last executing test programs: 18.184746518s ago: executing program 3 (id=125): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r4, 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r8, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x10001, 0x1, 0x5, 0x7, 0x10000000}) close(r2) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r9, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES8=r9, @ANYRESDEC=r2, @ANYBLOB="0c000b00000000000000000008000e009343ce2b88d4fb7c77f67040b43f30ba460de0d5f823f7b904461826902b10a7ebd2f3dba5285cfdd0bbc0a70b6caeaffafbeb40a0653f784795d60192652ba10f1057b26b92fc26e1147a0ea2cfc83ec0d69c2d776e8ce94b81f810680020bd9a91ad4a9d02fec6d22fefc90bb866e531c11fc7588e7113c713bc2a90fee7", @ANYRES64=r1, @ANYRES8=r9], 0x88}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 16.672478351s ago: executing program 2 (id=127): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 15.938016309s ago: executing program 3 (id=130): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r1}, @fd}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 15.682981229s ago: executing program 2 (id=131): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0xfd}, 0x4e23, 0xfffc, 0x4e23, 0x7, 0xa, 0x20, 0x10}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x4}, {0x9, 0x0, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x2, 0x0, 0x7, 0x0, 0x0, 0xfffffffc}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) r1 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2b) fcntl$notify(r2, 0x402, 0x8000001c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x20000, 0x3) fcntl$notify(r3, 0x402, 0x80000002) unshare(0x2040400) fcntl$notify(r2, 0x402, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0x64}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x10) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000700)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) 13.387249911s ago: executing program 1 (id=134): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0xfd}, 0x4e23, 0xfffc, 0x4e23, 0x7, 0xa, 0x20, 0x10}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x4}, {0x9, 0x0, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x2, 0x0, 0x7, 0x0, 0x0, 0xfffffffc}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) r1 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2b) fcntl$notify(r2, 0x402, 0x8000001c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x20000, 0x3) fcntl$notify(r3, 0x402, 0x80000002) unshare(0x2040400) fcntl$notify(r2, 0x402, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0x64}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x10) 12.220514782s ago: executing program 2 (id=136): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000022800001d44000000000000620a00ff040400007203022000200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000b80)) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x46942, 0x0) fanotify_init(0x200, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x23000, 0x0}, &(0x7f0000000240)="aa8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 12.138956404s ago: executing program 4 (id=137): r0 = syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x90) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x80}}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x20050800) 11.072713774s ago: executing program 1 (id=139): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080", @ANYBLOB='\b'], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000001000900000001"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x6, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000080)=@v={0x93, 0xc, 0xa0, 0x1f, @MIDI_NOTEON=@special, 0x7f, 0x3}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x210, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0x13, 0xf, [@private=0xa010100, @empty, @empty, @broadcast]}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x4, 0x9, @remote, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x20, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]}) syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x20000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0xffffffffffffffff, 0x0, 0x4004) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11.056259656s ago: executing program 4 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0xcfb8, 0xc, 0x2, 0x100}, {0x3, 0x8, 0x0, 0xe60}, {0x82, 0x9, 0xc0, 0x5}]}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={'sha384\x00'}}) lseek(0xffffffffffffffff, 0x851, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2003}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340)) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001680)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000016c0)={0x463, 0x0, {}, {r4}, 0x6, 0x1}) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10.848848495s ago: executing program 2 (id=141): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 9.202952254s ago: executing program 3 (id=144): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f0000000080)) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 8.994327919s ago: executing program 4 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x13, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r1 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x42, 0xd, 0x96, 0x20, 0x35d7, 0x7c89, 0x71b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x5, 0x80, 0x0, 0x1, "", [{{0x9, 0x4, 0x42, 0xa, 0x2, 0x58, 0x42, 0x0, 0x9, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x1, 0x10, 0xeb, [@generic={0x7, 0x5, "393bb8ce6b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x4, 0x3, 0x7}}]}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000000)={0x0, 0x23, 0xa3, {0xa3, 0x3, "aaacc70d78d0aa0ddd570133eb52f2e307c1919a6554021e7f2e1b269625d28f778d279e85f1bfa861cb25ba0b2b0019e90c23c830e15c727fdec1d05269c317549fbe25e857e63510b12f5f00638927d38c3a13f3a5c82ff0b16e57c20d226511a2793055ec2c2c098068c4bc913fc4833d98c8449b25a0cfa2be2a7848e459ff44db4755c4fb39fb735788c63825d97839c15ced9ec1470ccd96c8d7622f5519"}}, &(0x7f00000001c0)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "185e22218a990abef2af0f022022f2245249d05973bc00b21f8709c7fecbcc3ecc184f21f59cdf196532e857729c47dddada96b4731f0d4906719a202fe494d93f23d63feaede750b96b7a83b32ed39e2c2564ec9b7cd57a9165d2485614ea80b46cca8d93d915461d93ba6fa5f412e7df0a3a470b5fbcdcc687b32ca6be4472af2a8371646f2960113f67323522ca88adb468bbc1a62ca96cf71dc44e720eb2acfaa41fd4d8cffe211b7626b92be58422a6b107e5c13826b2f6914faaf05d8cc75ab526e04318c7f7d5a8126cb5"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x10, 0xea, "e956808f0ba77de97c0742f8c589fd6da1f6d58d0fe6d084b0c3b21d6dd5514d25794a7e4ea3a23578696c20251725583aec8414ac1d01361d0151de2bd19479f9d15bec3db6a7f2615ee5144d25a8a57a803e28881cc1a814c07738e2075e0c1217db21afd2b0dd0a0290f692b736a1b34ce5748d344f91ca7458fc26889e3a10f847e4256bafeeb11f010d78380f088ce928fb3f8f350f84ef8174609c2608fffa03f4a9984788e3f2b727ca549731c00afebf775e011c67782501c4c6664285b1633ef01fd286f8334fcdca2f5db6c5251997c9bed8fabe08e0fc982e0277e8a697ecb5d78b69c85c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xa4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0xc0, 0x5, 0x2, "2bba"}, 0x0}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(r0, 0x407, 0x1800000000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}}, @NFT_MSG_DELSET={0x44, 0xb, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x11f5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040000) 8.66734956s ago: executing program 5 (id=146): openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.826546094s ago: executing program 5 (id=147): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 7.763008726s ago: executing program 0 (id=148): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) socket$netlink(0x10, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$can_j1939(0x1d, 0x2, 0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) 7.705211325s ago: executing program 3 (id=149): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) 7.180843211s ago: executing program 3 (id=150): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000000c0)=@ipv4_newrule={0x48, 0x20, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x20, 0x8, 0x1, 0x0, 0x0, 0x1, 0x8}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x4000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8000}, 0x1c) shutdown(0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/config\x00') preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/187, 0xbb}], 0x1, 0x14a, 0x80b) syz_usb_connect$midi(0x3, 0x6f, &(0x7f0000000000)={{0x12, 0x1, 0x251, 0x0, 0x0, 0x0, 0x10, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x8, 0xa0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xe, [@midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x34, 0x2, [{0x86, 0x4f}, {0x8, 0x4f}], 0x3}, @midi_out_jack={0x19, 0x24, 0x3, 0x2, 0x40, 0x9, [{0xc0}, {0x5, 0x10}, {0xbc, 0x2a}, {0x6, 0x9}, {0xc3, 0x2}, {0x8, 0xeb}, {0xc6, 0x9}, {0x7, 0x4}, {0x0, 0x7}], 0x60}, @ms_header={0x7, 0x24, 0x1, 0x81, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x3, 0x4, [{0xd, 0x7}, {0x6f, 0x8}, {0x0, 0x1}, {0x2, 0x10}], 0xa}], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0x1, 0x1, 0x5, {0x8, 0x25, 0x1, 0x4, "f91151df"}}}]}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x0, 0x2, 0xa, 0x10, 0x9}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xbe, 0x6, 0x0, 0x1}]}, 0x3, [{0x3b, &(0x7f0000000140)=@string={0x3b, 0x3, "ae2a298a9a4e6c19b85f6813a2962c4e5819a01ae78070abaa246a84ebaaf359830ede1b926e1a97715272407267b18673120aa840577c997a"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x409}}]}) 7.177528087s ago: executing program 5 (id=151): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0xfd}, 0x4e23, 0xfffc, 0x4e23, 0x7, 0xa, 0x20, 0x10}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x4}, {0x9, 0x0, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x2, 0x0, 0x7, 0x0, 0x0, 0xfffffffc}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) r1 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2b) fcntl$notify(r2, 0x402, 0x8000001c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x20000, 0x3) fcntl$notify(r3, 0x402, 0x80000002) unshare(0x2040400) fcntl$notify(r2, 0x402, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0x64}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x10) 7.036147614s ago: executing program 2 (id=152): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xd21, 0x80c0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x892) socket$inet6(0xa, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x20040081) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0xc, 0x0, 0x4, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x40, 0x0, 0x47, [0x7, 0x80]}}) lseek(0xffffffffffffffff, 0x164, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 7.034350235s ago: executing program 0 (id=153): r0 = syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x90) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x80}}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x20050800) 6.765074147s ago: executing program 0 (id=154): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000000)=""/77) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa360001"], 0x0) 6.013950691s ago: executing program 1 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_setup(0x200, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x38, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x20010, r3, 0x5) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r6, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000001c0)=0xc, 0x4) connect$bt_rfcomm(r6, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000000)={[{@nogrpid}, {@dioread_lock}, {@nouid32}]}, 0xfe, 0x244, &(0x7f0000000840)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.009802883s ago: executing program 4 (id=156): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r1}, @fd}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5.798036692s ago: executing program 0 (id=157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.70894863s ago: executing program 1 (id=158): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 4.166623654s ago: executing program 5 (id=159): openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.535969448s ago: executing program 3 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x13, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r1 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x42, 0xd, 0x96, 0x20, 0x35d7, 0x7c89, 0x71b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x5, 0x80, 0x0, 0x1, "", [{{0x9, 0x4, 0x42, 0xa, 0x2, 0x58, 0x42, 0x0, 0x9, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x1, 0x10, 0xeb, [@generic={0x7, 0x5, "393bb8ce6b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x4, 0x3, 0x7}}]}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000000)={0x0, 0x23, 0xa3, {0xa3, 0x3, "aaacc70d78d0aa0ddd570133eb52f2e307c1919a6554021e7f2e1b269625d28f778d279e85f1bfa861cb25ba0b2b0019e90c23c830e15c727fdec1d05269c317549fbe25e857e63510b12f5f00638927d38c3a13f3a5c82ff0b16e57c20d226511a2793055ec2c2c098068c4bc913fc4833d98c8449b25a0cfa2be2a7848e459ff44db4755c4fb39fb735788c63825d97839c15ced9ec1470ccd96c8d7622f5519"}}, &(0x7f00000001c0)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "185e22218a990abef2af0f022022f2245249d05973bc00b21f8709c7fecbcc3ecc184f21f59cdf196532e857729c47dddada96b4731f0d4906719a202fe494d93f23d63feaede750b96b7a83b32ed39e2c2564ec9b7cd57a9165d2485614ea80b46cca8d93d915461d93ba6fa5f412e7df0a3a470b5fbcdcc687b32ca6be4472af2a8371646f2960113f67323522ca88adb468bbc1a62ca96cf71dc44e720eb2acfaa41fd4d8cffe211b7626b92be58422a6b107e5c13826b2f6914faaf05d8cc75ab526e04318c7f7d5a8126cb5"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x10, 0xea, "e956808f0ba77de97c0742f8c589fd6da1f6d58d0fe6d084b0c3b21d6dd5514d25794a7e4ea3a23578696c20251725583aec8414ac1d01361d0151de2bd19479f9d15bec3db6a7f2615ee5144d25a8a57a803e28881cc1a814c07738e2075e0c1217db21afd2b0dd0a0290f692b736a1b34ce5748d344f91ca7458fc26889e3a10f847e4256bafeeb11f010d78380f088ce928fb3f8f350f84ef8174609c2608fffa03f4a9984788e3f2b727ca549731c00afebf775e011c67782501c4c6664285b1633ef01fd286f8334fcdca2f5db6c5251997c9bed8fabe08e0fc982e0277e8a697ecb5d78b69c85c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xa4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0xc0, 0x5, 0x2, "2bba"}, 0x0}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(r0, 0x407, 0x1800000000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x11f5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040000) 2.338866412s ago: executing program 2 (id=161): r0 = syz_open_dev$vcsa(0x0, 0x1, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) write(r0, &(0x7f0000000000)="1c0000001a94", 0x6) 2.012631937s ago: executing program 0 (id=162): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x550, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x6, 0x0, &(0x7f00000003c0)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget$private(0x0, 0x4000000009, 0x25) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000640)="79360b92d73f0d8eeeea59485483", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.982156071s ago: executing program 5 (id=163): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}, {0x0}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x0, &(0x7f0000000040)) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) mmap(&(0x7f0000541000/0x3000)=nil, 0x3000, 0x3, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.934126157s ago: executing program 1 (id=164): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 1.840897595s ago: executing program 4 (id=165): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 496.161799ms ago: executing program 1 (id=166): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) 60.776053ms ago: executing program 5 (id=167): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB='\b'], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000001000900000001"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x6, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000080)=@v={0x93, 0xc, 0xa0, 0x1f, @MIDI_NOTEON=@special, 0x7f, 0x3}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x210, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0x13, 0xf, [@private=0xa010100, @empty, @empty, @broadcast]}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x4, 0x9, @remote, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x20, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]}) syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x20000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0xffffffffffffffff, 0x0, 0x4004) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 59.255813ms ago: executing program 0 (id=168): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}, {0x0}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x0, &(0x7f0000000040)) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) mmap(&(0x7f0000541000/0x3000)=nil, 0x3000, 0x3, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 0s ago: executing program 4 (id=169): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000000)=""/77) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa360001"], 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 52.147598][ T5285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.162918][ T5285] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. syzkaller login: [ 81.706367][ T5610] cgroup: Unknown subsys name 'net' [ 81.816016][ T5610] cgroup: Unknown subsys name 'cpuset' [ 81.825677][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.368711][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.858885][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.874537][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.884391][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.897134][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.908432][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.946504][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.955853][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.964273][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.972970][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.981577][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.068848][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.081911][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.091851][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.107223][ T804] cfg80211: failed to load regulatory.db [ 86.119538][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.129403][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.147487][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.156964][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.167921][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.188224][ T4939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.198216][ T4939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.230719][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.241033][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.249837][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.259112][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.268628][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.276729][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.286486][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.297820][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.320369][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.330316][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.931632][ T4939] Bluetooth: hci0: command tx timeout [ 88.010193][ T4939] Bluetooth: hci1: command tx timeout [ 88.250757][ T4939] Bluetooth: hci3: command tx timeout [ 88.250781][ T52] Bluetooth: hci2: command tx timeout [ 88.330011][ T4939] Bluetooth: hci4: command tx timeout [ 88.391484][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.399705][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.407196][ T5629] bridge_slave_0: entered allmulticast mode [ 88.415167][ T5629] bridge_slave_0: entered promiscuous mode [ 88.420181][ T4939] Bluetooth: hci5: command tx timeout [ 88.482601][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.491130][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.498531][ T5629] bridge_slave_1: entered allmulticast mode [ 88.507067][ T5629] bridge_slave_1: entered promiscuous mode [ 88.681625][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.688920][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.698004][ T5633] bridge_slave_0: entered allmulticast mode [ 88.706526][ T5633] bridge_slave_0: entered promiscuous mode [ 88.723380][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.789783][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.797652][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.806313][ T5633] bridge_slave_1: entered allmulticast mode [ 88.814826][ T5633] bridge_slave_1: entered promiscuous mode [ 88.824358][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.928766][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.936197][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.943938][ T5639] bridge_slave_0: entered allmulticast mode [ 88.952286][ T5639] bridge_slave_0: entered promiscuous mode [ 88.993149][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.000577][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.008284][ T5636] bridge_slave_0: entered allmulticast mode [ 89.015947][ T5636] bridge_slave_0: entered promiscuous mode [ 89.036541][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.043989][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.051833][ T5639] bridge_slave_1: entered allmulticast mode [ 89.059328][ T5639] bridge_slave_1: entered promiscuous mode [ 89.081364][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.092970][ T5629] team0: Port device team_slave_0 added [ 89.098931][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.106262][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.113806][ T5636] bridge_slave_1: entered allmulticast mode [ 89.121583][ T5636] bridge_slave_1: entered promiscuous mode [ 89.172708][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.184339][ T5629] team0: Port device team_slave_1 added [ 89.238168][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.246525][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.254728][ T5649] bridge_slave_0: entered allmulticast mode [ 89.262722][ T5649] bridge_slave_0: entered promiscuous mode [ 89.322272][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.332067][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.339461][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.347235][ T5649] bridge_slave_1: entered allmulticast mode [ 89.355482][ T5649] bridge_slave_1: entered promiscuous mode [ 89.377903][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.385472][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.411504][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.426487][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.450485][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.474361][ T5633] team0: Port device team_slave_0 added [ 89.485354][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.492394][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.520455][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.534876][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.544586][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.551914][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.559501][ T5647] bridge_slave_0: entered allmulticast mode [ 89.567289][ T5647] bridge_slave_0: entered promiscuous mode [ 89.603771][ T5633] team0: Port device team_slave_1 