last executing test programs: 7.814739515s ago: executing program 1 (id=581): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x1) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x81) write$char_usb(r4, &(0x7f0000000480)="dca399b0f3279d651ebb1b0e4fb68fa5996e7e21419cc57c87563dd97460822c79f74f5ab8ed365016e8b9363a039544741234838b69c4c4cd25ee", 0x3b) syz_open_dev$I2C(0x0, 0x1, 0x402) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000080)={0x0, 0x11, 0x20, {0x20, 0x3, "b0d40c6ba09b4c6b3204eaef96e7481088707d6bc05a82092adc2d54a00a"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "47dd03dae952e08f3c6ee3d7f90d8559b8c3e3c06ee3429300eeddd854"}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x7, "3b0bd90c"}, @main=@item_012={0x1, 0x0, 0x9, "93"}, @main=@item_012={0x2, 0x0, 0xc, 'fq'}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0x8, "b8"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x827}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x850849b593222e4, 0x63, "b4d45fc34127e1cc7e0124ae4ba431af23bd5e9876369b865a85447fb5c7528b350e9ed27edca69ec2b9dcc08657575c60dfa7e6b56bd7446bf7f58195e227dbd554df112a34feb2bf925733a259aa20f56cfaa19c6f718b6a8e703306c8b606f204e1"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x1, 0xc1, "081f0b25131dd9b3aa6b55d940728740f1b767b0d657a6858a154a5edeffbc3b26d13f94131e9d407bfb25d431365c0adc707935ca5469ab2e8776808b720ab438f26b0c9980f90f373ca04afec030ea3231a03f23bd6ac5489b947a14345bb9c5c73a2c3feb408bd5ecf07eca3ae1de6329669e0d99a1f1d1230b7f6bf677832cc49edd52c34f11d98b8600bdb9f2a788ae1aa522ab9e00178a0d47b29b3a69355cedb7cce958e680cd2fd4010d6940480049d9b1fa7db4a266e0317a4ede4764"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xe3}}) 7.763636406s ago: executing program 2 (id=582): syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004082054c0040000102030109028e000301053009080b00010107208c0904000000010120000924010040041500070c2403020703000400070081090401000001022000090401010101022000090501090002030b04082501000040040009040200000102200009040201010102200009240201000f0e07011024010201"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5.378214796s ago: executing program 0 (id=586): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) lseek(r2, 0x1c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 4.674653693s ago: executing program 3 (id=587): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 4.672700123s ago: executing program 1 (id=597): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x2) bind$x25(r2, &(0x7f0000000100), 0x12) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 4.188919115s ago: executing program 2 (id=592): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.393587215s ago: executing program 0 (id=593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x34, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 3.310527687s ago: executing program 4 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 3.092348302s ago: executing program 0 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 3.092124443s ago: executing program 2 (id=596): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x401, 0x4) unshare(0x2020600) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r4, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) setsockopt$sock_attach_bpf(r1, 0x111, 0x87, &(0x7f0000000000), 0x4) 3.077804063s ago: executing program 1 (id=598): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x40000801) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) 1.724213187s ago: executing program 4 (id=599): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.719341556s ago: executing program 0 (id=600): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1.687691428s ago: executing program 3 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9280ed45, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x188, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x5, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r2, r3, 0x5, 0x4}}, {0x20000000000000, 0x4, 0xde, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x03E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00e\x81\xfe{b\x1d\xad\f\xe8\x90`G\xf5\xd4\x8f\b\x97\x80\"\xe6\x99\xef+%_\xf5\x15\xb6_\xae\x19a\x0f\xca\x83\xfa9\x9e~\x0e\x1e\xc8@J\x0fE5\xe8C{\xc9\xb9\n\x1b\xd0><\x99\x8fH\xb9\xfd\xd1\xd7\xa5\xdcgQ\x15\x04\x06\x11\xa7\xc85\x10R`\x19i\xf5\x13J\xc0n/\"9\x06\x83\xb1\xc6Eg\xd2\"\x82\xc6\xdcK\xebq\x9f:\xf4\xfbOE\x93s\xcc\xaf[\xe1\xbf\x06\xce\\^od\xbb\xe0\f\xf3\xaac\xf3\xf7\xadn3j\xf5l\xdab;v\x90\xae\x04\x1b\x93,%\r\xae\xc5\xfe\x1f\x89\xa9x\xe3\xb1\xc0N\xcd(\x05\xfe\x90\xcb2\xe5\x85\xa9\x1aL\fyY\x01;\xd6B\xd3i'}}]}, 0x0, 0x0, 0x0}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r5, 0xc004ae0a, &(0x7f0000000100)) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 1.622724459s ago: executing program 2 (id=602): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, &(0x7f0000000440), &(0x7f0000000540)='syzkaller\x00', 0x1, 0xf3, &(0x7f0000000640)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x7, 0x31a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, r3], 0x0, 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0xaa}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 1.541471321s ago: executing program 0 (id=603): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/snd_hda_intel/new_id\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write(r0, &(0x7f0000000100)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 46202403', 0x30) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000000c0)) 1.541208331s ago: executing program 3 (id=604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)='y', 0x1}, {&(0x7f0000000300)="90", 0x1}], 0x2}}], 0x1, 0x4008845) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='\"', 0x1}], 0x1}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) 1.485492833s ago: executing program 3 (id=605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/prop1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/rndis.usb0/os_desc/interface.rndis/prop1\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) 1.339609106s ago: executing program 1 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 1.339234556s ago: executing program 2 (id=607): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', 0x0}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x475}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r1) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800) 1.296598957s ago: executing program 3 (id=608): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x2) bind$x25(r2, &(0x7f0000000100), 0x12) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 1.21519531s ago: executing program 2 (id=609): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000800)='0', 0x1, 0x0, 0x0, 0x0) 665.582233ms ago: executing program 4 (id=610): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x5, 0x4, 0x3, 0x2a, 0xc7e, 0x64, 0xdd, 0x2, 0x21, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) 377.34125ms ago: executing program 1 (id=611): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', r2, 0x7, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 360.842781ms ago: executing program 3 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 357.61597ms ago: executing program 0 (id=613): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0xffffff4c}]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) io_destroy(r1) close_range(r2, 0xffffffffffffffff, 0x200000000000000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r5, 0x25, 0x4, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000006118140000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 256.341433ms ago: executing program 4 (id=614): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000001080)=[@uexit={0x0, 0x18, 0x800}], 0x18}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 231.590434ms ago: executing program 1 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x1, 0x10600, &(0x7f0000020cc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000500)) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x2000) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000040), 0x3, 0x573, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc3}}) 109.257717ms ago: executing program 4 (id=616): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000080), 0x80000) fanotify_init(0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 0s ago: executing program 4 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x4000003, 0x7, 0x10, 0x4, 0x17, 0x0, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): adding VLAN 0 to HW filter on device bond0 [ 68.232219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.241803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.251713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.263310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.271033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.278466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.287667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.297824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.306926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.322775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.333505][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.364385][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.377859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.389199][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 68.393051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.396766][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 68.405642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.419622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.421720][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 68.433722][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 68.440084][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 68.454064][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.465791][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.486945][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.502283][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.513874][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.522276][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.530938][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.542782][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.554455][ T4194] device veth0_vlan entered promiscuous mode [ 68.566641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.578576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.587783][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.594965][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.604518][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.634893][ T4194] device veth1_vlan entered promiscuous mode [ 68.653693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.663469][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.674621][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.700081][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.708816][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.715908][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.733545][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.749965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.777699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.790251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.799720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.808312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.842918][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.857496][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.877399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.887216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.903557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.915281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.927562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.940670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.951475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.960267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.968894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.982139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.990211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.998248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.023915][ T4187] device veth0_vlan entered promiscuous mode [ 69.033227][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.057532][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.066020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.074755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.082555][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.091485][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.101247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.122021][ T4187] device veth1_vlan entered promiscuous mode [ 69.140057][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.157667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.172234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.188123][ T4194] device veth0_macvtap entered promiscuous mode [ 69.209175][ T4194] device veth1_macvtap entered promiscuous mode [ 69.236043][ T4185] device veth0_vlan entered promiscuous mode [ 69.246106][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.255236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.264268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.273288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.283850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.292356][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.311245][ T4187] device veth0_macvtap entered promiscuous mode [ 69.330505][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.346975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.358100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.375552][ T4185] device veth1_vlan entered promiscuous mode [ 69.396323][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.405902][ T4187] device veth1_macvtap entered promiscuous mode [ 69.422994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.433001][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.441514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.450859][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.461620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.471051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.484901][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.500295][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.509724][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.518491][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.527873][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.550138][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.560161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.569050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.610908][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.622336][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.634791][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.647335][ T4185] device veth0_macvtap entered promiscuous mode [ 