last executing test programs: 12.118804116s ago: executing program 1 (id=88): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 10.991734288s ago: executing program 1 (id=93): prlimit64(0x0, 0xe, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x1, 0x0, 0xac1d}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x3}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000006140)={0x2020}, 0x2076) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xe, @local, 0x7}, 0x1c) (async) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000000c0)={0x8, 'veth0_to_bridge\x00', {'bridge_slave_0\x00'}, 0xff39}) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000340)=0x40) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x0, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r4, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 10.470742218s ago: executing program 1 (id=94): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x885) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r2, &(0x7f0000002240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.309075241s ago: executing program 1 (id=96): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x885) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000000)={r2, 0x7b50, 0x6, "3ea26585edb0579e94aa7456e35f78e4c4d94245a46055bc4b53b2aca0ac249697e9e329dc5199e4c680e1015c82e0a9a9eafb7cc7ca9a0eb8404a70fc857b9498895c4d697a5a9bffbfe38cec57031f1c1c918c630e885753870d8286a195983bd05d632da056adcac311c6ea2b68c891403f89d24318969aa9481c6811a70bae93f75f5bacbefc57e0a06851fcb4a653afb5efb8c90937870c977081901041a2bf7b11ad53"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) write$binfmt_script(r4, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) syz_fuse_handle_req(r2, &(0x7f0000002240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.557593156s ago: executing program 1 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3ff}) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x71, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0xc2, 0xbe, 0x5, 0xa, 0x7d, 0x7f, 0xb, 0x9, 0x7, 0x2, 0x7, 0x5a, 0x5, 0x3, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf4, 0x5, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff, 0x4, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r6, 0x1, 0x70bd2b, 0x800000, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}}, 0x20008000) write$eventfd(r2, &(0x7f0000000040)=0x3, 0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000000)={0x3c, r10, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x800) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.80687516s ago: executing program 0 (id=101): fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000280)}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 8.564195695s ago: executing program 2 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 6.984038065s ago: executing program 1 (id=106): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) 6.488212185s ago: executing program 32 (id=106): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) 6.474331655s ago: executing program 2 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x10, 0x0, 0x48, 0x0, 0x0, 0x8, 0xc, 0xed, 0x0, 0x5f, 0x26, 0xd, 0x0, 0x9cf8, 0x1000007, 0x7, 0x2, 0x9, 0x3, '\x00', 0x40, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.130512632s ago: executing program 3 (id=110): execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={[&(0x7f0000000180)='+-&-},.{\x00']}, 0x0, 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = getpgid(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000008c0)=ANY=[@ANYRES64=r0, @ANYBLOB="42bbb9ba5dcaab675699a8519c1d03ba5ce65ba124d45f97ebd409f8b4b2e29252c8d6daef66987f4d8bea42a9831a992a6c2443067653e7e40d516d8c49cb6e7ddfc5f19819a34ef63fa59a7ea079045a87575b194efc3fc2d9bca315dc79b573823af48c92a1f0e38c13c27de5635681fc83d85bf929de605d56d7976fa8b163d30fb7b47bae573216fb06d9afdb0f8f0dc4480bd4f0a958e5fb839399510dafe671b77e6e61d96d8630556f70a40a1c38347a5606626b3d82c4dfb6676ce0072cda5d5ff5e5a6eba7b1a5299e", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r2, &(0x7f0000000800)=[{&(0x7f0000000880)='4', 0x1}, {&(0x7f0000000700)="9a1555df7784d247d821dbb2ce219c59f3d4b8e4ed7b9ee259e2d336e811c87b82a47f63e6d9fcffceaa545b18077d112d2d0b7d382ed73e666b7a4ad0b76697620a9403d1bc7d335b5a844f5ac3abf07695b01e7013ed6373e15a403d3384e21ebfa1b04e11ad7617f6e15045b0f0a67812114f7e86c6e22e3cdb95ada3a9b16d9d4a6eaddfaf2b49cdd558c227a30db18b877cedd764678db6e8f1787ceba60ad188466decb4617e66b9ba625f5a6291ecf3b71e83307ef04ecbcde16f5f6d9dc47019372883d3b5b007c703b90aa925e923055c93ea52ad13b3489f1f2a3210c557b5bcad982c284f41e7493c1249", 0xf0}], 0x2) migrate_pages(r1, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000100)=0x102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000226000/0x2000)=nil, 0x2000, 0xb) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf250100", @ANYRES32=r6, @ANYBLOB="08001500c0000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000010) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000540)='-&:\xf34\x93`\xe6Y\xab\xcaA\x9b\xe0\x158\x06\xf2?h\xe3p0\x9dn\xfcg\xac2\x8c\"{\x98\xebC\xe7\xaa\x01\x1d/\xfa\x85\xc2U\xaeVX(wC\xd6\xab\xeeDA\x95\xcf\x05%2\xbc\xae\xa7\x11\f\xc7 \xe0\t[<2|\x92\xde\xf7\x84\xa0\xa7Mg\xfd3\x7f~T\xb0\x83\x81\xbe\xf5PE\x96\x02\xc7\x95A\n\x0eDc\xdf\x12\x05\x19\x9c\xd8Z\xec\xf6M\xb9\x8c\x95J\xe4n0\xc0\xc3\xae\xf5\xceT_\x15\xb28\x14h\xc4\xe5\xee\x9e\x11\xda\x80\x1f\x91\xd8\x8c\x83n/<\\1Z\xc2\xf6\x1e\x9a\x9e\xd8\x01\x86\xc3\xca\xe9\x10\xc8\x01\x14h\x05\b\xc3\xb8\xdd\xdb\a\x87E\t\x12\x9d=^W\x85 \xb9\b\xc2\x82\xf9C\xd9\xe4yb\xa6\x0e\n|7\x15O\x0e\xf6\xefD~\x18\xac?\xa0c\"\xd4\xffs\x14\xe9\x14\xdfeEu\xfb\xf6\xf2r4\\w\xe54\xa9\xa9\xf0\xc3\x7f\x11g|.~#\x04\xaaI0\x1e\xafek\xf9j\\\x89\xf5\x00\x02\xaf\xfd\xbf\xa7\xd0\xf8\xeah\xa4/\xf3}\xa4f+\xdbyos\x95\xfe\x18$\xacI\\)\xe19\x06\x94\xd9\xb1x!Kz\xef\xce\xa2\xe8\xda\f\x9e', 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r11 = socket(0x840000000002, 0x3, 0xff) getsockopt$MRT(r11, 0x0, 0xcf, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5.986396885s ago: executing program 2 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1110, &(0x7f0000001340)="$eJzs2L+K1FAUB+DfTWZ1u0js02gtLuMD7BYK09pYaCeCYCMOCMo+hI1v4FvsK+i+wrKtaLG9EJmdBDMqqDgKA99H/txzyMlJynMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK7PkU0muV0k75qokJem608V5km7MX3tfVym5/2SxvPtifm+ZpL58vDxMyqpqVZb24MZ+O2/n7UF75/Do5oflq9fP+ibZG15T0uXsYqt/UcZLPc2VrfYAAACAndX/tSZvX/5Opyv/qD8AAADwK9veTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4U33zbd2OiypJSbrudHGepPtJ3d7lAQAAAOyCkiqPmh9H+TJsA3w8WcfPh+yYHxxWmeVdc/zmv30wAAAA7KCnJ7k6CfsxmE7kX/q11dz9ILP1/L0/GcRvbdzy+Sipk9z+rtfZxfHj8Sx9nY3OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwlR04EAAAAAAQ5G89yAUAAAAAAAAAAAAAAAAAAAAAADBUAAAA///wZuFR") sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delqdisc={0x38, 0x25, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x3, 0x3}, {0xfff4, 0xd}, {0xe, 0xc}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x131}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf23d7d40bd64d597}, 0x10) 5.963853335s ago: executing program 0 (id=112): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18410}}, 0x20}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0001002abd7000fddb5f250a00000000000001080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'bridge_slave_1\x00'}) write$binfmt_register(0xffffffffffffffff, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xd, 0x3a, 'debugfs\x00\x9c\xf52X\x8b\xf2\xee^\x9e\a\xd7\xad+\xad~\xc4Q\x8d\xf1GWh\xa4\'\x0e:\b+\xb9U/\xc5<8o\x8d\x0f\xa6\x8094\xb2\xe2\x17I0\v\x8a\xbb\xbei\xf4\x1d\xf6q\xa5\xb3W\x96]\x9e\x82\xfaA\x0e\xe4\xbd\xffxg\xb6_\xeav\xcf\xa0', 0x3a, 'D,>\xfb\xf1\xa3cn\t\xb2\xf8\x80\xd0=\xae\x00C\x82zb\xf0\xebs\x80\xf0\x1ep:\xed\xdb\x1db\x0f\xe6Ow\x85s\xf0`N\xe1s\x1cm\x0e\xea\xfb\xeaUy\xaaz`\'\xf4\xed\x90T\a\xeb\xb7\x8em\xd0\x92b\x0e\xce\x8e\x96f\x1e\x89\xa2\xa2\xba\x8a\xa1\xce\xc5\xec5((u\x12\x1d\x119B\ftG\xfa\xe3!\x01c\x9a\xd68\x86\xeay\x89\xaeX\x90IO\x8c;\x0e&\xa7\xf9K\xf5\v3M\x91\xdfy;3\xb8<\xe7\xa0F\xe9\xf4\xb4\x80\x15\xacu1\x1f[\xb8\x12\xad\x06{\xf5OA\xda\x83\xa1\x01\x80\x19\xd3\xc5\xb2cI\xba\x12\xae1\xb6\x043\x8f\xfb=\xc2\xb1\xa0\\\xabg\xcf\xa6\x95\x9cV+z\"\x89\x06\xa9\x8f)\x14\xf4\x1d,%\xca|\xcf\x18<\x8a\xce\xbbL\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8bL\xad\x13}\xf4\xc2y\x06\xb4\xaf\xac\b\xc9\x14\x1b\x89IRJ\xa1\x80h\x10\x1f\x1c\xc1\a\x98\xcc\x01\xf8 \xbcQ\x89\x139\x0e\x87\x87l\x03W\x15\xb0Q\xc5\xe5\xdb\x89\x1d\x1b:\x9d\xd7\x0e#\xfd\x0e\x12\x90MvE\xa2x\xb4\x1b\x9a\xb1\xf9\b\x00\x00\x00\x00\x00\x00\x00V\x84\x81\xf7\xbf\xe9\xdc\xab\xba\xea\x87\xff', 0x3a, './file0'}, 0x1bc) syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x36b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc1400002c4788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2, {0xa, 0x4e21, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6000}}}, 0x3a) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000740)=@raw=[@jmp={0x5, 0x1, 0x3, 0x5, 0x6, 0x40}], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r5, &(0x7f0000000140)="24000000010006", 0x7) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYRES8=r0]) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 4.990751564s ago: executing program 3 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x1ed) r2 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') r6 = syz_open_dev$video(&(0x7f00000000c0), 0x2, 0x343800) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000340)=""/219, 0xdb}], 0x2, 0x8, 0x4) fcntl$notify(r5, 0x402, 0x10) getdents64(r5, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r9, 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) 4.450240214s ago: executing program 3 (id=114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0x6a24c0, 0x0) ioctl$COMEDI_LOCK(r2, 0x6405) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x10, 0x0, 0x48, 0x0, 0x0, 0x8, 0xc, 0xed, 0x0, 0x5f, 0x26, 0xd, 0x0, 0x9cf8, 0x1000007, 0x7, 0x2, 0x9, 0x3, '\x00', 0x40, 0x9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000280)={{0xeeee0000, 0x6000, 0xb, 0x7, 0x0, 0x2, 0x6, 0x4, 0x4, 0x8, 0x55, 0x8}, {0xeeee8000, 0x1000, 0x9, 0x1, 0x8, 0x5, 0x80, 0x0, 0x80, 0x7, 0x5, 0x8}, {0x1, 0x8080000, 0x1f, 0xc, 0xb8, 0x4c, 0x7, 0x15, 0x5, 0x3, 0x3, 0x4}, {0x8000000, 0xdddd1000, 0x2, 0x2, 0x80, 0x2, 0x9, 0x0, 0x7f, 0x8, 0x7, 0x6}, {0x3000, 0xddcf0000, 0x3, 0x7, 0xff, 0x5, 0x6, 0x9, 0x1, 0x7, 0x3, 0xd}, {0x80a0000, 0x4, 0xd, 0x2, 0x3c, 0x80, 0x3, 0x8, 0x7, 0x80, 0xb, 0x90}, {0x2000, 0x8000000, 0xb, 0x8, 0x7f, 0xfc, 0x80, 0x4, 0x4, 0x9, 0x0, 0x8}, {0x1, 0xd000, 0x1a, 0xf3, 0x7, 0xff, 0x8, 0x2, 0x7, 0x4, 0x9, 0x5}, {0x1000, 0x6}, {0x6000, 0x418}, 0x80020025, 0x0, 0x1, 0x4180, 0x8, 0x2800, 0x2000, [0x48c8, 0x7, 0x5, 0x9]}) 4.16971242s ago: executing program 3 (id=115): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') fchdir(r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x14, r0}, 0x94) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x2c6101, 0x21) read$ptp(r1, &(0x7f0000000140)=""/193, 0xc1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') (async) fchdir(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x14, r0}, 0x94) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x2c6101, 0x21) (async) read$ptp(r1, &(0x7f0000000140)=""/193, 0xc1) (async) 3.886845045s ago: executing program 3 (id=116): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000001640)=[{&(0x7f0000000180)=""/249, 0xf9}], 0x1) pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0xa) 3.790759127s ago: executing program 0 (id=117): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x300a088, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x4020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x50, 0x0}, 0x10) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000740)={r7, 0x0, 0x0, 0x1, 0x3, 0x800, 0xfffffffe, 0x5, 0x4, 0x401, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r7], &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000040)}) connect$inet6(r5, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000440), 0x1000a) sendfile(r5, r9, &(0x7f0000000000)=0x5, 0x20001) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 3.285236567s ago: executing program 2 (id=118): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x300a088, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x4020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x50, 0x0}, 0x10) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000740)={r7, 0x0, 0x0, 0x1, 0x3, 0x800, 0xfffffffe, 0x5, 0x4, 0x401, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r7], &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000040)}) connect$inet6(r5, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000440), 0x1000a) sendfile(r5, r9, &(0x7f0000000000)=0x5, 0x20001) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2.59850431s ago: executing program 0 (id=119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f00000003c0)={{0xeeef0000, 0x1911b000, 0xf, 0x74, 0x59, 0x8, 0xcd, 0x4, 0x9, 0x2, 0x48, 0xf}, {0xeeef0000, 0x10000, 0xa, 0xd, 0x7, 0x80, 0x1, 0x5, 0x27, 0x5, 0x8, 0x8}, {0xf000, 0x3000, 0x3, 0x5, 0x9, 0x9, 0x81, 0x0, 0x1, 0xb6, 0x5, 0x2}, {0x4, 0xffff1000, 0x3, 0xf7, 0x80, 0x16, 0xa, 0x1, 0x2, 0x5, 0x3, 0x9}, {0xeeee0000, 0xeeee8000, 0x7, 0x8, 0xff, 0x9, 0x0, 0xdf, 0x4, 0x80, 0xf, 0x8}, {0xdddd0000, 0x100000, 0xb, 0x0, 0x0, 0x1, 0x2, 0x4, 0x10, 0x48, 0x2}, {0x2000, 0x100000, 0x4, 0x2, 0x3, 0x0, 0x5, 0x0, 0x5, 0x2, 0xfb, 0xd2}, {0x8080000, 0x8000000, 0xf, 0x9, 0xfe, 0xa6, 0x9, 0x71, 0x9, 0x6, 0x7, 0x9}, {0xdddd0000, 0xa}, {0x4, 0x9}, 0xc000001e, 0x0, 0x2000, 0x2000, 0x9, 0x4400, 0xdddd0000, 0x0, [0x100000000, 0x4, 0x7, 0x80000000]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.475621802s