added [ 89.632247][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.639646][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.647258][ T5647] bridge_slave_1: entered allmulticast mode [ 89.655353][ T5647] bridge_slave_1: entered promiscuous mode [ 89.677425][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.738048][ T5639] team0: Port device team_slave_0 added [ 89.746770][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.770717][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.777739][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.804097][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.818113][ T5636] team0: Port device team_slave_0 added [ 89.838703][ T5639] team0: Port device team_slave_1 added [ 89.869100][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.876478][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.902979][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.916926][ T5636] team0: Port device team_slave_1 added [ 89.941642][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.979163][ T5649] team0: Port device team_slave_0 added [ 90.010140][ T4939] Bluetooth: hci0: command tx timeout [ 90.018022][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.049698][ T5629] hsr_slave_0: entered promiscuous mode [ 90.057074][ T5629] hsr_slave_1: entered promiscuous mode [ 90.066832][ T5649] team0: Port device team_slave_1 added [ 90.088589][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.090738][ T4939] Bluetooth: hci1: command tx timeout [ 90.095846][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.096355][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.152899][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.160010][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.186737][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.213670][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.220834][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.247701][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.272212][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.279377][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.305879][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.330247][ T4939] Bluetooth: hci3: command tx timeout [ 90.330284][ T52] Bluetooth: hci2: command tx timeout [ 90.366330][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.373900][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.400596][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.411903][ T52] Bluetooth: hci4: command tx timeout [ 90.428440][ T5647] team0: Port device team_slave_0 added [ 90.449156][ T5633] hsr_slave_0: entered promiscuous mode [ 90.455990][ T5633] hsr_slave_1: entered promiscuous mode [ 90.462874][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 90.468827][ T5633] Cannot create hsr debugfs directory [ 90.483419][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.490782][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.517731][ T52] Bluetooth: hci5: command tx timeout [ 90.523349][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.545833][ T5647] team0: Port device team_slave_1 added [ 90.666880][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.674134][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.700308][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.765664][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.772828][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.799180][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.817586][ T5636] hsr_slave_0: entered promiscuous mode [ 90.825121][ T5636] hsr_slave_1: entered promiscuous mode [ 90.832040][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 90.837861][ T5636] Cannot create hsr debugfs directory [ 90.856527][ T5649] hsr_slave_0: entered promiscuous mode [ 90.863367][ T5649] hsr_slave_1: entered promiscuous mode [ 90.869788][ T5649] debugfs: 'hsr0' already exists in 'hsr' [ 90.875824][ T5649] Cannot create hsr debugfs directory [ 90.888571][ T5639] hsr_slave_0: entered promiscuous mode [ 90.895463][ T5639] hsr_slave_1: entered promiscuous mode [ 90.901704][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 90.907425][ T5639] Cannot create hsr debugfs directory [ 91.090963][ T5647] hsr_slave_0: entered promiscuous mode [ 91.097747][ T5647] hsr_slave_1: entered promiscuous mode [ 91.104111][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 91.109841][ T5647] Cannot create hsr debugfs directory [ 91.656090][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.668822][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.677487][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.690855][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.714914][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.725218][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.733683][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.743902][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.822300][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.834935][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.844172][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.855812][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.869828][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.882043][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.894409][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.905269][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.002762][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.014463][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.023154][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.035262][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.044077][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.057083][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.065474][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.075017][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.100137][ T52] Bluetooth: hci0: command tx timeout [ 92.170900][ T52] Bluetooth: hci1: command tx timeout [ 92.210467][ T5649] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.222520][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.238673][ T5649] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.249503][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.258769][ T5649] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.269450][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.295322][ T5649] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.306000][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.377524][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.405312][ T5639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.412693][ T52] Bluetooth: hci2: command tx timeout [ 92.420618][ T52] Bluetooth: hci3: command tx timeout [ 92.426445][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.436530][ T5639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.449684][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.467995][ T5639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.478450][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.487647][ T5639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.491554][ T52] Bluetooth: hci4: command tx timeout [ 92.504105][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.571125][ T52] Bluetooth: hci5: command tx timeout [ 92.615378][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.634828][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.695506][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.703667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.731553][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.738526][ T5647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.749693][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.759597][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.767086][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.784032][ T5647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.795422][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.805269][ T5647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.816862][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.837456][ T5647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.849293][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.894116][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.925897][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.933123][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.963312][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.990990][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.998165][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.023248][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.030954][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.073567][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.080994][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.163837][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.306001][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.340683][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.384481][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.391695][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.433730][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.441109][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.465665][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.502895][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.510839][ T3314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.548085][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.555312][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.703726][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.833095][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.892434][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.900809][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.983501][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.991199][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.170981][ T52] Bluetooth: hci0: command tx timeout [ 94.250144][ T52] Bluetooth: hci1: command tx timeout [ 94.318739][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.490743][ T52] Bluetooth: hci3: command tx timeout [ 94.495354][ T4939] Bluetooth: hci2: command tx timeout [ 94.572445][ T4939] Bluetooth: hci4: command tx timeout [ 94.650422][ T4939] Bluetooth: hci5: command tx timeout [ 94.977130][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.037649][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.245393][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.352976][ T5636] veth0_vlan: entered promiscuous mode [ 95.383901][ T5636] veth1_vlan: entered promiscuous mode [ 95.399347][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.413914][ T5633] veth0_vlan: entered promiscuous mode [ 95.497524][ T5633] veth1_vlan: entered promiscuous mode [ 95.593454][ T5629] veth0_vlan: entered promiscuous mode [ 95.662693][ T5639] veth0_vlan: entered promiscuous mode [ 95.677869][ T5629] veth1_vlan: entered promiscuous mode [ 95.722318][ T5636] veth0_macvtap: entered promiscuous mode [ 95.786708][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.804348][ T5636] veth1_macvtap: entered promiscuous mode [ 95.817089][ T5639] veth1_vlan: entered promiscuous mode [ 95.827051][ T5633] veth0_macvtap: entered promiscuous mode [ 95.850093][ T5633] veth1_macvtap: entered promiscuous mode [ 95.929714][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.944804][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.976506][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.003334][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.013615][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.024756][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.041526][ T5629] veth0_macvtap: entered