69.661873][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.672466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.682668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.692494][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.702516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.710547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.720533][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.731800][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.743292][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.756081][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.769888][ T4185] device veth1_macvtap entered promiscuous mode [ 69.781815][ T4196] device veth0_vlan entered promiscuous mode [ 69.793818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.803796][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.816850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.828401][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.838517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.847531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.861122][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.870676][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.880464][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.895601][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.931151][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.944398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.975352][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.987520][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.008283][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.023211][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.037772][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.077273][ T4196] device veth1_vlan entered promiscuous mode [ 70.093631][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.103168][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.115367][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.126916][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.137229][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.148010][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.160117][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.170161][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.179862][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.206104][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.223145][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.233472][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.242298][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.261997][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.295791][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.337253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.357712][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.366620][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.403149][ T4196] device veth0_macvtap entered promiscuous mode [ 70.440918][ T4196] device veth1_macvtap entered promiscuous mode [ 70.460693][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.472719][ T4188] Bluetooth: hci0: command 0x040f tx timeout [ 70.479211][ T4188] Bluetooth: hci3: command 0x040f tx timeout [ 70.485313][ T4188] Bluetooth: hci4: command 0x040f tx timeout [ 70.485652][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.493693][ T4188] Bluetooth: hci2: command 0x040f tx timeout [ 70.505601][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.514943][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.517396][ T4188] Bluetooth: hci1: command 0x040f tx timeout [ 70.526408][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.537042][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.546173][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.590454][ T1392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.598326][ T1392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.645569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.645717][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.663146][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.677244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.702977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.721921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.736276][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.750090][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.764640][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.777858][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.793300][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.804303][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.816309][ T4264] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.816680][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.842361][ T4186] device veth0_vlan entered promiscuous mode [ 70.866467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.885223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.893698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.910115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.932609][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.943555][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.956236][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.978001][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.989101][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.000327][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.012191][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.025471][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.035589][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.044811][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.054800][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.074473][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.074495][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.092733][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.092809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.110908][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.119740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.130065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.138196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.171587][ T4186] device veth1_vlan entered promiscuous mode [ 71.192776][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.200859][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.323430][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.350796][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.457273][ T4272] FAULT_INJECTION: forcing a failure. [ 71.457273][ T4272] name failslab, interval 1, probability 0, space 0, times 1 [ 71.481314][ T4186] device veth0_macvtap entered promiscuous mode [ 71.526711][ T4272] CPU: 1 PID: 4272 Comm: syz.0.1 Not tainted syzkaller #0 [ 71.533894][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.544001][ T4272] Call Trace: [ 71.546805][ T4269] ODEBUG: Out of memory. ODEBUG disabled [ 71.547315][ T4272] [ 71.547333][ T4272] dump_stack_lvl+0x188/0x250 [ 71.560751][ T4272] ? show_regs_print_info+0x20/0x20 [ 71.565993][ T4272] ? load_image+0x410/0x410 [ 71.570531][ T4272] ? __lock_acquire+0x7b50/0x7b50 [ 71.575608][ T4272] should_fail+0x383/0x4b0 [ 71.580079][ T4272] should_failslab+0x5/0x20 [ 71.584627][ T4272] slab_pre_alloc_hook+0x51/0xc0 [ 71.589603][ T4272] __kmalloc+0x6b/0x340 [ 71.593791][ T4272] ? __se_sys_memfd_create+0x142/0x450 [ 71.599292][ T4272] ? strnlen_user+0x19b/0x250 [ 71.604008][ T4272] __se_sys_memfd_create+0x142/0x450 [ 71.609327][ T4272] ? lock_chain_count+0x20/0x20 [ 71.614217][ T4272] ? __x64_sys_memfd_create+0x60/0x60 [ 71.619626][ T4272] ? lockdep_hardirqs_on+0x94/0x140 [ 71.624876][ T4272] do_syscall_64+0x4c/0xa0 [ 71.629324][ T4272] ? clear_bhb_loop+0x30/0x80 [ 71.634040][ T4272] ? clear_bhb_loop+0x30/0x80 [ 71.638751][ T4272] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.644694][ T4272] RIP: 0033:0x7fa43313f159 [ 71.649139][ T4272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.668784][ T4272] RSP: 002b:00007fa431396e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 71.677240][ T4272] RAX: ffffffffffffffda RBX: 0000000000000250 RCX: 00007fa43313f159 [ 71.685252][ T4272] RDX: 00007fa431396ee0 RSI: 0000000000000000 RDI: 00007fa4331d6204 [ 71.693395][ T4272] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 71.701405][ T4272] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000700 [ 71.709409][ T4272] R13: 00007fa431396ee0 R14: 00007fa431396ea0 R15: 0000200000000000 [ 71.717439][ T4272] [ 72.043386][ T4269] Zero length message leads to an empty skb [ 72.101872][ T4273] loop3: detected capacity change from 0 to 32768 [ 72.137622][ T4186] device veth1_macvtap entered promiscuous mode [ 72.151598][ T4273] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4273) [ 72.170426][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.182063][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.221542][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.261922][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.272365][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.283818][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.294028][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.305075][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.323255][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.334317][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.351952][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.384964][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.400924][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.404807][ T4273] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 72.430874][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.445699][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.455114][ T4273] BTRFS info (device loop3): force clearing of disk cache [ 72.481263][ T4273] BTRFS info (device loop3): enabling auto defrag [ 72.490396][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.515353][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.548924][ T2282] Bluetooth: hci1: command 0x0419 tx timeout [ 72.555452][ T2282] Bluetooth: hci2: command 0x0419 tx timeout [ 72.566111][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.578820][ T4273] BTRFS info (device loop3): max_inline at 0 [ 72.595315][ T4273] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 72.604394][ T2282] Bluetooth: hci4: command 0x0419 tx timeout [ 72.619384][ T4273] BTRFS error (device loop3): open_ctree failed: -22 [ 72.627382][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.639581][ T2282] Bluetooth: hci3: command 0x0419 tx timeout [ 72.647100][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.656345][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4179) [ 72.668960][ T2282] Bluetooth: hci0: command 0x0419 tx timeout [ 72.676964][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.704823][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.715749][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.737120][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.756432][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.791126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.819921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.858216][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.885106][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.912558][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.951433][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.956645][ T4293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.001659][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.027596][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.116657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.134957][ T4298] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.191606][ T4301] tipc: Started in network mode [ 73.196730][ T4301] tipc: Node identity a2350fc23bcd, cluster identity 4711 [ 73.235185][ T4301] tipc: Enabled bearer , priority 0 [ 73.339683][ T4305] device syzkaller0 entered promiscuous mode [ 73.429426][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.470135][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.498456][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.517956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.692835][ T4300] tipc: Resetting bearer [ 73.859017][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 74.625075][ T4300] tipc: Disabling bearer [ 74.752955][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.781199][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.886454][ T4324] loop2: detected capacity change from 0 to 32768 [ 74.899002][ T4199] tipc: Node number set to 2583171010 [ 74.906177][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.940519][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.024121][ T4324] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 75.034212][ T4324] BTRFS info (device loop2): use no compression [ 75.040601][ T4324] BTRFS info (device loop2): turning on sync discard [ 75.047403][ T4324] BTRFS info (device loop2): using free space tree [ 75.053997][ T4324] BTRFS info (device loop2): has skinny extents [ 75.061650][ T13] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 75.081873][ T13] usb 4-1: can't read configurations, error -71 [ 75.093183][ T4335] loop0: detected capacity change from 0 to 512 [ 75.120195][ T4326] md/raid10:md0: not clean -- starting background reconstruction [ 75.138917][ T4326] md/raid10:md0: active with 1 out of 2 devices [ 75.171904][ T4326] md0: detected capacity change from 0 to 2048 [ 75.229387][ T4346] md: resync of RAID array md0 [ 75.301181][ T4335] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 75.314598][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.340722][ T4346] md: md0: resync done. [ 75.355565][ T4335] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.425438][ T4324] BTRFS info (device loop2): enabling ssd optimizations [ 75.526354][ T26] audit: type=1800 audit(1788489440.985:2): pid=4324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 75.724654][ T4335] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 75.975591][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 76.055680][ T4384] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 76.178209][ T4375] kvm: pic: non byte read [ 76.197649][ T4375] kvm: pic: level sensitive irq not supported [ 76.199254][ T4375] kvm: pic: non byte read [ 76.257901][ T4375] kvm: pic: level sensitive irq not supported [ 76.259884][ T4375] kvm: pic: non byte read [ 76.315592][ T4375] kvm: pic: level sensitive irq not supported [ 76.315671][ T4375] kvm: pic: non byte read [ 76.356279][ T4375] kvm: pic: level sensitive irq not supported [ 76.356383][ T4375] kvm: pic: non byte read [ 76.422728][ T4375] kvm: pic: level sensitive irq not supported [ 76.422815][ T4375] kvm: pic: non byte read [ 76.592619][ T4404] loop1: detected capacity change from 0 to 256 [ 76.651436][ T4404] ======================================================= [ 76.651436][ T4404] WARNING: The mand mount option has been deprecated and [ 76.651436][ T4404] and is ignored by this kernel. Remove the mand [ 76.651436][ T4404] option from the mount to