ago: executing program 2 (id=120): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$dri(&(0x7f0000000740), 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0x0, 0x0}, 0x10) r10 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) r11 = getpid() ptrace(0x11, r11) signalfd4(r1, &(0x7f00000000c0)={[0x43ac]}, 0x8, 0x800) 1.078018329s ago: executing program 0 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x1ed) r2 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') r6 = syz_open_dev$video(&(0x7f00000000c0), 0x2, 0x343800) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000340)=""/219, 0xdb}], 0x2, 0x8, 0x4) fcntl$notify(r5, 0x402, 0x10) getdents64(r5, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r9, 0x1ff) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="033ce6", 0x1a000, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 255.923955ms ago: executing program 3 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000180001002bbd7000fbdbdf25028020040004ff060007100008000b0002000000"], 0x24}}, 0x84000) modify_ldt$write2(0x11, &(0x7f0000000280)={0x2, 0x20000800, 0x400, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x1}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {0x0, 0xffee}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb9a}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 229.546036ms ago: executing program 2 (id=123): prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x3000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='rxrpc_rx_lose\x00'}, 0x18) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f00000000c0)={0xa5, &(0x7f00000005c0)=""/165}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, 0x0, 0x78) close(r3) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) rename(0x0, &(0x7f0000000080)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0xbfffffff, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000180)=""/76, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) 0s ago: executing program 0 (id=124): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRES8], 0x4, 0x339, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) write$UHID_INPUT(r2, &(0x7f0000000d40)={0x8, {"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", 0x1000}}, 0x1006) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000008100000004000000000000000000000002", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES64=r0], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x3, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x8, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0x9, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x8, 0x5, 0x10, '\x00', 0x5}, {0x7, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x7, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0xb, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0x4}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x0, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="10000000140000042c9d7000fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x44041}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 82.216663][ T5777] cgroup: Unknown subsys name 'net' [ 82.358735][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.154730][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.035426][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.040125][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.044860][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.051627][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.057836][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.067061][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.073544][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.079485][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.086026][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.093949][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.106323][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.107254][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.122046][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.122575][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.131850][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.138914][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.144297][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.153101][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.165807][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.175421][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.180406][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.193588][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.201544][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.209107][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.767134][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 86.893887][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 86.911837][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.940301][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 87.018708][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.026228][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.034033][ T5790] bridge_slave_0: entered allmulticast mode [ 87.041758][ T5790] bridge_slave_0: entered promiscuous mode [ 87.051786][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.059071][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.066313][ T5790] bridge_slave_1: entered allmulticast mode [ 87.073943][ T5790] bridge_slave_1: entered promiscuous mode [ 87.196174][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.204212][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.217947][ T5789] bridge_slave_0: entered allmulticast mode [ 87.225915][ T5789] bridge_slave_0: entered promiscuous mode [ 87.277049][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.287759][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.303370][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.314801][ T5789] bridge_slave_1: entered allmulticast mode [ 87.323629][ T5789] bridge_slave_1: entered promiscuous mode [ 87.384573][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.418040][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.425455][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.436755][ T5788] bridge_slave_0: entered allmulticast mode [ 87.445644][ T5788] bridge_slave_0: entered promiscuous mode [ 87.503655][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.520635][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.531520][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.538792][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.546450][ T5788] bridge_slave_1: entered allmulticast mode [ 87.554926][ T5788] bridge_slave_1: entered promiscuous mode [ 87.612473][ T5790] team0: Port device team_slave_0 added [ 87.620720][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.627901][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.635270][ T5787] bridge_slave_0: entered allmulticast mode [ 87.642806][ T5787] bridge_slave_0: entered promiscuous mode [ 87.685247][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.699638][ T5790] team0: Port device team_slave_1 added [ 87.705913][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.714892][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.722216][ T5787] bridge_slave_1: entered allmulticast mode [ 87.729875][ T5787] bridge_slave_1: entered promiscuous mode [ 87.774000][ T5789] team0: Port device team_slave_0 added [ 87.791146][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.830715][ T5789] team0: Port device team_slave_1 added [ 87.877002][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.890520][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.921500][ T5788] team0: Port device team_slave_0 added [ 87.929450][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.936459][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.962696][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.002932][ T5788] team0: Port device team_slave_1 added [ 88.009624][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.016606][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.042624][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.071241][ T5787] team0: Port device team_slave_0 added [ 88.077978][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.085841][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.111945][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.126219][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.133335][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.159738][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.193025][ T5787] team0: Port device team_slave_1 added [ 88.225185][ T5793] Bluetooth: hci0: command tx timeout [ 88.234897][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.242201][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.269379][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.296757][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.299344][ T5793] Bluetooth: hci1: command tx timeout [ 88.303987][ T5799] Bluetooth: hci2: command tx timeout [ 88.315034][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.315071][ T50] Bluetooth: hci3: command tx timeout [ 88.346974][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.371481][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.378482][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.405163][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.424794][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.431942][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.458255][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.523138][ T5789] hsr_slave_0: entered promiscuous mode [ 88.531473][ T5789] hsr_slave_1: entered promiscuous mode [ 88.543579][ T5790] hsr_slave_0: entered promiscuous mode [ 88.550603][ T5790] hsr_slave_1: entered promiscuous mode [ 88.557066][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.565096][ T5790] Cannot create hsr debugfs directory [ 88.661716][ T5787] hsr_slave_0: entered promiscuous mode [ 88.668267][ T5787] hsr_slave_1: entered promiscuous mode [ 88.675414][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.683931][ T5787] Cannot create hsr debugfs directory [ 88.694418][ T5788] hsr_slave_0: entered promiscuous mode [ 88.701207][ T5788] hsr_slave_1: entered promiscuous mode [ 88.707548][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.715450][ T5788] Cannot create hsr debugfs directory [ 89.179924][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.195833][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.206412][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.217883][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.286735][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.313813][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.334478][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.347277][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.412774][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.425562][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.443542][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.454635][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.584604][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.602961][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.615139][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.627248][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.691503][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.777422][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.803679][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.827589][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.834985][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.863883][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.875708][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.882960][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.961588][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.001200][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.008384][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.018822][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.026047][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.042932][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.100930][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.137947][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.155835][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.163093][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.205297][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.212576][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.226001][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.233224][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.242933][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.250153][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.302544][ T50] Bluetooth: hci0: command tx timeout [ 90.380013][ T50] Bluetooth: hci1: command tx timeout [ 90.385504][ T50] Bluetooth: hci3: command tx timeout [ 90.391684][ T5799] Bluetooth: hci2: command tx timeout [ 90.530762][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.698773][ T5790] veth0_vlan: entered promiscuous mode [ 90.752952][ T5790] veth1_vlan: entered promiscuous mode [ 90.851877][ T5790] veth0_macvtap: entered promiscuous mode [ 90.881257][ T5790] veth1_macvtap: entered promiscuous mode [ 