006] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.654047][ T5786] usb 1-1: Product: syz [ 115.667880][ T5786] usb 1-1: Manufacturer: syz [ 115.686971][ T5786] cdc_wdm 1-1:1.0: skipping garbage [ 115.695118][ T5786] cdc_wdm 1-1:1.0: skipping garbage [ 115.701798][ T5786] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 115.755102][ T6006] XFS (loop2): Ending clean mount [ 115.791254][ T6006] XFS (loop2): Quotacheck needed: Please wait. [ 115.910476][ T5994] loop0: detected capacity change from 0 to 3 [ 115.930796][ T6006] XFS (loop2): Quotacheck: Done. [ 115.948509][ T5994] syz.0.49: attempt to access beyond end of device [ 115.948509][ T5994] loop0: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 116.041345][ T5994] SQUASHFS error: Failed to read block 0x0: -5 [ 116.060269][ T5994] unable to read squashfs_super_block [ 116.101381][ T5864] usb 1-1: USB disconnect, device number 2 [ 116.544419][ T28] audit: type=1800 audit(1786680416.971:2): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.54" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 116.586010][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.870381][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.852036][ T6032] loop1: detected capacity change from 0 to 4096 [ 120.426865][ T6032] ntfs3: loop1: Failed to read $AttrDef (-4). [ 120.542882][ T6047] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.819195][ T6053] loop0: detected capacity change from 0 to 1764 [ 121.441912][ T6054] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 122.402052][ T6060] loop1: detected capacity change from 0 to 1024 [ 122.413974][ T6060] ======================================================= [ 122.413974][ T6060] WARNING: The mand mount option has been deprecated and [ 122.413974][ T6060] and is ignored by this kernel. Remove the mand [ 122.413974][ T6060] option from the mount to silence this warning. [ 122.413974][ T6060] ======================================================= [ 122.567278][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.580100][ T6060] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.016423][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 123.426388][ T174] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.648555][ T174] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.360570][ T174] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.374047][ T174] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.383648][ T174] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.405314][ T174] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.414634][ T174] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.440586][ T174] usb 1-1: Product: syz [ 124.444860][ T174] usb 1-1: Manufacturer: syz [ 124.469795][ T174] cdc_wdm 1-1:1.0: skipping garbage [ 124.478850][ T174] cdc_wdm 1-1:1.0: skipping garbage [ 124.486359][ T174] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 124.747895][ T6087] loop2: detected capacity change from 0 to 1764 [ 124.791233][ T6068] loop0: detected capacity change from 0 to 3 [ 124.919987][ T6068] syz.0.68: attempt to access beyond end of device [ 124.919987][ T6068] loop0: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 124.941650][ T6068] SQUASHFS error: Failed to read block 0x0: -5 [ 124.941943][ T6068] unable to read squashfs_super_block [ 125.006124][ T6088] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 125.252598][ T5864] usb 1-1: USB disconnect, device number 3 [ 125.850279][ T6093] 0x200000000007-0x20000000003f : "" [ 125.855757][ T6093] mtd: partition "" is out of reach -- disabled [ 125.885323][ T6093] ftl_cs: FTL header not found. [ 127.425073][ T6102] loop3: detected capacity change from 0 to 1764 [ 127.904103][ T6105] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 130.814460][ T6121] block nbd0: NBD_DISCONNECT [ 133.331706][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.338579][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.554866][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 133.563995][ T6148] bridge_slave_1: left allmulticast mode [ 133.569759][ T6148] bridge_slave_1: left promiscuous mode [ 133.576874][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.593300][ T6148] bridge_slave_0: left allmulticast mode [ 133.599496][ T6148] bridge_slave_0: left promiscuous mode [ 133.605336][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.639850][ T6164] afs: Unknown parameter '' [ 136.528218][ T6169] loop3: detected capacity change from 0 to 1764 [ 136.761627][ T6171] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 138.012053][ T6186] program syz.2.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.022983][ T6186] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 138.993784][ T6197] afs: Unknown parameter '' [ 139.765617][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 140.034131][ T6199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.204171][ T6207] loop1: detected capacity change from 0 to 1764 [ 140.964257][ T6208] loop0: detected capacity change from 0 to 1764 [ 140.994308][ T6209] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 141.139698][ T6211] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 141.794096][ T6220] program syz.2.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.856508][ T6220] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 142.993328][ T6231] afs: Unknown parameter '' [ 144.282709][ T6243] loop3: detected capacity change from 0 to 1764 [ 145.035043][ T6243] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 146.060151][ T6259] program syz.0.