silence this warning. [ 76.651436][ T4404] ======================================================= [ 76.861426][ T4393] loop3: detected capacity change from 0 to 32768 [ 77.045597][ T4393] JBD2: Ignoring recovery information on journal [ 77.522084][ T4393] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 78.431351][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 80.142605][ T4463] overlayfs: './file0' not a directory [ 80.211155][ T4443] loop2: detected capacity change from 0 to 40427 [ 80.266595][ T4443] F2FS-fs (loop2): invalid crc value [ 80.379055][ T4443] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.388548][ T4449] loop3: detected capacity change from 0 to 32768 [ 80.424750][ T4456] loop4: detected capacity change from 0 to 32768 [ 80.447670][ T4449] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (4449) [ 80.491958][ T4471] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 80.506719][ T4456] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.36 (4456) [ 80.523597][ T4449] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 80.542327][ T4449] BTRFS info (device loop3): enabling auto defrag [ 80.574351][ T4449] BTRFS info (device loop3): force clearing of disk cache [ 80.604715][ T4443] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 80.610024][ T4449] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 80.613925][ T4456] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 80.653541][ T4449] BTRFS info (device loop3): use zstd compression, level 3 [ 80.673992][ T4456] BTRFS info (device loop4): setting nodatasum [ 80.677272][ T4449] BTRFS info (device loop3): using free space tree [ 80.681648][ T4443] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 80.701944][ T4456] BTRFS info (device loop4): force zlib compression, level 3 [ 80.715467][ T4449] BTRFS info (device loop3): has skinny extents [ 80.717089][ T4456] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 80.758413][ T4456] BTRFS info (device loop4): use lzo compression, level 0 [ 80.827091][ T4456] BTRFS info (device loop4): turning on flush-on-commit [ 80.852878][ T4443] attempt to access beyond end of device [ 80.852878][ T4443] loop2: rw=2049, want=45104, limit=40427 [ 80.883423][ T4456] BTRFS info (device loop4): enabling auto defrag [ 80.914689][ T4456] BTRFS info (device loop4): max_inline at 4096 [ 80.924585][ T4491] FAULT_INJECTION: forcing a failure. [ 80.924585][ T4491] name failslab, interval 1, probability 0, space 0, times 0 [ 80.956994][ T4456] BTRFS info (device loop4): using free space tree [ 80.963869][ T4456] BTRFS info (device loop4): has skinny extents [ 80.971419][ T4491] CPU: 0 PID: 4491 Comm: syz.0.42 Not tainted syzkaller #0 [ 80.978836][ T4491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.988930][ T4491] Call Trace: [ 80.992249][ T4491] [ 80.995343][ T4491] dump_stack_lvl+0x188/0x250 [ 81.000070][ T4491] ? show_regs_print_info+0x20/0x20 [ 81.005325][ T4491] ? load_image+0x410/0x410 [ 81.009889][ T4491] ? __might_sleep+0xf0/0xf0 [ 81.014530][ T4491] ? __lock_acquire+0x7b50/0x7b50 [ 81.019657][ T4491] ? stack_trace_save+0xa6/0xf0 [ 81.024555][ T4491] ? stack_trace_snprint+0xe0/0xe0 [ 81.026569][ T4449] BTRFS info (device loop3): enabling ssd optimizations [ 81.029714][ T4491] should_fail+0x383/0x4b0 [ 81.029766][ T4491] should_failslab+0x5/0x20 [ 81.029788][ T4491] slab_pre_alloc_hook+0x51/0xc0 [ 81.029808][ T4491] ? asymmetric_lookup_restriction+0xd6/0x4f0 [ 81.029832][ T4491] __kmalloc_track_caller+0x69/0x330 [ 81.029853][ T4491] ? asymmetric_lookup_restriction+0xd6/0x4f0 [ 81.029880][ T4491] kstrndup+0x36/0xb0 [ 81.029901][ T4491] asymmetric_lookup_restriction+0xd6/0x4f0 [ 81.078512][ T4491] ? asymmetric_key_describe+0x1c0/0x1c0 [ 81.081376][ T4449] BTRFS info (device loop3): clearing free space tree [ 81.084199][ T4491] ? down_read+0x1aa/0x2e0 [ 81.084233][ T4491] ? asymmetric_key_describe+0x1c0/0x1c0 [ 81.084259][ T4491] keyring_restrict+0x1b2/0x530 [ 81.106359][ T4491] ? keyring_search+0x3c0/0x3c0 [ 81.111271][ T4491] keyctl_restrict_keyring+0x152/0x220 [ 81.116783][ T4491] ? keyctl_session_to_parent+0x9c0/0x9c0 [ 81.122560][ T4491] __se_sys_keyctl+0x6a1/0xa20 [ 81.127386][ T4491] ? __x64_sys_keyctl+0xc0/0xc0 [ 81.132305][ T4491] ? __context_tracking_exit+0x4c/0x80 [ 81.138057][ T4491] ? __lock_acquire+0x7b50/0x7b50 [ 81.143137][ T4491] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.149161][ T4491] ? lock_chain_count+0x20/0x20 [ 81.154066][ T4491] ? lockdep_hardirqs_on+0x94/0x140 [ 81.154353][ T4449] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.159300][ T4491] ? __x64_sys_keyctl+0x1c/0xc0 [ 81.159336][ T4491] do_syscall_64+0x4c/0xa0 [ 81.159359][ T4491] ? clear_bhb_loop+0x30/0x80 [ 81.159381][ T4491] ? clear_bhb_loop+0x30/0x80 [ 81.159403][ T4491] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.159426][ T4491] RIP: 0033:0x7fa43313f159 [ 81.159446][ T4491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.159464][ T4491] RSP: 002b:00007fa431397028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 81.159488][ T4491] RAX: ffffffffffffffda RBX: 00007fa4333c6fa0 RCX: 00007fa43313f159 [ 81.159503][ T4491] RDX: 00002000000000c0 RSI: 0000000013fd647d RDI: 000000000000001d [ 81.232752][ T4449] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.234860][ T4491] RBP: 00007fa4331d6024 R08: 0000000000000000 R09: 0000000000000000 [ 81.234879][ T4491] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 81.234894][ T4491] R13: 00007fa4333c7038 R14: 00007fa4333c6fa0 R15: 00007ffce515fba8 [ 81.277156][ T4491] [ 81.376988][ T4449] BTRFS info (device loop3): creating free space tree [ 81.425575][ T4449] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.446225][ T4449] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.469747][ T4507] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 81.568639][ T4456] BTRFS info (device loop4): enabling ssd optimizations [ 82.151717][ T4449] BTRFS info (device loop3): balance: start -dconvert=raid0 -mconvert=raid0 [ 82.206558][ T26] audit: type=1804 audit(1788489447.670:3): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.36" name="/newroot/4/file1/file1" dev="loop4" ino=260 res=1 errno=0 [ 82.638671][ C0] sched: RT throttling activated [ 82.716531][ T4449] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 83.066951][ T4449] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 83.370561][ T4449] BTRFS info (device loop3): balance: canceled [ 83.375348][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.118967][ T4231] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.127636][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.158768][ T4231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.168721][ T4231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.319521][ T4231] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.328620][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.358711][ T4231] usb 1-1: Product: syz [ 84.363022][ T4231] usb 1-1: Manufacturer: syz [ 84.453442][ T4231] cdc_wdm 1-1:1.0: skipping garbage [ 84.485564][ T4231] cdc_wdm 1-1:1.0: skipping garbage [ 84.519593][ T4536] loop4: detected capacity change from 0 to 32768 [ 84.533410][ T4231] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 84.548056][ T4231] cdc_wdm 1-1:1.0: Unknown control protocol [ 84.572241][ T4536] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.47 (4536) [ 84.597324][ T4231] usb 1-1: USB disconnect, device number 2 [ 84.651461][ T4536] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 84.673076][ T4536] BTRFS info (device loop4): using free space tree [ 84.712319][ T4536] BTRFS info (device loop4): has skinny extents [ 84.972143][ T4536] BTRFS info (device loop4): enabling ssd optimizations [ 85.291367][ T4570] loop0: detected capacity change from 0 to 4096 [ 85.404543][ T4570] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 85.458133][ T4536] overlayfs: upper fs does not support file handles, falling back to index=off. [ 85.492976][ T4536] overlayfs: conflicting lowerdir path [ 85.531648][ T4570] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 85.899795][ T4581] loop3: detected capacity change from 0 to 16 [ 85.944257][ T4581] erofs: (device loop3): mounted with root inode @ nid 36. [ 86.001449][ T4581] attempt to access beyond end of device [ 86.001449][ T4581] loop3: rw=0, want=40, limit=16 [ 86.227171][ T4583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57'. [ 86.699204][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 86.720707][ T1111] cfg80211: failed to load regulatory.db [ 86.831487][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.942309][ T4592] device bridge_slave_0 left promiscuous mode [ 86.958520][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.146907][ T4594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.280058][ T4601] overlayfs: failed to clone upperpath [ 87.560543][ T4605] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 87.719474][ T4607] overlayfs: failed to clone upperpath [ 88.655215][ T4613] loop4: detected capacity change from 0 to 32768 [ 88.692443][ T4613] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.65 (4613) [ 88.712222][ T4609] loop0: detected capacity change from 0 to 32768 [ 88.744043][ T4613] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 88.771750][ T4613] BTRFS info (device loop4): force clearing of disk cache [ 88.798585][ T4609] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.61 (4609) [ 88.807826][ T4613] BTRFS info (device loop4): enabling auto defrag [ 88.831166][ T4613] BTRFS info (device loop4): max_inline at 0 [ 88.848310][ T4613] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 88.868631][ T4609] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 88.894050][ T4613] BTRFS error (device loop4): open_ctree failed: -22 [ 88.921940][ T4609] BTRFS info (device loop0): enabling auto defrag [ 88.928427][ T4609] BTRFS info (device loop0): force clearing of disk cache [ 88.938839][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4179) [ 88.997841][ T4609] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 89.032973][ T4609] BTRFS info (device loop0): use zstd compression, level 3 [ 89.066144][ T4609] BTRFS info (device loop0): using free space tree [ 89.099057][ T4609] BTRFS info (device loop0): has skinny extents [ 89.368771][ T4609] BTRFS info (device loop0): enabling ssd optimizations [ 89.389580][ T4609] BTRFS info (device loop0): clearing free space tree [ 89.395079][ T4647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.71'. [ 89.406736][ T4609] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.430711][ T4609] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.517434][ T4609] BTRFS info (device loop0): creating free space tree [ 89.527825][ T4609] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.550820][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 89.576467][ T4609] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.609171][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.621399][ T4656] FAULT_INJECTION: forcing a failure. [ 89.621399][ T4656] name failslab, interval 1, probability 0, space 0, times 0 [ 89.708860][ T4651] device bridge_slave_1 left promiscuous mode [ 89.728998][ T4656] CPU: 0 PID: 4656 Comm: syz.1.73 Not tainted syzkaller #0 [ 89.730786][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.736272][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.753400][ T4656] Call Trace: [ 89.756710][ T4656] [ 89.759673][ T4656] dump_stack_lvl+0x188/0x250 [ 89.764400][ T4656] ? show_regs_print_info+0x20/0x20 [ 89.769639][ T4656] ? load_image+0x410/0x410 [ 89.774190][ T4656] ? __might_sleep+0xf0/0xf0 [ 89.778823][ T4656] ? __lock_acquire+0x7b50/0x7b50 [ 89.783894][ T4656] should_fail+0x383/0x4b0 [ 89.788353][ T4656] should_failslab+0x5/0x20 [ 89.792903][ T4656] slab_pre_alloc_hook+0x51/0xc0 [ 89.797877][ T4656] ? tls_set_sw_offload+0x9ba/0x1330 [ 89.803200][ T4656] __kmalloc_track_caller+0x69/0x330 [ 89.808518][ T4656] ? tls_set_sw_offload+0x9ba/0x1330 [ 89.813845][ T4656] kmemdup+0x22/0x50 [ 89.817811][ T4656] tls_set_sw_offload+0x9ba/0x1330 [ 89.822994][ T4656] ? tls_data_ready+0x160/0x160 [ 89.827869][ T4656] ? tls_set_device_offload+0x460/0xee0 [ 89.833447][ T4656] ? _copy_from_user+0x111/0x170 [ 89.838456][ T4656] tls_setsockopt+0x4ef/0xa90 [ 89.843174][ T4656] ? sock_common_recvmsg+0x1c0/0x1c0 [ 89.848507][ T4656] __sys_setsockopt+0x2bf/0x3d0 [ 89.853388][ T4656] __x64_sys_setsockopt+0xb1/0xc0 [ 89.858450][ T4656] do_syscall_64+0x4c/0xa0 [ 89.862894][ T4656] ? clear_bhb_loop+0x30/0x80 [ 89.867612][ T4656] ? clear_bhb_loop+0x30/0x80 [ 89.872323][ T4656] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.878253][ T4656] RIP: 0033:0x7f00bb14c159 [ 89.882706][ T4656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.902361][ T4656] RSP: 002b:00007f00b93a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.910825][ T4656] RAX: ffffffffffffffda RBX: 00007f00bb3d3fa0 RCX: 00007f00bb14c159 [ 89.918830][ T4656] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000004 [ 89.926827][ T4656] RBP: 00007f00bb1e3024 R08: 0000000000000038 R09: 0000000000000000 [ 89.934820][ T4656] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 89.942816][ T4656] R13: 00007f00bb3d4038 R14: 00007f00bb3d3fa0 R15: 00007fffecff7e58 [ 89.950838][ T4656] [ 90.007834][ T4657] BTRFS info (device loop0): balance: start -dconvert=raid0 -mconvert=raid0 [ 90.077737][ T4657] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 90.126432][ T4619] overlayfs: failed to clone upperpath [ 90.256758][ T4657] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 90.311077][ T4657] BTRFS info (device loop0): found 3 extents, stage: move data extents [ 90.385459][ T4657] BTRFS info (device loop0): balance: ended with status: 0 [ 90.461259][ T4666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.780991][ T4674] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.945518][ T4682] syz.3.80 uses obsolete (PF_INET,SOCK_PACKET) [ 92.073325][ T4706] FAULT_INJECTION: forcing a failure. [ 92.073325][ T4706] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.128851][ T4706] CPU: 0 PID: 4706 Comm: syz.1.86 Not tainted syzkaller #0 [ 92.136121][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.146250][ T4706] Call Trace: [ 92.149564][ T4706] [ 92.152520][ T4706] dump_stack_lvl+0x188/0x250 [ 92.157265][ T4706] ? show_regs_print_info+0x20/0x20 [ 92.162508][ T4706] ? load_image+0x410/0x410 [ 92.167055][ T4706] ? __lock_acquire+0x7b50/0x7b50 [ 92.172122][ T4706] ? lockdep_hardirqs_on+0x94/0x140 [ 92.177351][ T4706] should_fail+0x383/0x4b0 [ 92.181799][ T4706] prepare_alloc_pages+0x1e3/0x5b0 [ 92.186962][ T4706] __alloc_pages+0x11b/0x480 [ 92.191591][ T4706] ? zone_statistics+0x170/0x170 [ 92.196574][ T4706] ? mark_lock+0x94/0x320 [ 92.200943][ T4706] alloc_buddy_huge_page+0xec/0x1c0 [ 92.206188][ T4706] alloc_fresh_huge_page+0xf9/0x6e0 [ 92.211438][ T4706] ? lockdep_hardirqs_on+0x94/0x140 [ 92.216680][ T4706] alloc_huge_page_nodemask+0x117/0x170 [ 92.222267][ T4706] alloc_huge_page_vma+0x148/0x230 [ 92.227422][ T4706] ? dequeue_huge_page_nodemask+0xcd0/0xcd0 [ 92.233357][ T4706] ? size_to_hstate+0x10f/0x120 [ 92.238249][ T4706] ? new_page+0x2b9/0x3c0 [ 92.242620][ T4706] migrate_pages+0xc6d/0x34a0 [ 92.247351][ T4706] ? mbind_range+0x9b0/0x9b0 [ 