last executing test programs: 19.265681514s ago: executing program 1 (id=118): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000003580)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000034c0)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/101, 0x65}, {&(0x7f0000000580)=""/126, 0x7e}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000840)=""/239, 0xef}, {&(0x7f0000000940)=""/225, 0xe1}, {&(0x7f0000000a40)=""/13, 0xd}], 0x6, &(0x7f0000000b40)=""/123, 0x7b}, 0x8001}, {{&(0x7f0000000bc0)=@x25={0x9, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000cc0)=""/236, 0xec}, {&(0x7f0000000dc0)=""/161, 0xa1}, {&(0x7f0000000e80)=""/192, 0xc0}, {&(0x7f0000000f40)=""/42, 0x2a}, {&(0x7f0000000f80)=""/142, 0x8e}, {&(0x7f0000001040)=""/14, 0xe}, {&(0x7f0000001080)=""/160, 0xa0}, {&(0x7f0000001140)=""/88, 0x58}], 0x8, &(0x7f0000001240)=""/182, 0xb6}, 0x4}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000001300)=""/172, 0xac}, {&(0x7f00000013c0)=""/84, 0x54}, {&(0x7f0000001440)=""/19, 0x13}, {&(0x7f0000001480)=""/74, 0x4a}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000001580)=""/59, 0x3b}, {&(0x7f00000015c0)=""/178, 0xb2}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x8, &(0x7f0000003480)=""/37, 0x25}, 0x7}], 0x3, 0x101, &(0x7f00000035c0)={r2, r3+60000000}) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000280)=0x6, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$lock(r4, 0x25, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) readv(r9, &(0x7f0000000100)=[{&(0x7f0000000080)=""/60, 0x3c}], 0x1) sched_setscheduler(r5, 0x6, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) 17.436270874s ago: executing program 1 (id=123): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r6, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) io_uring_enter(r6, 0x2ba1, 0x6a39, 0x8, &(0x7f0000000540)={[0x4]}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x48a000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x22}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x60000010) 17.233673759s ago: executing program 2 (id=125): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x45, 0x0, 0x6, 0x5, 0x5, 0x9, 0x88001, r5}, &(0x7f0000000540)=0x20) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x406, r6) write$tun(r7, &(0x7f0000000400)=ANY=[], 0xa2) readv(r7, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4093, 0xffd}], 0x1) 15.8430342s ago: executing program 3 (id=127): mkdir(0x0, 0x110) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder-control\x00', 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYBLOB="43aba9911ba3d9bd9c2d341ba78391f3fd42251c28fa8791c674ecf2c666503c694dd8b576471ff008053eda3e0545d1e2a99f341297507e1038477a4f7c13ac0c9e96f1a9e280287791afe9e4417c02760fdfffb67798fa8fbf85698869e38d191ec5d1f9c0f116fbaead79cc672ecf6156a63c06dcbedae392d46e9fbf094f6d63ea0d8def073e77b2c537b4a4b94ad004aecc87a0327f6851869732e29e3719ba52c6495fce628d5f3e", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ptrace(0x10, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r4, r4, &(0x7f0000001000)=0x10000000000000, 0xffff) rename(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, 0x0, 0x1021002, 0x0, 0xfa, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x4) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 14.047556491s ago: executing program 1 (id=129): syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x840) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000000)={0x1, 0x2, @stop_pts=0x400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 12.886728243s ago: executing program 2 (id=132): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 12.172903969s ago: executing program 3 (id=133): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000003580)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000034c0)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/101, 0x65}, {&(0x7f0000000580)=""/126, 0x7e}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000840)=""/239, 0xef}, {&(0x7f0000000940)=""/225, 0xe1}, {&(0x7f0000000a40)=""/13, 0xd}], 0x6, &(0x7f0000000b40)=""/123, 0x7b}, 0x8001}, {{&(0x7f0000000bc0)=@x25={0x9, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000cc0)=""/236, 0xec}, {&(0x7f0000000dc0)=""/161, 0xa1}, {&(0x7f0000000e80)=""/192, 0xc0}, {&(0x7f0000000f40)=""/42, 0x2a}, {&(0x7f0000000f80)=""/142, 0x8e}, {&(0x7f0000001040)=""/14, 0xe}, {&(0x7f0000001080)=""/160, 0xa0}, {&(0x7f0000001140)=""/88, 0x58}], 0x8, &(0x7f0000001240)=""/182, 0xb6}, 0x4}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000001300)=""/172, 0xac}, {&(0x7f00000013c0)=""/84, 0x54}, {&(0x7f0000001440)=""/19, 0x13}, {&(0x7f0000001480)=""/74, 0x4a}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000001580)=""/59, 0x3b}, {&(0x7f00000015c0)=""/178, 0xb2}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x8, &(0x7f0000003480)=""/37, 0x25}, 0x7}], 0x3, 0x101, &(0x7f00000035c0)={r2, r3+60000000}) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$lock(r4, 0x25, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) readv(r9, &(0x7f0000000100)=[{&(0x7f0000000080)=""/60, 0x3c}], 0x1) sched_setscheduler(r5, 0x6, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) 12.03365647s ago: executing program 0 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000040)=@random={'user.', '#>\\)#)}\\a,)[\x00'}, &(0x7f0000000080)=':\x00', 0xcef3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x4}, 0xb1}}}, 0x7) sendmsg(r4, &(0x7f0000000cc0)={&(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @remote}, 0x0, 0x2, 0x1, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x208}, 0x50) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_provisioning(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x48, 0xfffffffffffffffa) 11.303205983s ago: executing program 1 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xa7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket(0x400000000010, 0x3, 0x0) 10.891552862s ago: executing program 0 (id=140): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x30f, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x8854}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2dd35bb93021b9a6b6fcfeef08217e3466edb7a913dd5758f28796ca04f66c67f59c58c069fbdf1da2b70a2753fc471f958a5d2f735774f28aebd73a1974a7327faec9972a8414a25f5166cb17", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000011401"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4c044) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x41c9, 0x7721, 0x53, 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0xffff, 0x8ef7, 0x1, 0x0, 0x6, 0xf5, 0x7, 0x39, 0x4, 0x8, 0xfffffb9a, 0x10001, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x5, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x2, 0x1ff, 0x8000, 0x3ff, 0x3, 0x101, 0x3, 0xba55, 0x1000, 0x7, 0x200, 0x5, 0x400008, 0x6, 0x4, 0x2, 0x0, 0x0, 0x1009, 0x1, 0x199f, 0xb, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1b], [0x6, 0x1e, 0x3, 0x8010, 0xfffffffe, 0xffffffff, 0x0, 0x5, 0x4, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x8, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xffff7ffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0x10, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x201, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x0, 0x8, 0x10, 0x9, 0x9, 0xe8a, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x802, 0xe, 0x4, 0xfffffff9, 0x69d, 0x10, 0x80000001, 0x4, 0x44, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x1b26, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x3, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x1, 0x2005, 0x7, 0x4, 0xea, 0xa, 0x5, 0x2, 0xf9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x89, 0x0, 0x6, 0x4, 0xb, 0x2, 0x763, 0xb, 0x402, 0x800, 0xffffffff, 0x1000, 0x366, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x6, 0x200, 0x1000, 0x3b, 0x4002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xb, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x8000001, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x860, 0x132, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) 9.665082174s ago: executing program 2 (id=144): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x45, 0x0, 0x6, 0x5, 0x5, 0x9, 0x88001, r7}, &(0x7f0000000540)=0x20) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xa2) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4093, 0xffd}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r8, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') recvmsg$can_j1939(r9, &(0x7f0000001500)={&(0x7f0000001080)=@hci, 0x80, &(0x7f0000001480)}, 0x40000002) read$char_usb(r9, &(0x7f0000000040)=""/4109, 0x100d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) 7.919727463s ago: executing program 2 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, 0x0}, 0x8080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.652653724s ago: executing program 0 (id=149): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x45, 0x0, 0x6, 0x5, 0x5, 0x9, 0x88001, r7}, &(0x7f0000000540)=0x20) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xa2) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4093, 0xffd}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r8, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') recvmsg$can_j1939(r9, &(0x7f0000001500)={&(0x7f0000001080)=@hci, 0x80, &(0x7f0000001480)}, 0x40000002) read$char_usb(r9, &(0x7f0000000040)=""/4109, 0x100d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) 7.487499208s ago: executing program 1 (id=150): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x142842, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 7.48634365s ago: executing program 3 (id=151): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x840) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000000)={0x1, 0x2, @stop_pts=0x400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006e08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1515) close(r0) 6.332086058s ago: executing program 0 (id=155): mkdir(0x0, 0x110) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder-control\x00', 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYBLOB="43aba9911ba3d9bd9c2d341ba78391f3fd42251c28fa8791c674ecf2c666503c694dd8b576471ff008053eda3e0545d1e2a99f341297507e1038477a4f7c13ac0c9e96f1a9e280287791afe9e4417c02760fdfffb67798fa8fbf85698869e38d191ec5d1f9c0f116fbaead79cc672ecf6156a63c06dcbedae392d46e9fbf094f6d63ea0d8def073e77b2c537b4a4b94ad004aecc87a0327f6851869732e29e3719ba52c6495fce628d5f3e", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ptrace(0x10, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r4, r4, &(0x7f0000001000)=0x10000000000000, 0xffff) rename(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, 0x0, 0x1021002, 0x0, 0xfa, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5.37719248s ago: executing program 3 (id=156): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004098) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x801, 0x2, 0x0, 0x15, 0x40}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000306830b0000000000000000010000030500010007000000f8a9381797a81ffcaa010141b9d86c8e0c5bdedcf75bdb09be7732cb1ad8fb0c61a93b14b4407efe3ce0f44ad2f299ff5f63dfc3ea6bdf6a0d69f9a31637688017113187cff8416b40032712498185ca3145f7b0258e0491a3eba99453569d998ac21e7c696c4ce41670f04335116d842289073d9166e092cc4b515e9228f7d9ead45521267e7c961f959610a7f1ce7d66567d062ce3813f529751000000002ef06422c1d8fc1f065f9e3d0d9790d69a47bc2f6c691dd8dc28b2f0708d032150b1d7c58fb7d0d4b526f9cb74edf8723999b27fbde7be84ceba4d825d05bea7d7046587a52ab5a61be940c58aa86cff9005ebb76a0a4bbbb113816127d6b998680783319ab591cd1175c3e67db690618af576e9a7e1903aa9a101f43634175ef12ba68a34b7e3a752a4d0468bc94131d205d1fbdda0c03be38d2f0dcda400a5bea59c5990675d7b6f5348010fcec51d7e10ccd71b6393eb3438e269f139c30ff78162896da61a6dea13e78521c4fc2c0ca5c62c8799f74d471a6b464c1777a3ed04704cb4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x18}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00)'], 0x250}, 0x0) 5.282208152s ago: executing program 0 (id=157): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x45, 0x0, 0x6, 0x5, 0x5, 0x9, 0x88001, r7}, &(0x7f0000000540)=0x20) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$tun(r8, &(0x7f0000000400)=ANY=[], 0xa2) readv(r8, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4093, 0xffd}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r9, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') recvmsg$can_j1939(r10, &(0x7f0000001500)={&(0x7f0000001080)=@hci, 0x80, &(0x7f0000001480)}, 0x40000002) read$char_usb(r10, &(0x7f0000000040)=""/4109, 0x100d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) 3.463489861s ago: executing program 2 (id=158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40400) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x1020, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="c1fd43b601662701272af37a7deda072caa09faa11b0a4ef2825e87f09fb6bc3dfd84ddd853b18203bbf08b1af6066c78b4714a789a8f3605f5920e7afc5b0a04271cebce72a797abd5b9e4a44fdcc150e6ef0e8c3d4360e74275818df26243f28cac3d84e264fd0c77d4bccbc466e7244b247d9dcee026df89aefc958d84a55d4d6922d96ce0349fe28efd6b83d15b7b08143a721c4a677b72362a49eeb15ec5b5f8569bad585e30a62ab149e7e4c7f49af9560fd52ea5730135dc3ea3f6a9a3ae6286e99e1520a43b8813ca6aad1adbb30b2459f90699e2ba3a6335ddcace3737ed8f5f21e027ac2b224389bf0c8c005ac8d8c3ae188679d34da0a2c20a910487d3c91b18770fa5ee483a3f09b882960f12e7d2eb9015895ce80b37f74a305a50deb146b1c3430f31d28e6f827b9c7070bc880d251ddb09e0e70a0512ed2600256332c43a5deaecb01f089333fc3b6721f6ed5b41f9971b7c63f57b5afa8042f5beb1ac1274676dc5406b5828247123bb7be795baee59d779bbde227c90d0a5d863936d434f2ce7a45f9b650600f32827b92e2d828915f0411f765ed82dd012561ed29b09950b96f8e490f1448dbd5e45bdc92a2a36aa67e5e9396b6376f82aa6915eac4144a102de786563e4482f0917698bc70776f8c7aad3346e18ee295af54f3c1658f9b124116a2fdac79353b095cf667dd941c3cba141b3ac8982eed42e7db649c9d49a59378216bf4323ff4c2f2992994d4144b74866a2426e19a2dc8dbf4643f97a214fc9c448512316d76c4116c3ae600dfb98cf85472da661745b638438dbf15d8dd87a8ba35205a000000009cf941454f8c788dc2eeccea412add734798c82e9c86122a91dff778edcd309c05fdca66176e9bc4d410b0ee4627eb889443b574ce205c7f4d6d428e909952712ec3dfc89552279b2da87b010051a451377a0c51a34ebba25c3b62ba98eb6f1549b0fee6a7c5e0c7a72835388803a0a8342bb9f2733224c92a50dd25a9b335f243f2d8c68142aa1db1de2f899a56c623a32f8a74c16db56983eb83f6469316f2fc14860c075236a3ba40e8c265909b8fc6b03c6378269f6629bab81418789cd748d8b786f47ab8f13b0caa5ecd79dbea61330be6de5804f5c211cef78f555e7b2093f4a836cdb8a2cfa261be14e0f59d075f58a16cb130f062a2261df244c57d6f477d761262b2e755c96bad3898890e80b23fae71fc31b2895513a11b0cf07551ca87325592dd10549b7d92da1cb07119fe970b8cc3aacc386ab64d32b308679593256d2fcd1f9e9b15ee93ef859e7268be776053182460e83fb873711226ec9aa5c35b15fbfa12ea0abfc7465b300bd8445c831ae77d2aab7d4bc3ba5f218fda9e90eacde1ac5119eb30073a6f291727cb94fc87a3d3013f3ebb1cd259067c571bd3c57eacce716e61f86bf4041bacadd6c676e17fb3cf89c4984aec78216854a60af68533fcdff12897c3e1b2c10cec019722623f477a512c4e5eef74a6d1ab7a735905373ca3