promiscuous mode [ 96.051982][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.065144][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.083685][ T5629] veth1_macvtap: entered promiscuous mode [ 96.119699][ T5639] veth0_macvtap: entered promiscuous mode [ 96.141920][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.152050][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.181876][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.192159][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.222741][ T5639] veth1_macvtap: entered promiscuous mode [ 96.252070][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.267382][ T5647] veth0_vlan: entered promiscuous mode [ 96.287556][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.357007][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.392201][ T5647] veth1_vlan: entered promiscuous mode [ 96.416789][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.432408][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.442879][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.446620][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.464778][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.472297][ T5649] veth0_vlan: entered promiscuous mode [ 96.501403][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.510414][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.565776][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.575321][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.586912][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.605393][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.614682][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.615705][ T5649] veth1_vlan: entered promiscuous mode [ 96.635768][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.666167][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.681736][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.738204][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.753087][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.762683][ T5647] veth0_macvtap: entered promiscuous mode [ 96.824960][ T5647] veth1_macvtap: entered promiscuous mode [ 96.843024][ T5636] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.905842][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.906326][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.930584][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.018120][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.035179][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.055995][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.086800][ T5649] veth0_macvtap: entered promiscuous mode [ 97.124861][ T5859] loop3: detected capacity change from 0 to 256 [ 97.190364][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.200311][ T5859] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.214396][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.228156][ T5859] FAT-fs (loop3): Filesystem has been set read-only [ 97.239650][ T5859] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.263874][ T5649] veth1_macvtap: entered promiscuous mode [ 97.270346][ T5859] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.283700][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.295720][ T5859] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.304889][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.314412][ T5859] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.323812][ T5859] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.323890][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.346938][ T5859] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.349415][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.376660][ T5859] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.391126][ T30] audit: type=1800 audit(1779810376.699:2): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="file1" dev="loop3" ino=1048590 res=0 errno=0 [ 97.442640][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.476920][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.494056][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.582916][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.661858][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.682101][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.743760][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.777963][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.802840][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.824291][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.046754][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.072046][ T5869] loop2: detected capacity change from 0 to 64 [ 98.073590][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.152310][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.294974][ T5870] syz_tun: entered allmulticast mode [ 98.559549][ T5870] comedi comedi3: 8255: I/O base address not correctly aligned [ 98.621947][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.634965][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.758535][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.784319][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.849269][ T5880] fuse: Unknown parameter 'grou00000000000000000000' [ 99.397567][ T5890] loop0: detected capacity change from 0 to 512 [ 99.440805][ T5890] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.550224][ T5782] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.805405][ T5782] usb 3-1: Using ep0 maxpacket: 16 [ 99.999354][ T5890] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 100.187592][ T5782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.275505][ T5890] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11: bg 0: block 248: padding at end of block bitmap is not set [ 100.302285][ T5890] loop0: lost filesystem error report for type 5 error -117 [ 100.303996][ T5890] Quota error (device loop0): write_blk: dquota write failed [ 100.311872][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 100.311973][ C0] EXT4-fs (loop0): last error at time 1779810379: ext4_validate_block_bitmap:441 [ 100.368402][ T5782] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.379181][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.409616][ T5782] usb 3-1: Product: syz [ 100.425040][ T5890] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 100.439564][ T5782] usb 3-1: Manufacturer: syz [ 100.461295][ T5782] usb 3-1: SerialNumber: syz [ 100.481632][ T5890] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.11: Failed to acquire dquot type 1 [ 100.543984][ T5890] loop0: lost filesystem error report for type 5 error -28 [ 100.564540][ T5899] loop4: detected capacity change from 0 to 64 [ 100.582951][ T5782] usb 3-1: config 0 descriptor?? [ 100.589238][ T5870] loop3: detected capacity change from 0 to 32768 [ 100.597550][ T5890] EXT4-fs (loop0): 1 truncate cleaned up [ 100.659148][ T5890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 100.685869][ T5782] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 100.697548][ T5870] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7 (5870) [ 100.747621][ T5782] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 100.948945][ T5902] loop5: detected capacity change from 0 to 64 [ 101.125157][ T5870] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 101.256996][ T5905] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 101.268915][ T5905] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 131074 [ 101.279611][ T5905] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.11: Failed to acquire dquot type 1 [ 101.394132][ T5870] BTRFS info (device loop3): using crc32c checksum algorithm [ 101.692671][ T5870] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 101.908643][ T5870] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 101.921980][ T5870] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 101.937405][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.941188][ T5782] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 102.021062][ T5870] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 102.022176][ T5870] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 102.032345][ T5870] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 102.054569][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.057815][ T5782] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 102.066896][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 102.076243][ T5870] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 102.112717][ T5782] em28xx 3-1:0.0: board has no eeprom [ 102.142561][ T5870] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 102.142994][ T5870] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 102.163468][ T5870] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 102.181902][ T5870] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 102.220480][ T5782] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 102.247661][ T5782] em28xx 3-1:0.0: dvb set to bulk mode. [ 102.266628][ T5767] em28xx 3-1:0.0: Binding DVB extension [ 102.337896][ T5870] BTRFS error (device loop3): open_ctree failed: -12 [ 102.407417][ T5782] usb 3-1: USB disconnect, device number 2 [ 102.498248][ T5782] em28xx 3-1:0.0: Disconnecting em28xx [ 102.555355][ T5767] em28xx 3-1:0.0: Registering input extension [ 102.596363][ T5782] em28xx 3-1:0.0: Closing input extension [ 102.658201][ T5924] loop4: detected capacity change from 0 to 2048 [ 102.720793][ T5924] ======================================================= [ 102.720793][ T5924] WARNING: The mand mount option has been deprecated and [ 102.720793][ T5924] and is ignored by this kernel. Remove the mand [ 102.720793][ T5924] option from the mount to silence this warning. [ 102.720793][ T5924] ======================================================= [ 102.787731][ T5924] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.669481][ T5782] em28xx 3-1:0.0: Freeing device [ 103.686789][ T5933] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.687920][ T5924] syz.4.15: attempt to access beyond end of device [ 103.687920][ T5924] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 104.087757][ T5924] syz.4.15: attempt to access beyond end of device [ 104.087757][ T5924] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 104.174451][ T5941] syz_tun: entered allmulticast mode [ 104.200229][ T5924] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 104.228226][ T5942] loop5: detected capacity change from 0 to 512 [ 104.268959][ T5932] loop3: detected capacity change from 0 to 512 [ 104.285225][ T5924] NILFS (loop4): error -5 reading inode: ino=12 [ 104.303201][ T5932] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.307400][ T5942] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.962253][ T5942] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 105.056409][ T30] audit: type=1800 audit(1779810384.349:3): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17" name="file1" dev="loop3" ino=1048611 res=0 errno=0 [ 105.083559][ T5942] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.20: bg 0: block 248: padding at end of block bitmap is not set [ 105.118359][ T5942] loop5: lost filesystem error report for type 5 error -117 [ 105.119933][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 105.134909][ C0] EXT4-fs (loop5): last error at time 1779810384: ext4_validate_block_bitmap:441 [ 105.167195][ T5942] Quota error (device loop5): write_blk: dquota write failed [ 105.212755][ T5942] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 105.222974][ T5942] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.20: Failed to acquire dquot type 1 [ 105.234762][ T5942] loop5: lost filesystem error report for type 5 error -28 [ 105.249197][ T5942] EXT4-fs (loop5): 1 truncate cleaned up [ 105.282427][ T5942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 106.168438][ T5961] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 106.180181][ T5961] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 131074 [ 106.191171][ T5961] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.20: Failed to acquire dquot type 1 [ 108.230359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.640012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 109.050166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.241462][ T5649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 109.525558][ T5969] loop3: detected capacity change from 0 to 64 [ 109.803915][ T5975] NILFS (nullb0): couldn't find nilfs on the device [ 110.943262][ T5972] loop0: detected capacity change from 0 to 4096 [ 111.077176][ T5972] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 111.577800][ T5988] loop3: detected capacity change from 0 to 32768 [ 111.586164][ T5988] btrfs: Deprecated parameter 'usebackuproot' [ 111.592513][ T5988] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 112.274120][ T5988] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.33 (5988) [ 112.320043][ T5747] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.385643][ T5988] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.397516][ T5988] BTRFS info (device loop3): using crc32c checksum algorithm [ 112.490271][ T5747] usb 6-1: Using ep0 maxpacket: 16 [ 112.499167][ T5972] ntfs3(loop0): ino=1a, mi_enum_attr [ 112.515403][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.527566][ T5972] ntfs3(loop0): ino=1a, mi_enum_attr [ 112.528692][ T50] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 112.534930][ T5972] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 112.557161][ T5747] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.566781][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.575891][ T5747] usb 6-1: Product: syz [ 112.583437][ T5747] usb 6-1: Manufacturer: syz [ 112.599958][ T5747] usb 6-1: SerialNumber: syz [ 112.610893][ T5747] usb 6-1: config 0 descriptor?? [ 112.630478][ T5747] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.644733][ T5747] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 112.655012][ T5988] BTRFS error (device loop3): failed to load root extent [ 112.662423][ T5988] BTRFS warning (device loop3): try to load backup roots slot 1 [ 112.671344][ T50] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 112.690867][ T5988] BTRFS warning (device loop3): couldn't read tree root [ 112.698770][ T5988] BTRFS warning (device loop3): try to load backup roots slot 2 [ 112.710104][ T3314] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 112.718524][ T6004] loop4: detected capacity change from 0 to 64 [ 112.794552][ T5988] BTRFS warning (device loop3): couldn't read tree root [ 112.802410][ T5988] BTRFS warning (device loop3): try to load backup roots slot 3 [ 112.855734][ T5988] BTRFS info (device loop3): rebuilding free space tree [ 112.981263][ T5988] BTRFS info (device loop3): checking UUID tree [ 112.989746][ T5988] BTRFS info (device loop3): enabling ssd optimizations [ 112.997150][ T5988] BTRFS info (device loop3): using spread ssd allocation scheme [ 113.005113][ T5988] BTRFS info (device loop3): turning on async discard [ 113.012658][ T5988] BTRFS info (device loop3): enabling free space tree [ 113.019470][ T5988] BTRFS info (device loop3): force clearing of disk cache [ 113.026772][ T5988] BTRFS info (device loop3): enabling auto defrag [ 113.033374][ T5988] BTRFS info (device loop3): trying to use backup root at mount time [ 113.041973][ T5988] BTRFS info (device loop3): force zlib compression, level 3 [ 113.167963][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.211988][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.406570][ T5981] loop1: detected capacity change from 0 to 32768 [ 113.501527][ T5747] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 114.361525][ T5747] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.369679][ T5747] em28xx 6-1:0.0: board has no eeprom [ 114.432265][ T5636] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.541467][ T5747] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.585468][ T5747] em28xx 6-1:0.0: dvb set to bulk mode. [ 114.607541][ T6024] loop0: detected capacity change from 0 to 512 [ 114.625597][ T5760] em28xx 6-1:0.0: Binding DVB extension [ 114.676521][ T6024] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.692290][ T5747] usb 6-1: USB disconnect, device number 2 [ 114.725639][ T5747] em28xx 6-1:0.0: Disconnecting em28xx [ 114.790577][ T6024] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 114.812029][ T6028] loop2: detected capacity change from 0 to 256 [ 114.937886][ T6028] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 114.958150][ T6024] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.40: bg 0: block 248: padding at end of block bitmap is not set [ 115.046191][ T6024] loop0: lost filesystem error report for type 5 error -117 [ 115.052939][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 115.067385][ C0] EXT4-fs (loop0): last error at time 1779810394: ext4_validate_block_bitmap:441 [ 115.074497][ T6024] Quota error (device loop0): write_blk: dquota write failed [ 115.102124][ T6028] FAT-fs (loop2): Filesystem has been set read-only [ 115.114821][ T6028] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.115817][ T5760] em28xx 6-1:0.0: Registering input extension [ 115.160819][ T6024] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 115.175184][ T6028] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.202077][ T5747] em28xx 6-1:0.0: Closing input extension [ 115.215941][ T6024] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.40: Failed to acquire dquot type 1 [ 115.266525][ T6028] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.287216][ T6024] loop0: lost filesystem error report for type 5 error -28 [ 115.301453][ T6024] EXT4-fs (loop0): 1 truncate cleaned up [ 115.339341][ T6028] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.354122][ T6028] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.383812][ T5747] em28xx 6-1:0.0: Freeing device [ 115.462578][ T6028] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.499817][ T6024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 115.505379][ T6028] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 115.552292][ T30] audit: type=1800 audit(1779810394.849:4): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="file1" dev="loop2" ino=1048612 res=0 errno=0 [ 115.761884][ T5747] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.223551][ T6040] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 116.235130][ T6040] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 131074 [ 116.246676][ T6040] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.40: Failed to acquire dquot type 1 [ 116.640070][ T5747] usb 6-1: Using ep0 maxpacket: 16 [ 116.740397][ T5747] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 116.776498][ T5747] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 116.815020][ T5747] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 116.862221][ T5747] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 116.894598][ T5747] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 116.924823][ T5747] usb 6-1: config 1 interface 0 has no altsetting 0 [ 116.963922][ T5747] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 116.998490][ T6049] loop3: detected capacity change from 0 to 64 [ 117.006182][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 117.051768][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.162288][ T6050] NILFS (nullb0): couldn't find nilfs on the device [ 117.642174][ T5747] usb 6-1: can't set config #1, error -71 [ 117.675744][ T5747] usb 6-1: USB disconnect, device number 3 [ 117.851601][ T6054] loop2: detected capacity change from 0 to 128 [ 118.450198][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 118.879983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.181514][ T6062] loop1: detected capacity change from 0 to 64 [ 119.412282][ T6054] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.490520][ T6054] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.648310][ T5639] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.937866][ T6079] NILFS (nullb0): couldn't find nilfs on the device [ 123.600050][ T5767] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 123.747583][ T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 124.461952][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 124.466895][ T5767] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 124.482461][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.507733][ T47] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.523009][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.524889][ T5767] usb 3-1: config 0 has no interface number 0 [ 124.532332][ T47] usb 6-1: Product: syz [ 124.542419][ T47] usb 6-1: Manufacturer: syz [ 124.547405][ T47] usb 6-1: SerialNumber: syz [ 124.562817][ T47] usb 6-1: config 0 descriptor?? [ 125.250294][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 125.688903][ T5767] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 125.722079][ T5767] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 125.742254][ T5767] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 125.747964][ T47] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 126.098788][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.108662][ T5767] usb 3-1: Product: syz [ 126.129830][ T47] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 126.159996][ T5767] usb 3-1: Manufacturer: syz [ 126.272646][ T5767] usb 3-1: SerialNumber: syz [ 126.287625][ T5767] usb 3-1: config 0 descriptor?? [ 126.289452][ T47] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 126.298715][ T5767] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 126.424387][ T47] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 126.469423][ T47] em28xx 6-1:0.0: board has no eeprom [ 126.525599][ T5767] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 126.536773][ T6108] loop4: detected capacity change from 0 to 64 [ 126.545642][ T6106] netlink: 40 bytes leftover after parsing attributes in process `syz.5.65'. [ 126.575033][ T47] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 126.607028][ T5767] usb 3-1: USB disconnect, device number 3 [ 126.625106][ T47] em28xx 6-1:0.0: dvb set to bulk mode. [ 126.657370][ T5032] em28xx 6-1:0.0: Binding DVB extension [ 126.705646][ T6106] syz_tun: entered allmulticast mode [ 126.710957][ T6110] loop2: detected capacity change from 0 to 512 [ 126.732512][ T6110] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.753520][ T47] usb 6-1: USB disconnect, device number 4 [ 126.760836][ T5767] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 126.809570][ T47] em28xx 6-1:0.0: Disconnecting em28xx [ 126.835903][ T5767] cypress_m8 3-1:0.35: device disconnected [ 126.860235][ T6106] comedi comedi3: 8255: I/O base address not correctly aligned [ 126.888290][ T6110] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 126.925487][ T6110] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.67: bg 0: block 248: padding at end of block bitmap is not set [ 126.980573][ T6110] loop2: lost filesystem error report for type 5 error -117 [ 126.986000][ T6110] Quota error (device loop2): write_blk: dquota write failed [ 126.993480][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 126.993505][ C1] EXT4-fs (loop2): last error at time 1779810406: ext4_validate_block_bitmap:441 [ 127.104713][ T6117] loop4: detected capacity change from 0 to 512 [ 127.115743][ T6117] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.127534][ T6110] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 127.136305][ T5032] em28xx 6-1:0.0: Registering input extension [ 127.178966][ T47] em28xx 6-1:0.0: Closing input extension [ 127.180726][ T6117] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 127.207679][ T6110] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.67: Failed to acquire dquot type 1 [ 127.228826][ T6110] loop2: lost filesystem error report for type 5 error -28 [ 127.233266][ T6117] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.68: bg 0: block 248: padding at end of block bitmap is not set [ 127.288992][ T6110] EXT4-fs (loop2): 1 truncate cleaned up [ 127.360129][ T6117] loop4: lost filesystem error report for type 5 error -117 [ 127.360914][ T6117] Quota error (device loop4): write_blk: dquota write failed [ 127.376159][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 127.376186][ C0] EXT4-fs (loop4): last error at time 1779810406: ext4_validate_block_bitmap:441 [ 127.437177][ T6110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 127.468318][ T6117] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 127.507870][ T6117] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.68: Failed to acquire dquot type 1 [ 127.552815][ T6117] loop4: lost filesystem error report for type 5 error -28 [ 128.577221][ T6117] EXT4-fs (loop4): 1 truncate cleaned up [ 128.585428][ T47] em28xx 6-1:0.0: Freeing device [ 128.616733][ T6117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 129.051434][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 129.966090][ T6134] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 129.977039][ T6134] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 131074 [ 129.987098][ T6134] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.68: Failed to acquire dquot type 1 [ 130.300142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.270393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.680008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 132.198710][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.541374][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 136.026045][ T6162] loop4: detected capacity change from 0 to 64 [ 136.434680][ T6166] ubi16: attaching mtd0 [ 136.519803][ T6166] ubi16: scanning is finished [ 136.543123][ T6166] ubi16: empty MTD device detected [ 136.717395][ T6170] loop2: detected capacity change from 0 to 64 [ 136.893410][ T6166] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 136.930075][ T6166] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 136.959375][ T6166] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 136.987181][ T6166] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 137.022943][ T6166] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 137.053494][ T6166] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 137.089153][ T6166] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3500308611 [ 137.137870][ T6166] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 137.182830][ T6171] ubi16: background thread "ubi_bgt16d" started, PID 6171 [ 137.189743][ T6160] loop5: detected capacity change from 0 to 32768 [ 137.218448][ T6173] loop2: detected capacity change from 0 to 512 [ 137.255820][ T30] audit: type=1326 audit(1779810416.559:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.5.79" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9f59ce59 code=0x7ffc0000 [ 137.306590][ T6173] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.395044][ T30] audit: type=1326 audit(1779810416.569:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.5.79" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9f59ce59 code=0x7ffc0000 [ 137.460681][ T6173] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 137.562503][ T6173] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.85: bg 0: block 248: padding at end of block bitmap is not set [ 137.625768][ T6173] loop2: lost filesystem error report for type 5 error -117 [ 137.626771][ T6173] Quota error (device loop2): write_blk: dquota write failed [ 137.634375][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 137.634400][ C0] EXT4-fs (loop2): last error at time 1779810416: ext4_validate_block_bitmap:441 [ 137.749151][ T30] audit: type=1326 audit(1779810416.569:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.5.79" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab9f59ce59 code=0x7ffc0000 [ 137.874530][ T6173] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 137.940313][ T6173] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.85: Failed to acquire dquot type 1 [ 137.995847][ T30] audit: type=1326 audit(1779810416.569:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.5.79" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9f59ce59 code=0x7ffc0000 [ 138.021771][ T6173] loop2: lost filesystem error report for type 5 error -28 [ 138.024283][ T6173] EXT4-fs (loop2): 1 truncate cleaned up [ 138.044344][ T30] audit: type=1326 audit(1779810416.569:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.5.79" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9f59ce59 code=0x7ffc0000 [ 138.717033][ T6173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 138.903973][ T30] audit: type=1326 audit(1779810416.609:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.5.79" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab9f59ce59 code=0x7ffc0000 [ 139.580388][ T6193] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 139.591811][ T6193] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 131074 [ 139.602152][ T6193] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.85: Failed to acquire dquot type 1 [ 140.627265][ T5639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 140.638868][ T5747] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.665612][ T6197] loop1: detected capacity change from 0 to 1024 [ 140.712388][ T6197] EXT4-fs: Ignoring removed oldalloc option [ 140.743318][ T6197] ext4: Unknown parameter 'fsmagic' [ 140.821026][ T5747] usb 4-1: Using ep0 maxpacket: 16 [ 140.853640][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 140.994585][ T6197] loop1: detected capacity change from 0 to 128 [ 141.055052][ T6197] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.062205][ T5747] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.070281][ T6197] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.076430][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.126056][ T5747] usb 4-1: Product: syz [ 141.131723][ T5747] usb 4-1: Manufacturer: syz [ 141.136514][ T5747] usb 4-1: SerialNumber: syz [ 141.250844][ T5747] usb 4-1: config 0 descriptor?? [ 141.292827][ T5747] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.295250][ T5647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.320590][ T5747] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 141.381214][ T6205] netlink: 40 bytes leftover after parsing attributes in process `syz.5.87'. [ 141.422265][ T6208] loop0: detected capacity change from 0 to 64 [ 141.526194][ T6205] comedi comedi3: 8255: I/O base address not correctly aligned [ 141.570077][ T5782] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.652865][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.699085][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.729970][ T5782] usb 3-1: Using ep0 maxpacket: 16 [ 141.746302][ T5782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 141.768462][ T5782] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.786851][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.795446][ T5760] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.825007][ T5782] usb 3-1: Product: syz [ 141.836901][ T5782] usb 3-1: Manufacturer: syz [ 141.851734][ T5782] usb 3-1: SerialNumber: syz [ 141.869443][ T5782] usb 3-1: config 0 descriptor?? [ 141.888425][ T5782] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.898808][ T5782] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 141.911104][ T5747] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 141.993686][ T5760] usb 2-1: Using ep0 maxpacket: 16 [ 142.001542][ T5747] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 142.018282][ T5760] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 142.032754][ T5747] em28xx 4-1:0.0: board has no eeprom [ 142.047820][ T5760] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 142.068994][ T5760] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 142.098346][ T5760] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 142.120002][ T5747] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 142.140372][ T5760] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 142.169309][ T5747] em28xx 4-1:0.0: dvb set to bulk mode. [ 142.182562][ T5767] em28xx 4-1:0.0: Binding DVB extension [ 142.191602][ T5760] usb 2-1: config 1 interface 0 has no altsetting 0 [ 142.216847][ T5760] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 142.234382][ T5747] usb 4-1: USB disconnect, device number 2 [ 142.260211][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.288149][ T5747] em28xx 4-1:0.0: Disconnecting em28xx [ 142.351392][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.371657][ T5760] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 142.439713][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.589060][ T5760] scsi host1: usb-storage 2-1:1.0 [ 142.664562][ T5767] em28xx 4-1:0.0: Registering input extension [ 142.700630][ T5747] em28xx 4-1:0.0: Closing input extension [ 142.723136][ T5782] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 142.824421][ T5747] em28xx 4-1:0.0: Freeing device [ 142.868853][ T5782] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 142.914154][ T5782] em28xx 3-1:0.0: board has no eeprom [ 142.962724][ T6205] loop5: detected capacity change from 0 to 32768 [ 143.002120][ T6205] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.87 (6205) [ 143.030169][ T5782] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 143.047990][ T5782] em28xx 3-1:0.0: dvb set to bulk mode. [ 143.051083][ T4939] Bluetooth: hci5: command tx timeout [ 143.059971][ T5767] em28xx 3-1:0.0: Binding DVB extension [ 143.114208][ T6205] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 143.147031][ T5782] usb 3-1: USB disconnect, device number 4 [ 143.171610][ T6205] BTRFS info (device loop5): using crc32c checksum algorithm [ 143.257933][ T5782] em28xx 3-1:0.0: Disconnecting em28xx [ 143.258711][ T6205] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 143.459514][ T6239] loop2: detected capacity change from 0 to 64 [ 143.500446][ T5767] em28xx 3-1:0.0: Registering input extension [ 143.561032][ T5782] em28xx 3-1:0.0: Closing input extension [ 143.724303][ T36] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 143.743160][ T6205] BTRFS info (device loop5): rebuilding free space tree [ 143.777635][ T5782] em28xx 3-1:0.0: Freeing device [ 143.800992][ T6256] loop4: detected capacity change from 0 to 512 [ 143.928310][ T6256] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.032762][ T6259] QAT: Stopping all acceleration devices. [ 144.110627][ T6256] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 144.147045][ T6205] BTRFS info (device loop5): disabling free space tree [ 144.209108][ T6205] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.269054][ T6205] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.282347][ T6256] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.98: bg 0: block 248: padding at end of block bitmap is not set [ 144.412167][ T36] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 144.480982][ T6205] BTRFS info (device loop5): enabling ssd optimizations [ 144.504821][ T6256] loop4: lost filesystem error report for type 5 error -117 [ 144.505792][ T6256] Quota error (device loop4): write_blk: dquota write failed [ 144.513241][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 144.513266][ C0] EXT4-fs (loop4): last error at time 1779810423: ext4_validate_block_bitmap:441 [ 144.554723][ T6205] BTRFS info (device loop5): turning on async discard [ 144.558506][ T6265] loop2: detected capacity change from 0 to 64 [ 144.638534][ T6205] BTRFS