92.251975][ T4706] ? next_demotion_node+0x190/0x190 [ 92.257214][ T4706] ? vmacache_find+0x43b/0x590 [ 92.262039][ T4706] ? find_vma+0xd2/0x230 [ 92.266410][ T4706] ? remove_migration_ptes+0x130/0x130 [ 92.271919][ T4706] __se_sys_mbind+0x64c/0x770 [ 92.276645][ T4706] ? __x64_sys_mbind+0xf0/0xf0 [ 92.281452][ T4706] ? lock_chain_count+0x20/0x20 [ 92.286348][ T4706] ? __x64_sys_mbind+0x1d/0xf0 [ 92.291147][ T4706] do_syscall_64+0x4c/0xa0 [ 92.295600][ T4706] ? clear_bhb_loop+0x30/0x80 [ 92.300314][ T4706] ? clear_bhb_loop+0x30/0x80 [ 92.305038][ T4706] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.311072][ T4706] RIP: 0033:0x7f00bb14c159 [ 92.315526][ T4706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.335169][ T4706] RSP: 002b:00007f00b93a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 92.343630][ T4706] RAX: ffffffffffffffda RBX: 00007f00bb3d3fa0 RCX: 00007f00bb14c159 [ 92.351652][ T4706] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 92.359668][ T4706] RBP: 00007f00bb1e3024 R08: 0000000000000000 R09: 0000000000000002 [ 92.367681][ T4706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.375697][ T4706] R13: 00007f00bb3d4038 R14: 00007f00bb3d3fa0 R15: 00007fffecff7e58 [ 92.383741][ T4706] [ 92.397429][ T4701] loop0: detected capacity change from 0 to 32768 [ 92.562701][ T4701] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 92.577848][ T4701] BTRFS info (device loop0): force clearing of disk cache [ 92.587805][ T4701] BTRFS info (device loop0): enabling auto defrag [ 92.602942][ T4701] BTRFS info (device loop0): max_inline at 0 [ 92.614823][ T4701] BTRFS error (device loop0): support for check_integrity* not compiled in! [ 92.677859][ T4701] BTRFS error (device loop0): open_ctree failed: -22 [ 92.697414][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4179) [ 92.911266][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.946916][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.599159][ T4670] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.613933][ T4670] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.626618][ T4670] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.636235][ T4670] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.919093][ T4716] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 93.974698][ T4721] 8021q: VLANs not supported on ipvlan1 [ 94.004504][ T4723] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 94.059090][ T4726] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 94.066790][ T4726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.93'. [ 94.100925][ T4726] device dummy0 entered promiscuous mode [ 94.132293][ T4734] netlink: 'syz.1.96': attribute type 2 has an invalid length. [ 94.407670][ T4740] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 94.456759][ T4740] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 94.586655][ T4730] loop4: detected capacity change from 0 to 32768 [ 94.680577][ T4730] JBD2: Ignoring recovery information on journal [ 94.790444][ T4730] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 94.937002][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 94.945874][ T4758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 95.103535][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 95.313254][ T4771] team0: Port device syz_tun added [ 95.337494][ T4772] FAULT_INJECTION: forcing a failure. [ 95.337494][ T4772] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.380102][ T4772] CPU: 0 PID: 4772 Comm: syz.0.101 Not tainted syzkaller #0 [ 95.387462][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.397553][ T4772] Call Trace: [ 95.400861][ T4772] [ 95.403803][ T4772] dump_stack_lvl+0x188/0x250 [ 95.408504][ T4772] ? show_regs_print_info+0x20/0x20 [ 95.413722][ T4772] ? load_image+0x410/0x410 [ 95.418249][ T4772] ? __lock_acquire+0x7b50/0x7b50 [ 95.423298][ T4772] should_fail+0x383/0x4b0 [ 95.427740][ T4772] prepare_alloc_pages+0x1e3/0x5b0 [ 95.432870][ T4772] __alloc_pages+0x11b/0x480 [ 95.437489][ T4772] ? zone_statistics+0x170/0x170 [ 95.442448][ T4772] ? mark_lock+0x94/0x320 [ 95.446922][ T4772] alloc_buddy_huge_page+0xec/0x1c0 [ 95.452167][ T4772] alloc_fresh_huge_page+0xf9/0x6e0 [ 95.457392][ T4772] ? lockdep_hardirqs_on+0x94/0x140 [ 95.462617][ T4772] alloc_huge_page_nodemask+0x117/0x170 [ 95.468186][ T4772] alloc_huge_page_vma+0x148/0x230 [ 95.473321][ T4772] ? dequeue_huge_page_nodemask+0xcd0/0xcd0 [ 95.479239][ T4772] ? size_to_hstate+0x10f/0x120 [ 95.484106][ T4772] ? new_page+0x2b9/0x3c0 [ 95.488449][ T4772] migrate_pages+0xc6d/0x34a0 [ 95.493191][ T4772] ? mbind_range+0x9b0/0x9b0 [ 95.497798][ T4772] ? next_demotion_node+0x190/0x190 [ 95.503008][ T4772] ? vmacache_find+0x43b/0x590 [ 95.507794][ T4772] ? find_vma+0xd2/0x230 [ 95.512051][ T4772] ? remove_migration_ptes+0x130/0x130 [ 95.517550][ T4772] __se_sys_mbind+0x64c/0x770 [ 95.522252][ T4772] ? __x64_sys_mbind+0xf0/0xf0 [ 95.527032][ T4772] ? lock_chain_count+0x20/0x20 [ 95.531921][ T4772] ? __x64_sys_mbind+0x1d/0xf0 [ 95.536730][ T4772] do_syscall_64+0x4c/0xa0 [ 95.541165][ T4772] ? clear_bhb_loop+0x30/0x80 [ 95.545861][ T4772] ? clear_bhb_loop+0x30/0x80 [ 95.550555][ T4772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.556465][ T4772] RIP: 0033:0x7fa43313f159 [ 95.560895][ T4772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.580516][ T4772] RSP: 002b:00007fa431397028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 95.588943][ T4772] RAX: ffffffffffffffda RBX: 00007fa4333c6fa0 RCX: 00007fa43313f159 [ 95.596930][ T4772] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 95.605001][ T4772] RBP: 00007fa4331d6024 R08: 0000000000000000 R09: 0000000000000002 [ 95.612988][ T4772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.620971][ T4772] R13: 00007fa4333c7038 R14: 00007fa4333c6fa0 R15: 00007ffce515fba8 [ 95.628970][ T4772] [ 95.674507][ T4771] syz.1.102 (4771) used greatest stack depth: 19952 bytes left [ 96.583391][ T4780] loop4: detected capacity change from 0 to 32768 [ 96.641303][ T4780] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.98 (4780) [ 96.809448][ T4789] loop1: detected capacity change from 0 to 32768 [ 96.824684][ T4780] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 96.867510][ T4780] BTRFS info (device loop4): enabling auto defrag [ 96.877429][ T4780] BTRFS info (device loop4): force clearing of disk cache [ 96.888236][ T4780] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 96.908794][ T4780] BTRFS info (device loop4): use zstd compression, level 3 [ 96.924129][ T4789] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 96.932977][ T4789] BTRFS info (device loop1): force clearing of disk cache [ 96.940258][ T4789] BTRFS info (device loop1): enabling auto defrag [ 96.946739][ T4789] BTRFS info (device loop1): max_inline at 0 [ 96.952868][ T4789] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 96.963705][ T4789] BTRFS error (device loop1): open_ctree failed: -22 [ 96.979468][ T4780] BTRFS info (device loop4): using free space tree [ 96.988827][ T4780] BTRFS info (device loop4): has skinny extents [ 97.107356][ T4819] mmap: syz.2.112 (4819) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 97.199769][ T4177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4177) [ 97.217775][ T4828] loop0: detected capacity change from 0 to 4096 [ 97.306005][ T4780] BTRFS info (device loop4): enabling ssd optimizations [ 97.321711][ T4780] BTRFS info (device loop4): clearing free space tree [ 97.335426][ T4780] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.348361][ T4828] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 97.374099][ T4780] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.509050][ T4780] BTRFS info (device loop4): creating free space tree [ 97.516734][ T4780] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.537892][ T4828] capability: warning: `syz.0.114' uses deprecated v2 capabilities in a way that may be insecure [ 97.598997][ T4780] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.841922][ T4780] BTRFS info (device loop4): balance: start -dconvert=raid0 -mconvert=raid0 [ 97.876346][ T4780] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 97.958501][ T4780] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 98.299994][ T4780] BTRFS info (device loop4): found 6 extents, stage: move data extents [ 98.366319][ T4780] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 98.439687][ T4780] BTRFS info (device loop4): balance: ended with status: 0 [ 98.596830][ T4854] fuse: Bad value for 'fd' [ 98.912714][ T4872] tipc: Enabling of bearer rejected, failed to enable media [ 99.175823][ T26] audit: type=1804 audit(1788489464.640:4): pid=4879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.116" name="/newroot/22/file0" dev="fuse" ino=1 res=1 errno=0 [ 99.776308][ T4906] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.074165][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880625b2800: rx timeout, send abort [ 100.298905][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.357705][ T4918] loop1: detected capacity change from 0 to 32768 [ 100.413844][ T4918] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.139 (4918) [ 100.447698][ T4918] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 100.457160][ T4918] BTRFS info (device loop1): enabling auto defrag [ 100.465260][ T4918] BTRFS info (device loop1): force clearing of disk cache [ 100.473436][ T4918] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 100.484047][ T4918] BTRFS info (device loop1): use zstd compression, level 3 [ 100.494360][ T4918] BTRFS info (device loop1): using free space tree [ 100.518784][ T4918] BTRFS info (device loop1): has skinny extents [ 100.568883][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 100.574239][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880620cec00: rx timeout, send abort [ 100.583780][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880625b2800: abort rx timeout. Force session deactivation [ 100.678842][ T4918] BTRFS info (device loop1): enabling ssd optimizations [ 100.688349][ T4918] BTRFS info (device loop1): clearing free space tree [ 100.695803][ T4918] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.705657][ T4918] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.724651][ T4918] BTRFS info (device loop1): creating free space tree [ 100.731914][ T4232] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.741182][ T4918] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.750967][ T4232] usb 1-1: config 0 has no interface number 0 [ 100.758323][ T4918] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.825340][ T4918] BTRFS info (device loop1): balance: start -dconvert=raid0 -mconvert=raid0 [ 100.836755][ T4918] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 100.869986][ T4918] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 100.949156][ T4232] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 100.960173][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.968215][ T4232] usb 1-1: Product: syz [ 100.973348][ T4232] usb 1-1: Manufacturer: syz [ 100.978537][ T4232] usb 1-1: SerialNumber: syz [ 100.991244][ T4953] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.013415][ T4232] usb 1-1: config 0 descriptor?? [ 101.072081][ T4232] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 101.082616][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880620cec00: abort rx timeout. Force session deactivation [ 101.161182][ T4918] BTRFS info (device loop1): found 6 extents, stage: move data extents [ 101.257627][ T4967] binder: BINDER_SET_CONTEXT_MGR already set [ 101.299158][ T4918] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 101.315166][ T4967] binder: 4964:4967 ioctl 4018620d 200000004a80 returned -16 [ 101.352514][ T4918] BTRFS info (device loop1): balance: ended with status: 0 [ 102.314015][ T4977] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4977] [ 102.477741][ T4980] netlink: 208 bytes leftover after parsing attributes in process `syz.4.150'. [ 102.997443][ T4991] FAULT_INJECTION: forcing a failure. [ 102.997443][ T4991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.011934][ T4991] CPU: 0 PID: 4991 Comm: syz.1.155 Not tainted syzkaller #0 [ 103.019259][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.029340][ T4991] Call Trace: [ 103.032643][ T4991] [ 103.035601][ T4991] dump_stack_lvl+0x188/0x250 [ 103.040316][ T4991] ? show_regs_print_info+0x20/0x20 [ 103.045548][ T4991] ? load_image+0x410/0x410 [ 103.050091][ T4991] ? mark_lock+0x94/0x320 [ 103.054483][ T4991] should_fail+0x383/0x4b0 [ 103.059297][ T4991] prepare_alloc_pages+0x1e3/0x5b0 [ 103.064456][ T4991] __alloc_pages+0x11b/0x480 [ 103.069083][ T4991] ? zone_statistics+0x170/0x170 [ 103.074054][ T4991] ? rcu_lock_acquire+0x30/0x30 [ 103.078941][ T4991] ? alloc_pages+0x452/0x560 [ 103.083570][ T4991] __get_free_pages+0x8/0x30 [ 103.088193][ T4991] __tlb_remove_page_size+0x1f2/0x3f0 [ 103.093600][ T4991] unmap_page_range+0xfcf/0x2410 [ 103.098601][ T4991] unmap_vmas+0x131/0x250 [ 103.102964][ T4991] ? unmap_page_range+0x2410/0x2410 [ 103.108213][ T4991] ? __mutex_lock_common+0x435/0x2400 [ 103.113621][ T4991] ? exit_mm_release+0x16/0x30 [ 103.118425][ T4991] exit_mmap+0x3b9/0x640 [ 103.122712][ T4991] ? vm_brk+0x20/0x20 [ 103.126769][ T4991] ? uprobe_clear_state+0x2f6/0x460 [ 103.132010][ T4991] __mmput+0x115/0x390 [ 103.136110][ T4991] exit_mm+0x632/0x7b0 [ 103.138897][ T4405] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.140201][ T4991] ? perf_pmu_migrate_context+0xb70/0xb70 [ 103.153618][ T4991] ? do_exit+0x2110/0x2110 [ 103.158068][ T4991] ? __ia32_sys_timer_delete+0x40/0x40 [ 103.163558][ T4991] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 103.169055][ T4991] ? tty_audit_exit+0x149/0x1f0 [ 103.173944][ T4991] do_exit+0x5b8/0x2110 [ 103.178137][ T4991] ? put_task_struct+0x80/0x80 [ 103.182930][ T4991] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.188959][ T4991] ? _raw_spin_lock_irq+0xb7/0xf0 [ 103.194014][ T4991] do_group_exit+0x12c/0x2f0 [ 103.198629][ T4991] ? lockdep_hardirqs_on+0x94/0x140 [ 103.203856][ T4991] get_signal+0x7eb/0x12e0 [ 103.208328][ T4991] arch_do_signal_or_restart+0xe6/0x12a0 [ 103.214010][ T4991] ? futex_exit_release+0x1c0/0x1c0 [ 103.219285][ T4991] ? get_sigframe_size+0x10/0x10 [ 103.224257][ T4991] ? __context_tracking_exit+0x4c/0x80 [ 103.229766][ T4991] ? exit_to_user_mode_loop+0x3b/0x130 [ 103.235253][ T4991] exit_to_user_mode_loop+0x9e/0x130 [ 103.240565][ T4991] exit_to_user_mode_prepare+0xee/0x180 [ 103.246148][ T4991] syscall_exit_to_user_mode+0x16/0x40 [ 103.251642][ T4991] do_syscall_64+0x58/0xa0 [ 103.256087][ T4991] ? clear_bhb_loop+0x30/0x80 [ 103.260789][ T4991] ? clear_bhb_loop+0x30/0x80 [ 103.265496][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.271419][ T4991] RIP: 0033:0x7f00bb14c159 [ 103.275859][ T4991] Code: Unable to access opcode bytes at RIP 0x7f00bb14c12f. [ 103.283258][ T4991] RSP: 002b:00007f00b93a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 103.291698][ T4991] RAX: 0000000000000001 RBX: 00007f00bb3d3fa8 RCX: 00007f00bb14c159 [ 103.299705][ T4991] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f00bb3d3fac [ 103.307703][ T4991] RBP: 00007f00bb3d3fa0 R08: 0038114303a92cc8 R09: 0000000000000000 [ 103.315706][ T4991] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 103.323709][ T4991] R13: 00007f00bb3d4038 R14: 00007fffecff7d70 R15: 00007fffecff7e58 [ 103.331728][ T4991] [ 103.579136][ T4405] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.618904][ T4405] usb 5-1: not running at top speed; connect to a high speed hub [ 103.631662][ T5008] ip_tables: iptables: counters copy to user failed while replacing table [ 103.699094][ T4405] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 103.788968][ T4232] gspca_spca1528: reg_r err -71 [ 103.798749][ T4232] spca1528: probe of 1-1:0.1 failed with error -71 [ 103.822883][ T4232] usb 1-1: USB disconnect, device number 3 [ 103.954553][ T4405] usb 5-1: string descriptor 0 read error: -22 [ 103.961447][ T4405] usb 5-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 103.978035][ T4405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.122726][ T5014] loop1: detected capacity change from 0 to 32768 [ 104.218466][ T5014] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.162 (5014) [ 104.236157][ T5014] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 104.245589][ T5014] BTRFS info (device loop1): enabling auto defrag [ 104.252378][ T5014] BTRFS info (device loop1): force clearing of disk cache [ 104.266826][ T4983] Bluetooth: hci0: service_discovery: too big uuid_count value 36441 [ 104.276777][ T5014] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.291676][ T5014] BTRFS info (device loop1): use zstd compression, level 3 [ 104.300882][ T5014] BTRFS info (device loop1): using free space tree [ 104.307606][ T5014] BTRFS info (device loop1): has skinny extents [ 104.332402][ T5014] BTRFS info (device loop1): enabling ssd optimizations [ 104.341775][ T5014] BTRFS info (device loop1): clearing free space tree [ 104.348627][ T5014] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.359608][ T5014] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.400235][ T5014] BTRFS info (device loop1): creating free space tree [ 104.443402][ T5014] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.475007][ T5014] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.486564][ T4405] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 104.493869][ T5045] dlm: Using TCP for communications [ 104.562371][ T4405] usb 5-1: USB disconnect, device number 2 [ 104.762052][ T5014] BTRFS info (device loop1): balance: start -dconvert=raid0 -mconvert=raid0 [ 104.847420][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.863826][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.872918][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.529005][ T5014] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 105.591209][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.613384][ T5065] loop4: detected capacity change from 0 to 128 [ 105.792817][ T5014] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 105.995765][ T5055] loop0: detected capacity change from 0 to 32768 [ 106.107857][ T5055] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.169 (5055) [ 106.148216][ T5055] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 106.157056][ T5055] BTRFS info (device loop0): force clearing of disk cache [ 106.164320][ T5055] BTRFS info (device loop0): enabling auto defrag [ 106.170846][ T5055] BTRFS info (device loop0): max_inline at 0 [ 106.176892][ T5055] BTRFS error (device loop0): support for check_integrity* not compiled in! [ 106.186919][ T5055] BTRFS error (device loop0): open_ctree failed: -22 [ 106.356205][ T5014] BTRFS info (device loop1): found 6 extents, stage: move data extents [ 106.388151][ T4177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4177) [ 106.486442][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 106.513783][ T5014] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 106.564960][ T5089] netlink: 'syz.0.177': attribute type 10 has an invalid length. [ 106.666188][ T5014] BTRFS info (device loop1): balance: ended with status: 0 [ 106.695250][ T5089] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.976190][ T26] audit: type=1326 audit(1788489472.440:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5107 comm="syz.0.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa43313f159 code=0x0 [ 107.007248][ T5115] loop4: detected capacity change from 0 to 512 [ 107.084517][ T5118] kvm: emulating exchange as write [ 107.202426][ T5115] EXT4-fs (loop4): Test dummy encryption mode enabled [ 107.228281][ T5115] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.398035][ T5115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.540216][ T5115] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.636085][ T5115] EXT4-fs (loop4): 1 truncate cleaned up [ 107.644515][ T5115] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 109.819985][ T5133] loop0: detected capacity change from 0 to 32768 [ 109.975953][ T5133] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 110.039532][ T5133] BTRFS info (device loop0): force clearing of disk cache [ 110.106516][ T5133] BTRFS info (device loop0): enabling auto defrag [ 110.158912][ T5133] BTRFS info (device loop0): max_inline at 0 [ 110.164990][ T5133] BTRFS error (device loop0): support for check_integrity* not compiled in! [ 110.530380][ T5146] loop1: detected capacity change from 0 to 32768 [ 110.923992][ T5133] BTRFS error (device loop0): open_ctree failed: -22 [ 110.926053][ T5146] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.195 (5146) [ 111.203631][ T5146] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 111.248940][ T5146] BTRFS info (device loop1): enabling auto defrag [ 111.255433][ T5146] BTRFS info (device loop1): force clearing of disk cache [ 111.289434][ T5146] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.309242][ T5146] BTRFS info (device loop1): use zstd compression, level 3 [ 111.329965][ T5146] BTRFS info (device loop1): using free space tree [ 111.358143][ T5146] BTRFS info (device loop1): has skinny extents [ 112.188739][ T5218] device bond1 entered promiscuous mode [ 112.212950][ T5219] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 112.224026][ T5146] BTRFS error (device loop1): open_ctree failed: -12 [ 112.271361][ T5219] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 112.303824][ T5219] bond1: (slave wireguard0): making interface the new active one [ 112.366651][ T5219] device wireguard0 entered promiscuous mode [ 112.374588][ T5219] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 112.383947][ T5221] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 112.540637][ T5221] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.868275][ T26] audit: type=1326 audit(1788489478.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.1.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bb14c159 code=0x7ffc0000 [ 112.913046][ T5250] loop1: detected capacity change from 0 to 1024 [ 112.940298][ T26] audit: type=1326 audit(1788489478.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.1.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bb14c159 code=0x7ffc0000 [ 113.025971][ T5250] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 113.058761][ T26] audit: type=1326 audit(1788489478.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.1.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bb14c159 code=0x7ffc0000 [ 113.060810][ T5250] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.130621][ T26] audit: type=1326 audit(1788489478.370:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.1.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bb14c159 code=0x7ffc0000 [ 113.176024][ T5250] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 113.184624][ T5250] System zones: 0-1, 3-36 [ 113.210139][ T5250] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,abort,,errors=continue. Quota mode: writeback. [ 113.261950][ T26] audit: type=1326 audit(1788489478.370:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.1.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f00bb14c159 code=0x7ffc0000 [ 113.398034][ T26] audit: type=1326 audit(1788489478.370:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.1.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f00bb14bec2 code=0x7ffc0000 [ 113.444865][ T26] audit: type=1326 audit(1788489478.370:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.1.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00bb10c98e code=0x7ffc0000 [ 113.454776][ T5224] loop4: detected capacity change from 0 to 32768 [ 113.526236][ T26] audit: type=1326 audit(1788489478.380:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.1.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f00bb14bf87 code=0x7ffc0000 [ 113.581754][ T26] audit: type=1326 audit(1788489478.380:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.1.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00bb10c98e code=0x7ffc0000 [ 113.629085][ T26] audit: type=1326 audit(1788489478.380:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5249 comm="syz.1.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00bb14bdeb code=0x7ffc0000 [ 113.721134][ T5224] JBD2: Ignoring recovery information on journal [ 113.913042][ T5224] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 114.500341][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 114.595399][ T5304] netlink: 'syz.3.232': attribute type 27 has an invalid length. [ 114.798141][ T5304] bond0: (slave bond_slave_0): Releasing backup interface [ 115.235422][ T5340] netlink: 128 bytes leftover after parsing attributes in process `syz.2.240'. [ 115.250061][ T5338] 9pnet: p9_errstr2errno: server reported unknown error ./file0/ [ 115.270026][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 115.302850][ T5340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.707787][ T5352] Illegal XDP return value 4291096680, expect packet loss! [ 116.118164][ T5369] device batadv_slave_0 entered promiscuous mode [ 116.126103][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 116.232033][ T5368] device batadv_slave_0 left promiscuous mode [ 116.239266][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.544205][ T5384] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 116.664582][ T4232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.694729][ T4232] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.855128][ T4232] usb 2-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 0.00 [ 116.869640][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 116.897994][ T4232] usb 2-1: Product: syz [ 116.908061][ T4232] usb 2-1: Manufacturer: syz [ 116.960266][ T4232] ums-sddr55 2-1:1.0: USB Mass Storage device detected [ 116.995886][ T4232] ums-sddr55 2-1:1.0: Quirks match for vid 07c4 pid a103: 8 [ 117.038840][ T4232] ums-sddr55 2-1:1.0: This device (07c4,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 117.038840][ T4232] Please send a copy of this message to and [ 117.163403][ T5357] dlm: Unknown command passed to DLM device : 3 [ 117.163403][ T5357] [ 117.202814][ T4188] usb 2-1: USB disconnect, device number 2 [ 117.506615][ T5428] overlayfs: failed to clone upperpath [ 117.643325][ T5433] loop0: detected capacity change from 0 to 136 [ 117.703129][ T5433] Attempt to read inode for relocated directory [ 117.945873][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 118.150887][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.181759][ T5457] loop0: detected capacity change from 0 to 64 [ 118.296086][ T5453] netlink: 'syz.4.270': attribute type 1 has an invalid length. [ 118.347331][ T5453] device bond1 entered promiscuous mode [ 118.360767][ T5453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.394194][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 118.454199][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 118.541263][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.557200][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.576360][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.584716][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.593213][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.604069][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.618020][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.625300][ T5451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.692733][ T5458] bond1: (slave bridge1): making interface the new active one [ 118.708941][ T5458] device bridge1 entered promiscuous mode [ 118.720363][ T5458] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 118.755041][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 119.259331][ T5482] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.442495][ T5496] netlink: 798 bytes leftover after parsing attributes in process `syz.0.279'. [ 120.193773][ T5505] VFS: Mount too revealing [ 121.339266][ T5530] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.351083][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 121.759659][ T5542] loop1: detected capacity change from 0 to 512 [ 121.840492][ T5542] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.868986][ T5542] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.080348][ T5556] binder: 5552:5556 unknown command 0 [ 122.139656][ T5556] binder: 5552:5556 ioctl c0306201 200000004a40 returned -22 [ 122.450001][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 122.450017][ T26] audit: type=1800 audit(1788489487.910:67): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.301" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 123.509461][ T5591] tipc: Started in network mode [ 123.514403][ T5591] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 123.542946][ T5591] tipc: Enabled bearer , priority 10 [ 125.109660][ T4402] tipc: Node number set to 43690 [ 128.476279][ T5677] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 128.476279][ T5677] The task syz.2.324 (5677) triggered the difference, watch for misbehavior. [ 129.484581][ T5697] overlayfs: failed to clone lowerpath [ 129.652277][ T5699] batman_adv: batadv0: Adding interface: dummy0 [ 129.672957][ T5699] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.698798][ T5121] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.744701][ T5699] batman_adv: batadv0: Interface activated: dummy0 [ 129.777299][ T5700] batadv0: mtu less than device minimum [ 129.799096][ T5700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.812860][ T5700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.825494][ T5700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.838101][ T5700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.850731][ T5700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.863376][ T5700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.876081][ T5700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.888787][ T5700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.901397][ T5700] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.988915][ T5121] usb 2-1: Using ep0 maxpacket: 16 [ 130.139110][ T5121] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 130.148245][ T5121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.190238][ T5121] usb 2-1: config 0 descriptor?? [ 130.248155][ T5121] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 130.400506][ T5716] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 131.653667][ T5737] loop0: detected capacity change from 0 to 