a0b18c3eaa523c86238fba77e45aa07c1b96fa1e3ceb04e5f4742536b687ebf989918f6805cda9611ab9ed10ee33cda71a95be2da0d2c21d2295fdb334dc2057942382dc7d0f70300df3df84cf9a18f042c11243a347569771f9b82404e13684324fb06d867641c87d6d70ad15e90240f901d04a8b8c7fdfb8b84aefee1606f14a2a6995e6b8aaee1b372cd586a6daf28ad7d8ef644c58fa72f0b2f847eef72e18f1a4374c4fa3d604a9bfec6a1a4fefdfaa848279693208dfbc1dbb97b44c4f034090606e0ad312cdfb6a8f68dae7312b064c68813eb41992559ca63d88a8e90711c838f220a4da5bc7d82ec0af83da059bdccdb524a59ad26e43413f131e7703eb82158293a331456ce728c28923bf9ae644a331a667c2932ae1f11a9f9b893f802796ad029c40496c9bc49cdf41a40da1092b404da660e80f33a6012a407805e70f9a180105cd0401ed01a9f6edef4e2479e1579ea365d843c197279e3c79ae56a107dfaba6af80ed9a24d535d19827596ca2b14bf4b110fae4820fc8d0570a64ae08e315da0091f766bceb1fc990465ecb84a2d72efcb9a269816863b72f8d0869b20c14bd72f909fc3ebbf2ba2f98ce3fd7eb54b738692916eeb98ab9ea04ce3e740817dc9ac6561c71d3bc15358ebbb3027294f66eb890577f8a63ecd23beacd93c3b1498d5eefd8b68ebab3536653d5839713b07f79ebb2a6106c009cc535a2173cde3ccc65676bcae513145db5bf08546e8810fb4d193266d491fb9121935138a74c52149959a0c270cd6e244dd7cb140fcf6bf0e7536220f798bf32cda564ebde025a92617f3195e549a491a45446ff0ebfd3b047775af339e59a8da0db6223339325c6f493baa5f2c71b5710a975def3e3919a24a52351acc12e5a2ab6c171705bad0e6afd0ad2b6dd6feaedc9924fdba533fc958fab9a980b775eb4c93a499413073cf09826381b8054f9f09f4a0dfa63ac2f6cb22d001ff277ec7f493bc54d2d1d34a6dad62cd7bccab2ecd419c90087f6945311460b87daad605ff8519aba1d8311a5e565dd26655577aa13da31e01cacbb7e10e720a486e9cc450b8a21d23aeab42838d81dc05f5be0474ab81b806fe71b888323037f3262179e451f765e419bddf7b7a99b40bcc226986efbd3765b66e56a3500de4b18b676361510bd35b3a9c6b8c08222cf7a73c4cda972190f839c2d01a4c171a803c0a77d2769c892b2f0191d2fa01d7d5ca53573e47e93ca9b56b8f0d684d5458d505ad8383f22e19024da06bf6abf30ed663cfb33e202be17bb951e9ea30cfcf65675d2fc64aa51e07237fe8391549185fac5822daa92e73778e080b1304dd757f9035092a729b9a0122d1c07d60336f18a9e46ebeced1041de2e2e8a5de6f4a814d5179bddfcdeda88888cb9ce322a516af3be2b7cf371e9193cb40e66cd41dd94e37f14c6e6469e8fa6c57a4fa3125fb6819b84e276768a7354dd3e2692a77a4a60af85bec0325d0aae72a5f4f7bf9468f1d35147910a55af546e4e3634fe2d8efe116606bf84c0e9c4d442ec8f99fe6c1cc90b99a8d1e53322b26b66928fd01738fa70c0aff84b4f02946c6fa684bd617667857cd751a3ad3d324f9574af78eec6c8c51c25e01cb0ef129199f5a3b3b29e32a34c4ef14c810c2e69e06158f02033e15f1ec00419a91c1450338956a188fac918fb73692491baaf5976ca392c139ba0e551de260dfd6c733b572215f2af0aacc5709b0d4a3b36d23f5882c5644bb455075c5c48bd50492b395d14c36393019fa9eab8a211d71d173754663ea2af1ebdf9751006792609d4db47824d95d68583c922c04af3cdfb58f37b6f958a4b35cbd74a30a393be192fb46bfe4e722c3634c94fbf4829f25dc0b8b07cd16cf4c7e924eb02ae8d675539d32b5d9a54a43811eb98e2db317c67d5bc62901582cbb128542d6be3bc9a5b5b8a8827f2eab15e82b28b411edf67d786b76feed9e7d5ffbc86fbdb19ed80a4f5dcebd631719f8734c398938047011a251370e40d5929e9b4426081029b1339ccb08bb0dbcbb4eedd53792e43a046abc1d5c1dc8c1749052233e18e25593daee94f77f327de61867f1e791b797cc5ee43f8109cb0654d8742ece8512c322442f63dff88702ba047e8370a1b7304536ee7cf465a0a19d965fd03543b991449d6a1a98be5ec3867314c688c5c487e59a6bb05291fda479827172bf3db615c20ea022ff7b16020299220b7c45a7181c1eda48c9a5fa7624843d112c52d99d0b27e168eeadbcd3c60b3f366175decc8c91c64a0a16d3a2e38244dd8d2de806ad741e2256075efcb0466360acaa3f65611789a821c30a13d4b60e44173be9e288dda7d7aae2f8341d9a85104170631c942eef22c10e903bf70b0ed36831d536a0cd65c11a209e37a76f3f54deb326735bec5a532431a81f303af5e9d03717a93a3da18317c459aee8db08b9f0b3331d29770fe7fc4266c15a4294c9c435a38296cd880dcedb34f63037f2a8e3ada9ead3e52abd69e5779905f82a607f70e351d2167bf1b599cfb9314a37df876bd5f2acff82f1773c512ffd308179e47b26946ebcce112273e12895145ec88c701269c93f32a5ab2bc16acd57e997d140d18c2cbed2601a05ec33a63e7edbcca673f71eecab66af5287d7d5a1dad68771ed612d29ef8ab23ef0211b4bbed6f981cd24d652f355d94f6003b01cf3d803a6e36b470402c05816aa2cd747f293300bbe891854d932df7809c7809c2cc3d06c693981e7bc21e89aa3ea8f8829c85185e4ecfd2e293bfa2b88cae2c9e4722b9cfee01911a502d59360532528661eadf2150e26a2992871f562d6fed4a36867b2521b1778c4ce955f5980b9dd9ede42fc4a1394491ebf1c1fb0d794cb8c28b103d76b2e70b0337877a222d7f3cd61f353baf7bc9e23d80f8e5b4459937d75f869c179dd9b948a70b9ba37386532790bac12f2f342fc4f2afd8a45f109331d5daf3344ade893029e322e8b7f3bdb5a49987116b31b2bd6d5bab789ca061ea42f7647c88488f734150e161e5aea78639c5bf9c2fb88da321cbfd379b38cbe6e14af979f238685e2c0ff51629cd228602dbaceff8a214cdc66528cdea114691ef619a8c9a0f9cdb7e08c5bcfc2bfd29e39af38f5db4821c648cc3d976cc455a6e6498c92511b407f3349284901562a912c5af25ff792b9c6c5dfb73519336c7d4a87e49debce7a441b7a29706173e4e4e8dacee63a06ab85dd359b508bc8a0f7002832fae10a0a38efaa475846c4205aebe777334788c3e4652086e26dcdddad991b0ce5256e113bac692d442f524d7e292b86eaf0dd8380ccd78b1489dd2ef6beaf2eb9b08b50bb2a5ff3ba8df3b226baf79a0739d8a60cf815cb347399ac4adb2cea533d3f0ce160a563f8d401e5a6100578e4c8178a7e70663e135edc645cdec2f0588fc99a0cb60dd8788e02554ade370960ce562c210e826a1eba767a09b10f46ebbe6c9166e24286331d2ff025c57a10c7b64c506d0a68642171ad965a001700561fcac2e3f548fd58d32bab5f38b36e62f5546129cea35ce856052e3e480fc639640a5301dd700c8e8d0bd6ac790910fcf2b4f159cc1531aa1c9e37b541520450dde638942081201ae8a580f28cf50530190a45f45468753a122b364be7dad79044ec8b9977d583bc0ac3ec7b9fae192397ce8693310f301c18c2cab5208b369e63c5ac18d0266834e218b0400308c2c2f2df4a6ccadb3788860a2c733a9252b877ea1c1e849a38a328310bafae9614a6e161170c6fcbe9bd8c4177de1fd18f56805c91fb382aad767891556ff8e1b5f3ab8c18b4fa3053c981c12fa2ea017bb7596158ca533d0dd95a95d0b392222609f6ea336711a9dc50393bc41fac0d429540ad70757f2086bf1bea0132a609ea0bdeea0cef93d8b2a0d59189bffec05281e97b4722291005e9ca7e755be9070f405ab0d6c9546a5ebda2e62adcc621c2b1f6b07cd1e617d50469ef2c71647a47ef98ffbc71505e188cef3e5c774c0987664b6989794d7ca186804ccc6296da3adf22feb351792f1a9cff77413703744bf4f21212920d6a8fa1800da7a38fef7160a50f5b895e7b76f3fd830fcb9a25f3b3ccfd082a1712237e4ca665085aa1c5aa413bce813f1b7ca66105de94babb7b4a05029cc3759d00191fd9bfa0f996cc703403dd6ed2b33f2743a788041f279b767efc373314edfae1bd33f7eaaa7418a59fff7e40d02e618172f6e0abe08c855348f3cba40c8592a0521ed1e41524f20abccb2bf0ebb933e59b7036eff5a66279d578e6b2fd6c4140b33adc67f7083110d815ac55b4833ec0504488265b3ff2bdacec17c91bea9d6bdd931bf056d6e9790e472d874a5a3946b200493c9874d057aa6be3a1ca4da6fbb88a9d853aaa7c8ccabc83582caa65078bbe7b04625d139ed9860080d185bd9798d613ca3014713eb9e36bdeb73f14ac3fc7b2f8f594404f56dd937c0a7e865fa98e858cb0af661cbe12f15c928c4c45a982e24db18e7fc413591c8656b2c7876a5d717e42d3df13189b95ddc2b5a928dbda9ee02c30352045d02cbd854af821300f198b1ce1ea8e45c969020e5c7670fbd9b7227cfd3c809fac1df2eb18c199b27e969f32052376b450003b7ff6332ee1d9fce1b5947b72575ec6541b992fbc76f0e03fc1bb9a0df5ee3de0f34125c311d2ddb67962cf9a8230efff82c25c896621082a587139e997e0532962e84ad697a1a2b80d997c2a268ecca8b7d1095530b332ef368270bf31a75b777a7cfe8c8d324a8c558d3c65f801deac6822842f85f10a641b71ad7e5fb05f64eb3033507dc3a2e9ec02d667ef36c551f69c438e8b6c3927733d83e94f035ef3da230b759df5f5d1964815b176478c4ed94402dc8265e589171df165094a2e4e75614fc6febb8484f28ec8c1252b2d933852573926837e1edf9da0da3f91697b290c3ee5a44fcab3b10095b78b5df3701431cab31750e211d442a77dbc5e2d4d0e67bf329f9103414abd4f3879511375c8800f52f8a17ae6887214bf8634bd99075ab073540f04ff675d32190a3d1152ceee32e30719cd883a82185f89f071c02df443cf7046dce8a6ddc472ed63945faef588acf57985c7ecffa438f5427fb851ebc6a4c577a33895a8fc4628286a48d3bbcda1b769aa3194869e148ba457932fa6f2e4640e2755940e2f5a6a67796b5f88ac10f389b409c0c57bd4bf0cbe0fac2fd2f58ec498d19c43952e4522b51931712eb4002b7b208c02c4e06df99fa8e93e4b9e8b0d7a57e63aacdafb19db0fd422f8e89d1275b49963bd82b490f9e4d24cfe9700e98c73b31fdcf7b7d30d73e9bf6bd86439dc8b63171d53ca7caa860c60777436099db544164d4e4a81a483ffd5ef2980110f461529c057c40f2ee63b71a8eb2d87919726bda25a8fa2f242d3ff7bf0726d8a11d141eb87d2733f1faf456f2eccbe4c3a856702a80ba7e36cd8ef8e064e16e61eedda4478d2edaf0445e2247a76e25b4b5c68720b87bba69b4171983d95a5a764f42fa6f23466096d9a097edf84952023a4541110456b93ea558c2059156c287fc6cde7c74abd90ec539a5f43c2a641b1a34cffa2538ba565d0b57513b8c1b3df541d02d6d5a0aa2f96200dbbf64ab7c0adb868cce23ca607db6d6dd18f956185c983a90c8b4a7ec630178376ac400c61c77fcbacb979e2e07115db8a034a00ffb136f91c0b16c6d796f524f9ce6a0b72c378c8939b56bb83ca0f3d09da2b82b4d3457b568878d019f54f9cddd514a601d4edfae582f1a2674892bacf6eaba66124c797e1ebf91e1b5f12e520404d213b12770966d5c5f3435169f8867faed0107d2cd4cf0638e4f1c488122da7516820cc3d12cdc9f663778455352d2be1d8d3cd611808304554bde601e4ec4c9aa50ec22648b12f45c8d84bdcfc85f95ba0afe254df5d8b40d53adf1d4fe1dc3744bd486e3eb14775f4f4c333f751975a4a8b5bfa497850633aff3ff98deb53d1b515a08c4c474bcce46149dfd5bece51d1dfb6eaf593f8ee037404a5ce5edc2887006059cd3743448ab977899f10540b5a5eac1b9d4346654e4eb0200858b5b92525399a87859859269d3b0fa4c2159dc807548368ff701076606378b44cee2839f05ad94f659270af868cd674b44729bbb8eb2f697101bf4fb4f96d07dabaeb5b6a1cc884423fcac3d3805bffb3c8de3e801d641436ca6b1f50aabce4c7b3b1a24eb6977d5a8c84d6cce8ec9ee93d3062a4bd78ff916fbba7ab228838bd61f25759c6ac8650adbe2b346e65681dbafbb934358ca2b1b854bf42f42404a15caf99b785f132b9a20413b2d9d353220656ae271883ca9733430db09b5e8578e9d4fff032b0ee792f429791089d93876a30100a35c420a0686c125005242551df27673e0826a1c38bc028c104e0f958ae1ffb2d5221fd1a36e598065eed6a449567b41c027b6faa461d3aeee8dfb6285661af7fdcfa484fee654b633342eb122fe72d5d68ea4cfc988cabb0df39b8cbd064d489fcbc90bf313f3a29797d479a8fc12cf5b9ead0907a2dca568bc0f40d0fa4a9c3758f9bfd1ac3662a9f04260ef0d2b86a02d23759b210f38830c4a224649186b6e4b87c6b457217c86f502521940caf1e5b2eadb72951a790c94dd74b929232947b01cefd5a1483e127b1b6d216317b581455f9cf96876af837e5f88cc38a46eb2fb6cd7fcc6fce1a264167b86723829ffffc413bb0000000000000032dd6219a95418314b1e071dd59d0e96083e02cb8778069ed54137ce98bd702dead8fc74992d7743d1450faf7de44c2d59ff2dd339b80d3449e9bda5b3a564f01aeefe300165bf3b00d811c7ae866cb1a0a1b87400c2941841cd2d6953308f1a963f1c6d4486e7e45daabf0b066ad8884f4577534d3c9f3d3f3bbe8a1a3088d9b95da1fc901573e26f5b86c7a868429b9b634c9e35dfd0534563160912a43c64bacc8ea1ced7bc1b77a28716700e501905c9e81e190241e0edbf4f894aee4047c5b5fb58a3db4afaf76790690fdc1289236fbfc5f6cff540eb82de8044d17658fb054b198cc288cc43aa5d805a51cadac3e75c8fd82ad015a04932cb6f6b53aa4e8d9d84018ff8db0f756d6b5db4e06a689b52fe8471b9230c2dd14d042c1fea45c3d2452351a4222421366610d80785f7e47474d4ad58116313813d4db3176d93c4e29e5c7562806879ddc75b9cfcf38d6aed015c0f4d52302a51215187bfe254d6065bd142cc9b9e03f32ebc9686ad0d0cb3fcf0afa320a15f37cf591600636a4ef84c756c0d42ab98bc2479f0d5d230359f622447101844430a7555a4cbc702b55a4a6ed964cf399a1a493e40555f622da1643073a786a3425d95090b9b0e20521187e9e20d35f4e061e6201e67e844d88457f751e5519dd30df9251f1ce2836e0bf61eef8fc6ed22e4887186316566278bec46af3823ed53e3e18ca5741124dc53cadb5ff0846cc1c6b9c072be6dea187e8336eb6b6b7029ef79ff3b2999938cc59aafa1618fc4556ce3c81f99414d5d79538a83ee9d8a9ad0b9e57060d4be9c53266f418455d760f423a1642e9edfccede29d21891d7421ad0f1cefe472d0ef84965575419871374727bf5f1dc72057a18ed4d7e0a2ddd6d105eb2cc3718609814c2968f27465b00fb4b4a64359629722320583a05644693e6fcadde0efc12e66a0c8e48311f0550ab8fbc1556b69bb2a5a0c03f1a59d67046d7acd5beb9f7f9ae6eb18580431624d63ffe294ea5497a65ec3891f4c70b26b7b17a9f82145e5d5156d6b3355ad249bb66168bbb745d00c40d6ef42d52a032cf62caeeaec31f4c85ac403cbb0c6756953f0ddbf79da0cfa6ccc1c40de43bc4a10a700b98322e671225e80e663d30192ff5611c44c095351bb69a4e14c11a3d5b0b53e78954699760516134f3148e71a2b0bb04b24bb1a2c2b503f56249e0a2c638ff40e7c2c7d50ef7196fc9893e18c0ac3fc5a4c0d23ee08080f984dc643854b54df4a638af29dc5df79f905c4133ce263f3b2bb55fa7d56fa82795687e6ee5c68cc13d71e44367ea8670409cf2231990cc6d06e5aae2fc340bba3aa417016fb9dd89f90a89196c104017a68f7527b8b958e38f9646832a7790045fe394ce41bcbd1cbcbe52cd7e56cec7b2856e448fa5d7e837798b899f05a2c2fbe6d9f1a7b193bbf7c70444d6a37810d4d19d359f9cd6b8a6ef2230b735f8bebe0ccec94e44ed95234bfa4a36a2f0ee9fd5ca73d697344d28436e0fab81e73f447bb144a70aaf96acf6ff52c4737e7a4debcd285bdb54e363d842bc9a7d180c16f010fe4078b41c4c3e565c3edd64e61f995ab0086dbdc026dc1825b8c45ed96edd8d2bd9daa699e5da333274d6bee2097c004462848cd16849f95cd2252c4c87058a821ed977ed751b77b0a8fc0966bf3a30c26d49f3185782a7d314e89f039a15ede458538f1ada8eb836a36bb5d82c402e3feebd37e7b7c667a1c82edc8720072789fa5f388039daa731ce74dbd5aa8965b7ee99f6c271035239ca1c34cdc3c57bd8510dee08f74cda37095b1b098997998fa267e0be15de474b2c737936cacccb4ba44112570bbd13f870b55f3763f77724b586d6e26c3e72b20bb13272f2ee331bcabd4a79980a8d2965c20da2a3918c855215fecce95d29bec58f522d3d6d2852c4ac080fffcb3ee7fb98591f99b7cfb7bb124cc20078030756aee8fd284df06cd5f07c13fd56e5381b19e0a3a9f412a8d27428cb6af0078e4dc8ce4836630360a5c3b98ff5e6cbac1d9d29de9838a84d4722ceea3765be3df9984cf139770f3fb986b9cc9185ab787f54be33d46c54de74d94d13f74ec70cfbe1605c00db79fa8de64cd834090a35c80759f83c8fbefcf9a276dde8a8498d084b4619578eccdda2651a475f73367bda96894bb36eb868035251694cbb745feb150555ada09909497ff1d9c8aee7a35b7c8b2fc64ff483f4fd3491ed52304e6010b9bf2af8c5b8e162a383a0bf0bf108ca78f5086132b2b1a29581f323841c2f189509898d932436e5c1e693ed91f0524da026fecaa2b7efab54aeef120be61de457171c58811e0ca8a7600e0ac249aa579d78d2e2b1d6f41a3da4676b6690ca0249251f5b48b9a3820ac5b25a52cc01bc331c24039b6f4bfab72d5838a35629259930dea936f8c60b4f1b189db1fd1b5e7e6c8a842707ad6756d098a9ab543cde3e1d1161983ea91b7322ee2a713be3bad369d8112fdc7f1ac7b5122d55dc5ae443e10db711ddd6619ffbf96068e28911b1f54388413a17958d61ca07465b54699a1351915300cb826d3bf7f4f217bba0ed3195cbd077b67167b9a03040afc237f3bb36edd9fed33d7d6e7c9493fec34be6543880b0b442d8351496f2e8d60d4d984cca743983c0afab9cdedd5a9d774a121e91230d359c27a3d7b4db38ce73db747af3ca06470901f2605c031a7c9b7d1bbb1e838d36a4d39b039e80bcddfaecca906705fe8c844e93d5aee494dc62c7b4fcb6abe09acf925ef422dc09185b53e960795c56500b43faa6e89720aeee724532f89e60e20b12cd4f832b95189bf45b96aa7af10cf8298b44278de1c67e2d71d811240a7aa2d1d6de22e5b8cef4a1f309de3b81c5a028aabdabddc9637974c2dc19b60458f0954bc751b7ae628ac602eb7c52c7fac0c1621ee7757fc5b002ad7e8fb66fc7da0896547abf01ee091c0cfe1d0fc66e6e03599bb2aa7608a72c30203af5eac3915a0b6616b6119c4a09654de2f56e53296d1f8487cd7ec36c86894bab72ec3ce61208f848432d45a27cafcfbf2a2c56b58e017c76ac7e943aff0b4acaf84dfb343d93efb29c518a9d552c36a3e44c6ea948673bc2aa71c5a873d1d301a9c8b02f19c086f922f0b3e4f7d14e8a59c017809188e2e1b4dc6b55fb8ad82b1c04460b5ff2e9b8f47d3e833599519b79ac6d9ab282db4a55654f60396d2e72bf8e2ebbc8c742913359edadfcbda00", 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042c1100000000000000"], 0x14) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r6 = socket(0x25, 0x2, 0x6) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0xde, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd55b}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000140)=0x6, 0x4) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x28c, 0xfff, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000340)={0x3, r8, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) 2.636723372s ago: executing program 0 (id=160): creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@mblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x463, &(0x7f0000000480)="$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") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040086, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback, 0x200}, 0x1c) 