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.070105][ T6259] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 146.815886][ C1] sched: RT throttling activated [ 147.185715][ T6272] afs: Unknown parameter '' [ 147.273866][ T6271] loop3: detected capacity change from 0 to 1024 [ 147.951359][ T6271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.997421][ T6271] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.254307][ T6271] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.133: lblock 3 mapped to illegal pblock 3 (length 3) [ 148.372018][ T6271] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 148.410796][ T6271] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.410796][ T6271] [ 148.458664][ T49] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 148.484993][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 148.503923][ T49] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.503923][ T49] [ 148.531323][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 149.826254][ T6302] program syz.3.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.836284][ T6302] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 151.065390][ T6312] afs: Unknown parameter 'dy' [ 152.505665][ T6327] loop0: detected capacity change from 0 to 1764 [ 152.682443][ T6329] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 153.677967][ T6338] program syz.3.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.687862][ T6338] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 154.521999][ T6341] loop1: detected capacity change from 0 to 4096 [ 154.553192][ T6341] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 154.598074][ T6349] afs: Unknown parameter 'dy' [ 155.603707][ T6341] ntfs3: loop1: Failed to load $Extend (-22). [ 155.628354][ T6341] ntfs3: loop1: Failed to initialize $Extend. [ 155.685054][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.839426][ T6360] syz.1.160 uses obsolete (PF_INET,SOCK_PACKET) [ 156.702265][ T6379] program syz.3.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.711871][ T6379] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 157.884515][ T6392] afs: Unknown parameter 'dy' [ 159.828190][ C1] Unknown status report in ack skb [ 161.371002][ T6415] loop3: detected capacity change from 0 to 1764 [ 161.563515][ T6416] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 167.977054][ T6464] loop2: detected capacity change from 0 to 1764 [ 168.210738][ T6465] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 169.575418][ T6473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.707948][ T6499] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 173.886898][ T6506] loop2: detected capacity change from 0 to 1764 [ 175.366452][ C1] ------------[ cut here ]------------ [ 175.372083][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 175.382008][ C1] Modules linked in: [ 175.385998][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 175.393074][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.403331][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 175.409786][ C1] Code: f7 4c 89 ef e8 50 38 b8 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 4c 7a f7 0f 0b e9 61 f8 ff ff e8 0f 4c 7a f7 <0f> 0b e9 85 fb ff ff e8 03 4c 7a f7 48 c7 c7 60 b8 65 8e 4c 89 e6 [ 175.429563][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 175.435700][ C1] RAX: ffffffff8a0d2611 RBX: dffffc0000000000 RCX: ffff88801be7bc00 [ 175.443775][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.451898][ C1] RBP: 0000000000000000 R08: ffff88801be7bc00 R09: 0000000000000003 [ 175.459986][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d19a440 [ 175.468195][ C1] R13: ffff88805dd66424 R14: ffff88805d19a930 R15: ffff88805dd66400 [ 175.476377][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 175.485365][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.492054][ C1] CR2: 000000110c416811 CR3: 000000001de67000 CR4: 00000000003506e0 [ 175.500137][ C1] Call Trace: [ 175.503479][ C1] [ 175.506418][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 175.512084][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 175.517768][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 175.524663][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 175.530331][ C1] __iterate_interfaces+0x225/0x4c0 [ 175.535601][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 175.541999][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 175.549307][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 175.555617][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 175.562746][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 175.568048][ C1] ? hw_scan_work+0xf10/0xf10 [ 175.572803][ C1] __hrtimer_run_queues+0x525/0xc10 [ 175.578120][ C1] ? hrtimer_interrupt+0x980/0x980 [ 175.583306][ C1] ? read_tsc+0x9/0x20 [ 175.587494][ C1] hrtimer_run_softirq+0x177/0x290 [ 175.592688][ C1] handle_softirqs+0x27d/0x820 [ 175.597562][ C1] ? read_tsc+0x9/0x20 [ 175.601744][ C1] ? ktime_get+0x24b/0x280 [ 175.606374][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 175.611254][ C1] ? do_softirq+0x1a0/0x1a0 [ 175.615827][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 175.621160][ C1] __irq_exit_rcu+0xd3/0x190 [ 175.626017][ C1] ? irq_exit_rcu+0x20/0x20 [ 175.630670][ C1] irq_exit_rcu+0x9/0x20 [ 175.634978][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 175.640739][ C1] [ 175.643728][ C1] [ 175.646740][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 175.652790][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 