128 [ 131.730713][ T5737] FAT-fs (loop0): Directory bread(block 32) failed [ 131.742621][ T5737] FAT-fs (loop0): Directory bread(block 33) failed [ 131.757703][ T5737] FAT-fs (loop0): Directory bread(block 34) failed [ 131.765556][ T5737] FAT-fs (loop0): Directory bread(block 35) failed [ 131.781100][ T5737] FAT-fs (loop0): Directory bread(block 36) failed [ 131.787752][ T5737] FAT-fs (loop0): Directory bread(block 37) failed [ 131.811997][ T5737] FAT-fs (loop0): Directory bread(block 38) failed [ 131.837473][ T5737] FAT-fs (loop0): Directory bread(block 39) failed [ 131.854654][ T5737] FAT-fs (loop0): Directory bread(block 40) failed [ 131.879808][ T5737] FAT-fs (loop0): Directory bread(block 41) failed [ 131.947066][ T5754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 132.959781][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.969654][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.346600][ T5782] netlink: 64 bytes leftover after parsing attributes in process `syz.3.357'. [ 133.506498][ T5787] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.589513][ T5121] gspca_sonixj: i2c_w8 err -71 [ 133.594407][ T5121] sonixj: probe of 2-1:0.0 failed with error -71 [ 133.632653][ T5121] usb 2-1: USB disconnect, device number 3 [ 133.730211][ T5787] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.811845][ T5787] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.506129][ T5787] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.862386][ T5787] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.919880][ T5787] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.981882][ T5787] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.006528][ T5787] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.193583][ T5822] device syzkaller0 entered promiscuous mode [ 135.249168][ T4402] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.398693][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 135.418709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 135.428689][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 135.438690][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 135.448689][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 135.458684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 135.468684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 135.478675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 135.488683][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 135.498680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 135.685439][ T5833] loop0: detected capacity change from 0 to 1024 [ 135.789065][ T5833] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.829841][ T4402] usb 5-1: config 2 has an invalid interface number: 228 but max is 0 [ 135.838455][ T4402] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 135.935977][ T4402] usb 5-1: config 2 has no interface number 0 [ 135.964338][ T4402] usb 5-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.004668][ T4402] usb 5-1: config 2 interface 228 has no altsetting 0 [ 136.157953][ T5852] binder_alloc: 5851: pid 5851 spamming oneway? 2 buffers allocated for a total size of 5120 [ 136.199772][ T4402] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 136.217804][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.235637][ T4402] usb 5-1: Product: syz [ 136.276487][ T4402] usb 5-1: Manufacturer: syz [ 136.288393][ T4402] usb 5-1: SerialNumber: syz [ 136.438823][ T5121] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.049657][ T5121] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 137.085527][ T5121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.169417][ T5121] usb 2-1: Product: syz [ 137.330300][ T5121] usb 2-1: Manufacturer: syz [ 137.334993][ T5121] usb 2-1: SerialNumber: syz [ 137.350739][ T4402] ims_pcu: probe of 5-1:2.228 failed with error -22 [ 137.416991][ T4402] usb 5-1: USB disconnect, device number 3 [ 137.639958][ T5121] net_ratelimit: 11 callbacks suppressed [ 137.639996][ T5121] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 137.722168][ T5121] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 137.751126][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.760552][ T5121] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 137.802476][ T5121] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 137.849863][ T5121] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 137.868127][ T5121] lan78xx: probe of 2-1:1.0 failed with error -71 [ 137.895665][ T5121] usb 2-1: USB disconnect, device number 4 [ 138.129788][ T4232] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.147258][ T4232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.177669][ T4232] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.205695][ T4232] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 138.221198][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.269152][ T5870] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.398869][ T5121] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.648998][ T5121] usb 5-1: Using ep0 maxpacket: 16 [ 138.789050][ T5121] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.805645][ T5121] usb 5-1: config 0 has no interface number 0 [ 138.917290][ T5870] udc-core: couldn't find an available UDC or it's busy [ 138.932629][ T5870] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 139.009037][ T5121] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 139.032044][ T5121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.057750][ T5121] usb 5-1: Product: syz [ 139.072835][ T5121] usb 5-1: Manufacturer: syz [ 139.082958][ T5121] usb 5-1: SerialNumber: syz [ 139.120462][ T5121] usb 5-1: config 0 descriptor?? [ 139.146588][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 139.181311][ T5121] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 140.388824][ T4402] Bluetooth: hci5: command 0xfc05 tx timeout [ 140.399131][ T146] Bluetooth: hci5: Reading Intel version command failed (-110) [ 140.557528][ T4896] usb 1-1: USB disconnect, device number 4 [ 140.807830][ T5937] loop1: detected capacity change from 0 to 128 [ 141.014574][ T5940] loop1: detected capacity change from 0 to 256 [ 141.169253][ T5928] process 'syz.2.407' launched './file0' with NULL argv: empty string added [ 141.458713][ T4402] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.594026][ T5952] netlink: 76 bytes leftover after parsing attributes in process `syz.2.415'. [ 141.815957][ T5121] usb 5-1: USB disconnect, device number 4 [ 141.839060][ T4402] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 141.863366][ T4402] usb 1-1: config 8 has no interface number 0 [ 141.890169][ T4402] usb 1-1: config 8 interface 177 has no altsetting 0 [ 141.907952][ T4402] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 141.926458][ T4402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.990964][ T4402] ir_toy 1-1:8.177: required endpoints not found [ 142.232461][ T4402] usb 1-1: USB disconnect, device number 5 [ 142.303115][ T5945] syz.1.413 (5945): drop_caches: 2 [ 142.699256][ T5979] tipc: Started in network mode [ 142.704299][ T5979] tipc: Node identity 4, cluster identity 4711 [ 142.711445][ T5979] tipc: Node number set to 4 [ 142.818947][ T4410] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.058808][ T4410] usb 5-1: Using ep0 maxpacket: 8 [ 143.368261][ T4410] usb 5-1: config 0 has no interfaces? [ 143.783406][ T5999] overlayfs: failed to clone upperpath [ 143.809427][ T4410] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 143.826476][ T4410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.884508][ T4410] usb 5-1: Product: syz [ 143.945256][ T4410] usb 5-1: Manufacturer: syz [ 143.955548][ T4410] usb 5-1: SerialNumber: syz [ 143.969503][ T4410] usb 5-1: config 0 descriptor?? [ 143.976995][ T6005] netlink: 84 bytes leftover after parsing attributes in process `syz.1.433'. [ 144.398773][ T4188] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.584023][ T4410] usb 5-1: USB disconnect, device number 5 [ 145.759003][ T4188] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.807413][ T4188] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 145.836185][ T4188] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.844473][ T4188] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 145.861418][ T4188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.893187][ T4188] usb 1-1: config 0 descriptor?? [ 146.429573][ T4188] hid (null): global environment stack underflow [ 146.446344][ T4188] hid (null): invalid report_count 57712 [ 146.458427][ T4188] hid (null): invalid report_count 746552055 [ 146.481163][ T6044] netlink: 14 bytes leftover after parsing attributes in process `syz.3.446'. [ 146.581371][ T6044] batman_adv: batadv0: Interface deactivated: dummy0 [ 146.943581][ T6044] batman_adv: batadv0: Removing interface: dummy0 [ 147.226906][ T4188] kye 0003:0458:5013.0001: global environment stack underflow [ 147.241007][ T4188] kye 0003:0458:5013.0001: item 0 2 1 11 parsing failed [ 147.248416][ T4188] kye 0003:0458:5013.0001: parse failed [ 147.258021][ T4188] kye: probe of 0003:0458:5013.0001 failed with error -22 [ 147.275668][ T4188] usb 1-1: USB disconnect, device number 6 [ 147.350323][ T6052] binder_alloc: 6049: binder_alloc_buf size 1024 failed, no address space [ 147.410216][ T6052] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 148.855106][ T6071] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 149.008140][ T6071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.272462][ T6074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.281594][ T6074] bond1: (slave bond2): Enslaving as an active interface with a down link [ 150.297153][ T6081] bond1 (unregistering): (slave bond2): Releasing active interface [ 150.340889][ T6081] bond1 (unregistering): Released all slaves [ 151.308490][ T4405] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.749109][ T4405] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.784942][ T4405] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.846645][ T4405] usb 2-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 151.896386][ T4405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.001599][ T4405] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 152.228794][ T4402] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.518747][ T4402] usb 1-1: Using ep0 maxpacket: 8 [ 152.631709][ T6094] udc-core: couldn't find an available UDC or it's busy [ 152.639021][ T4402] usb 1-1: config 0 has no interfaces? [ 152.649226][ T6094] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 152.752993][ T6128] fuse: Bad value for 'fd' [ 152.818958][ T4402] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 152.834676][ T4402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.859500][ T4402] usb 1-1: Product: syz [ 153.089183][ T2425] pvrusb2: control-write URB failure, status=-71 [ 153.158579][ T4402] usb 1-1: Manufacturer: syz [ 153.188706][ T4402] usb 1-1: SerialNumber: syz [ 153.896869][ T2425] pvrusb2: Device being rendered inoperable [ 154.359580][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 154.409913][ T4402] usb 1-1: config 0 descriptor?? [ 154.439319][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 154.478851][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 154.540417][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 154.598605][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 154.688879][ T5121] usb 2-1: USB disconnect, device number 5 [ 154.695157][ T4410] usb 1-1: USB disconnect, device number 7 [ 154.725698][ T2425] pvrusb2: Attached sub-driver cx25840 [ 154.877357][ T2425] pvrusb2: Attempted to execute control transfer when device not ok [ 154.908503][ T2425] pvrusb2: Attempted to execute control transfer when device not ok [ 154.990873][ T2425] pvrusb2: Attempted to execute control transfer when device not ok [ 155.040339][ T2425] pvrusb2: Attempted to execute control transfer when device not ok [ 155.048475][ T2425] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 155.286902][ T2425] TUNER: Unable to find symbol tda829x_probe() [ 155.333065][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 155.394819][ T2425] DVB: Unable to find symbol tda9887_attach() [ 155.408690][ T2425] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 155.447562][ T2425] pvrusb2: Attached sub-driver tuner [ 155.478246][ T2425] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 155.652084][ T2425] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 158.309030][ T6214] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 159.202767][ T6222] netlink: 'syz.2.499': attribute type 10 has an invalid length. [ 159.221852][ T6222] team0: Port device dummy0 added [ 159.393422][ T6222] netlink: 'syz.2.499': attribute type 10 has an invalid length. [ 160.124441][ T6222] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 160.361645][ T6222] team0: Port device dummy0 removed [ 160.403362][ T6222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 160.454989][ T6235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.513'. [ 160.471854][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.479241][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.718830][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.507'. [ 165.317010][ T6295] device syzkaller0 entered promiscuous mode [ 165.637074][ T6307] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 165.741855][ T6307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.845168][ T6309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.890612][ T6309] bond2: (slave bond3): Enslaving as an active interface with a down link [ 165.910615][ T4897] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 165.935462][ T4897] Bluetooth: hci3: Injecting HCI hardware error event [ 165.981628][ T146] Bluetooth: hci3: hardware error 0x00 [ 166.049221][ T6307] bond2 (unregistering): (slave bond3): Releasing active interface [ 166.082716][ T6307] bond2 (unregistering): Released all slaves [ 167.763662][ T6335] device syzkaller0 entered promiscuous mode [ 167.883069][ T6342] loop1: detected capacity change from 0 to 136 [ 168.101342][ T6342] Attempt to read inode for relocated directory [ 169.123200][ T6351] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 169.161764][ T6351] device dummy0 left promiscuous mode [ 169.267707][ T6351] team0: Port device dummy0 added [ 169.323071][ T6360] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 169.397984][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.421252][ T6356] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 169.430299][ T6356] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 169.460039][ T6356] team0: Failed to send options change via netlink (err -105) [ 169.467864][ T6356] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 169.478853][ T6356] team0: Port device dummy0 removed [ 169.487103][ T6356] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.586370][ T6364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.596121][ T6364] bond1: (slave bond2): Enslaving as an active interface with a down link [ 169.641167][ T6365] bond1 (unregistering): (slave bond2): Releasing active interface [ 169.666583][ T6365] bond1 (unregistering): Released all slaves [ 169.709016][ T6368] netlink: 'syz.3.542': attribute type 