2.036157964s ago: executing program 1 (id=162): syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x840) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000000)={0x1, 0x2, @stop_pts=0x400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 1.71308961s ago: executing program 3 (id=164): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) membarrier(0x10, 0x0) 1.664314981s ago: executing program 4 (id=165): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x45, 0x0, 0x6, 0x5, 0x5, 0x9, 0x88001, r7}, &(0x7f0000000540)=0x20) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xa2) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4093, 0xffd}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r8, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') recvmsg$can_j1939(r9, &(0x7f0000001500)={&(0x7f0000001080)=@hci, 0x80, &(0x7f0000001480)}, 0x40000002) read$char_usb(r9, &(0x7f0000000040)=""/4109, 0x100d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) 1.412721243s ago: executing program 4 (id=166): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018fe00000000000034000000340000000600"], 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ccdeb607c3fa4e910ce3e60d380f", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f00000007c0)={{}, 0x40}) socket$inet_sctp(0x2, 0x1, 0x84) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000300)='qnx6\x00', 0x2208004, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c820"], 0x15) modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) 1.331380845s ago: executing program 2 (id=167): mkdir(0x0, 0x110) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder-control\x00', 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYBLOB="43aba9911ba3d9bd9c2d341ba78391f3fd42251c28fa8791c674ecf2c666503c694dd8b576471ff008053eda3e0545d1e2a99f341297507e1038477a4f7c13ac0c9e96f1a9e280287791afe9e4417c02760fdfffb67798fa8fbf85698869e38d191ec5d1f9c0f116fbaead79cc672ecf6156a63c06dcbedae392d46e9fbf094f6d63ea0d8def073e77b2c537b4a4b94ad004aecc87a0327f6851869732e29e3719ba52c6495fce628d5f3e", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ptrace(0x10, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r4, r4, &(0x7f0000001000)=0x10000000000000, 0xffff) rename(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, 0x0, 0x1021002, 0x0, 0xfa, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.130977097s ago: executing program 4 (id=168): creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x37140000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x10f4, 0x1a, 0x12, 0xffffffffffffffff, 0x0) 958.840517ms ago: executing program 4 (id=169): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(&(0x7f0000001000)={0x20080522, r0}, &(0x7f0000001040)={0x4, 0x6, 0x4, 0x7, 0x4, 0xfffffffc}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000002480)={0x0, 0x9, 0x0, [0x3, 0x0, 0x0, 0x2, 0x5], [0x4, 0x3, 0x401, 0x5, 0x61ca, 0x8, 0xa52, 0xfe7, 0x3e, 0x4, 0x4, 0x7fff, 0x0, 0x200, 0x6, 0x7f, 0x7, 0x1, 0xffffffffffffff1b, 0x800, 0x9, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x9, 0x0, 0x9, 0x4, 0x5, 0x6bd1, 0x9, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x1, 0x7, 0xf, 0x800, 0x8, 0x7, 0x8001, 0x3, 0x9, 0x10001, 0x0, 0x2eeb826e, 0x4, 0x6, 0x1, 0x7fffffffffffffff, 0x78000000, 0xfff, 0x5, 0x6, 0x249, 0x5, 0x67, 0x1, 0xfffffffffffffff1, 0x0, 0x8, 0xd54, 0x3, 0xd, 0x80, 0x7f, 0x4, 0x101, 0xb, 0x6, 0x1, 0x9, 0xa326, 0xa, 0xfffffffffffffffa, 0x9, 0xeaa3, 0xd0, 0xffff, 0x3ff, 0x1, 0xfff, 0x8, 0x101, 0xeb, 0xfffffffffffeffff, 0x28000000, 0x8000, 0x81, 0x7, 0x1, 0x60, 0x10000, 0x4, 0x8, 0xfffffffffffffffa, 0x0, 0xd97, 0x0, 0xf, 0x2, 0x9, 0x6, 0x4, 0xffffffffffffad2d, 0x7, 0x4, 0x8, 0x8001, 0xaa2e, 0x9, 0x7, 0x5, 0xfffffffffffffffe, 0xffffffff]}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000028c0)={0x4, 0x6, {0x4, @usage=0xf04, 0x0, 0x2, 0x5, 0x3fc6, 0x7, 0x4b66, 0x402, @struct={0x91b, 0x7}, 0x0, 0x3, [0x6, 0x7fff, 0x9, 0x10, 0x1c8a01ca, 0x11]}, {0xffffffffffffffff, @usage=0x8, r4, 0x8, 0x400, 0xaaa, 0xe7, 0x7, 0x1, @struct={0x1000, 0x400}, 0x1, 0x2705, [0x9, 0x5, 0xbcf, 0x8001, 0xfffffffffffffff8, 0x5601d71b]}, {0x80, @usage=0x40, r5, 0x1000, 0x7, 0xb2f, 0x1, 0x6, 0x0, @struct={0x40, 0x8}, 0x5, 0x5, [0x6, 0x2, 0x0, 0x8, 0x2, 0x5]}, {0x4, 0x4, 0x100000000000}}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 570.51993ms ago: executing program 4 (id=170): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x45, 0x0, 0x6, 0x5, 0x5, 0x9, 0x88001, r7}, &(0x7f0000000540)=0x20) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$tun(r8, &(0x7f0000000400)=ANY=[], 0xa2) readv(r8, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4093, 0xffd}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r9, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') recvmsg$can_j1939(r10, &(0x7f0000001500)={&(0x7f0000001080)=@hci, 0x80, &(0x7f0000001480)}, 0x40000002) read$char_usb(r10, &(0x7f0000000040)=""/4109, 0x100d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) 94.93871ms ago: executing program 3 (id=171): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x30f, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000001180)=ANY=[@ANYBLOB="70000015090601010000000000000000030000010900020073797a3200000000480007800500030005000000080009400000490d0c00018008000140ac1e00010c001b40000000000001000006001d400002000008000840000000400c001940000000000000008005000100070000000e47f29a18b6745b4342617584c2f40904fe40f8b825354abae7325f266b9b0a00000000000000c689f13e89ebc3db351919fcddafea8fd63aa691cc1066fbdc29a234000000000000001402b5a4438e7e11c35f99759a463669f5e558caa02d1e48c438fef3d4436b9e813b8de8bc1ec96a25108865fe5f9459a66bccf95001e6cb91492ed807988652c847b4d7718305e2a8550329a819e574e5cf9479d8f6f99fcf609b5b2d71ac0d381dd391601e36b95cd44ff104eb79b47d4f8f5fc579aa17b4ae03246140f1fc0334c3518838a4c3534c7aa355bac55e3d3a7dec385a6bfe90f454ab2c4d2dc22745615b08e94390751de803fff3f19e2be23e1f2cb89556b076cb7aa1b9f0fa5442fd975d03daf4a5e9b368640751ce53e18b3f0500939394f6999e211bb3dcc65915085ec72f6b0f689c19ff352e2ff3c56e30bc1cd3c1872b07d3d777f9e28f44ca89672b50b17ac27e46d07379f9b816e7207cd40a959135feb6fb445e58ed808aaaa79f7eed496719ee46ce000000006354191eabedceb6119faad6d22171c82227dc49c68c2ecaeda73b0bdc9d9bea074973608a80c884d54e7bc8d5c7febe9fcdee0e66b6da4c8fbf97770d81a7503b6e1a92d04f8975d64ee91f176b88897a20e2751d"], 0x70}, 0x1, 0x0, 0x0, 0x8854}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2dd35bb93021b9a6b6fcfeef08217e3466edb7a913dd5758f28796ca04f66c67f59c58c069fbdf1da2b70a2753fc471f958a5d2f735774f28aebd73a1974a7327faec9972a8414a25f5166cb17", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000011401"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4c044) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x41c9, 0x7721, 0x53, 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0xffff, 0x8ef7, 0x1, 0x0, 0x6, 0xf5, 0x7, 0x39, 0x4, 0x8, 0xfffffb9a, 0x10001, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x5, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x2, 0x1ff, 0x8000, 0x3ff, 0x3, 0x101, 0x3, 0xba55, 0x1000, 0x7, 0x200, 0x5, 0x400008, 0x6, 0x4, 0x2, 0x0, 0x0, 0x1009, 0x1, 0x199f, 0xb, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1b], [0x6, 0x1e, 0x3, 0x8010, 0xfffffffe, 0xffffffff, 0x0, 0x5, 0x4, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x8, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xffff7ffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0x10, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x201, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x0, 0x8, 0x10, 0x9, 0x9, 0xe8a, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x802, 0xe, 0x4, 0xfffffff9, 0x69d, 0x10, 0x80000001, 0x4, 0x44, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x1b26, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x3, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x1, 0x2005, 0x7, 0x4, 0xea, 0xa, 0x5, 0x2, 0xf9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x89, 0x0, 0x6, 0x4, 0xb, 0x2, 0x763, 0xb, 0x402, 0x800, 0xffffffff, 0x1000, 0x366, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x6, 0x200, 0x1000, 0x3b, 0x4002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xb, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x8000001, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x860, 0x132, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) 0s ago: executing program 4 (id=172): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2)\x12\xd6cOp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x99\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xe0J[\xe7\xfd\xba\xbf\x95\xda}%\"5\x8f\xdb\xe9j\xc8\x87\x00\x00\x00\x00\x00\x00\x00\x10\xe1~ \x84\xd3YF.UW1\xbc\xdf\x17\x8e\x95\xd6\x93\x00'/182, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x1) wait4(0x0, 0x0, 0x1000000, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffb, 0x7, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8a88fa25ba07bb", 0x0, 0x100004, 0x10026, 0x23, 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x3fffff) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(r3, &(0x7f0000000140)='./file0\x00', 0xc000, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x6) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.231' (ED25519) to the list of known hosts. [ 72.436816][ T5600] cgroup: Unknown subsys name 'net' [ 72.675806][ T5600] cgroup: Unknown subsys name 'cpuset' [ 72.732077][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.435974][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.787198][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.843308][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.865810][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.875263][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.877227][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.880795][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.883409][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.884411][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.914149][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.916247][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.939357][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.941383][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.942641][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.943644][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.944247][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.946557][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.959507][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.960221][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.973864][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.984156][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.989626][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.023204][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.024265][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.033493][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.034288][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.002824][ T5618] Bluetooth: hci3: command tx timeout [ 79.162667][ T5627] Bluetooth: hci1: command tx timeout [ 79.163099][ T5623] Bluetooth: hci4: command tx timeout [ 79.163228][ T5618] Bluetooth: hci0: command tx timeout [ 79.163872][ T5618] Bluetooth: hci2: command tx timeout [ 79.404314][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.404486][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.404636][ T5612] bridge_slave_0: entered allmulticast mode [ 79.407539][ T5612] bridge_slave_0: entered promiscuous mode [ 79.468500][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.468660][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.468812][ T5612] bridge_slave_1: entered allmulticast mode [ 79.476363][ T5612] bridge_slave_1: entered promiscuous mode [ 79.604552][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.604764][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.604908][ T5616] bridge_slave_0: entered allmulticast mode [ 79.606731][ T5616] bridge_slave_0: entered promiscuous mode [ 79.659296][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.683603][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.683779][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.683918][ T5616] bridge_slave_1: entered allmulticast mode [ 79.685738][ T5616] bridge_slave_1: entered promiscuous mode [ 79.686716][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.686873][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.687007][ T5615] bridge_slave_0: entered allmulticast mode [ 79.689433][ T5615] bridge_slave_0: entered promiscuous mode [ 79.722306][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.765752][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.765930][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.766079][ T5615] bridge_slave_1: entered allmulticast mode [ 79.767860][ T5615] bridge_slave_1: entered promiscuous mode [ 79.806950][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.807135][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.807490][ T5617] bridge_slave_0: entered allmulticast mode [ 79.809371][ T5617] bridge_slave_0: entered promiscuous mode [ 79.917177][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.917347][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.917489][ T5614] bridge_slave_0: entered allmulticast mode [ 79.919329][ T5614] bridge_slave_0: entered promiscuous mode [ 79.966335][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.966608][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.967213][ T5617] bridge_slave_1: entered allmulticast mode [ 79.969078][ T5617] bridge_slave_1: entered promiscuous mode [ 79.980554][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.005989][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.006260][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.006829][ T5614] bridge_slave_1: entered allmulticast mode [ 80.009920][ T5614] bridge_slave_1: entered promiscuous mode [ 80.017113][ T5612] team0: Port device team_slave_0 added [ 80.046696][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.050976][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.080523][ T5612] team0: Port device team_slave_1 added [ 80.114919][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.150194][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.185084][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.206362][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.222786][ T5616] team0: Port device team_slave_0 added [ 80.259497][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.279034][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.279046][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.279061][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.286576][ T5616] team0: Port device team_slave_1 added [ 80.294282][ T5615] team0: Port device team_slave_0 added [ 80.354319][ T5615] team0: Port device team_slave_1 added [ 