90.894194][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.937849][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.955118][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.988592][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.011347][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.026316][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.036196][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.045010][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.148280][ T5787] veth0_vlan: entered promiscuous mode [ 91.204939][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.228544][ T5789] veth0_vlan: entered promiscuous mode [ 91.268693][ T5787] veth1_vlan: entered promiscuous mode [ 91.289828][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.305287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.317636][ T5789] veth1_vlan: entered promiscuous mode [ 91.401043][ T5787] veth0_macvtap: entered promiscuous mode [ 91.427163][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.444399][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.453376][ T5789] veth0_macvtap: entered promiscuous mode [ 91.464673][ T5787] veth1_macvtap: entered promiscuous mode [ 91.486793][ T5788] veth0_vlan: entered promiscuous mode [ 91.517829][ T5789] veth1_macvtap: entered promiscuous mode [ 91.565458][ T5788] veth1_vlan: entered promiscuous mode [ 91.583302][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.596802][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.610450][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.691798][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.712027][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.746911][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.764136][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.775584][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.787037][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.798094][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.811034][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.829256][ T5878] syz.2.3[5878]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.843955][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.862941][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.874695][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.880025][ T5878] loop2: detected capacity change from 0 to 128 [ 91.885428][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.921403][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.978045][ T5788] veth0_macvtap: entered promiscuous mode [ 92.014940][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.029142][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.042571][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.053901][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.272528][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.285413][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.297866][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.349985][ T27] cfg80211: failed to load regulatory.db [ 92.379329][ T50] Bluetooth: hci0: command tx timeout [ 92.396062][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.459797][ T50] Bluetooth: hci1: command tx timeout [ 92.470029][ T5799] Bluetooth: hci2: command tx timeout [ 92.474727][ T5788] veth1_macvtap: entered promiscuous mode [ 92.475831][ T50] Bluetooth: hci3: command tx timeout [ 92.745704][ T5882] wg1: entered promiscuous mode [ 92.749438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.753313][ T5882] wg1: entered allmulticast mode [ 92.911734][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.940305][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.953018][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.963840][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.974051][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.985053][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.996931][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.008686][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.019720][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.030230][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.041855][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.052976][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.082454][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.095025][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.154142][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.167764][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.177433][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.207918][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.298866][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.337338][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.434480][ T2891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.443529][ T2891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.541799][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.553424][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.575210][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.585305][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.663274][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.676922][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.744709][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.776879][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.124609][ T5892] loop0: detected capacity change from 0 to 1024 [ 94.191024][ T5805] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.470807][ T50] Bluetooth: hci0: command tx timeout [ 94.549723][ T5799] Bluetooth: hci2: command tx timeout [ 94.549733][ T5793] Bluetooth: hci1: command tx timeout [ 94.561535][ T50] Bluetooth: hci3: command tx timeout [ 95.348728][ T5899] loop3: detected capacity change from 0 to 1024 [ 95.415960][ T5887] loop1: detected capacity change from 0 to 32768 [ 95.477021][ T5887] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (5887) [ 95.577032][ T5901] loop0: detected capacity change from 0 to 4096 [ 95.586268][ T5887] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.629520][ T5887] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 95.638342][ T5887] BTRFS info (device loop1): using free space tree [ 95.674593][ T5899] hfsplus: b-tree write err: -5, ino 3 [ 95.815734][ T5895] loop2: detected capacity change from 0 to 32768 [ 95.837093][ T5901] ntfs: volume version 3.1. [ 95.886859][ T5887] BTRFS info (device loop1): enabling ssd optimizations [ 95.904470][ T5887] BTRFS info (device loop1): auto enabling async discard [ 95.947144][ T5798] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.204746][ T5920] loop3: detected capacity change from 0 to 1024 [ 96.307198][ T5901] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 96.324591][ T5901] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 96.342606][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.343997][ T5792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.377028][ T5921] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 96.413833][ T5921] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 96.546966][ T5923] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 96.919767][ T5895] loop2: detected capacity change from 0 to 2048 [ 97.014904][ T5779] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.151012][ T5895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.300582][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 97.307437][ T5933] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #15: comm syz.2.6: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 97.350541][ T5779] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 97.393513][ T5779] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 97.397592][ T5933] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 97.415819][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.470586][ T5779] usb 1-1: config 0 descriptor?? [ 97.557178][ T5895] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.6: iget: checksum invalid [ 97.570679][ T5933] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.570679][ T5933] [ 97.604724][ T5895] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.6: Inode bitmap for bg 0 marked uninitialized [ 97.652382][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.652469][ T5936] loop3: detected capacity change from 0 to 4096 [ 97.694615][ T5934] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #15: comm syz.2.6: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 97.775112][ T5936] ntfs: volume version 3.1. [ 97.797081][ T5934] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 117 [ 97.832489][ T5934] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.832489][ T5934] [ 98.176374][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.256104][ T5936] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 98.340777][ T5936] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 98.358520][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.370484][ T5940] binder: BINDER_SET_CONTEXT_MGR already set [ 98.391132][ T5940] binder: 5938:5940 ioctl 4018620d 200000004a80 returned -16 [ 98.534784][ T5941] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 98.565615][ T5901] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 98.591004][ T5940] binder: 5938:5940 ioctl 541b 0 returned -22 [ 98.629534][ T5901] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 98.649864][ T5941] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 98.715056][ T5940] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 98.756684][ T5779] usbhid 1-1:0.0: can't add hid device: -71 [ 98.772839][ T5779] usbhid: probe of 1-1:0.0 failed with error -71 [ 98.794254][ T5779] usb 1-1: USB disconnect, device number 2 [ 98.860315][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.069516][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 99.090517][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 99.124881][ T23] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 99.137235][ T5950] loop1: detected capacity change from 0 to 1024 [ 99.145059][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.166229][ T23] usb 4-1: config 0 descriptor?? [ 99.485969][ T5945] loop2: detected capacity change from 0 to 32768 [ 99.868304][ T23] corsair 0003:1B1C:1B09.0001: unbalanced delimiter at end of report description [ 100.090099][ T23] corsair 0003:1B1C:1B09.0001: parse failed [ 100.139182][ T23] corsair: probe of 0003:1B1C:1B09.0001 failed with error -22 [ 100.366554][ T5956] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.686357][ T969] usb 4-1: USB disconnect, device number 2 [ 101.120405][ T5945] loop2: detected capacity change from 0 to 32768 [ 101.139548][ T5945] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.12 (5945) [ 101.154417][ T5963] loop1: detected capacity change from 0 to 1024 [ 101.174746][ T5945] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.216733][ T5945] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 101.249457][ T5945] BTRFS error (device loop2): unrecognized mount option 'D' [ 101.373774][ T5945] BTRFS error (device loop2): open_ctree failed: -22 [ 101.407077][ T5954] loop0: detected capacity change from 0 to 40427 [ 101.474416][ T3471] __ntfs_error: 3 callbacks suppressed [ 101.474432][ T3471] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 101.505033][ T5798] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (5798) [ 101.523396][ T5954] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 101.589174][ T5954] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 102.054827][ T5954] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.492150][ T5954] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 102.520104][ T5954] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.574267][ T5976] loop2: detected capacity change from 0 to 1024 [ 102.749069][ T969] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.055491][ T969] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 103.209772][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.430095][ T969] usb 2-1: Product: syz [ 103.454812][ T969] usb 2-1: Manufacturer: syz [ 103.479476][ T969] usb 2-1: SerialNumber: syz [ 103.543593][ T969] usb 2-1: config 0 descriptor?? [ 103.823645][ C1] sd 0:0:1:0: [sda] tag#4033 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 103.834280][ C1] sd 0:0:1:0: [sda] tag#4033 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 103.875445][ T5974] loop1: detected capacity change from 0 to 512 [ 103.903918][ T5982] loop2: detected capacity change from 0 to 1024 [ 103.915366][ T5974] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.939836][ T5974] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.979667][ T5974] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.012133][ T5974] EXT4-fs (loop1): 1 truncate cleaned up [ 104.022577][ T5804] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.031685][ T5974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.066262][ T5974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.131509][ T5986] loop0: detected capacity change from 0 to 4096 [ 104.180191][ T5971] loop3: detected capacity change from 0 to 40427 [ 104.230352][ T5971] F2FS-fs (loop3): Invalid log sectors per block(0) log sectorsize(9) [ 104.276488][ T5971] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 104.348171][ T5986] ntfs: volume version 3.1. [ 104.359068][ T5971] F2FS-fs (loop3): invalid crc value [ 105.165724][ T969] usb 2-1: Firmware version (0.0) predates our first public release. [ 105.186826][ T969] usb 2-1: Please update to version 0.2 or newer [ 105.260937][ T5986] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 105.274111][ T5971] F2FS-fs (loop3): Start checkpoint disabled! [ 105.287093][ T969] usb 2-1: USB disconnect, device number 2 [ 105.340704][ T5986] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 