2 has an invalid length. [ 169.999542][ T6380] device bond1 entered promiscuous mode [ 170.041694][ T6382] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 170.097065][ T6382] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 170.150369][ T6382] bond1: (slave wireguard0): making interface the new active one [ 170.188193][ T6382] device wireguard0 entered promiscuous mode [ 170.232533][ T6382] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 170.270871][ T6380] netlink: 'syz.1.547': attribute type 10 has an invalid length. [ 170.336233][ T6380] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.523961][ T4896] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.720179][ T6422] loop0: detected capacity change from 0 to 24 [ 173.749617][ T6422] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 173.796394][ T6422] romfs: bad initial checksum on dev loop0. [ 173.807640][ T4179] udevd[4179]: incorrect romfs checksum on /dev/loop0 [ 175.070332][ T6442] netlink: 'syz.3.563': attribute type 10 has an invalid length. [ 175.094166][ T6441] device syzkaller0 entered promiscuous mode [ 175.111715][ T6441] tipc: Enabled bearer , priority 0 [ 175.125522][ T6442] netlink: 'syz.3.563': attribute type 10 has an invalid length. [ 175.378128][ T6450] loop0: detected capacity change from 0 to 256 [ 176.439730][ T6456] tipc: Enabling of bearer rejected, failed to enable media [ 176.523195][ T6450] exfat: Unknown parameter 'exfat' [ 176.568769][ T4896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 176.638820][ T4896] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 176.646604][ T4896] usb 2-1: can't read configurations, error -71 [ 176.741205][ T6470] overlayfs: failed to clone upperpath [ 176.747051][ T6464] team0: No ports can be present during mode change [ 176.825875][ T6464] device vlan0 entered promiscuous mode [ 177.279638][ T6464] team0: Port device vlan0 added [ 177.673330][ T6481] device syzkaller0 left promiscuous mode [ 177.739923][ T6482] set match dimension is over the limit! [ 180.938736][ T4896] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.178703][ T4896] usb 2-1: Using ep0 maxpacket: 32 [ 181.299016][ T4896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.318592][ T4896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.338994][ T4896] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 181.348957][ T4896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.360170][ T4896] usb 2-1: config 0 descriptor?? [ 181.639215][ T6519] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 181.660135][ T4896] usbhid 2-1:0.0: can't add hid device: -71 [ 181.666734][ T4896] usbhid: probe of 2-1:0.0 failed with error -71 [ 181.719657][ T4896] usb 2-1: USB disconnect, device number 8 [ 182.868801][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.946227][ T6526] bond1 (unregistering): Released all slaves [ 183.003107][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.593'. [ 184.527312][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 184.568935][ T6553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.715770][ T6553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.744902][ T5121] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 184.797312][ T4897] snd_hda_intel 0000:00:01.0: Unknown PCI class/subclass/prog-if information (0x060100) found, selecting HDAudio legacy driver [ 184.828340][ T5121] snd_hda_intel 0000:00:01.3: Unknown PCI class/subclass/prog-if information (0x068000) found, selecting HDAudio legacy driver [ 184.875605][ T5121] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 184.916241][ T5121] snd_hda_intel 0000:00:01.3: PCI INT A: no GSI [ 185.188948][ T5121] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 185.528128][ T5121] snd_hda_intel 0000:00:05.0: Unknown capability 230694927 [ 185.896890][ T6596] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 185.983908][ T6590] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 186.966165][ T6605] loop1: detected capacity change from 0 to 131072 [ 186.978944][ T5121] snd_hda_intel 0000:00:05.0: azx_get_response timeout, switching to polling mode: last cmd=0x000f0000 [ 187.022589][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 187.032139][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 187.040783][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 187.049395][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 187.058008][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 187.066628][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 187.075242][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 187.083851][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 187.092456][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 187.101063][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 192.028613][ T5121] snd_hdac_bus_update_rirb: 8823684 callbacks suppressed [ 192.028638][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 192.044320][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 192.052917][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 192.061513][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 192.070110][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 192.078702][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 192.087298][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 192.095896][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 192.104488][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 192.113081][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 197.078628][ T5121] snd_hdac_bus_update_rirb: 9113783 callbacks suppressed [ 197.078674][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 197.094405][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 197.103006][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 197.111604][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 197.120201][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 197.128819][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 197.137420][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 197.146040][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 197.154643][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 197.163243][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 202.128609][ T5121] snd_hdac_bus_update_rirb: 9103984 callbacks suppressed [ 202.128633][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 202.144379][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 202.152980][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 202.161571][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 202.170164][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 202.178776][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 202.187384][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 202.195988][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 202.204585][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 202.213183][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 207.178630][ T5121] snd_hdac_bus_update_rirb: 9112841 callbacks suppressed [ 207.178654][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 207.194338][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 207.202942][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 207.211540][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 207.220141][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 207.228739][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 207.237340][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 207.245940][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 207.254535][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 207.263155][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 212.228607][ T5121] snd_hdac_bus_update_rirb: 9122594 callbacks suppressed [ 212.228632][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 212.244305][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 212.252909][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 212.261508][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 212.270105][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 212.278710][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 212.287331][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 212.295933][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 212.304551][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 212.313153][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 217.278603][ T5121] snd_hdac_bus_update_rirb: 8970260 callbacks suppressed [ 217.278627][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 217.294642][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 217.303263][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 217.311867][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 217.320466][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 217.329067][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 217.337664][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 217.346263][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 217.354864][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 217.363462][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 222.328601][ T5121] snd_hdac_bus_update_rirb: 9102988 callbacks suppressed [ 222.328626][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 222.344286][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 222.352888][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 222.361490][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 222.370090][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 222.378688][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 222.387285][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 222.395884][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 222.404486][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 222.413111][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 227.378598][ T5121] snd_hdac_bus_update_rirb: 9134324 callbacks suppressed [ 227.378622][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 227.394278][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 227.402878][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 227.411475][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 227.420090][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 227.428686][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 227.437281][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 227.445878][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 227.454565][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 227.463165][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 232.428597][ T5121] snd_hdac_bus_update_rirb: 9133475 callbacks suppressed [ 232.428622][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 232.444291][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 232.452898][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 232.461493][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 232.470111][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 232.478712][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 232.487312][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 232.495916][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 232.504598][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 232.513203][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 237.478593][ T5121] snd_hdac_bus_update_rirb: 9124355 callbacks suppressed [ 237.478618][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 237.494275][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 237.502874][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 237.511477][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 237.520077][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 237.528675][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 237.537274][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 237.545867][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 237.554463][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 237.563057][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 242.528606][ T5121] snd_hdac_bus_update_rirb: 9076293 callbacks suppressed [ 242.528646][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 242.544311][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 242.552908][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 242.561634][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 242.570233][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 242.578831][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 242.587433][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 242.596033][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 242.604628][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 242.613250][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 247.578601][ T5121] snd_hdac_bus_update_rirb: 9142378 callbacks suppressed [ 247.578628][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 247.595003][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 247.603600][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 247.612200][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 247.620791][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 247.629381][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 247.637977][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 247.646587][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 247.655183][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 247.663778][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 252.628593][ T5121] snd_hdac_bus_update_rirb: 9081658 callbacks suppressed [ 252.628616][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 252.644297][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 252.652895][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 252.661499][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 252.670098][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 252.678724][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 252.687329][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 252.696072][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 252.704813][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 252.713421][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 257.678615][ T5121] snd_hdac_bus_update_rirb: 9089872 callbacks suppressed [ 257.678640][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 257.694321][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 257.702919][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 257.711517][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 257.720114][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 257.728719][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 257.737335][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 257.746081][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 257.754687][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 257.763291][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 262.728600][ T5121] snd_hdac_bus_update_rirb: 9125548 callbacks suppressed [ 262.728625][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 262.744309][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 