80.371280][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.371292][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.371306][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.379296][ T5617] team0: Port device team_slave_0 added [ 80.429432][ T5614] team0: Port device team_slave_0 added [ 80.444500][ T5617] team0: Port device team_slave_1 added [ 80.446011][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.446020][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.446034][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.483573][ T5614] team0: Port device team_slave_1 added [ 80.513145][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.513155][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.513169][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.515142][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.515151][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.515164][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.581888][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.581903][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.581925][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.632486][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.632501][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.632524][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.656258][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.656273][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.656296][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.688255][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.688270][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.688294][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.700462][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.700477][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.700500][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.715053][ T5612] hsr_slave_0: entered promiscuous mode [ 80.717358][ T5612] hsr_slave_1: entered promiscuous mode [ 80.848109][ T5616] hsr_slave_0: entered promiscuous mode [ 80.849333][ T5616] hsr_slave_1: entered promiscuous mode [ 80.850397][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 80.850465][ T5616] Cannot create hsr debugfs directory [ 81.083253][ T5618] Bluetooth: hci3: command tx timeout [ 81.241869][ T5627] Bluetooth: hci4: command tx timeout [ 81.241898][ T5627] Bluetooth: hci1: command tx timeout [ 81.243401][ T5623] Bluetooth: hci0: command tx timeout [ 81.243474][ T5618] Bluetooth: hci2: command tx timeout [ 81.309546][ T5615] hsr_slave_0: entered promiscuous mode [ 81.310914][ T5615] hsr_slave_1: entered promiscuous mode [ 81.316783][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 81.316805][ T5615] Cannot create hsr debugfs directory [ 81.426898][ T5617] hsr_slave_0: entered promiscuous mode [ 81.428082][ T5617] hsr_slave_1: entered promiscuous mode [ 81.429023][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 81.429045][ T5617] Cannot create hsr debugfs directory [ 81.444395][ T5614] hsr_slave_0: entered promiscuous mode [ 81.446521][ T5614] hsr_slave_1: entered promiscuous mode [ 81.449001][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 81.449023][ T5614] Cannot create hsr debugfs directory [ 82.438832][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.495683][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.502523][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.548725][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.553383][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.597667][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.620024][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.646776][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.818017][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.855079][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.861317][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.897275][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.901073][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.938647][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.965288][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.998750][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.130523][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.161834][ T5618] Bluetooth: hci3: command tx timeout [ 83.186041][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.190354][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.215473][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.235405][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.276298][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.305329][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.322400][ T5618] Bluetooth: hci2: command tx timeout [ 83.322444][ T5623] Bluetooth: hci0: command tx timeout [ 83.322471][ T5627] Bluetooth: hci1: command tx timeout [ 83.322552][ T5618] Bluetooth: hci4: command tx timeout [ 83.355302][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.565643][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.588328][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.597837][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.628190][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.638429][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.674421][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.707388][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.726692][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.875201][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.940361][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.966953][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.974467][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.008254][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.037982][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.065135][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.080932][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.114937][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.182022][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.190580][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.251039][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.251198][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.325508][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.325620][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.390499][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.430559][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.430704][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.470923][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.489363][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.489691][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.629505][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.706362][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.709454][ T1550] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.709598][ T1550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.780115][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.780206][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.914307][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.017709][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.017967][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.055480][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.111137][ T1554] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.111332][ T1554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.226608][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.242011][ T5618] Bluetooth: hci3: command tx timeout [ 85.311302][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.321437][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.402980][ T5618] Bluetooth: hci1: command tx timeout [ 85.403010][ T5618] Bluetooth: hci2: command tx timeout [ 85.403031][ T5618] Bluetooth: hci4: command tx timeout [ 85.403055][ T5618] Bluetooth: hci0: command tx timeout [ 85.431013][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.431165][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.849921][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.308659][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.348849][ T5612] veth0_vlan: entered promiscuous mode [ 86.427363][ T5612] veth1_vlan: entered promiscuous mode [ 86.715636][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.779993][ T9] cfg80211: failed to load regulatory.db [ 86.955714][ T5616] veth0_vlan: entered promiscuous mode [ 86.979967][ T5612] veth0_macvtap: entered promiscuous mode [ 87.028864][ T5612] veth1_macvtap: entered promiscuous mode [ 87.085773][ T5616] veth1_vlan: entered promiscuous mode [ 87.100566][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.126880][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.209951][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.252861][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.312708][ T3353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.320276][ T3353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.346733][ T3353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.350143][ T3353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.375793][ T5616] veth0_macvtap: entered promiscuous mode [ 87.480196][ T5616] veth1_macvtap: entered promiscuous mode [ 87.629280][ T5614] veth0_vlan: entered promiscuous mode [ 87.677740][ T5617] veth0_vlan: entered promiscuous mode [ 87.708379][ T5615] veth0_vlan: entered promiscuous mode [ 87.833367][ T5614] veth1_vlan: entered promiscuous mode [ 87.844170][ T5617] veth1_vlan: entered promiscuous mode [ 87.877228][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.879271][ T5615] veth1_vlan: entered promiscuous mode [ 87.933257][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.959536][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.969755][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.030029][ T1550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.058918][ T1550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.063708][ T1550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.069083][ T1550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.126352][ T1554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.126371][ T1554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.255864][ T5617] veth0_macvtap: entered promiscuous mode [ 88.305211][ T5615] veth0_macvtap: entered promiscuous mode [ 88.365003][ T5614] veth0_macvtap: entered promiscuous mode [ 88.519072][ T5617] veth1_macvtap: entered promiscuous mode [ 88.546585][ T5615] veth1_macvtap: entered promiscuous mode [ 88.575623][ T5614] veth1_macvtap: entered promiscuous mode [ 88.730776][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.730795][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.849797][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.879651][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.903543][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.916803][ T5810] loop0: detected capacity change from 0 to 128 [ 89.041736][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.044636][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.066232][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.068332][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.068442][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.068530][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.068613][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.068699][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.068782][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.123483][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.145544][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.148095][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.166848][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.166997][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.167091][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.167181][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.167271][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.167366][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.167455][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 89.170183][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.189249][ T1554] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 89.281585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.301580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.311575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.321576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.331586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.341573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.351578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.361574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.428178][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.428197][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.932417][ T3353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.956272][ T3353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.008427][ T3353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.078131][ T3353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.113135][ T3353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.165039][ T3353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.169158][ T3353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.182925][ T3353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.228616][ T2945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 90.247351][ T2945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 90.279400][ T3328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.305115][ T2945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 90.305602][ T2945] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 90.336365][ T3328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.360220][ T3358] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 90.385289][ T3328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.401908][ T3328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.420195][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 90.563970][ T5814] loop0: detected capacity change from 0 to 512 [ 90.570260][ T5814] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.570320][ T5814] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.742821][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.743059][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.743086][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.743106][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.777721][ T3358] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.779229][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.787121][ T1550] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.799016][ T3353] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.841364][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.858509][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.860725][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.920793][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 90.928170][ T3358] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 91.125877][ T5814] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 91.125915][ T5814] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 91.132768][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 91.132826][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 91.202604][ T3358] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 91.215376][ T3358] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 91.218842][ T5814] EXT4-fs (loop0): 1 truncate cleaned up [ 91.225092][ T5814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.433219][ T3358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.433237][ T3358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.627960][ T5825] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 92.667553][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 92.777113][ T5825] EXT4-fs (loop0): Remounting filesystem read-only [ 93.505580][ T3328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.505599][ T3328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.540486][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.606901][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 93.607197][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 93.607437][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 93.679176][ T3328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.679196][ T3328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.763444][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 93.891795][ T3358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.891814][ T3358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.986134][ T3328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.986154][ T3328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.958763][ T5840] loop3: detected capacity change from 0 to 128 [ 95.992987][ T1229] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.000965][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.018957][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.019143][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.019239][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.019331][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.052318][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.052451][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.098100][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.099009][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.099046][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.099069][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.099091][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.099114][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.099136][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.099158][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.099180][ T2945] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 96.743990][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 96.787793][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.787812][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.181593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.221582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.965112][ T5848] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 100.143537][ T3328] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 100.187160][ T3443] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 100.187256][ T3443] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 100.211287][ T3328] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 100.421095][ T3443] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 100.526519][ T5616] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 100.579642][ T5854] loop0: detected capacity change from 0 to 512 [ 100.580629][ T5854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.580685][ T5854] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.601740][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 100.602083][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 100.658874][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 100.658933][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 100.694084][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 100.707210][ T5854] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 100.707241][ T5854] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 100.707394][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 100.732896][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 100.809949][ T3353] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 100.810440][ T5854] EXT4-fs (loop0): 1 truncate cleaned up [ 100.858571][ T5854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.997447][ T1229] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 101.997493][ T1229] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 102.001280][ T1229] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 102.001323][ T1229] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 102.074506][ T1229] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 102.098546][ T3443] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 102.129342][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 102.130806][ T3328] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 102.582502][ T5869] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 102.638477][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 103.261026][ T1150] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 104.315428][ T5869] EXT4-fs (loop0): Remounting filesystem read-only [ 104.455441][ T1550] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 105.856138][ T5876] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 106.199325][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.333538][ T3358] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 107.333601][ T3358] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 107.333646][ T3358] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 107.729519][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 109.121268][ T5891] Bluetooth: MGMT ver 1.23 [ 110.288632][ T5918] loop2: detected capacity change from 0 to 128 [ 110.425804][ T151] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.507320][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.538160][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.538301][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.539046][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.539083][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.539105][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.539125][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.540638][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.543616][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.543653][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.543673][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.543694][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.543716][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.543737][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.543758][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.552877][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 110.553685][ T68] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 111.775863][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 112.410966][ T5927] input: syz1 as /devices/virtual/input/input5 [ 114.404401][ T13] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 114.803433][ T3443] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 114.809929][ T3353] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 114.923285][ T3353] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 115.096982][ T2377] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 115.131485][ T5617] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 116.947431][ T5951] loop3: detected capacity change from 0 to 1024 [ 117.202683][ T3328] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.226150][ T3358] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.238482][ T2377] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.238552][ T3328] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.299228][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.310560][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.417052][ T5951] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 117.419167][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.419308][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.470172][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.470315][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.470808][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.470916][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.529376][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.529609][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 117.560297][ T3358] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.110804][ T3358] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.139834][ T5872] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.177796][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.207571][ T3328] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.238067][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.251469][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.270012][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.290084][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.300659][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.338083][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.340094][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.397660][ T5964] netlink: 'syz.1.36': attribute type 20 has an invalid length. [ 118.774398][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 118.797044][ T3328] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 119.770638][ T5616] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 119.940254][ T5978] loop4: detected capacity change from 0 to 512 [ 119.941332][ T5978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.941386][ T5978] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.997810][ T3353] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.143344][ T3353] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.166675][ T3353] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.166756][ T3353] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.229188][ T3353] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.236731][ T3353] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.244895][ T3328] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 120.250487][ T3353] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.283932][ T3353] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.315955][ T3328] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.317381][ T3328] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.327580][ T3328] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 120.381841][ T3358] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 121.047747][ T5978] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 121.047782][ T5978] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 121.130346][ T5872] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 121.130442][ T5872] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 121.142224][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 121.307094][ T1229] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 121.307737][ T5978] EXT4-fs (loop4): 1 truncate cleaned up [ 121.420139][ T5978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.527561][ T6022] loop2: detected capacity change from 0 to 32768 [ 122.528716][ T6022] btrfs: Deprecated parameter 'usebackuproot' [ 122.528923][ T6022] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.538202][ T6025] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 122.604792][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 122.795067][ T1229] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 123.239680][ T6022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.41 (6022) [ 123.339709][ T3328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.375348][ T6025] EXT4-fs (loop4): Remounting filesystem read-only [ 123.383252][ T6026] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.389330][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.480445][ T3443] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.500226][ T6016] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.509642][ T6016] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.511195][ T6016] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.561151][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.582031][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.675255][ T1150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.715062][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.724703][ T6022] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.724750][ T6022] BTRFS info (device loop2): using crc32c checksum algorithm [ 123.724875][ T6022] BTRFS error (device loop2): superblock checksum mismatch [ 123.725033][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.725991][ T6022] BTRFS error (device loop2): open_ctree failed: -22 [ 123.753892][ T151] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.754709][ T151] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.767806][ T151] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.800015][ T3328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.803429][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.806101][ T151] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.810799][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.814827][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.819017][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.821339][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.831399][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.833897][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.838165][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.842338][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.846209][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.852465][ T151] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.856405][ T151] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.862906][ T151] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.865828][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.868825][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.873855][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.876324][ T3328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.895654][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.984282][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 