105.343993][ T5971] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 105.399531][ T5996] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 105.418604][ T5971] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 105.441017][ T5996] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 105.754986][ T5999] loop1: detected capacity change from 0 to 1024 [ 105.769146][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.823977][ T5991] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.979192][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 106.009928][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 106.069250][ T5872] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 106.149103][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.164416][ T5995] loop2: detected capacity change from 0 to 40427 [ 106.181185][ T5872] usb 1-1: config 0 descriptor?? [ 106.473788][ T5995] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9) [ 106.673050][ T5995] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 106.759489][ T5995] F2FS-fs (loop2): invalid crc value [ 106.895776][ T5872] corsair 0003:1B1C:1B09.0002: unbalanced delimiter at end of report description [ 106.989057][ T5872] corsair 0003:1B1C:1B09.0002: parse failed [ 107.013983][ T5872] corsair: probe of 0003:1B1C:1B09.0002 failed with error -22 [ 107.185389][ T5995] F2FS-fs (loop2): Start checkpoint disabled! [ 107.218370][ T5995] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 107.239629][ T5995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 107.348819][ T6011] loop1: detected capacity change from 0 to 1024 [ 107.363237][ T6012] UBIFS error (pid: 6012): cannot open "(null)", error -22 [ 107.416145][ T6012] loop3: detected capacity change from 0 to 4096 [ 107.441196][ T6012] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 107.488003][ T6012] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 107.505098][ T6012] ntfs3: loop3: Failed to load $BadClus (-22). [ 107.531458][ T5991] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.823730][ T5986] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 107.835269][ T5986] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 107.857911][ T23] usb 1-1: USB disconnect, device number 3 [ 108.196536][ T2891] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 108.625981][ T6016] loop2: detected capacity change from 0 to 1024 [ 108.797292][ T6020] loop0: detected capacity change from 0 to 1024 [ 108.916546][ T6018] loop1: detected capacity change from 0 to 4096 [ 108.965838][ T5798] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.054415][ T6018] ntfs: volume version 3.1. [ 110.359095][ T6027] loop0: detected capacity change from 0 to 1024 [ 110.415116][ T6018] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 110.436470][ T5991] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.461265][ T6018] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 110.480538][ T6029] loop2: detected capacity change from 0 to 4096 [ 110.496500][ T6031] loop3: detected capacity change from 0 to 1024 [ 110.538382][ T6032] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 110.613696][ T6032] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 111.339399][ T6029] ntfs: volume version 3.1. [ 111.619901][ T5779] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.659555][ T6040] loop3: detected capacity change from 0 to 1024 [ 111.726393][ T6029] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 111.739609][ T6029] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 111.740218][ T2897] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 111.757350][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.014230][ T6044] loop0: detected capacity change from 0 to 1024 [ 112.349402][ T5872] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.930690][ T6049] loop3: detected capacity change from 0 to 1024 [ 112.949084][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 112.963399][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 112.997782][ T5872] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 113.513873][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.250264][ T5872] usb 3-1: config 0 descriptor?? [ 114.330929][ T42] __ntfs_error: 2 callbacks suppressed [ 114.330946][ T42] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 114.390896][ T5872] usb 3-1: can't set config #0, error -71 [ 114.400681][ T5872] usb 3-1: USB disconnect, device number 2 [ 114.565144][ T6061] loop3: detected capacity change from 0 to 1024 [ 114.622447][ T5798] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.853051][ T6046] loop1: detected capacity change from 0 to 32768 [ 114.887251][ T6046] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.36 (6046) [ 115.014835][ T6046] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 115.215705][ T6046] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 115.447255][ T6046] BTRFS info (device loop1): using free space tree [ 115.489473][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 115.499709][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 115.580089][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 115.641281][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 115.651743][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 115.661614][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 115.671425][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 115.681188][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 115.692299][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 115.701941][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 115.732797][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 115.780112][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 115.818095][ T6046] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 115.854408][ T6086] loop2: detected capacity change from 0 to 1024 [ 115.879549][ T6046] BTRFS error (device loop1): open_ctree failed: -12 [ 115.949977][ T5991] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.138363][ T6083] loop3: detected capacity change from 0 to 4096 [ 116.450738][ T6083] ntfs: volume version 3.1. [ 117.405358][ T6095] loop1: detected capacity change from 0 to 1024 [ 117.411103][ T6083] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 117.443074][ T6083] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 117.488726][ T5991] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.514557][ T6096] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 117.525351][ T6098] FAULT_INJECTION: forcing a failure. [ 117.525351][ T6098] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.525397][ T6098] CPU: 0 PID: 6098 Comm: syz.2.44 Not tainted syzkaller #0 [ 117.525416][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.525433][ T6098] Call Trace: [ 117.525441][ T6098] [ 117.562051][ T6098] dump_stack_lvl+0x16c/0x230 [ 117.566804][ T6098] ? show_regs_print_info+0x20/0x20 [ 117.572052][ T6098] ? load_image+0x3b0/0x3b0 [ 117.576596][ T6098] ? __might_fault+0xaa/0x120 [ 117.581375][ T6098] ? __lock_acquire+0x7c80/0x7c80 [ 117.586449][ T6098] should_fail_ex+0x39d/0x4d0 [ 117.591179][ T6098] _copy_from_user+0x2f/0xe0 [ 117.595814][ T6098] ucma_write+0x161/0x2e0 [ 117.600199][ T6098] ? ucma_get_global_nl_info+0x70/0x70 [ 117.605709][ T6098] ? fsnotify_perm+0x5d/0x5e0 [ 117.610415][ T6098] ? security_file_permission+0x79/0xa0 [ 117.615982][ T6098] do_iter_write+0x50e/0xc70 [ 117.620641][ T6098] ? ucma_get_global_nl_info+0x70/0x70 [ 117.626128][ T6098] ? vfs_iter_write+0xa0/0xa0 [ 117.630825][ T6098] ? __import_iovec+0x3fa/0x860 [ 117.635711][ T6098] ? import_iovec+0x73/0xa0 [ 117.640248][ T6098] do_writev+0x252/0x410 [ 117.644546][ T6098] ? do_readv+0x3e0/0x3e0 [ 117.648944][ T6098] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 117.654978][ T6098] ? lock_chain_count+0x20/0x20 [ 117.659874][ T6098] ? lockdep_hardirqs_on+0x98/0x150 [ 117.665121][ T6098] do_syscall_64+0x55/0xb0 [ 117.669562][ T6098] ? clear_bhb_loop+0x40/0x90 [ 117.674265][ T6098] ? clear_bhb_loop+0x40/0x90 [ 117.678973][ T6098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.684911][ T6098] RIP: 0033:0x7f830d78eba9 [ 117.689347][ T6098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.708979][ T6098] RSP: 002b:00007f830e633038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 117.717417][ T6098] RAX: ffffffffffffffda RBX: 00007f830d9d5fa0 RCX: 00007f830d78eba9 [ 117.725407][ T6098] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000006 [ 117.733485][ T6098] RBP: 00007f830e633090 R08: 0000000000000000 R09: 0000000000000000 [ 117.741471][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.749454][ T6098] R13: 00007f830d9d6038 R14: 00007f830d9d5fa0 R15: 00007ffdb84fea18 [ 117.757471][ T6098] [ 117.949289][ T6096] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 117.971315][ T6100] syz_tun: entered allmulticast mode [ 118.047330][ T6100] dvmrp8: entered allmulticast mode [ 118.350290][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.438018][ T6099] syz_tun: left allmulticast mode [ 118.486176][ T6099] dvmrp8: left allmulticast mode [ 118.493756][ T6104] loop2: detected capacity change from 0 to 1024 [ 118.783952][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 118.811975][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 118.835405][ T788] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 118.845154][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.863900][ T788] usb 4-1: config 0 descriptor?? [ 119.500646][ T11] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 119.547635][ T788] usbhid 4-1:0.0: can't add hid device: -71 [ 119.554476][ T788] usbhid: probe of 4-1:0.0 failed with error -71 [ 119.574138][ T788] usb 4-1: USB disconnect, device number 3 [ 119.951097][ T6117] loop0: detected capacity change from 0 to 1024 [ 119.977822][ T6107] loop1: detected capacity change from 0 to 32768 [ 120.073733][ T6107] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.48 (6107) [ 120.257446][ T6107] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.271487][ T788] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.279618][ T6107] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 120.315510][ T6107] BTRFS info (device loop1): using free space tree [ 120.875066][ T6107] BTRFS info (device loop1): enabling ssd optimizations [ 120.899963][ T6107] BTRFS info (device loop1): auto enabling async discard [ 121.179071][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 121.193929][ T5789] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.205195][ T788] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.228701][ T788] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.245469][ T788] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.270751][ T788] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.330340][ T788] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.377174][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.671388][ T788] usb 4-1: usb_control_msg returned -71 [ 121.699139][ T788] usbtmc 4-1:16.0: can't read capabilities [ 121.736322][ T6150] loop1: detected capacity change from 0 to 1024 [ 121.758690][ T6152] autofs4:pid:6152:autofs_fill_super: called with bogus options [ 121.793080][ T788] usb 4-1: USB disconnect, device number 4 [ 121.800495][ T6113] overlay: Unknown parameter '³Àr(Ù¤7ˆòp×g-©¶¯‰çΖ~.ÅâÔ›tç¿&–jbƒµgù˜r8Üô [ 122.827786][ T6163] dump_stack_lvl+0x16c/0x230 [ 122.832577][ T6163] ? show_regs_print_info+0x20/0x20 [ 122.837795][ T6163] ? load_image+0x3b0/0x3b0 [ 122.842319][ T6163] ? __might_sleep+0xe0/0xe0 [ 122.846932][ T6163] ? __lock_acquire+0x7c80/0x7c80 [ 122.851975][ T6163] ? prepend_path+0x4b/0x960 [ 122.856579][ T6163] should_fail_ex+0x39d/0x4d0 [ 122.861284][ T6163] should_failslab+0x9/0x20 [ 122.865808][ T6163] slab_pre_alloc_hook+0x59/0x310 [ 122.870860][ T6163] ? __asan_memcpy+0x40/0x70 [ 122.875475][ T6163] ? tomoyo_encode+0x28b/0x540 [ 122.880261][ T6163] ? tomoyo_encode+0x28b/0x540 [ 122.885050][ T6163] __kmem_cache_alloc_node+0x53/0x260 [ 122.890448][ T6163] ? prepend_path+0x4b/0x960 [ 122.895060][ T6163] ? tomoyo_encode+0x28b/0x540 [ 122.899934][ T6163] __kmalloc+0xa4/0x240 [ 122.904132][ T6163] tomoyo_encode+0x28b/0x540 [ 122.908753][ T6163] tomoyo_realpath_from_path+0x592/0x5d0 [ 122.914433][ T6163] tomoyo_path_number_perm+0x1ea/0x590 [ 122.919916][ T6163] ? tomoyo_path_number_perm+0x1ba/0x590 [ 122.925573][ T6163] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 122.931055][ T6163] ? ksys_write+0x1c1/0x250 [ 122.935606][ T6163] ? __fget_files+0x28/0x4d0 [ 122.940232][ T6163] security_file_ioctl+0x70/0xa0 [ 122.945200][ T6163] __se_sys_ioctl+0x48/0x170 [ 122.949813][ T6163] do_syscall_64+0x55/0xb0 [ 122.954251][ T6163] ? clear_bhb_loop+0x40/0x90 [ 122.958953][ T6163] ? clear_bhb_loop+0x40/0x90 [ 122.963654][ T6163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.969590][ T6163] RIP: 0033:0x7f8905f8eba9 [ 122.974026][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.993657][ T6163] RSP: 002b:00007f8906dbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.002111][ T6163] RAX: ffffffffffffffda RBX: 00007f89061d5fa0 RCX: 00007f8905f8eba9 [ 123.010110][ T6163] RDX: 0000200000000080 RSI: 00000000c004562f RDI: 0000000000000003 [ 123.018106][ T6163] RBP: 00007f8906dbc090 R08: 0000000000000000 R09: 0000000000000000 [ 123.026111][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.034114][ T6163] R13: 00007f89061d6038 R14: 00007f89061d5fa0 R15: 00007ffd2d186d58 [ 123.042125][ T6163] [ 123.045187][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.085292][ T6163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.236287][ T6168] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.408704][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.437714][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.447214][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.458610][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.468310][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.479652][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x2 [ 123.487130][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.504483][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.526695][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.534440][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.543076][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.550728][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.558212][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.565756][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.573624][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.589042][ T27] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 123.630184][ T27] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 123.772751][ T6178] fido_id[6178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.037462][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 125.192274][ T6173] syzkaller0: entered promiscuous mode [ 125.197822][ T6173] syzkaller0: entered allmulticast mode [ 125.429113][ T6188] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 125.707318][ T6197] FAULT_INJECTION: forcing a failure. [ 125.707318][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 125.726435][ T6197] CPU: 0 PID: 6197 Comm: syz.3.67 Not tainted syzkaller #0 [ 125.733690][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.743781][ T6197] Call Trace: [ 125.747069][ T6197] [ 125.750019][ T6197] dump_stack_lvl+0x16c/0x230 [ 125.754738][ T6197] ? show_regs_print_info+0x20/0x20 [ 125.759979][ T6197] ? load_image+0x3b0/0x3b0 [ 125.764529][ T6197] ? __might_sleep+0xe0/0xe0 [ 125.769269][ T6197] ? __lock_acquire+0x7c80/0x7c80 [ 125.774311][ T6197] ? percpu_ref_put+0x12/0x100 [ 125.779107][ T6197] should_fail_ex+0x39d/0x4d0 [ 125.783839][ T6197] should_failslab+0x9/0x20 [ 125.788376][ T6197] slab_pre_alloc_hook+0x59/0x310 [ 125.793428][ T6197] kmem_cache_alloc+0x5a/0x2e0 [ 125.798251][ T6197] ? vm_area_dup+0x61/0x270 [ 125.802775][ T6197] vm_area_dup+0x61/0x270 [ 125.807132][ T6197] __split_vma+0x19f/0xc00 [ 125.811580][ T6197] ? verify_lock_unused+0x140/0x140 [ 125.816921][ T6197] ? mmap_write_unlock+0x160/0x160 [ 125.822076][ T6197] ? tomoyo_check_open_permission+0x16e/0x3c0 [ 125.828199][ T6197] do_vmi_align_munmap+0x377/0x1660 [ 125.833446][ T6197] ? __lock_acquire+0x1260/0x7c80 [ 125.838504][ T6197] ? do_vmi_munmap+0x2d0/0x2d0 [ 125.843293][ T6197] ? mtree_range_walk+0x674/0x7c0 [ 125.848341][ T6197] ? mas_find_setup+0x493/0x590 [ 125.853222][ T6197] do_vmi_munmap+0x252/0x2d0 [ 125.857867][ T6197] mmap_region+0x741/0x2020 [ 125.862397][ T6197] ? arch_get_unmapped_area+0x7e0/0x7e0 [ 125.867964][ T6197] ? file_mmap_ok+0x170/0x170 [ 125.872660][ T6197] ? arch_get_unmapped_area+0x7e0/0x7e0 [ 125.878215][ T6197] ? cap_mmap_addr+0x169/0x2d0 [ 125.883092][ T6197] ? shmem_get_unmapped_area+0x2e0/0x720 [ 125.888761][ T6197] ? file_mmap_ok+0x11c/0x170 [ 125.893453][ T6197] do_mmap+0x92f/0x10a0 [ 125.897636][ T6197] ? mlock_future_ok+0xf0/0xf0 [ 125.902513][ T6197] ? down_write+0x1f0/0x1f0 [ 125.907078][ T6197] vm_mmap_pgoff+0x1c0/0x400 [ 125.911693][ T6197] ? account_locked_vm+0x210/0x210 [ 125.916828][ T6197] ksys_mmap_pgoff+0x520/0x700 [ 125.921612][ T6197] ? __x64_sys_mmap+0x7a/0x130 [ 125.926401][ T6197] do_syscall_64+0x55/0xb0 [ 125.930849][ T6197] ? clear_bhb_loop+0x40/0x90 [ 125.935571][ T6197] ? clear_bhb_loop+0x40/0x90 [ 125.940276][ T6197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.946189][ T6197] RIP: 0033:0x7f414d58eba9 [ 125.950624][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.970252][ T6197] RSP: 002b:00007f414b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 125.978706][ T6197] RAX: ffffffffffffffda RBX: 00007f414d7d5fa0 RCX: 00007f414d58eba9 [ 125.986704][ T6197] RDX: 000000000100000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 125.994703][ T6197] RBP: 00007f414b7f6090 R08: 0000000000000003 R09: 0000000000000000 [ 126.002704][ T6197] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 126.010699][ T6197] R13: 00007f414d7d6038 R14: 00007f414d7d5fa0 R15: 00007ffc0c3b1838 [ 126.018747][ T6197] [ 126.199939][ T6201] loop3: detected capacity change from 0 to 4096 [ 126.338207][ T6201] ntfs: volume version 3.1. [ 126.451138][ T6205] FAULT_INJECTION: forcing a failure. [ 126.451138][ T6205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.464564][ T6205] CPU: 0 PID: 6205 Comm: syz.2.69 Not tainted syzkaller #0 [ 126.471821][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.481920][ T6205] Call Trace: [ 126.485237][ T6205] [ 126.488208][ T6205] dump_stack_lvl+0x16c/0x230 [ 126.492942][ T6205] ? show_regs_print_info+0x20/0x20 [ 126.498194][ T6205] ? load_image+0x3b0/0x3b0 [ 126.502745][ T6205] ? __might_fault+0xaa/0x120 [ 126.507478][ T6205] ? __lock_acquire+0x7c80/0x7c80 [ 126.512561][ T6205] should_fail_ex+0x39d/0x4d0 [ 126.517303][ T6205] _copy_from_user+0x2f/0xe0 [ 126.521960][ T6205] strndup_user+0xb7/0x150 [ 126.526437][ T6205] __se_sys_mount+0x9f/0x3c0 [ 126.531068][ T6205] ? __x64_sys_mount+0xc0/0xc0 [ 126.535869][ T6205] ? lockdep_hardirqs_on+0x98/0x150 [ 126.541095][ T6205] ? __x64_sys_mount+0x20/0xc0 [ 126.545876][ T6205] do_syscall_64+0x55/0xb0 [ 126.550318][ T6205] ? clear_bhb_loop+0x40/0x90 [ 126.555018][ T6205] ? clear_bhb_loop+0x40/0x90 [ 126.559723][ T6205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.565643][ T6205] RIP: 0033:0x7f830d78eba9 [ 126.570104][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.589736][ T6205] RSP: 002b:00007f830e5f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.598174][ T6205] RAX: ffffffffffffffda RBX: 00007f830d9d6180 RCX: 00007f830d78eba9 [ 126.606180][ T6205] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 126.614172][ T6205] RBP: 00007f830e5f1090 R08: 0000200000000180 R09: 0000000000000000 [ 126.622167][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.630182][ T6205] R13: 00007f830d9d6218 R14: 00007f830d9d6180 R15: 00007ffdb84fea18 [ 126.638206][ T6205] [ 126.686510][ T6201] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 126.697855][ T6201] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 126.737070][ T6201] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 126.765128][ T6201] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 127.119169][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.310522][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 127.337061][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 127.357966][ T27] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 127.367205][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.378599][ T27] usb 4-1: config 0 descriptor?? [ 127.836290][ T27] corsair 0003:1B1C:1B09.0004: unbalanced delimiter at end of report description [ 127.848185][ T27] corsair 0003:1B1C:1B09.0004: parse failed [ 127.854417][ T27] corsair: probe of 0003:1B1C:1B09.0004 failed with error -22 [ 128.268230][ T6201] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 128.285101][ T6201] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 128.317621][ T6192] tipc: Started in network mode [ 128.319874][ T5779] usb 4-1: USB disconnect, device number 5 [ 128.325207][ T6192] tipc: Node identity 8655d1bea396, cluster identity 4711 [ 128.336225][ T6192] tipc: Enabled bearer , priority 0 [ 128.347652][ T6193] syzkaller0: entered promiscuous mode [ 128.360534][ T6193] syzkaller0: entered allmulticast mode [ 128.412266][ T6199] tipc: Resetting bearer [ 128.432626][ T6183] tipc: Resetting bearer [ 128.472524][ T6183] tipc: Disabling bearer [ 128.490673][ T6208] loop0: detected capacity change from 0 to 4096 [ 128.536767][ T6208] ntfs: volume version 3.1. [ 128.671813][ T6208] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 128.688257][ T6208] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 128.737419][ T6210] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 128.749902][ T6210] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 129.059394][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.249455][ T788] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 129.279753][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 129.286820][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 129.300347][ T8] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 129.309553][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.320344][ T8] usb 1-1: config 0 descriptor?? [ 129.433843][ T788] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.447301][ T788] usb 2-1: config 0 has no interface number 0 [ 129.453939][ T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 129.465010][ T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 129.475852][ T788] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 129.485008][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.497716][ T788] usb 2-1: config 0 descriptor?? [ 129.505312][ T6216] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 129.519108][ T788] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 129.739549][ T5779] usb 2-1: USB disconnect, device number 4 [ 129.752828][ T8] corsair 0003:1B1C:1B09.0005: unbalanced delimiter at end of report description [ 129.768101][ T8] corsair 0003:1B1C:1B09.0005: parse failed [ 129.785895][ T8] corsair: probe of 0003:1B1C:1B09.0005 failed with error -22 [ 130.116574][ T27] usb 1-1: USB disconnect, device number 4 [ 130.229100][ T6225] loop3: detected capacity change from 0 to 32768 [ 130.241449][ T6225] XFS (loop3): sunit and swidth must be specified together [ 130.706008][ T6241] FAULT_INJECTION: forcing a failure. [ 130.706008][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 130.733510][ T6241] CPU: 0 PID: 6241 Comm: syz.1.80 Not tainted syzkaller #0 [ 130.740812][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.750916][ T6241] Call Trace: [ 130.754295][ T6241] [ 130.757301][ T6241] dump_stack_lvl+0x16c/0x230 [ 130.762036][ T6241] ? show_regs_print_info+0x20/0x20 [ 130.767303][ T6241] ? load_image+0x3b0/0x3b0 [ 130.771858][ T6241] ? __might_sleep+0xe0/0xe0 [ 130.776506][ T6241] ? __lock_acquire+0x7c80/0x7c80 [ 130.781625][ T6241] should_fail_ex+0x39d/0x4d0 [ 130.786381][ T6241] should_failslab+0x9/0x20 [ 130.791050][ T6241] slab_pre_alloc_hook+0x59/0x310 [ 130.796135][ T6241] ? tomoyo_encode+0x28b/0x540 [ 130.801830][ T6241] ? tomoyo_encode+0x28b/0x540 [ 130.806648][ T6241] __kmem_cache_alloc_node+0x53/0x260 [ 130.809881][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.812145][ T6241] ? tomoyo_encode+0x28b/0x540 [ 130.812198][ T6241] __kmalloc+0xa4/0x240 [ 130.828762][ T6241] tomoyo_encode+0x28b/0x540 [ 130.833433][ T6241] tomoyo_realpath_from_path+0x592/0x5d0 [ 130.839139][ T6241] tomoyo_path_number_perm+0x1ea/0x590 [ 130.844662][ T6241] ? tomoyo_path_number_perm+0x1ba/0x590 [ 130.850354][ T6241] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 130.855877][ T6241] ? ksys_write+0x1c1/0x250 [ 130.860468][ T6241] ? __fget_files+0x28/0x4d0 [ 130.865120][ T6241] security_file_ioctl+0x70/0xa0 [ 130.870116][ T6241] __se_sys_ioctl+0x48/0x170 [ 130.874756][ T6241] do_syscall_64+0x55/0xb0 [ 130.879222][ T6241] ? clear_bhb_loop+0x40/0x90 [ 130.883942][ T6241] ? clear_bhb_loop+0x40/0x90 [ 130.888666][ T6241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.894608][ T6241] RIP: 0033:0x7f271458eba9 [ 130.899060][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.918719][ T6241] RSP: 002b:00007f27153aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.927184][ T6241] RAX: ffffffffffffffda RBX: 00007f27147d5fa0 RCX: 00007f271458eba9 [ 130.935220][ T6241] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 130.943230][ T6241] RBP: 00007f27153aa090 R08: 0000000000000000 R09: 0000000000000000 [ 130.951239][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.959247][ T6241] R13: 00007f27147d6038 R14: 00007f27147d5fa0 R15: 00007fff986dc3d8 [ 130.967291][ T6241] [ 130.976160][ T6241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.017118][ T27] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 131.028289][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.042170][ T27] usb 4-1: Product: syz [ 131.046451][ T27] usb 4-1: Manufacturer: syz [ 131.053001][ T27] usb 4-1: SerialNumber: syz [ 131.071058][ T27] usb 4-1: config 0 descriptor?? [ 131.087750][ T27] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 006 [ 131.330923][ T6251] FAULT_INJECTION: forcing a failure. [ 131.330923][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 131.358375][ T6251] CPU: 0 PID: 6251 Comm: syz.1.82 Not tainted syzkaller #0 [ 131.365752][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.375851][ T6251] Call Trace: [ 131.379166][ T6251] [ 131.382136][ T6251] dump_stack_lvl+0x16c/0x230 [ 131.386870][ T6251] ? show_regs_print_info+0x20/0x20 [ 131.392119][ T6251] ? load_image+0x3b0/0x3b0 [ 131.396755][ T6251] ? __might_sleep+0xe0/0xe0 [ 131.401386][ T6251] ? __lock_acquire+0x7c80/0x7c80 [ 131.406453][ T6251] should_fail_ex+0x39d/0x4d0 [ 131.411180][ T6251] should_failslab+0x9/0x20 [ 131.415737][ T6251] slab_pre_alloc_hook+0x59/0x310 [ 131.420812][ T6251] ? fuse_direct_io+0x369/0x2a70 [ 131.425794][ T6251] ? fuse_direct_io+0x369/0x2a70 [ 131.427847][ T6246] loop0: detected capacity change from 0 to 40427 [ 131.430773][ T6251] __kmem_cache_alloc_node+0x53/0x260 [ 131.430847][ T6251] ? fuse_direct_io+0x369/0x2a70 [ 131.430869][ T6251] __kmalloc+0xa4/0x240 [ 131.430900][ T6251] fuse_direct_io+0x369/0x2a70 [ 131.430932][ T6251] ? __might_sleep+0xe0/0xe0 [ 131.430955][ T6251] ? mark_lock+0x94/0x320 [ 131.430982][ T6251] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 131.431009][ T6251] ? lock_chain_count+0x20/0x20 [ 131.462191][ T6246] F2FS-fs (loop0): invalid crc value [ 131.465688][ T6251] ? generic_write_checks_count+0x3e0/0x4c0 [ 131.465728][ T6251] ? fuse_write_update_attr+0x170/0x170 [ 131.493469][ T6251] ? generic_write_checks+0xc9/0x100 [ 131.498826][ T6251] fuse_file_write_iter+0x72d/0xf20 [ 131.504090][ T6251] ? fuse_file_read_iter+0x600/0x600 [ 131.509450][ T6251] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 131.514807][ T6251] vfs_write+0x43b/0x940 [ 131.519212][ T6251] ? file_end_write+0x250/0x250 [ 131.524133][ T6251] ? __fget_files+0x44a/0x4d0 [ 131.528885][ T6251] ? __fdget_pos+0x2a3/0x330 [ 131.533538][ T6251] ? ksys_write+0x75/0x250 [ 131.538016][ T6251] ksys_write+0x147/0x250 [ 131.542405][ T6251] ? __ia32_sys_read+0x90/0x90 [ 131.547225][ T6251] ? lockdep_hardirqs_on+0x98/0x150 [ 131.552483][ T6251] do_syscall_64+0x55/0xb0 [ 131.556950][ T6251] ? clear_bhb_loop+0x40/0x90 [ 131.561688][ T6251] ? clear_bhb_loop+0x40/0x90 [ 131.566417][ T6251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.572371][ T6251] RIP: 0033:0x7f271458eba9 [ 131.576844][ T6251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.596510][ T6251] RSP: 002b:00007f2715389038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.604994][ T6251] RAX: ffffffffffffffda RBX: 00007f27147d6090 RCX: 00007f271458eba9 [ 131.613025][ T6251] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 131.621047][ T6251] RBP: 00007f2715389090 R08: 0000000000000000 R09: 0000000000000000 [ 131.629071][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.637094][ T6251] R13: 00007f27147d6128 R14: 00007f27147d6090 R15: 00007fff986dc3d8 [ 131.645147][ T6251] [ 131.673547][ T6246] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.722549][ T27] i2c i2c-1: failure reading functionality [ 131.771665][ T27] i2c i2c-1: connected i2c-tiny-usb device [ 131.810196][ T27] usb 4-1: USB disconnect, device number 6 [ 132.430936][ T6259] loop2: detected capacity change from 0 to 32768 [ 132.458349][ T6259] ======================================================= [ 132.458349][ T6259] WARNING: The mand mount option has been deprecated and [ 132.458349][ T6259] and is ignored by this kernel. Remove the mand [ 132.458349][ T6259] option from the mount to silence this warning. [ 132.458349][ T6259] ======================================================= [ 132.494293][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.567788][ T6268] loop3: detected capacity change from 0 to 1024 [ 132.586012][ T6268] hfsplus: unable to parse mount options [ 132.660921][ T6273] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 132.786249][ T6259] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 132.948742][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 132.948758][ T28] audit: type=1800 audit(1757875436.051:2): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.84" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 133.159174][ T6268] loop3: detected capacity change from 0 to 8192 [ 133.266074][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.273552][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.351277][ T6268] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 133.360468][ T6268] FAT-fs (loop3): Filesystem has been set read-only [ 133.374379][ T6268] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 133.464201][ T5790] ocfs2: Unmounting device (7,2) on (node local) [ 133.661142][ T6283] FAULT_INJECTION: forcing a failure. [ 133.661142][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 133.697899][ T6283] CPU: 0 PID: 6283 Comm: syz.0.91 Not tainted syzkaller #0 [ 133.705279][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.715385][ T6283] Call Trace: [ 133.718703][ T6283] [ 133.721671][ T6283] dump_stack_lvl+0x16c/0x230 [ 133.726579][ T6283] ? show_regs_print_info+0x20/0x20 [ 133.731863][ T6283] ? load_image+0x3b0/0x3b0 [ 133.736413][ T6283] ? __might_sleep+0xe0/0xe0 [ 133.741054][ T6283] ? __lock_acquire+0x7c80/0x7c80 [ 133.746151][ T6283] should_fail_ex+0x39d/0x4d0 [ 133.750892][ T6283] should_failslab+0x9/0x20 [ 133.755475][ T6283] slab_pre_alloc_hook+0x59/0x310 [ 133.760536][ T6283] ? do_sys_poll+0x2bf/0x1150 [ 133.765238][ T6283] ? do_sys_poll+0x2bf/0x1150 [ 133.769940][ T6283] __kmem_cache_alloc_node+0x53/0x260 [ 133.775347][ T6283] ? do_sys_poll+0x2bf/0x1150 [ 133.780052][ T6283] __kmalloc+0xa4/0x240 [ 133.784250][ T6283] do_sys_poll+0x2bf/0x1150 [ 133.788830][ T6283] ? poll_select_finish+0x5e0/0x5e0 [ 133.794112][ T6283] ? ksys_write+0x1c1/0x250 [ 133.798654][ T6283] ? mutex_unlock+0x10/0x10 [ 133.803179][ T6283] ? set_user_sigmask+0xc8/0x1b0 [ 133.808137][ T6283] ? sigprocmask+0x190/0x190 [ 133.812755][ T6283] __se_sys_ppoll+0x200/0x260 [ 133.817495][ T6283] ? __x64_sys_ppoll+0xc0/0xc0 [ 133.822315][ T6283] ? lockdep_hardirqs_on+0x98/0x150 [ 133.827537][ T6283] ? __x64_sys_ppoll+0x20/0xc0 [ 133.832417][ T6283] do_syscall_64+0x55/0xb0 [ 133.836858][ T6283] ? clear_bhb_loop+0x40/0x90 [ 133.841579][ T6283] ? clear_bhb_loop+0x40/0x90 [ 133.846280][ T6283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.852202][ T6283] RIP: 0033:0x7f8905f8eba9 [ 133.856638][ T6283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.877146][ T6283] RSP: 002b:00007f8906dbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 133.885593][ T6283] RAX: ffffffffffffffda RBX: 00007f89061d5fa0 RCX: 00007f8905f8eba9 [ 133.893587][ T6283] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 133.901575][ T6283] RBP: 00007f8906dbc090 R08: 0000000000000000 R09: 0000000000000000 [ 133.909561][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.917550][ T6283] R13: 00007f89061d6038 R14: 00007f89061d5fa0 R15: 00007ffd2d186d58 [ 133.925553][ T6283] [ 134.085273][ T6290] FAULT_INJECTION: forcing a failure. [ 134.085273][ T6290] name failslab, interval 1, probability 0, space 0, times 0 [ 134.111213][ T23] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 134.144472][ T6290] CPU: 1 PID: 6290 Comm: syz.2.90 Not tainted syzkaller #0 [ 134.151762][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.161862][ T6290] Call Trace: [ 134.165182][ T6290] [ 134.168154][ T6290] dump_stack_lvl+0x16c/0x230 [ 134.172888][ T6290] ? show_regs_print_info+0x20/0x20 [ 134.178140][ T6290] ? load_image+0x3b0/0x3b0 [ 134.182725][ T6290] ? __might_sleep+0xe0/0xe0 [ 134.188103][ T6290] ? __lock_acquire+0x7c80/0x7c80 [ 134.188134][ T6290] ? prepend_path+0x4b/0x960 [ 134.188159][ T6290] should_fail_ex+0x39d/0x4d0 [ 134.188193][ T6290] should_failslab+0x9/0x20 [ 134.188220][ T6290] slab_pre_alloc_hook+0x59/0x310 [ 134.188250][ T6290] ? __asan_memcpy+0x40/0x70 [ 134.188276][ T6290] ? tomoyo_encode+0x28b/0x540 [ 134.188320][ T6290] ? tomoyo_encode+0x28b/0x540 [ 134.188348][ T6290] __kmem_cache_alloc_node+0x53/0x260 [ 134.188375][ T6290] ? prepend_path+0x4b/0x960 [ 134.188398][ T6290] ? tomoyo_encode+0x28b/0x540 [ 134.188426][ T6290] __kmalloc+0xa4/0x240 [ 134.188457][ T6290] tomoyo_encode+0x28b/0x540 [ 134.188494][ T6290] tomoyo_realpath_from_path+0x592/0x5d0 [ 134.188540][ T6290] tomoyo_path_number_perm+0x1ea/0x590 [ 134.188568][ T6290] ? tomoyo_path_number_perm+0x1ba/0x590 [ 134.188599][ T6290] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 134.188631][ T6290] ? ksys_write+0x1c1/0x250 [ 134.188694][ T6290] ? __fget_files+0x28/0x4d0 [ 134.188734][ T6290] security_file_ioctl+0x70/0xa0 [ 134.188767][ T6290] __se_sys_ioctl+0x48/0x170 [ 134.188795][ T6290] do_syscall_64+0x55/0xb0 [ 134.188820][ T6290] ? clear_bhb_loop+0x40/0x90 [ 134.188840][ T6290] ? clear_bhb_loop+0x40/0x90 [ 134.188862][ T6290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.188894][ T6290] RIP: 0033:0x7f830d78eba9 [ 134.188914][ T6290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.188931][ T6290] RSP: 002b:00007f830e633038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.188954][ T6290] RAX: ffffffffffffffda RBX: 00007f830d9d5fa0 RCX: 00007f830d78eba9 [ 134.188969][ T6290] RDX: 0000200000000400 RSI: 0000000000004b72 RDI: 0000000000000003 [ 134.188981][ T6290] RBP: 00007f830e633090 R08: 0000000000000000 R09: 0000000000000000 [ 134.188993][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.189005][ T6290] R13: 00007f830d9d6038 R14: 00007f830d9d5fa0 R15: 00007ffdb84fea18 [ 134.189035][ T6290] [ 134.189165][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.210794][ T6290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.318336][ T6295] loop1: detected capacity change from 0 to 512 [ 134.323381][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 134.336941][ T6295] EXT4-fs: Ignoring removed i_version option [ 134.338155][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.362055][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.370695][ T6295] EXT4-fs: Ignoring removed nobh option [ 134.439909][ T23] usb 4-1: config 0 descriptor?? [ 134.473239][ T6295] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.551964][ T6295] EXT4-fs (loop1): 1 truncate cleaned up [ 134.564875][ T23] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 134.571531][ T6295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.705940][ T6302] FAULT_INJECTION: forcing a failure. [ 134.705940][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 134.733934][ T6302] CPU: 0 PID: 6302 Comm: syz.2.98 Not tainted syzkaller #0 [ 134.741240][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.751344][ T6302] Call Trace: [ 134.754669][ T6302] [ 134.757646][ T6302] dump_stack_lvl+0x16c/0x230 [ 134.762392][ T6302] ? show_regs_print_info+0x20/0x20 [ 134.767643][ T6302] ? load_image+0x3b0/0x3b0 [ 134.772195][ T6302] ? __might_sleep+0xe0/0xe0 [ 134.776882][ T6302] ? __lock_acquire+0x7c80/0x7c80 [ 134.781975][ T6302] should_fail_ex+0x39d/0x4d0 [ 134.786714][ T6302] should_failslab+0x9/0x20 [ 134.791289][ T6302] slab_pre_alloc_hook+0x59/0x310 [ 134.796370][ T6302] ? tomoyo_encode+0x28b/0x540 [ 134.801188][ T6302] ? tomoyo_encode+0x28b/0x540 [ 134.806009][ T6302] __kmem_cache_alloc_node+0x53/0x260 [ 134.811444][ T6302] ? tomoyo_encode+0x28b/0x540 [ 134.816254][ T6302] __kmalloc+0xa4/0x240 [ 134.820455][ T6302] tomoyo_encode+0x28b/0x540 [ 134.825096][ T6302] tomoyo_realpath_from_path+0x592/0x5d0 [ 134.830786][ T6302] tomoyo_path_number_perm+0x1ea/0x590 [ 134.836272][ T6302] ? tomoyo_path_number_perm+0x1ba/0x590 [ 134.841937][ T6302] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 134.847437][ T6302] ? ksys_write+0x1c1/0x250 [ 134.851999][ T6302] ? __fget_files+0x28/0x4d0 [ 134.856621][ T6302] security_file_ioctl+0x70/0xa0 [ 134.861587][ T6302] __se_sys_ioctl+0x48/0x170 [ 134.866204][ T6302] do_syscall_64+0x55/0xb0 [ 134.870650][ T6302] ? clear_bhb_loop+0x40/0x90 [ 134.875348][ T6302] ? clear_bhb_loop+0x40/0x90 [ 134.880049][ T6302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.885987][ T6302] RIP: 0033:0x7f830d78eba9 [ 134.890442][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.910076][ T6302] RSP: 002b:00007f830e633038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.918519][ T6302] RAX: ffffffffffffffda RBX: 00007f830d9d5fa0 RCX: 00007f830d78eba9 [ 134.926511][ T6302] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 134.934496][ T6302] RBP: 00007f830e633090 R08: 0000000000000000 R09: 0000000000000000 [ 134.942497][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.950494][ T6302] R13: 00007f830d9d6038 R14: 00007f830d9d5fa0 R15: 00007ffdb84fea18 [ 134.958535][ T6302] [ 134.977087][ T5789] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /25/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 134.986519][ T6299] loop0: detected capacity change from 0 to 8192 [ 135.024910][ T6302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.029201][ T6299] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.060607][ T5789] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 135.073351][ T6299] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 135.091708][ T6299] REISERFS (device loop0): using ordered data mode [ 135.098376][ T6299] reiserfs: using flush barriers [ 135.108231][ T6299] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.131025][ T6299] REISERFS (device loop0): checking transaction log (loop0) [ 135.146662][ T6299] REISERFS (device loop0): Using r5 hash to sort names [ 135.155451][ T5789] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /25/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 135.176861][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.188269][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 135.197664][ T6299] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 135.210825][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 135.240379][ T5789] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 135.260082][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.365803][ T5789] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /25/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 135.507071][ T5789] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 135.530515][ T23] pwc: recv_control_msg error -71 req 02 val 2c00 [ 135.537896][ T23] pwc: recv_control_msg error -71 req 04 val 1000 [ 135.544924][ T23] pwc: recv_control_msg error -71 req 04 val 1300 [ 135.556648][ T23] pwc: recv_control_msg error -71 req 04 val 1400 [ 135.569440][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 135.576593][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 135.586863][ T23] pwc: recv_control_msg error -71 req 06 val 0600 [ 135.604557][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 