175.658619][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 175.678448][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 175.684589][ C1] RAX: 53816653713eed00 RBX: ffffffff81630c41 RCX: 53816653713eed00 [ 175.692660][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 175.701077][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 175.709168][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 175.717285][ C1] R13: dffffc0000000000 R14: 1ffff110037cf780 R15: 0000000000000000 [ 175.725432][ C1] ? do_idle+0x221/0x5c0 [ 175.729795][ C1] default_idle+0x13/0x20 [ 175.734212][ C1] default_idle_call+0x6c/0xa0 [ 175.739255][ C1] do_idle+0x221/0x5c0 [ 175.743435][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 175.748737][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 175.755097][ C1] cpu_startup_entry+0x43/0x60 [ 175.759961][ C1] start_secondary+0xee/0xf0 [ 175.764633][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 175.770824][ C1] [ 175.773933][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 175.781305][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 175.788390][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.798538][ C1] Call Trace: [ 175.801868][ C1] [ 175.804792][ C1] dump_stack_lvl+0x18c/0x250 [ 175.809539][ C1] ? show_regs_print_info+0x20/0x20 [ 175.814799][ C1] ? load_image+0x420/0x420 [ 175.819382][ C1] panic+0x2ca/0x720 [ 175.823361][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 175.827954][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 175.834299][ C1] __warn+0x2e0/0x470 [ 175.838345][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 175.844127][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 175.849991][ C1] report_bug+0x2be/0x4f0 [ 175.854377][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 175.860185][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 175.865962][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 175.871739][ C1] handle_bug+0xcf/0x120 [ 175.876034][ C1] exc_invalid_op+0x1a/0x50 [ 175.880595][ C1] asm_exc_invalid_op+0x1a/0x20 [ 175.885601][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 175.892002][ C1] Code: f7 4c 89 ef e8 50 38 b8 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 4c 7a f7 0f 0b e9 61 f8 ff ff e8 0f 4c 7a f7 <0f> 0b e9 85 fb ff ff e8 03 4c 7a f7 48 c7 c7 60 b8 65 8e 4c 89 e6 [ 175.911675][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 175.917796][ C1] RAX: ffffffff8a0d2611 RBX: dffffc0000000000 RCX: ffff88801be7bc00 [ 175.925822][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.933847][ C1] RBP: 0000000000000000 R08: ffff88801be7bc00 R09: 0000000000000003 [ 175.941871][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d19a440 [ 175.949900][ C1] R13: ffff88805dd66424 R14: ffff88805d19a930 R15: ffff88805dd66400 [ 175.957976][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 175.963802][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 175.969608][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 175.975276][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 175.980817][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 175.987659][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 175.993275][ C1] __iterate_interfaces+0x225/0x4c0 [ 175.998573][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 176.004871][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 176.012127][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 176.018432][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 176.025521][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 176.030914][ C1] ? hw_scan_work+0xf10/0xf10 [ 176.035647][ C1] __hrtimer_run_queues+0x525/0xc10 [ 176.040916][ C1] ? hrtimer_interrupt+0x980/0x980 [ 176.046119][ C1] ? read_tsc+0x9/0x20 [ 176.050252][ C1] hrtimer_run_softirq+0x177/0x290 [ 176.055433][ C1] handle_softirqs+0x27d/0x820 [ 176.060306][ C1] ? read_tsc+0x9/0x20 [ 176.064434][ C1] ? ktime_get+0x24b/0x280 [ 176.069002][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 176.073828][ C1] ? do_softirq+0x1a0/0x1a0 [ 176.078405][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 176.083667][ C1] __irq_exit_rcu+0xd3/0x190 [ 176.088316][ C1] ? irq_exit_rcu+0x20/0x20 [ 176.092903][ C1] irq_exit_rcu+0x9/0x20 [ 176.097202][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 176.102911][ C1] [ 176.105895][ C1] [ 176.108865][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.114923][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 176.120727][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 176.140416][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 176.146560][ C1] RAX: 53816653713eed00 RBX: ffffffff81630c41 RCX: 53816653713eed00 [ 176.154603][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 176.162644][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 176.170776][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 176.178804][ C1] R13: dffffc0000000000 R14: 1ffff110037cf780 R15: 0000000000000000 [ 176.186854][ C1] ? do_idle+0x221/0x5c0 [ 176.191181][ C1] default_idle+0x13/0x20 [ 176.195623][ C1] default_idle_call+0x6c/0xa0 [ 176.200481][ C1] do_idle+0x221/0x5c0 [ 176.204647][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 176.210014][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.216407][ C1] cpu_startup_entry+0x43/0x60 [ 176.221246][ C1] start_secondary+0xee/0xf0 [ 176.225900][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 176.232140][ C1] [ 176.235987][ C1] Kernel Offset: disabled [ 176.240412][ C1] Rebooting in 86400 seconds..