123.986730][ T3328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.987617][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 123.989247][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 123.989300][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 123.996166][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 124.015706][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 124.015757][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 124.015786][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 124.015829][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 124.032219][ T5615] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 124.035985][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 124.146002][ T6028] ubi8: attaching mtd0 [ 124.308147][ T5938] udevd[5938]: incorrect btrfs checksum on /dev/loop2 [ 124.357419][ T5938] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 124.427832][ T5750] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.322135][ T5750] usb 1-1: Using ep0 maxpacket: 16 [ 125.330997][ T5750] usb 1-1: device descriptor read/all, error -71 [ 125.551639][ T5808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.771839][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 125.845549][ T5808] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 125.845579][ T5808] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 125.845600][ T5808] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 125.845618][ T5808] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 125.845637][ T5808] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.845657][ T5808] usb 5-1: config 0 has no interface number 0 [ 125.845705][ T5808] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 125.845740][ T5808] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 125.845761][ T5808] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.845796][ T5808] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.845821][ T5808] usb 5-1: config 0 interface 125 has no altsetting 0 [ 125.845839][ T5808] usb 5-1: config 0 interface 125 has no altsetting 2 [ 125.850360][ T5808] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 125.850388][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.850407][ T5808] usb 5-1: Product: syz [ 125.850421][ T5808] usb 5-1: Manufacturer: syz [ 125.850436][ T5808] usb 5-1: SerialNumber: syz [ 126.500457][ T5808] usb 5-1: config 0 descriptor?? [ 126.548005][ T5808] usb 5-1: selecting invalid altsetting 2 [ 126.859439][ T6043] loop2: detected capacity change from 0 to 1024 [ 126.968347][ T3328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 126.987356][ T3328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 126.989098][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 126.991175][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 126.997868][ T3328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.009883][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.024396][ T6043] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 127.028765][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.039091][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.041260][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.057933][ T3328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.072329][ T3443] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.076947][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.079543][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.091666][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.125066][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.125107][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.127812][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.127842][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.127869][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.138086][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.261746][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.261982][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.290711][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.291122][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.315317][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 127.323738][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 128.122705][ T5808] get_1284_register timeout [ 128.336379][ C1] usb 5-1: async_complete: urb error -104 [ 128.344627][ C1] usb 5-1: async_complete: urb error -104 [ 128.344701][ C1] usb 5-1: async_complete: urb error -104 [ 128.344787][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 128.389507][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 128.451065][ T6013] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 128.641170][ T6058] netlink: 'syz.3.52': attribute type 20 has an invalid length. [ 128.756490][ T5617] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 131.684781][ T5808] usb 5-1: USB disconnect, device number 2 [ 133.058904][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.059033][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.474728][ T6128] loop0: detected capacity change from 0 to 16 [ 135.520593][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 135.536627][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 135.611670][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.739144][ T6128] erofs (device loop0): mounted with root inode @ nid 36. [ 135.766541][ T5808] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.771614][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 135.790016][ T10] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 135.790043][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.790062][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.790081][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.790099][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.790116][ T10] usb 2-1: config 0 has no interface number 0 [ 135.790155][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 135.790186][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 135.790206][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.790236][ T10] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.790261][ T10] usb 2-1: config 0 interface 125 has no altsetting 0 [ 135.790279][ T10] usb 2-1: config 0 interface 125 has no altsetting 2 [ 135.868135][ T6109] loop2: detected capacity change from 0 to 40427 [ 135.922862][ T10] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 135.922893][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.922912][ T10] usb 2-1: Product: syz [ 135.922926][ T10] usb 2-1: Manufacturer: syz [ 135.922939][ T10] usb 2-1: SerialNumber: syz [ 135.947748][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 135.950098][ T5808] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 135.950123][ T5808] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.950142][ T5808] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.950160][ T5808] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.950178][ T5808] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.950197][ T5808] usb 5-1: config 0 has no interface number 0 [ 135.950240][ T5808] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 135.950266][ T5808] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 135.950286][ T5808] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.950318][ T5808] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.950344][ T5808] usb 5-1: config 0 interface 125 has no altsetting 0 [ 135.950361][ T5808] usb 5-1: config 0 interface 125 has no altsetting 2 [ 135.978241][ T5808] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 135.978271][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.978290][ T5808] usb 5-1: Product: syz [ 135.978303][ T5808] usb 5-1: Manufacturer: syz [ 135.978317][ T5808] usb 5-1: SerialNumber: syz [ 136.007368][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.007630][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.008546][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.010836][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.012059][ T6109] F2FS-fs (loop2): build fault injection rate: 174 [ 136.012078][ T6109] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 136.016205][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.017072][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.021289][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.025819][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.026979][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.033728][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.037005][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.039362][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.062862][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.063261][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.064724][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.064868][ T6109] F2FS-fs (loop2): invalid crc value [ 136.068112][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.071073][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.073449][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.073586][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.075710][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.076389][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.077932][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.077991][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.082974][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.089360][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.093612][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.098895][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.105597][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.106592][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.107234][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.108609][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.109361][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.110249][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.114664][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.118009][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.118735][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.119707][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.119743][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.127207][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.130839][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.138260][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.212125][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.495396][ T10] usb 2-1: config 0 descriptor?? [ 136.498976][ T5808] usb 5-1: config 0 descriptor?? [ 136.554282][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 136.556621][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 136.662267][ T10] usb 2-1: selecting invalid altsetting 2 [ 136.665736][ T5808] usb 5-1: selecting invalid altsetting 2 [ 136.971688][ T5749] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.115868][ T6109] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 137.129463][ T5749] usb 1-1: Using ep0 maxpacket: 8 [ 137.780326][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 137.992720][ C1] usb 5-1: async_complete: urb error -71 [ 137.992830][ C1] usb 5-1: async_complete: urb error -71 [ 138.018320][ C0] usb 2-1: async_complete: urb error -71 [ 138.018431][ C0] usb 2-1: async_complete: urb error -71 [ 138.018521][ C0] usb 2-1: async_complete: urb error -71 [ 138.037457][ T10] get_1284_register: usb error -71 [ 138.059321][ T5808] get_1284_register: usb error -71 [ 138.060961][ T5749] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.061012][ T5749] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 138.061034][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.165460][ T5808] usb 5-1: USB disconnect, device number 3 [ 138.195014][ T5617] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 138.498004][ T5749] usb 1-1: config 0 descriptor?? [ 138.515945][ T10] usb 2-1: USB disconnect, device number 2 [ 138.591251][ T5749] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 138.733304][ T5749] gspca_vc032x: reg_r err -32 [ 138.733398][ T5749] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 138.793898][ T6136] loop0: detected capacity change from 0 to 512 [ 138.871319][ T6136] EXT4-fs: Ignoring removed nobh option [ 138.935777][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 138.941487][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 138.964645][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 138.964704][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.015545][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 139.047951][ T6136] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 139.048410][ T6013] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.062335][ T6157] netlink: 'syz.1.71': attribute type 20 has an invalid length. [ 139.074254][ T6013] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.179537][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.190015][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.190060][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.196879][ T6136] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.67: attempt to clear invalid blocks 1 len 1 [ 139.197100][ T6136] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 139.203560][ C0] EXT4-fs (loop0): initial error at time 1778519613: ext4_clear_blocks:876: inode 13 [ 139.203595][ C0] EXT4-fs (loop0): last error at time 1778519613: ext4_clear_blocks:876: inode 13 [ 139.209331][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.209374][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.209396][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.213020][ T6161] loop2: detected capacity change from 0 to 512 [ 139.214137][ T6161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.214197][ T6161] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.215016][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 139.243007][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.248219][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 139.268946][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.306401][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 139.306481][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 139.306530][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 139.320327][ T1554] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 139.320396][ T1554] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 139.325628][ T6136] EXT4-fs (loop0): Remounting filesystem read-only [ 139.332299][ T6161] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 139.332333][ T6161] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 139.332569][ T1554] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 139.433592][ T6008] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 139.434356][ T6008] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 139.472974][ T6161] EXT4-fs (loop2): 1 truncate cleaned up [ 139.505068][ T6161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.937832][ T6136] EXT4-fs (loop0): 1 truncate cleaned up [ 139.940544][ T6136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.993557][ T1243] usb 1-1: USB disconnect, device number 4 [ 140.011732][ T2945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 140.011794][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 140.011822][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 140.021640][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 140.035147][ T1162] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 140.035200][ T1162] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 140.046392][ T2945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 140.060450][ T1162] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 140.070957][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 140.134641][ T6009] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 140.155821][ T1162] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 140.207196][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 140.231785][ T2945] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 140.503591][ T6196] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 141.373934][ T1229] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 141.885826][ T6196] EXT4-fs (loop2): Remounting filesystem read-only [ 142.286045][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.393151][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.553863][ T2377] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 142.553918][ T2377] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 142.553968][ T2377] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 142.631240][ T3328] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 142.677224][ T6202] FAULT_INJECTION: forcing a failure. [ 142.677224][ T6202] name failslab, interval 1, probability 0, space 0, times 1 [ 142.677277][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.1.78 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.677302][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.677319][ T6202] Call Trace: [ 142.677327][ T6202] [ 142.677334][ T6202] dump_stack_lvl+0xe8/0x150 [ 142.677362][ T6202] should_fail_ex+0x46b/0x600 [ 142.677389][ T6202] should_failslab+0xa8/0x100 [ 142.677420][ T6202] __kmalloc_noprof+0xdf/0x7b0 [ 142.677446][ T6202] ? tomoyo_encode+0x28b/0x550 [ 142.677475][ T6202] tomoyo_encode+0x28b/0x550 [ 142.677499][ T6202] tomoyo_realpath_from_path+0x58d/0x5d0 [ 142.677526][ T6202] ? tomoyo_path_number_perm+0x219/0x630 [ 142.677551][ T6202] tomoyo_path_number_perm+0x246/0x630 [ 142.677576][ T6202] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.677598][ T6202] ? __lock_acquire+0x6b5/0x2d10 [ 142.677620][ T6202] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.677676][ T6202] ? __fget_files+0x2a/0x420 [ 142.677703][ T6202] ? __fget_files+0x2a/0x420 [ 142.677724][ T6202] ? __fget_files+0x3a6/0x420 [ 142.677745][ T6202] ? __fget_files+0x2a/0x420 [ 142.677771][ T6202] security_file_ioctl+0xc3/0x2a0 [ 142.677799][ T6202] __se_sys_ioctl+0x47/0x170 [ 142.677826][ T6202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.677847][ T6202] do_syscall_64+0x15f/0xf80 [ 142.677877][ T6202] ? trace_irq_disable+0x3b/0x140 [ 142.677906][ T6202] ? clear_bhb_loop+0x40/0x90 [ 142.677930][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.677948][ T6202] RIP: 0033:0x7fdb7719cdd9 [ 142.677974][ T6202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.677989][ T6202] RSP: 002b:00007fdb753ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.678008][ T6202] RAX: ffffffffffffffda RBX: 00007fdb77415fa0 RCX: 00007fdb7719cdd9 [ 142.678022][ T6202] RDX: 0000200000000d00 RSI: 0000000000003b80 RDI: 0000000000000003 [ 142.678034][ T6202] RBP: 00007fdb753ee090 R08: 0000000000000000 R09: 0000000000000000 [ 142.678046][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.678056][ T6202] R13: 00007fdb77416038 R14: 00007fdb77415fa0 R15: 00007ffc4d04bc38 [ 142.678085][ T6202] [ 142.678124][ T6202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.719825][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 142.894892][ T5617] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 143.631650][ T1243] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.739679][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 143.781587][ T1243] usb 2-1: Using ep0 maxpacket: 16 [ 143.901071][ T1243] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 143.901139][ T1243] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 143.901192][ T1243] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 143.901254][ T1243] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 143.901273][ T1243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 143.901292][ T1243] usb 2-1: config 0 has no interface number 0 [ 143.901405][ T1243] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 143.901464][ T1243] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 143.901623][ T1243] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.901688][ T1243] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.901715][ T1243] usb 2-1: config 0 interface 125 has no altsetting 0 [ 143.901733][ T1243] usb 2-1: config 0 interface 125 has no altsetting 2 [ 143.996880][ T1243] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 143.996943][ T1243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.997023][ T1243] usb 2-1: Product: syz [ 143.997104][ T1243] usb 2-1: Manufacturer: syz [ 143.997166][ T1243] usb 2-1: SerialNumber: syz [ 144.317982][ T6222] input: syz1 as /devices/virtual/input/input6 [ 145.418155][ T1243] usb 2-1: config 0 descriptor?? [ 147.943418][ T1243] usb 2-1: selecting invalid altsetting 2 [ 148.426047][ C0] usb 2-1: async_complete: urb error -71 [ 148.481983][ C0] usb 2-1: async_complete: urb error -71 [ 148.484757][ C0] usb 2-1: async_complete: urb error -71 [ 148.484850][ C0] usb 2-1: async_complete: urb error -71 [ 148.484908][ T1243] get_1284_register: usb error -71 [ 148.733216][ T6231] netlink: 'syz.0.88': attribute type 20 has an invalid length. [ 148.822697][ T1243] usb 2-1: USB disconnect, device number 3 [ 150.106355][ T6239] Zero length message leads to an empty skb [ 151.339690][ T6281] qnx6: unable to read the first superblock [ 151.699889][ T5623] Bluetooth: Frame is too long (len 16, expected len 4) [ 156.061689][ T5733] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 156.063563][ T6330] netlink: 48 bytes leftover after parsing attributes in process `syz.1.108'. [ 156.232050][ T5733] usb 3-1: Using ep0 maxpacket: 16 [ 156.234828][ T5733] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 156.234855][ T5733] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 156.234875][ T5733] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 156.234894][ T5733] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 156.234912][ T5733] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 156.234932][ T5733] usb 3-1: config 0 has no interface number 0 [ 156.234976][ T5733] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 156.235002][ T5733] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 156.235024][ T5733] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.235057][ T5733] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.235083][ T5733] usb 3-1: config 0 interface 125 has no altsetting 0 [ 156.235100][ T5733] usb 3-1: config 0 interface 125 has no altsetting 2 [ 156.367317][ T5733] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 156.367347][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.367365][ T5733] usb 3-1: Product: syz [ 156.367378][ T5733] usb 3-1: Manufacturer: syz [ 156.367392][ T5733] usb 3-1: SerialNumber: syz [ 157.079562][ T5733] usb 3-1: config 0 descriptor?? [ 157.179539][ T5733] usb 3-1: selecting invalid altsetting 2 [ 158.147172][ C1] usb 3-1: async_complete: urb error -71 [ 158.147280][ C1] usb 3-1: async_complete: urb error -71 [ 158.147368][ C1] usb 3-1: async_complete: urb error -71 [ 158.168743][ T5733] get_1284_register: usb error -71 [ 158.216862][ T5733] usb 3-1: USB disconnect, device number 2 [ 160.497043][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 160.672818][ T6377] input: syz1 as /devices/virtual/input/input7 [ 163.523109][ T6389] loop3: detected capacity change from 0 to 128 [ 163.527932][ T1554] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 163.579558][ T3443] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 163.579595][ T3443] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 163.579608][ T3443] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 163.579620][ T3443] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 163.579632][ T3443] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 163.579643][ T3443] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 163.579655][ T3443] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 164.019661][ T6013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 164.040324][ T151] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 164.040368][ T151] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 164.059490][ T6016] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 164.059541][ T6016] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 164.059565][ T6016] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 164.059801][ T6016] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 164.059833][ T6016] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 164.157243][ T1554] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 164.179661][ T1554] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 166.082704][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 166.251848][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 166.284118][ T10] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 166.284210][ T10] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 166.284231][ T10] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 166.284251][ T10] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 166.284269][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 166.284290][ T10] usb 3-1: config 0 has no interface number 0 [ 166.284334][ T10] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 166.284360][ T10] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 166.284380][ T10] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.284415][ T10] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.284442][ T10] usb 3-1: config 0 interface 125 has no altsetting 0 [ 166.284459][ T10] usb 3-1: config 0 interface 125 has no altsetting 2 [ 166.417624][ T10] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 166.417643][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.417653][ T10] usb 3-1: Product: syz [ 166.417661][ T10] usb 3-1: Manufacturer: syz [ 166.417669][ T10] usb 3-1: SerialNumber: syz [ 166.482017][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 166.482947][ T10] usb 3-1: config 0 descriptor?? [ 166.508428][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 166.508511][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 166.518973][ T10] usb 3-1: selecting invalid altsetting 2 [ 166.730731][ T3443] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 166.905863][ T5616] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 167.055527][ C0] usb 3-1: async_complete: urb error -71 [ 167.055611][ C0] usb 3-1: async_complete: urb error -71 [ 167.055682][ C0] usb 3-1: async_complete: urb error -71 [ 167.058840][ T10] get_1284_register: usb error -71 [ 167.095220][ T10] usb 3-1: USB disconnect, device number 3 [ 167.155081][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 168.969678][ T6431] input: syz1 as /devices/virtual/input/input8 [ 170.251292][ T6457] tap0: tun_chr_ioctl cmd 1074025675 [ 170.251327][ T6457] tap0: persist enabled [ 170.430601][ T6450] tap0: tun_chr_ioctl cmd 1074025675 [ 170.430623][ T6450] tap0: persist disabled [ 171.556395][ T6475] loop0: detected capacity change from 0 to 128 [ 171.570041][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.571063][ T6016] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.598996][ T5872] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.599032][ T5872] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.599045][ T5872] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.599057][ T5872] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.599068][ T5872] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.599079][ T5872] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.646095][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.652087][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.652141][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.652164][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.652186][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.652207][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.652228][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.652257][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.720366][ T6016] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 171.775546][ T151] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 172.032074][ T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 172.478696][ T1554] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 172.479799][ T1554] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 172.499140][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 172.509403][ T1554] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 172.535463][ T32] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 172.542161][ T32] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 172.542199][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.542218][ T32] usb 5-1: Product: syz [ 172.542231][ T32] usb 5-1: Manufacturer: syz [ 172.542244][ T32] usb 5-1: SerialNumber: syz [ 172.597026][ T32] usb 5-1: config 0 descriptor?? [ 172.618717][ T32] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 172.618783][ T32] usb 5-1: setting power ON [ 172.641053][ T32] dvb-usb: bulk message failed: -22 (2/0) [ 172.648054][ T151] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 172.683884][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 172.757338][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.758271][ T32] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 172.758361][ T32] usb 5-1: media controller created [ 173.859517][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.879964][ T6473] dvb-usb: bulk message failed: -22 (3/0) [ 173.879986][ T6473] cxusb: i2c rd: len=147 is too big! [ 173.879986][ T6473] [ 173.880032][ T6473] FAULT_INJECTION: forcing a failure. [ 173.880032][ T6473] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.880065][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.4.154 