135.612568][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 135.621981][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 135.645047][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 135.664476][ T5789] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /25/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 135.679559][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 135.688438][ T5789] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 135.721327][ T5789] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /25/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 135.753015][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 135.764247][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 135.768321][ T5789] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 135.794469][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 135.835549][ T23] pwc: Registered as video103. [ 135.885368][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 136.021689][ T23] usb 4-1: USB disconnect, device number 7 [ 136.266358][ T6319] FAULT_INJECTION: forcing a failure. [ 136.266358][ T6319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.296569][ T6319] CPU: 1 PID: 6319 Comm: syz.2.102 Not tainted syzkaller #0 [ 136.303945][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.314052][ T6319] Call Trace: [ 136.317452][ T6319] [ 136.320424][ T6319] dump_stack_lvl+0x16c/0x230 [ 136.325157][ T6319] ? show_regs_print_info+0x20/0x20 [ 136.330401][ T6319] ? load_image+0x3b0/0x3b0 [ 136.334954][ T6319] ? __might_fault+0xaa/0x120 [ 136.339677][ T6319] ? __lock_acquire+0x7c80/0x7c80 [ 136.344746][ T6319] should_fail_ex+0x39d/0x4d0 [ 136.349478][ T6319] _copy_from_user+0x2f/0xe0 [ 136.354119][ T6319] core_sys_select+0x657/0x950 [ 136.358931][ T6319] ? poll_select_set_timeout+0x160/0x160 [ 136.364628][ T6319] ? sigprocmask+0x190/0x190 [ 136.369242][ T6319] ? __fget_files+0x44a/0x4d0 [ 136.373951][ T6319] __se_sys_pselect6+0x285/0x310 [ 136.378926][ T6319] ? __x64_sys_pselect6+0xf0/0xf0 [ 136.383980][ T6319] ? __x64_sys_pselect6+0x21/0xf0 [ 136.389030][ T6319] do_syscall_64+0x55/0xb0 [ 136.393465][ T6319] ? clear_bhb_loop+0x40/0x90 [ 136.398153][ T6319] ? clear_bhb_loop+0x40/0x90 [ 136.402849][ T6319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.408771][ T6319] RIP: 0033:0x7f830d78eba9 [ 136.413214][ T6319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.432843][ T6319] RSP: 002b:00007f830e612038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 136.441364][ T6319] RAX: ffffffffffffffda RBX: 00007f830d9d6090 RCX: 00007f830d78eba9 [ 136.449350][ T6319] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 136.457338][ T6319] RBP: 00007f830e612090 R08: 0000000000000000 R09: 0000000000000000 [ 136.465320][ T6319] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 136.473309][ T6319] R13: 00007f830d9d6128 R14: 00007f830d9d6090 R15: 00007ffdb84fea18 [ 136.481312][ T6319] [ 136.736831][ T969] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.290290][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 137.305819][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.324036][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.347529][ T969] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 137.381665][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.447226][ T6304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.458779][ T969] usb 1-1: config 0 descriptor?? [ 137.523280][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.565124][ T28] audit: type=1804 audit(1757875440.661:3): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.105" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0 [ 137.637361][ T28] audit: type=1800 audit(1757875440.671:4): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.105" name="/" dev="fuse" ino=1 res=0 errno=0 [ 137.793623][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.945099][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.954241][ T969] usbhid 1-1:0.0: can't add hid device: -71 [ 137.969553][ T969] usbhid: probe of 1-1:0.0 failed with error -71 [ 137.993104][ T969] usb 1-1: USB disconnect, device number 5 [ 138.031778][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.465076][ T11] tipc: Left network mode [ 138.853343][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.866692][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.875977][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.887635][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.900992][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.908685][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.952772][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.144021][ T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.163608][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.189188][ T27] usb 1-1: Product: syz [ 139.193438][ T27] usb 1-1: Manufacturer: syz [ 139.198086][ T27] usb 1-1: SerialNumber: syz [ 139.242110][ T27] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.292332][ T5779] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.851561][ T6343] Bluetooth: MGMT ver 1.22 [ 139.933635][ T6345] loop2: detected capacity change from 0 to 8192 [ 139.973814][ T6345] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 139.994753][ T6345] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 140.016570][ T6345] REISERFS (device loop2): using ordered data mode [ 140.045963][ T6345] reiserfs: using flush barriers [ 140.053633][ T6345] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.131914][ T6345] REISERFS (device loop2): checking transaction log (loop2) [ 140.190927][ T6345] REISERFS warning: reiserfs-5084 is_leaf: item location seems wrong: *3.6* [1 2 0xbbea SD], item_len 0, item_location 0, free_space(entry_count) 112 [ 140.239616][ T6345] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 140.279576][ T6345] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 140.411754][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 140.626549][ T5779] usb 1-1: Service connection timeout for: 256 [ 140.664808][ T5779] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 140.702822][ T5872] usb 1-1: USB disconnect, device number 6 [ 140.714581][ T5779] ath9k_htc: Failed to initialize the device [ 140.734201][ T5872] usb 1-1: ath9k_htc: USB layer deinitialized [ 140.840301][ T6383] loop0: detected capacity change from 0 to 1024 [ 140.935373][ T6351] chnl_net:caif_netlink_parms(): no params data found [ 140.969463][ T50] Bluetooth: hci2: command tx timeout [ 141.311383][ T11] hsr_slave_0: left promiscuous mode [ 141.499614][ T11] hsr_slave_1: left promiscuous mode [ 141.809274][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.816863][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.900687][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.908186][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.931541][ T11] bridge_slave_1: left allmulticast mode [ 141.937313][ T11] bridge_slave_1: left promiscuous mode [ 141.963220][ T6390] loop2: detected capacity change from 0 to 1024 [ 141.988709][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.092962][ T5991] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.130648][ T11] bridge_slave_0: left allmulticast mode [ 142.137098][ T11] bridge_slave_0: left promiscuous mode [ 142.239218][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.483466][ T11] veth1_macvtap: left promiscuous mode [ 142.510849][ T11] veth0_macvtap: left promiscuous mode [ 142.632548][ T11] veth1_vlan: left promiscuous mode [ 142.638898][ T11] veth0_vlan: left promiscuous mode [ 143.036496][ T50] Bluetooth: hci2: command tx timeout [ 144.728731][ T6423] loop0: detected capacity change from 0 to 64 [ 145.119084][ T50] Bluetooth: hci2: command tx timeout [ 170.499376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 170.908979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.059351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 173.468994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 175.619366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 176.028985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 178.179314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 178.588991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 180.739388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 286.858997][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 141s! [ 286.868590][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 140s! [ 286.878020][ C0] Showing busy workqueues and worker pools: [ 286.883981][ C0] workqueue events: flags=0x0 [ 286.888787][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 286.888839][ C0] pending: 3*nsim_dev_hwstats_traffic_work, 2*ovs_dp_masks_rebalance, kfree_rcu_monitor [ 286.906734][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=12/256 refcnt=13 [ 286.906785][ C0] in-flight: 5872:switchdev_deferred_process_work switchdev_deferred_process_work [ 286.906841][ C0] pending: vmstat_shepherd, nsim_dev_hwstats_traffic_work, ovs_dp_masks_rebalance, 4*psi_avgs_work, 2*ovs_dp_masks_rebalance, kfree_rcu_monitor [ 286.906986][ C0] workqueue events_long: flags=0x0 [ 286.944627][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 286.944677][ C0] pending: 3*defense_work_handler [ 286.944716][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 286.944756][ C0] pending: 3*defense_work_handler [ 286.944786][ C0] workqueue events_unbound: flags=0x2 [ 286.976780][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=12/512 refcnt=13 [ 286.976823][ C0] in-flight: 59:linkwatch_event linkwatch_event [ 286.976872][ C0] pending: 3*cfg80211_wiphy_work, flush_memcg_stats_dwork, macvlan_process_broadcast, crng_reseed, 4*macvlan_process_broadcast [ 286.976983][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=9/512 refcnt=10 [ 286.977016][ C0] in-flight: 42:toggle_allocation_gate [ 286.977051][ C0] pending: 3*cfg80211_wiphy_work, 4*nsim_dev_trap_report_work, macvlan_process_broadcast [ 286.977116][ C0] workqueue events_freezable: flags=0x4 [ 287.033774][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.033824][ C0] pending: update_balloon_stats_func [ 287.033875][ C0] workqueue events_power_efficient: flags=0x80 [ 287.053441][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 287.053490][ C0] pending: neigh_managed_work, gc_worker, neigh_managed_work, 2*neigh_periodic_work, reg_check_chans_work [ 287.053600][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 287.053637][ C0] pending: wg_ratelimiter_gc_entries, do_cache_clean, check_lifetime [ 287.053698][ C0] workqueue netns: flags=0xe000a [ 287.094145][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 287.094187][ C0] in-flight: 11:cleanup_net [ 287.094229][ C0] workqueue mm_percpu_wq: flags=0x8 [ 287.111423][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.111469][ C0] pending: vmstat_update [ 287.111509][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.111548][ C0] pending: vmstat_update [ 287.111588][ C0] workqueue writeback: flags=0x4a [ 287.141261][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=4 [ 287.141306][ C0] pending: wb_update_bandwidth_workfn, 2*wb_workfn [ 287.141361][ C0] workqueue kblockd: flags=0x18 [ 287.160384][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 287.160428][ C0] pending: 2*blk_mq_timeout_work [ 287.160456][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 287.160493][ C0] pending: blk_mq_requeue_work, blk_mq_timeout_work [ 287.160578][ C0] workqueue dm_bufio_cache: flags=0x8 [ 287.193940][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.193992][ C0] pending: work_fn [ 287.194092][ C0] workqueue ipv6_addrconf: flags=0xe000a [ 287.211550][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=9 [ 287.211596][ C0] pending: addrconf_verify_work [ 287.211629][ C0] inactive: 5*addrconf_verify_work [ 287.211663][ C0] workqueue krxrpcd: flags=0xa001a [ 287.234596][ C0] pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=8 [ 287.234641][ C0] pending: rxrpc_peer_keepalive_worker [ 287.234666][ C0] inactive: 4*rxrpc_peer_keepalive_worker [ 287.234713][ C0] workqueue bat_events: flags=0xe000a [ 287.259979][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=42 [ 287.260022][ C0] in-flight: 2891:batadv_nc_worker [ 287.260064][ C0] inactive: 4*batadv_nc_worker, batadv_purge_orig, 5*batadv_mcast_mla_update, batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_purge_orig, 7*batadv_iv_send_outstanding_bat_ogm_packet, 5*batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_bla_periodic_work, 3*batadv_dat_purge, batadv_bla_periodic_work [ 287.260422][ C0] workqueue hci0: flags=0xa0012 [ 287.316004][ C0] pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=4 [ 287.316051][ C0] pending: hci_conn_timeout [ 287.316090][ C0] workqueue hci1: flags=0xa0012 [ 287.333747][ C0] pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=4 [ 287.333793][ C0] pending: hci_conn_timeout [ 287.333837][ C0] workqueue hci3: flags=0xa0012 [ 287.351460][ C0] pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=4 [ 287.351507][ C0] pending: hci_conn_timeout [ 287.351554][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 287.369607][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.369655][ C0] pending: wg_packet_encrypt_worker [ 287.369689][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.369726][ C0] pending: wg_packet_encrypt_worker [ 287.369759][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 287.401603][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.401663][ C0] pending: wg_packet_encrypt_worker [ 287.401698][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.401740][ C0] pending: wg_packet_encrypt_worker [ 