262.752925][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 262.761526][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 262.770120][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 262.778741][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 262.787342][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 262.795936][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 262.804550][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 262.813149][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 267.778582][ T5121] snd_hdac_bus_update_rirb: 9117049 callbacks suppressed [ 267.778607][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 267.794307][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 267.802913][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 267.811509][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 267.820109][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 267.828708][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 267.837319][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 267.845931][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 267.854522][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 267.863121][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 272.828598][ T5121] snd_hdac_bus_update_rirb: 9107038 callbacks suppressed [ 272.828624][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 272.845454][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 272.854060][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 272.862686][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 272.871306][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 272.879906][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 272.888575][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 272.897238][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 272.905853][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 272.914454][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 277.878576][ T5121] snd_hdac_bus_update_rirb: 9139421 callbacks suppressed [ 277.878601][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 277.894283][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 277.902879][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 277.911475][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 277.920076][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 277.928673][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 277.937266][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 277.945882][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 277.954481][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 277.963084][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 282.928577][ T5121] snd_hdac_bus_update_rirb: 9134493 callbacks suppressed [ 282.928603][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 282.944299][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 282.952897][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 282.961495][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 282.970093][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 282.978689][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 282.987286][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 282.995884][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 283.004482][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 283.013078][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 287.978572][ T5121] snd_hdac_bus_update_rirb: 9118030 callbacks suppressed [ 287.978597][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 287.994266][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 288.002871][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 288.011563][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 288.020165][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 288.028768][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 288.037383][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 288.045979][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 288.054580][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 288.063176][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 292.428597][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 292.435613][ C1] rcu: 0-...!: (1 GPs behind) idle=5c3/1/0x4000000000000000 softirq=18367/18371 fqs=0 [ 292.446986][ C1] (detected by 1, t=10505 jiffies, g=19981, q=104) [ 292.453639][ C1] Sending NMI from CPU 1 to CPUs 0: [ 292.458884][ C0] NMI backtrace for cpu 0 [ 292.458899][ C0] CPU: 0 PID: 5121 Comm: kworker/0:17 Not tainted syzkaller #0 [ 292.458916][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.458931][ C0] Workqueue: events azx_probe_work [ 292.458958][ C0] RIP: 0010:lock_acquire+0x6/0x400 [ 292.458981][ C0] Code: ff 48 c7 c7 c8 45 8b 8d e8 d7 52 61 00 e9 29 fb ff ff 66 90 65 8b 05 31 85 a5 7e a9 00 ff ff 00 0f 95 c0 c3 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00 00 4c 89 4c 24 [ 292.458995][ C0] RSP: 0018:ffffc9000320f688 EFLAGS: 00000046 [ 292.459008][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000 [ 292.459018][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff8d42f8f8 [ 292.459029][ C0] RBP: ffffc9000320f690 R08: 0000000000000001 R09: 0000000000000000 [ 292.459039][ C0] R10: dffffc0000000000 R11: fffff52000641ec4 R12: 00000000000001f4 [ 292.459051][ C0] R13: ffffffff8d42f8e0 R14: ffffffff8d42f8f8 R15: dffffc0000000000 [ 292.459064][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 292.459077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.459089][ C0] CR2: 0000001b32823ffc CR3: 000000005f79d000 CR4: 00000000003506f0 [ 292.459103][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 292.459114][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 292.459125][ C0] Call Trace: [ 292.459132][ C0] [ 292.459149][ C0] _raw_spin_trylock+0x43/0x70 [ 292.459169][ C0] ? ___ratelimit+0x11a/0x610 [ 292.459187][ C0] ___ratelimit+0x11a/0x610 [ 292.459206][ C0] ? local_lock_release+0x170/0x170 [ 292.459226][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 292.459243][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 292.459265][ C0] snd_hdac_bus_update_rirb+0x2e5/0x5a0 [ 292.459293][ C0] snd_hdac_bus_get_response+0x234/0x6a0 [ 292.459312][ C0] ? __dev_printk+0x131/0x190 [ 292.459335][ C0] ? snd_hdac_bus_update_rirb+0x5a0/0x5a0 [ 292.459353][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 292.459374][ C0] ? init_wait_entry+0xd0/0xd0 [ 292.459396][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 292.459412][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 292.459431][ C0] azx_get_response+0x39b/0x840 [ 292.459457][ C0] azx_probe_codecs+0x209/0x850 [ 292.459483][ C0] ? azx_bus_init+0x440/0x440 [ 292.459505][ C0] ? request_threaded_irq+0x339/0x3a0 [ 292.459524][ C0] ? azx_probe_continue+0x1629/0x2720 [ 292.459543][ C0] azx_probe_continue+0x17f5/0x2720 [ 292.459567][ C0] process_one_work+0x867/0xff0 [ 292.459594][ C0] ? worker_detach_from_pool+0x240/0x240 [ 292.459612][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 292.459632][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 292.459648][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 292.459667][ C0] ? wq_worker_running+0x97/0x170 [ 292.459685][ C0] worker_thread+0xad7/0x12a0 [ 292.459711][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 292.459740][ C0] kthread+0x42e/0x520 [ 292.459756][ C0] ? rcu_lock_release+0x20/0x20 [ 292.459771][ C0] ? kthread_blkcg+0xd0/0xd0 [ 292.459787][ C0] ret_from_fork+0x1f/0x30 [ 292.459813][ C0] [ 292.459868][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g19981 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 292.780070][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 292.790062][ C1] rcu: RCU grace-period kthread stack dump: [ 292.795963][ C1] task:rcu_preempt state:R running task stack:28176 pid: 15 ppid: 2 flags:0x00004000 [ 292.806773][ C1] Call Trace: [ 292.810072][ C1] [ 292.813026][ C1] __schedule+0x11c3/0x4350 [ 292.817566][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 292.823060][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 292.828297][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 292.834222][ C1] ? _raw_spin_unlock+0x40/0x40 [ 292.839096][ C1] ? rcu_is_watching+0x11/0xa0 [ 292.843885][ C1] ? release_firmware_map_entry+0x190/0x190 [ 292.849821][ C1] schedule+0x11b/0x1e0 [ 292.854002][ C1] schedule_timeout+0x184/0x2d0 [ 292.858869][ C1] ? console_conditional_schedule+0x40/0x40 [ 292.864786][ C1] ? update_process_times+0x200/0x200 [ 292.870184][ C1] ? prepare_to_swait_event+0x33d/0x360 [ 292.875765][ C1] rcu_gp_fqs_loop+0x2be/0x11f0 [ 292.880636][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 292.885868][ C1] ? rcu_gp_init+0xd72/0x10f0 [ 292.890565][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 292.895356][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 292.900574][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 292.905804][ C1] rcu_gp_kthread+0x9a/0x370 [ 292.910427][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 292.915563][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 292.921497][ C1] ? __kthread_parkme+0x14e/0x1b0 [ 292.926551][ C1] kthread+0x42e/0x520 [ 292.930634][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 292.935760][ C1] ? kthread_blkcg+0xd0/0xd0 [ 292.940391][ C1] ret_from_fork+0x1f/0x30 [ 292.944843][ C1] [ 292.947879][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 292.954213][ C1] NMI backtrace for cpu 1 [ 292.958554][ C1] CPU: 1 PID: 4405 Comm: kworker/1:12 Not tainted syzkaller #0 [ 292.966128][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.976209][ C1] Workqueue: events bpf_prog_free_deferred [ 292.982149][ C1] Call Trace: [ 292.985454][ C1] [ 292.988318][ C1] dump_stack_lvl+0x188/0x250 [ 292.993029][ C1] ? show_regs_print_info+0x20/0x20 [ 292.998252][ C1] ? load_image+0x410/0x410 [ 293.002795][ C1] ? irq_work_queue+0xbf/0x140 [ 293.007591][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 293.012552][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 293.018726][ C1] ? _printk+0xda/0x130 [ 293.022911][ C1] ? cpu_online+0x1d/0x30 [ 293.027268][ C1] ? load_image+0x410/0x410 [ 293.031803][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 293.037894][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 293.043897][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 293.050080][ C1] print_other_cpu_stall+0x1110/0x1270 [ 293.055570][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 293.060534][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 293.065843][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 293.070904][ C1] rcu_sched_clock_irq+0x845/0x1120 [ 293.076129][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 293.081012][ C1] ? hrtimer_run_queues+0x162/0x400 [ 293.086234][ C1] ? account_process_tick+0x22a/0x3a0 [ 293.091635][ C1] update_process_times+0x193/0x200 [ 293.096863][ C1] tick_sched_timer+0x37d/0x560 [ 293.101737][ C1] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 293.107312][ C1] __hrtimer_run_queues+0x4b0/0xb60 [ 293.112537][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 293.118561][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 293.123707][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 293.129808][ C1] hrtimer_interrupt+0x397/0x8b0 [ 293.134794][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 293.140798][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 293.146460][ C1] [ 293.149408][ C1] [ 293.152374][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 293.158380][ C1] RIP: 0010:smp_call_function_many_cond+0xba3/0xd80 [ 293.164994][ C1] Code: 0f b6 44 05 00 84 c0 0f 85 9a 00 00 00 41 8b 1e 89 de 83 e6 01 31 ff e8 9b 76 0b 00 83 e3 01 75 07 e8 31 73 0b 00 eb 42 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 10 41 f7 [ 293.184617][ C1] RSP: 0018:ffffc9000471f860 EFLAGS: 00000293 [ 293.190713][ C1] RAX: ffffffff816d9c95 RBX: 0000000000000001 RCX: ffff88802a125940 [ 293.198703][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 293.206693][ C1] RBP: ffffc9000471f9a0 R08: ffffffff901ef0cf R09: 1ffffffff203de19 [ 293.214688][ C1] R10: dffffc0000000000 R11: fffffbfff203de1a R12: ffff8880b913b3c0 [ 293.222681][ C1] R13: 1ffff11017208509 R14: ffff8880b9042848 R15: 0000000000000000 [ 293.230682][ C1] ? smp_call_function_many_cond+0xbc5/0xd80 [ 293.236701][ C1] ? flush_tlb_all+0x20/0x20 [ 293.241313][ C1] ? smp_call_function_many+0x30/0x30 [ 293.246707][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 293.251779][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 293.256826][ C1] ? __rwlock_init+0x140/0x140 [ 293.261615][ C1] ? flush_tlb_all+0x20/0x20 [ 293.266224][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 293.271362][ C1] __purge_vmap_area_lazy+0x21e/0x1940 [ 293.276864][ C1] ? cpumask_next+0xb3/0xd0 [ 293.281391][ C1] ? purge_fragmented_blocks_allcpus+0x93c/0x9c0 [ 293.287741][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 293.292972][ C1] ? purge_fragmented_blocks_allcpus+0x9c0/0x9c0 [ 293.299338][ C1] _vm_unmap_aliases+0x40b/0x4a0 [ 293.304306][ C1] __vunmap+0x72f/0xa80 [ 293.308490][ C1] bpf_jit_free+0x92/0x180 [ 293.312930][ C1] process_one_work+0x867/0xff0 [ 293.317814][ C1] ? worker_detach_from_pool+0x240/0x240 [ 293.323471][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 293.328822][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 293.333869][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 293.339438][ C1] ? wq_worker_running+0x97/0x170 [ 293.344488][ C1] worker_thread+0xad7/0x12a0 [ 293.349214][ C1] kthread+0x42e/0x520 [ 293.353305][ C1] ? rcu_lock_release+0x20/0x20 [ 293.358177][ C1] ? kthread_blkcg+0xd0/0xd0 [ 293.362791][ C1] ret_from_fork+0x1f/0x30 [ 293.367268][ C1] [ 293.408570][ T5121] snd_hdac_bus_update_rirb: 8553747 callbacks suppressed [ 293.408597][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 293.424256][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 293.432852][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 293.441447][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 293.450062][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 293.458668][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 293.467262][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 293.475859][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 293.484458][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 293.493056][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 298.458567][ T5121] snd_hdac_bus_update_rirb: 9108827 callbacks suppressed [ 298.458593][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 298.474261][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 298.482867][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 298.491465][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 298.500061][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 298.508659][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 298.517255][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 298.525860][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 298.534454][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000 [ 298.543048][ T5121] snd_hda_intel 0000:00:05.0: spurious response 0x0:0x0, last cmd=0x0f0000