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.880090][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.880104][ T6473] Call Trace: [ 173.880112][ T6473] [ 173.880119][ T6473] dump_stack_lvl+0xe8/0x150 [ 173.880148][ T6473] should_fail_ex+0x46b/0x600 [ 173.880175][ T6473] _copy_to_user+0x31/0xb0 [ 173.880203][ T6473] simple_read_from_buffer+0xe1/0x170 [ 173.880232][ T6473] proc_fail_nth_read+0x1be/0x230 [ 173.880259][ T6473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.880286][ T6473] ? rw_verify_area+0x2ac/0x4e0 [ 173.880311][ T6473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.880336][ T6473] vfs_read+0x212/0xa80 [ 173.880370][ T6473] ? __pfx_vfs_read+0x10/0x10 [ 173.880397][ T6473] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.880420][ T6473] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.880445][ T6473] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.880466][ T6473] ? mutex_lock_nested+0x152/0x1d0 [ 173.880491][ T6473] ? fdget_pos+0x252/0x320 [ 173.880521][ T6473] ksys_read+0x156/0x270 [ 173.880549][ T6473] ? __pfx_ksys_read+0x10/0x10 [ 173.880582][ T6473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.880602][ T6473] do_syscall_64+0x15f/0xf80 [ 173.880622][ T6473] ? trace_irq_disable+0x3b/0x140 [ 173.880650][ T6473] ? clear_bhb_loop+0x40/0x90 [ 173.880672][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.880690][ T6473] RIP: 0033:0x7feaa852d60e [ 173.880708][ T6473] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.880722][ T6473] RSP: 002b:00007feaa67c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.880741][ T6473] RAX: ffffffffffffffda RBX: 00007feaa67c66c0 RCX: 00007feaa852d60e [ 173.880754][ T6473] RDX: 000000000000000f RSI: 00007feaa67c60a0 RDI: 0000000000000005 [ 173.880766][ T6473] RBP: 00007feaa67c6090 R08: 0000000000000000 R09: 0000000000000000 [ 173.880777][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.880787][ T6473] R13: 00007feaa87e6038 R14: 00007feaa87e5fa0 R15: 00007ffd676c6cf8 [ 173.880816][ T6473] [ 175.223992][ T32] usb 5-1: selecting invalid altsetting 6 [ 175.224016][ T32] usb 5-1: digital interface selection failed (-22) [ 175.224042][ T32] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 175.269319][ T32] usb 5-1: setting power OFF [ 175.269448][ T32] dvb-usb: bulk message failed: -22 (2/0) [ 175.269465][ T32] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 175.269476][ T32] (NULL device *): no alternate interface [ 175.506144][ T6490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 175.547528][ T6492] loop0: detected capacity change from 0 to 512 [ 175.549516][ T32] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 175.575343][ T6492] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.592037][ T32] usb 5-1: USB disconnect, device number 4 [ 175.621973][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.626330][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.632273][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.632340][ T1554] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.646940][ T6013] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 175.649535][ T6492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c028, mo2=0002] [ 175.669797][ T6492] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 175.669971][ T5872] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.691645][ T5872] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.759250][ T5872] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.760171][ T6492] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.160: bg 0: block 255: padding at end of block bitmap is not set [ 175.760400][ T6492] loop0: lost filesystem error report for type 5 error -117 [ 175.760604][ T5872] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 175.763580][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 175.763606][ C0] EXT4-fs (loop0): initial error at time 1778519649: ext4_validate_block_bitmap:441 [ 175.764462][ C0] EXT4-fs (loop0): last error at time 1778519649: ext4_validate_block_bitmap:441 [ 175.774035][ T6492] EXT4-fs (loop0): Remounting filesystem read-only [ 175.847231][ T5872] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.847809][ T6492] EXT4-fs (loop0): 1 truncate cleaned up [ 175.903266][ T6492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.961214][ T6026] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.964716][ T6026] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.964765][ T6026] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.964787][ T6026] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.970017][ T6026] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.973477][ T6026] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.977683][ T6026] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.979947][ T6026] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.986816][ T6026] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 175.990677][ T6026] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 176.731914][ T6508] loop2: detected capacity change from 0 to 128 [ 176.749884][ T1150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.775206][ T6013] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.775256][ T6013] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.775280][ T6013] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.775302][ T6013] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.775323][ T6013] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.775345][ T6013] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.775366][ T6013] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.821643][ T6026] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.833142][ T3443] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.833283][ T3443] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.833389][ T3443] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.833419][ T3443] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.875158][ T3443] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.875208][ T3443] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.875230][ T3443] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.875252][ T3443] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 176.880998][ T3443] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 177.766624][ T6492] ------------[ cut here ]------------ [ 177.766637][ T6492] debug_locks && !(!get_current()->pi_blocked_on) [ 177.766652][ T6492] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#0: syz.0.160/6492 [ 177.766702][ T6492] Modules linked in: [ 177.766721][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.766746][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.766757][ T6492] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 177.766786][ T6492] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 2a 70 08 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 0e 70 08 f6 [ 177.766803][ T6492] RSP: 0018:ffffc9000d5575a0 EFLAGS: 00010282 [ 177.766820][ T6492] RAX: 1ffff11003af8167 RBX: 1ffff92001aaaeb8 RCX: 0000000000000046 [ 177.766835][ T6492] RDX: 0000000000000000 RSI: ffffffff8d88874d RDI: ffffffff8ba85b60 [ 177.766847][ T6492] RBP: ffffc9000d557650 R08: ffffffff8223d484 R09: ffff88813fe34758 [ 177.766862][ T6492] R10: dffffc0000000000 R11: fffffbfff1f1597f R12: ffff88801d7c0b38 [ 177.766876][ T6492] R13: dffffc0000000000 R14: ffff88813fe34700 R15: ffffc9000d5575e0 [ 177.766892][ T6492] FS: 00007faf581366c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 177.766908][ T6492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.766921][ T6492] CR2: 00005555758a8a48 CR3: 0000000036c28000 CR4: 00000000003526f0 [ 177.766938][ T6492] Call Trace: [ 177.766946][ T6492] [ 177.766958][ T6492] ? __pfx_rt_spin_lock+0x10/0x10 [ 177.766988][ T6492] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 177.767013][ T6492] ? lockdep_hardirqs_on+0x7a/0x110 [ 177.767036][ T6492] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 177.767063][ T6492] get_from_partial_node+0x54/0x480 [ 177.767093][ T6492] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 177.767132][ T6492] ___slab_alloc+0xc2/0x930 [ 177.767156][ T6492] ? __migrate_enable+0x58/0xa0 [ 177.767180][ T6492] ? fill_pool+0x156/0x580 [ 177.767208][ T6492] kmem_cache_alloc_noprof+0xea/0x680 [ 177.767237][ T6492] ? fill_pool+0x156/0x580 [ 177.767262][ T6492] fill_pool+0x156/0x580 [ 177.767288][ T6492] ? __pfx_fill_pool+0x10/0x10 [ 177.767317][ T6492] ? debug_objects_fill_pool+0x6f/0xd0 [ 177.767337][ T6492] ? debug_objects_fill_pool+0x6f/0xd0 [ 177.767360][ T6492] debug_objects_fill_pool+0x97/0xd0 [ 177.767380][ T6492] debug_object_assert_init+0x65/0x300 [ 177.767421][ T6492] hrtimer_start_range_ns_user+0x3b/0x4b0 [ 177.767456][ T6492] hrtimer_sleeper_start_expires+0x8a/0x150 [ 177.767488][ T6492] futex_lock_pi+0x8df/0xb10 [ 177.767530][ T6492] ? __pfx_futex_lock_pi+0x10/0x10 [ 177.767564][ T6492] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 177.767594][ T6492] ? __lock_acquire+0x6b5/0x2d10 [ 177.767638][ T6492] ? __pfx_futex_wake_mark+0x10/0x10 [ 177.767691][ T6492] do_futex+0x292/0x420 [ 177.767722][ T6492] ? __pfx_do_futex+0x10/0x10 [ 177.767757][ T6492] __se_sys_futex+0x3a8/0x450 [ 177.767786][ T6492] ? __pfx___se_sys_futex+0x10/0x10 [ 177.767829][ T6492] ? __task_pid_nr_ns+0x28/0x470 [ 177.767858][ T6492] ? __x64_sys_futex+0x21/0xf0 [ 177.767882][ T6492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.767908][ T6492] do_syscall_64+0x15f/0xf80 [ 177.767954][ T6492] ? clear_bhb_loop+0x40/0x90 [ 177.767981][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.768001][ T6492] RIP: 0033:0x7faf59edcdd9 [ 177.768020][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.768035][ T6492] RSP: 002b:00007faf58136028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 177.768056][ T6492] RAX: ffffffffffffffda RBX: 00007faf5a155fa0 RCX: 00007faf59edcdd9 [ 177.768071][ T6492] RDX: 00000000000000f2 RSI: 0000000000000006 RDI: 0000200000000200 [ 177.768085][ T6492] RBP: 00007faf59f72d69 R08: 0000000000000000 R09: 0000000000000001 [ 177.768099][ T6492] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 177.768113][ T6492] R13: 00007faf5a156038 R14: 00007faf5a155fa0 R15: 00007ffd37608348 [ 177.768144][ T6492] [ 177.768164][ T6492] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.768180][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.768204][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.768215][ T6492] Call Trace: [ 177.768223][ T6492] [ 177.768231][ T6492] vpanic+0x56c/0xa60 [ 177.768261][ T6492] ? __pfx__printk+0x10/0x10 [ 177.768296][ T6492] ? __pfx_vpanic+0x10/0x10 [ 177.768320][ T6492] ? is_bpf_text_address+0x292/0x2b0 [ 177.768344][ T6492] ? is_bpf_text_address+0x26/0x2b0 [ 177.768374][ T6492] panic+0xc5/0xd0 [ 177.768399][ T6492] ? __pfx_panic+0x10/0x10 [ 177.768452][ T6492] __warn+0x315/0x4c0 [ 177.768479][ T6492] ? rt_spin_lock+0x31c/0x400 [ 177.768511][ T6492] ? rt_spin_lock+0x31c/0x400 [ 177.768543][ T6492] __report_bug+0x29a/0x540 [ 177.768569][ T6492] ? rcu_is_watching+0x15/0xb0 [ 177.768598][ T6492] ? rt_spin_lock+0x31c/0x400 [ 177.768629][ T6492] ? __pfx___report_bug+0x10/0x10 [ 177.768654][ T6492] ? __lock_acquire+0x6b5/0x2d10 [ 177.768686][ T6492] ? __lock_acquire+0x6b5/0x2d10 [ 177.768709][ T6492] ? rt_spin_lock+0x31c/0x400 [ 177.768739][ T6492] report_bug+0x16a/0x220 [ 177.768763][ T6492] ? rt_spin_lock+0x31c/0x400 [ 177.768792][ T6492] ? rt_spin_lock+0x31e/0x400 [ 177.768823][ T6492] handle_bug+0x9c/0x200 [ 177.768853][ T6492] exc_invalid_op+0x1a/0x50 [ 177.768881][ T6492] asm_exc_invalid_op+0x1a/0x20 [ 177.768901][ T6492] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 177.768933][ T6492] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 2a 70 08 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 0e 70 08 f6 [ 177.768949][ T6492] RSP: 0018:ffffc9000d5575a0 EFLAGS: 00010282 [ 177.768965][ T6492] RAX: 1ffff11003af8167 RBX: 1ffff92001aaaeb8 RCX: 0000000000000046 [ 177.768978][ T6492] RDX: 0000000000000000 RSI: ffffffff8d88874d RDI: ffffffff8ba85b60 [ 177.768990][ T6492] RBP: ffffc9000d557650 R08: ffffffff8223d484 R09: ffff88813fe34758 [ 177.769005][ T6492] R10: dffffc0000000000 R11: fffffbfff1f1597f R12: ffff88801d7c0b38 [ 177.769021][ T6492] R13: dffffc0000000000 R14: ffff88813fe34700 R15: ffffc9000d5575e0 [ 177.769044][ T6492] ? get_from_partial_node+0x54/0x480 [ 177.769082][ T6492] ? __pfx_rt_spin_lock+0x10/0x10 [ 177.769114][ T6492] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 177.769139][ T6492] ? lockdep_hardirqs_on+0x7a/0x110 [ 177.769165][ T6492] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 177.769193][ T6492] get_from_partial_node+0x54/0x480 [ 177.769222][ T6492] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 177.769262][ T6492] ___slab_alloc+0xc2/0x930 [ 177.769287][ T6492] ? __migrate_enable+0x58/0xa0 [ 177.769311][ T6492] ? fill_pool+0x156/0x580 [ 177.769338][ T6492] kmem_cache_alloc_noprof+0xea/0x680 [ 177.769364][ T6492] ? fill_pool+0x156/0x580 [ 177.769390][ T6492] fill_pool+0x156/0x580 [ 177.769426][ T6492] ? __pfx_fill_pool+0x10/0x10 [ 177.769456][ T6492] ? debug_objects_fill_pool+0x6f/0xd0 [ 177.769477][ T6492] ? debug_objects_fill_pool+0x6f/0xd0 [ 177.769506][ T6492] debug_objects_fill_pool+0x97/0xd0 [ 177.769529][ T6492] debug_object_assert_init+0x65/0x300 [ 177.769559][ T6492] hrtimer_start_range_ns_user+0x3b/0x4b0 [ 177.769591][ T6492] hrtimer_sleeper_start_expires+0x8a/0x150 [ 177.769624][ T6492] futex_lock_pi+0x8df/0xb10 [ 177.769665][ T6492] ? __pfx_futex_lock_pi+0x10/0x10 [ 177.769698][ T6492] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 177.769727][ T6492] ? __lock_acquire+0x6b5/0x2d10 [ 177.769770][ T6492] ? __pfx_futex_wake_mark+0x10/0x10 [ 177.769821][ T6492] do_futex+0x292/0x420 [ 177.769849][ T6492] ? __pfx_do_futex+0x10/0x10 [ 177.769884][ T6492] __se_sys_futex+0x3a8/0x450 [ 177.769917][ T6492] ? __pfx___se_sys_futex+0x10/0x10 [ 177.769944][ T6492] ? __task_pid_nr_ns+0x28/0x470 [ 177.769972][ T6492] ? __x64_sys_futex+0x21/0xf0 [ 177.769997][ T6492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.770019][ T6492] do_syscall_64+0x15f/0xf80 [ 177.770045][ T6492] ? clear_bhb_loop+0x40/0x90 [ 177.770071][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.770091][ T6492] RIP: 0033:0x7faf59edcdd9 [ 177.770110][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.770127][ T6492] RSP: 002b:00007faf58136028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 177.770148][ T6492] RAX: ffffffffffffffda RBX: 00007faf5a155fa0 RCX: 00007faf59edcdd9 [ 177.770164][ T6492] RDX: 00000000000000f2 RSI: 0000000000000006 RDI: 0000200000000200 [ 177.770176][ T6492] RBP: 00007faf59f72d69 R08: 0000000000000000 R09: 0000000000000001 [ 177.770190][ T6492] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 177.770203][ T6492] R13: 00007faf5a156038 R14: 00007faf5a155fa0 R15: 00007ffd37608348 [ 177.770237][ T6492] [ 177.770646][ T6492] Kernel Offset: disabled