287.401768][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 287.433743][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.433794][ C0] pending: wg_packet_encrypt_worker [ 287.433827][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.433869][ C0] pending: wg_packet_encrypt_worker [ 287.433905][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 287.465718][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.465766][ C0] pending: wg_packet_encrypt_worker [ 287.465803][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.465844][ C0] pending: wg_packet_encrypt_worker [ 287.465874][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 287.497689][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.497738][ C0] pending: wg_packet_encrypt_worker [ 287.497771][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.497814][ C0] pending: wg_packet_encrypt_worker [ 287.497842][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 287.529741][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.529794][ C0] pending: wg_packet_encrypt_worker [ 287.529830][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.529871][ C0] pending: wg_packet_encrypt_worker [ 287.529901][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 287.561719][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.561768][ C0] pending: wg_packet_encrypt_worker [ 287.561803][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.561845][ C0] pending: wg_packet_encrypt_worker [ 287.561874][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 287.593722][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.593776][ C0] pending: wg_packet_encrypt_worker [ 287.593811][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.593853][ C0] pending: wg_packet_encrypt_worker [ 287.593882][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 287.625706][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.625756][ C0] pending: wg_packet_encrypt_worker [ 287.625789][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 287.625831][ C0] pending: wg_packet_encrypt_worker [ 287.625865][ C0] workqueue hci2: flags=0xa0012 [ 287.657287][ C0] pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=5 [ 287.657336][ C0] pending: hci_cmd_timeout [ 287.657368][ C0] inactive: hci_conn_timeout [ 287.657406][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=142s workers=6 idle: 8 788 9 969 5854 [ 287.657484][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=142s workers=10 idle: 48 6409 12 62 2897 3471 [ 287.657559][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: [ 287.703500][ T29] INFO: task kworker/u4:4:59 blocked for more than 144 seconds. [ 287.713005][ T29] Not tainted syzkaller #0 [ 287.717996][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.730210][ T29] task:kworker/u4:4 state:D stack:21512 pid:59 ppid:2 flags:0x00004000 [ 287.756672][ T29] Workqueue: events_unbound linkwatch_event [ 287.762864][ C0] ------------[ cut here ]------------ [ 287.763509][ C0] WARNING: CPU: 0 PID: 29 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 287.763572][ C0] Modules linked in: [ 287.763594][ C0] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 287.763619][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.763634][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 287.763672][ C0] Code: ff ff ff 48 c7 c7 a0 04 ef 96 be 04 00 00 00 e8 5a ae 6c 00 48 89 df b8 01 00 00 00 87 05 ac d5 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 56 d3 8c 74 47 48 c7 c0 9c c9 4a 8e 48 c1 e8 03 [ 287.763693][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 287.763720][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35680 RCX: ffffffff81702ee6 [ 287.763744][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35680 [ 287.763760][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 287.763775][ C0] R10: dffffc0000000000 R11: fffffbfff2dde094 R12: 0000000000002904 [ 287.763795][ C0] R13: 1ffff110171c7a6a R14: 0000000000000a02 R15: dffffc0000000000 [ 287.763812][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 287.763832][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.763848][ C0] CR2: 00007f8d124d8623 CR3: 0000000031324000 CR4: 00000000003506f0 [ 287.763867][ C0] Call Trace: [ 287.763876][ C0] [ 287.763892][ C0] rcu_core+0x612/0x1720 [ 287.763919][ C0] ? lock_chain_count+0x20/0x20 [ 287.763945][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 287.763972][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.763994][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 287.764030][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 287.764051][ C0] ? __run_timers+0x781/0x7d0 [ 287.764074][ C0] ? __run_timers+0x74e/0x7d0 [ 287.764106][ C0] ? detach_timer+0x2b0/0x2b0 [ 287.764128][ C0] ? detach_timer+0x2b0/0x2b0 [ 287.764153][ C0] ? lock_chain_count+0x20/0x20 [ 287.764188][ C0] handle_softirqs+0x280/0x820 [ 287.764216][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 287.764244][ C0] ? do_softirq+0x180/0x180 [ 287.764271][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 287.764303][ C0] __irq_exit_rcu+0xc7/0x190 [ 287.764326][ C0] ? irq_exit_rcu+0x20/0x20 [ 287.764356][ C0] irq_exit_rcu+0x9/0x20 [ 287.764376][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 287.764408][ C0] [ 287.764416][ C0] [ 287.764425][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.764449][ C0] RIP: 0010:console_flush_all+0x889/0xd00 [ 287.764476][ C0] Code: ed 01 00 00 e8 88 2a 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 79 2a 1b 00 eb 06 e8 72 2a 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 287.764494][ C0] RSP: 0018:ffffc90000a5f780 EFLAGS: 00000293 [ 287.764519][ C0] RAX: ffffffff816a65ce RBX: ffffc90000a5f91f RCX: ffff8880186c0000 [ 287.764537][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.764551][ C0] RBP: ffffc90000a5f8f0 R08: ffffffff90da7507 R09: 1ffffffff21b4ea0 [ 287.764567][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ea1 R12: ffffffff8d4b5d40 [ 287.764583][ C0] R13: 1ffffffff19792f8 R14: ffffffff8d4b5d98 R15: dffffc0000000000 [ 287.764609][ C0] ? console_flush_all+0x87e/0xd00 [ 287.764648][ C0] ? console_flush_all+0x10f/0xd00 [ 287.764690][ C0] ? is_console_locked+0x20/0x20 [ 287.764718][ C0] ? lock_chain_count+0x20/0x20 [ 287.764753][ C0] ? __down_trylock_console_sem+0xef/0x1e0 [ 287.764785][ C0] console_unlock+0xae/0x340 [ 287.764814][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 287.764849][ C0] ? preempt_count_add+0x91/0x1a0 [ 287.764884][ C0] vprintk_emit+0x477/0x600 [ 287.764913][ C0] ? printk_sprint+0x460/0x460 [ 287.764939][ C0] ? preempt_schedule+0xab/0xc0 [ 287.764969][ C0] ? preempt_schedule_common+0x82/0xc0 [ 287.764999][ C0] ? preempt_schedule+0xab/0xc0 [ 287.765033][ C0] _printk+0xd0/0x110 [ 287.765056][ C0] ? copy_from_kernel_nofault+0x1eb/0x320 [ 287.765092][ C0] ? load_image+0x3b0/0x3b0 [ 287.765111][ C0] ? kthread_probe_data+0x103/0x160 [ 287.765145][ C0] ? vprintk_emit+0x521/0x600 [ 287.765169][ C0] ? copy_from_kernel_nofault_allowed+0xbd/0x130 [ 287.765203][ C0] ? copy_from_kernel_nofault+0x1d2/0x320 [ 287.765233][ C0] ? linkwatch_schedule_work+0x190/0x190 [ 287.765258][ C0] print_worker_info+0x2bb/0x2f0 [ 287.765286][ C0] ? set_worker_desc+0x1c0/0x1c0 [ 287.765309][ C0] ? linkwatch_schedule_work+0x190/0x190 [ 287.765334][ C0] ? _printk+0xd0/0x110 [ 287.765361][ C0] ? load_image+0x3b0/0x3b0 [ 287.765392][ C0] ? sched_show_task+0x28b/0x5a0 [ 287.765421][ C0] sched_show_task+0x461/0x5a0 [ 287.765453][ C0] ? __ia32_sys_sched_rr_get_interval_time32+0x110/0x110 [ 287.765484][ C0] ? __asan_memcpy+0x40/0x70 [ 287.765514][ C0] ? print_tainted+0x14c/0x170 [ 287.765543][ C0] watchdog+0xb70/0xf80 [ 287.765572][ C0] ? watchdog+0x1e1/0xf80 [ 287.765609][ C0] kthread+0x2fa/0x390 [ 287.765628][ C0] ? hungtask_pm_notify+0x90/0x90 [ 287.765657][ C0] ? kthread_blkcg+0xd0/0xd0 [ 287.765677][ C0] ret_from_fork+0x48/0x80 [ 287.765703][ C0] ? kthread_blkcg+0xd0/0xd0 [ 287.765725][ C0] ret_from_fork_asm+0x11/0x20 [ 287.765779][ C0] [ 287.765790][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 287.765800][ C0] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 287.765823][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.765835][ C0] Call Trace: [ 287.765843][ C0] [ 287.765851][ C0] dump_stack_lvl+0x16c/0x230 [ 287.765883][ C0] ? show_regs_print_info+0x20/0x20 [ 287.765911][ C0] ? load_image+0x3b0/0x3b0 [ 287.765948][ C0] panic+0x2c0/0x710 [ 287.765988][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 287.766030][ C0] ? ret_from_fork_asm+0x11/0x20 [ 287.766067][ C0] __warn+0x2e0/0x470 [ 287.766097][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 287.766132][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 287.766171][ C0] report_bug+0x2be/0x4f0 [ 287.766199][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 287.766231][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 287.766263][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 287.766295][ C0] handle_bug+0xcf/0x120 [ 287.766322][ C0] exc_invalid_op+0x1a/0x50 [ 287.766349][ C0] asm_exc_invalid_op+0x1a/0x20 [ 287.766368][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 287.766401][ C0] Code: ff ff ff 48 c7 c7 a0 04 ef 96 be 04 00 00 00 e8 5a ae 6c 00 48 89 df b8 01 00 00 00 87 05 ac d5 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 56 d3 8c 74 47 48 c7 c0 9c c9 4a 8e 48 c1 e8 03 [ 287.766418][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 287.766436][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35680 RCX: ffffffff81702ee6 [ 287.766452][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35680 [ 287.766466][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 287.766479][ C0] R10: dffffc0000000000 R11: fffffbfff2dde094 R12: 0000000000002904 [ 287.766494][ C0] R13: 1ffff110171c7a6a R14: 0000000000000a02 R15: dffffc0000000000 [ 287.766519][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 287.766557][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 287.766590][ C0] rcu_core+0x612/0x1720 [ 287.766613][ C0] ? lock_chain_count+0x20/0x20 [ 287.766637][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 287.766661][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.766688][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 287.766721][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 287.766752][ C0] ? __run_timers+0x781/0x7d0 [ 287.766773][ C0] ? __run_timers+0x74e/0x7d0 [ 287.766804][ C0] ? detach_timer+0x2b0/0x2b0 [ 287.766824][ C0] ? detach_timer+0x2b0/0x2b0 [ 287.766849][ C0] ? lock_chain_count+0x20/0x20 [ 287.766883][ C0] handle_softirqs+0x280/0x820 [ 287.766909][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 287.766936][ C0] ? do_softirq+0x180/0x180 [ 287.766962][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 287.766993][ C0] __irq_exit_rcu+0xc7/0x190 [ 287.767014][ C0] ? irq_exit_rcu+0x20/0x20 [ 287.767044][ C0] irq_exit_rcu+0x9/0x20 [ 287.767063][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 287.767095][ C0] [ 287.767102][ C0] [ 287.767110][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.767132][ C0] RIP: 0010:console_flush_all+0x889/0xd00 [ 287.767165][ C0] Code: ed 01 00 00 e8 88 2a 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 79 2a 1b 00 eb 06 e8 72 2a 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 287.767183][ C0] RSP: 0018:ffffc90000a5f780 EFLAGS: 00000293 [ 287.767201][ C0] RAX: ffffffff816a65ce RBX: ffffc90000a5f91f RCX: ffff8880186c0000 [ 287.767217][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.767230][ C0] RBP: ffffc90000a5f8f0 R08: ffffffff90da7507 R09: 1ffffffff21b4ea0 [ 287.767245][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ea1 R12: ffffffff8d4b5d40 [ 287.767260][ C0] R13: 1ffffffff19792f8 R14: ffffffff8d4b5d98 R15: dffffc0000000000 [ 287.767285][ C0] ? console_flush_all+0x87e/0xd00 [ 287.767323][ C0] ? console_flush_all+0x10f/0xd00 [ 287.767369][ C0] ? is_console_locked+0x20/0x20 [ 287.767397][ C0] ? lock_chain_count+0x20/0x20 [ 287.767424][ C0] ? __down_trylock_console_sem+0xef/0x1e0 [ 287.767455][ C0] console_unlock+0xae/0x340 [ 287.767483][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 287.767517][ C0] ? preempt_count_add+0x91/0x1a0 [ 287.767549][ C0] vprintk_emit+0x477/0x600 [ 287.767578][ C0] ? printk_sprint+0x460/0x460 [ 287.767602][ C0] ? preempt_schedule+0xab/0xc0 [ 287.767632][ C0] ? preempt_schedule_common+0x82/0xc0 [ 287.767661][ C0] ? preempt_schedule+0xab/0xc0 [ 287.767695][ C0] _printk+0xd0/0x110 [ 287.767716][ C0] ? copy_from_kernel_nofault+0x1eb/0x320 [ 287.767755][ C0] ? load_image+0x3b0/0x3b0 [ 287.767774][ C0] ? kthread_probe_data+0x103/0x160 [ 287.767807][ C0] ? vprintk_emit+0x521/0x600 [ 287.767831][ C0] ? copy_from_kernel_nofault_allowed+0xbd/0x130 [ 287.767862][ C0] ? copy_from_kernel_nofault+0x1d2/0x320 [ 287.767892][ C0] ? linkwatch_schedule_work+0x190/0x190 [ 287.767914][ C0] print_worker_info+0x2bb/0x2f0 [ 287.767942][ C0] ? set_worker_desc+0x1c0/0x1c0 [ 287.767963][ C0] ? linkwatch_schedule_work+0x190/0x190 [ 287.767995][ C0] ? _printk+0xd0/0x110 [ 287.768021][ C0] ? load_image+0x3b0/0x3b0 [ 287.768051][ C0] ? sched_show_task+0x28b/0x5a0 [ 287.768079][ C0] sched_show_task+0x461/0x5a0 [ 287.768112][ C0] ? __ia32_sys_sched_rr_get_interval_time32+0x110/0x110 [ 287.768142][ C0] ? __asan_memcpy+0x40/0x70 [ 287.768171][ C0] ? print_tainted+0x14c/0x170 [ 287.768199][ C0] watchdog+0xb70/0xf80 [ 287.768227][ C0] ? watchdog+0x1e1/0xf80 [ 287.768262][ C0] kthread+0x2fa/0x390 [ 287.768281][ C0] ? hungtask_pm_notify+0x90/0x90 [ 287.768309][ C0] ? kthread_blkcg+0xd0/0xd0 [ 287.768329][ C0] ret_from_fork+0x48/0x80 [ 287.768352][ C0] ? kthread_blkcg+0xd0/0xd0 [ 287.768374][ C0] ret_from_fork_asm+0x11/0x20 [ 287.768419][ C0] [ 287.768757][ C0] Kernel Offset: disabled