info (device loop5): enabling disk space caching [ 144.692907][ T6205] BTRFS info (device loop5): force clearing of disk cache [ 144.693628][ T6256] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 144.736622][ T6205] BTRFS info (device loop5): use zstd compression, level 3 [ 144.832217][ T6256] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.98: Failed to acquire dquot type 1 [ 146.630450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.824462][ T6256] loop4: lost filesystem error report for type 5 error -28 [ 146.863811][ T6256] EXT4-fs (loop4): 1 truncate cleaned up [ 147.500716][ T5782] usb 2-1: USB disconnect, device number 2 [ 147.508408][ T6226] sddr09: could not read card info [ 147.559801][ T6256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 147.580052][ T5649] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 147.801916][ T5947] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 147.810327][ T5947] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 147.822513][ T5947] sd 1:0:0:0: [sdb] Write Protect is off [ 147.832304][ T5947] sd 1:0:0:0: [sdb] Asking for cache data failed [ 147.839734][ T5947] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 148.682611][ T6277] loop1: detected capacity change from 0 to 64 [ 148.898941][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 149.282261][ T5947] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 149.731951][ T6286] loop2: detected capacity change from 0 to 64 [ 149.985620][ T6292] loop4: detected capacity change from 0 to 64 [ 151.395085][ T6302] loop3: detected capacity change from 0 to 2048 [ 151.531083][ T5928] udevd[5928]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 151.613162][ T6302] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 152.504070][ T6308] loop2: detected capacity change from 0 to 64 [ 152.562153][ T6309] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.565638][ T6302] syz.3.110: attempt to access beyond end of device [ 152.565638][ T6302] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 152.644902][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 152.810240][ T5782] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.961510][ T5747] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 153.200326][ T5782] usb 2-1: device not accepting address 3, error -71 [ 153.254773][ T5747] usb 5-1: not running at top speed; connect to a high speed hub [ 153.401789][ T5747] usb 5-1: config 5 has an invalid interface number: 66 but max is 0 [ 153.548762][ T5747] usb 5-1: config 5 has no interface number 0 [ 153.684826][ T5747] usb 5-1: config 5 interface 66 altsetting 10 has an endpoint descriptor with address 0x39, changing to 0x9 [ 153.888595][ T5747] usb 5-1: config 5 interface 66 altsetting 10 endpoint 0x9 has invalid maxpacket 52920, setting to 64 [ 154.062226][ T6317] netlink: 40 bytes leftover after parsing attributes in process `syz.2.115'. [ 154.063100][ T6318] loop1: detected capacity change from 0 to 512 [ 154.085279][ T6318] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.087111][ T5747] usb 5-1: config 5 interface 66 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 154.166159][ T5747] usb 5-1: config 5 interface 66 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.187604][ T6321] loop3: detected capacity change from 0 to 512 [ 154.201264][ T6317] syz_tun: entered allmulticast mode [ 154.232028][ T5747] usb 5-1: config 5 interface 66 has no altsetting 0 [ 154.248392][ T6317] comedi comedi3: 8255: I/O base address not correctly aligned [ 154.262411][ T5747] usb 5-1: New USB device found, idVendor=35d7, idProduct=7c89, bcdDevice=71.b5 [ 154.272484][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.280976][ T5747] usb 5-1: Product: syz [ 154.285473][ T5747] usb 5-1: Manufacturer: syz [ 154.295884][ T5747] usb 5-1: SerialNumber: syz [ 154.345341][ T6311] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 154.384690][ T6328] fuse: Bad value for 'rootmode' [ 154.423614][ T6318] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 154.646287][ T6318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.117: bg 0: block 248: padding at end of block bitmap is not set [ 154.667807][ T6321] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.086076][ T6318] loop1: lost filesystem error report for type 5 error -117 [ 155.088499][ T6318] Quota error (device loop1): write_blk: dquota write failed [ 155.095917][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 155.095943][ C1] EXT4-fs (loop1): last error at time 1779810434: ext4_validate_block_bitmap:441 [ 155.168557][ T6321] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 155.227803][ T6318] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 155.262258][ T5747] usb 5-1: USB disconnect, device number 2 [ 155.302402][ T6318] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.117: Failed to acquire dquot type 1 [ 155.320557][ T6321] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.116: bg 0: block 248: padding at end of block bitmap is not set [ 155.366230][ T6318] loop1: lost filesystem error report for type 5 error -28 [ 155.367828][ T6318] EXT4-fs (loop1): 1 truncate cleaned up [ 155.392860][ T6321] loop3: lost filesystem error report for type 5 error -117 [ 155.395478][ T6321] Quota error (device loop3): write_blk: dquota write failed [ 155.403074][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 155.403106][ C0] EXT4-fs (loop3): last error at time 1779810434: ext4_validate_block_bitmap:441 [ 155.459296][ T6321] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 155.467280][ T6318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 155.482005][ T6321] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.116: Failed to acquire dquot type 1 [ 155.520164][ T6321] loop3: lost filesystem error report for type 5 error -28 [ 155.528145][ T6321] EXT4-fs (loop3): 1 truncate cleaned up [ 155.528186][ T6339] loop0: detected capacity change from 0 to 64 [ 155.570945][ T6321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 155.801787][ T5782] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 155.881810][ T6342] loop4: detected capacity change from 0 to 512 [ 156.611951][ T6344] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 156.622452][ T6344] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074 [ 156.632568][ T6344] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.116: Failed to acquire dquot type 1 [ 156.645844][ T5782] usb 6-1: device descriptor read/64, error -71 [ 156.712203][ T6342] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.824011][ T5647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 156.869057][ T6342] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 156.920050][ T5782] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 156.940093][ T6342] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.123: bg 0: block 248: padding at end of block bitmap is not set [ 157.086339][ T6342] loop4: lost filesystem error report for type 5 error -117 [ 157.089809][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 157.089908][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 157.112822][ C1] EXT4-fs (loop4): last error at time 1779810436: ext4_validate_block_bitmap:441 [ 157.173759][ T6342] Quota error (device loop4): write_blk: dquota write failed [ 157.175213][ T6350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.124'. [ 157.196812][ T5782] usb 6-1: device descriptor read/64, error -71 [ 157.200121][ T6342] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 157.222443][ T6342] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.123: Failed to acquire dquot type 1 [ 157.247669][ T6342] loop4: lost filesystem error report for type 5 error -28 [ 157.255377][ T6342] EXT4-fs (loop4): 1 truncate cleaned up [ 157.301965][ T6351] comedi comedi3: 8255: I/O base address not correctly aligned [ 157.321456][ T6342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 157.347235][ T5782] usb usb6-port1: attempt power cycle [ 158.714921][ T6357] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 158.725999][ T6357] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 131074 [ 158.736123][ T6357] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.123: Failed to acquire dquot type 1 [ 158.768894][ T5760] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 158.776953][ T5782] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 158.851168][ T5782] usb 6-1: device descriptor read/8, error -71 [ 159.075044][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 159.117851][ T6361] loop2: detected capacity change from 0 to 64 [ 159.135443][ T5760] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 159.185769][ T5760] usb 1-1: config 0 has no interface number 0 [ 159.265618][ T5760] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 159.323077][ T5760] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 159.384093][ T5760] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 159.413277][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.441082][ T5760] usb 1-1: Product: syz [ 159.451114][ T6368] loop4: detected capacity change from 0 to 512 [ 159.455721][ T5760] usb 1-1: Manufacturer: syz [ 159.478235][ T5760] usb 1-1: SerialNumber: syz [ 159.487848][ T6368] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.514883][ T5760] usb 1-1: config 0 descriptor?? [ 159.559698][ T5760] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 159.579224][ T6368] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 159.594828][ T5782] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 159.652400][ T6351] loop1: detected capacity change from 0 to 32768 [ 159.663968][ T5782] usb 6-1: Using ep0 maxpacket: 16 [ 159.674786][ T6351] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.124 (6351) [ 159.699916][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 159.717021][ T6351] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 159.726458][ T6368] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.128: bg 0: block 248: padding at end of block bitmap is not set [ 159.736186][ T6351] BTRFS info (device loop1): using crc32c checksum algorithm [ 159.756940][ T6351] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 159.772870][ T6368] loop4: lost filesystem error report for type 5 error -117 [ 159.775482][ T6368] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.128: Failed to acquire dquot type 1 [ 159.782919][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 159.782942][ C1] EXT4-fs (loop4): last error at time 1779810439: ext4_validate_block_bitmap:441 [ 159.799444][ T5782] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.814312][ T6368] loop4: lost filesystem error report for type 5 error -28 [ 159.823389][ T6368] EXT4-fs (loop4): 1 truncate cleaned up [ 159.847975][ T6368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 159.848705][ T5760] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 159.895975][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.918308][ T5782] usb 6-1: Product: syz [ 160.023219][ T6387] ubi: mtd0 is already attached to ubi16 [ 160.078508][ T5782] usb 6-1: Manufacturer: syz [ 160.096770][ T5782] usb 6-1: SerialNumber: syz [ 160.222065][ T5760] usb 1-1: USB disconnect, device number 2 [ 160.425421][ T5782] usb 6-1: config 0 descriptor?? [ 160.604116][ T6390] __quota_error: 2 callbacks suppressed [ 160.604167][ T6390] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 160.620798][ T6390] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 131074 [ 160.630829][ T6390] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.128: Failed to acquire dquot type 1 [ 161.087065][ T5782] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.099639][ T5782] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 161.228469][ T5760] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 161.253247][ T5760] cypress_m8 1-1:0.35: device disconnected [ 161.521501][ T6351] BTRFS error (device loop1): open_ctree failed: -4 [ 161.523991][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 161.669341][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.747536][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.160058][ T5782] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 162.309746][ T6403] NILFS (nullb0): couldn't find nilfs on the device [ 162.871352][ T5782] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 162.898253][ T6367] binder: BINDER_SET_CONTEXT_MGR already set [ 162.901373][ T5782] em28xx 6-1:0.0: board has no eeprom [ 162.979782][ T6367] binder: 6365:6367 ioctl 4018620d 200000001000 returned -16 [ 163.090854][ T5782] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 163.172139][ T5782] em28xx 6-1:0.0: dvb set to bulk mode. [ 163.188940][ T6404] ubi: mtd0 is already attached to ubi16 [ 163.270081][ T5747] em28xx 6-1:0.0: Binding DVB extension [ 163.790356][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 163.834532][ T5782] usb 6-1: USB disconnect, device number 8 [ 163.917505][ T5782] em28xx 6-1:0.0: Disconnecting em28xx [ 163.971924][ T5747] em28xx 6-1:0.0: Registering input extension [ 164.016547][ T5782] em28xx 6-1:0.0: Closing input extension [ 164.200151][ T5760] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 164.594990][ T5760] usb 1-1: not running at top speed; connect to a high speed hub [ 164.785360][ T5760] usb 1-1: config 5 has an invalid interface number: 66 but max is 0 [ 164.955724][ T5760] usb 1-1: config 5 has no interface number 0 [ 165.002300][ T5760] usb 1-1: config 5 interface 66 altsetting 10 has an endpoint descriptor with address 0x39, changing to 0x9 [ 165.031737][ T5782] em28xx 6-1:0.0: Freeing device [ 165.082621][ T6420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.139'. [ 165.110946][ T5760] usb 1-1: config 5 interface 66 altsetting 10 endpoint 0x9 has invalid maxpacket 52920, setting to 64 [ 165.389635][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 165.418370][ T5760] usb 1-1: config 5 interface 66 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 165.457516][ T6420] comedi comedi3: 8255: I/O base address not correctly aligned [ 165.463516][ T5760] usb 1-1: config 5 interface 66 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.570381][ T24] usb 3-1: device descriptor read/64, error -71 [ 165.591736][ T5760] usb 1-1: config 5 interface 66 has no altsetting 0 [ 165.794789][ T5760] usb 1-1: New USB device found, idVendor=35d7, idProduct=7c89, bcdDevice=71.b5 [ 165.842538][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.867446][ T5760] usb 1-1: Product: syz [ 165.892644][ T5760] usb 1-1: Manufacturer: syz [ 165.909586][ T5760] usb 1-1: SerialNumber: syz [ 165.921308][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 165.959546][ T6409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.079974][ T24] usb 3-1: device descriptor read/64, error -71 [ 166.097937][ T6429] loop5: detected capacity change from 0 to 64 [ 166.210393][ T24] usb usb3-port1: attempt power cycle [ 166.288574][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 166.571006][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 166.619710][ T804] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 166.671862][ T24] usb 3-1: device descriptor read/8, error -71 [ 166.879826][ T804] usb 5-1: not running at top speed; connect to a high speed hub [ 166.986158][ T804] usb 5-1: config 5 has an invalid interface number: 66 but max is 0 [ 167.006641][ T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 167.076517][ T804] usb 5-1: config 5 has no interface number 0 [ 167.115622][ T24] usb 3-1: device descriptor read/8, error -71 [ 167.149159][ T804] usb 5-1: config 5 interface 66 altsetting 10 has an endpoint descriptor with address 0x39, changing to 0x9 [ 167.248147][ T5760] usb 1-1: USB disconnect, device number 3 [ 167.272837][ T804] usb 5-1: config 5 interface 66 altsetting 10 endpoint 0x9 has invalid maxpacket 52920, setting to 64 [ 167.312024][ T24] usb usb3-port1: unable to enumerate USB device [ 167.363018][ T804] usb 5-1: config 5 interface 66 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 167.400907][ T804] usb 5-1: config 5 interface 66 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.459644][ T804] usb 5-1: config 5 interface 66 has no altsetting 0 [ 167.481823][ T6440] loop5: detected capacity change from 0 to 64 [ 167.529906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.572705][ T804] usb 5-1: New USB device found, idVendor=35d7, idProduct=7c89, bcdDevice=71.b5 [ 167.582360][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.617254][ T804] usb 5-1: Product: syz [ 167.620023][ T6442] loop3: detected capacity change from 0 to 64 [ 167.686492][ T804] usb 5-1: Manufacturer: syz [ 167.854432][ T804] usb 5-1: SerialNumber: syz [ 167.862368][ T6420] loop1: detected capacity change from 0 to 32768 [ 167.879221][ T6420] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.139 (6420) [ 167.938749][ T6420] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 167.946460][ T6434] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 168.079427][ T6420] BTRFS info (device loop1): using crc32c checksum algorithm [ 168.119086][ T6420] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 168.168311][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 168.176287][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 168.213180][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 168.305369][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 168.329461][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 168.353628][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 168.415721][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 168.451530][ T5782] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 168.468555][ T804] usb 5-1: USB disconnect, device number 3 [ 168.520670][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 168.521026][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 168.610501][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 168.634309][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 168.649713][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 168.694424][ T6420] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 168.757133][ T6420] BTRFS error (device loop1): open_ctree failed: -12 [ 168.791007][ T6467] ipvlan2: entered allmulticast mode [ 168.796758][ T6467] syz_tun: entered allmulticast mode [ 168.810181][ T5782] usb 4-1: Using ep0 maxpacket: 16 [ 168.847889][ T5782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 168.874963][ T6471] ubi: mtd0 is already attached to ubi16 [ 168.900885][ T5782] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.961060][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.994584][ T5782] usb 4-1: Product: syz [ 169.024348][ T5782] usb 4-1: Manufacturer: syz [ 169.064434][ T5782] usb 4-1: SerialNumber: syz [ 169.139165][ T5782] usb 4-1: config 0 descriptor?? [ 169.221042][ T5782] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 169.279146][ T5782] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 170.503350][ T5782] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 171.002758][ T6480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.151902][ T5782] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 172.227895][ T6485] loop1: detected capacity change from 0 to 64 [ 172.237534][ T6480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.903225][ T5782] em28xx 4-1:0.0: board has no eeprom [ 172.967846][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 172.979016][ T5782] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 172.989281][ T5782] em28xx 4-1:0.0: dvb set to bulk mode. [ 172.997921][ T5747] em28xx 4-1:0.0: Binding DVB extension [ 173.024366][ T5782] usb 4-1: USB disconnect, device number 3 [ 173.056366][ T5782] em28xx 4-1:0.0: Disconnecting em28xx [ 173.173904][ T5747] em28xx 4-1:0.0: Registering input extension [ 173.213967][ T5782] em28xx 4-1:0.0: Closing input extension [ 173.282765][ T5782] em28xx 4-1:0.0: Freeing device [ 173.346070][ T6501] loop0: detected capacity change from 0 to 512 [ 173.368181][ T6501] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.435097][ T6505] loop1: detected capacity change from 0 to 64 [ 173.448111][ T6506] loop4: detected capacity change from 0 to 64 [ 173.495486][ T6501] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 173.502618][ T6501] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.162: bg 0: block 248: padding at end of block bitmap is not set [ 173.502656][ T6501] loop0: lost filesystem error report for type 5 error -117 [ 173.508722][ T6501] Quota error (device loop0): write_blk: dquota write failed [ 173.508819][ T6501] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 173.508872][ T6501] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.162: Failed to acquire dquot type 1 [ 173.508898][ T6501] loop0: lost filesystem error report for type 5 error -28 [ 173.509897][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 173.509918][ C0] EXT4-fs (loop0): last error at time 1779810452: ext4_acquire_dquot:7034 [ 173.511635][ T6501] EXT4-fs (loop0): 1 truncate cleaned up [ 173.521152][ T6501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 173.670185][ T5782] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 173.754749][ T6511] NILFS (nullb0): couldn't find nilfs on the device [ 174.573423][ T6513] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 174.573799][ T6513] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 131074 [ 174.573872][ T6513] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.162: Failed to acquire dquot type 1 [ 174.926863][ T5782] usb 4-1: not running at top speed; connect to a high speed hub [ 174.927887][ T5782] usb 4-1: config 5 has an invalid interface number: 66 but max is 0 [ 174.927914][ T5782] usb 4-1: config 5 has no interface number 0 [ 174.927957][ T5782] usb 4-1: config 5 interface 66 altsetting 10 has an endpoint descriptor with address 0x39, changing to 0x9 [ 174.927986][ T5782] usb 4-1: config 5 interface 66 altsetting 10 endpoint 0x9 has invalid maxpacket 52920, setting to 64 [ 174.928016][ T5782] usb 4-1: config 5 interface 66 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 174.928040][ T5782] usb 4-1: config 5 interface 66 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.928070][ T5782] usb 4-1: config 5 interface 66 has no altsetting 0 [ 174.933209][ T5782] usb 4-1: New USB device found, idVendor=35d7, idProduct=7c89, bcdDevice=71.b5 [ 174.933242][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.933264][ T5782] usb 4-1: Product: syz [ 174.933282][ T5782] usb 4-1: Manufacturer: syz [ 174.933299][ T5782] usb 4-1: SerialNumber: syz [ 174.948440][ T6493] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 175.160723][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 175.315256][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 175.330249][ T6519] loop1: detected capacity change from 0 to 64 [ 175.378183][ T6518] ipvlan2: entered allmulticast mode [ 175.583886][ T6518] syz_tun: entered allmulticast mode [ 175.639659][ T6516] comedi comedi3: 8255: I/O base address not correctly aligned [ 175.830320][ T5782] usb 4-1: USB disconnect, device number 4 [ 175.856603][ T6519] ------------[ cut here ]------------ [ 175.862575][ T6519] !buffer_uptodate(bh) [ 175.862591][ T6519] WARNING: fs/buffer.c:1087 at mark_buffer_dirty+0x299/0x410, CPU#1: syz.1.166/6519 [ 175.877230][ T6519] Modules linked in: [ 175.881974][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.1.166 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.893097][ T6519] Tainted: [L]=SOFTLOCKUP [ 175.897483][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.908665][ T6519] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 175.914689][ T6519] Code: 4c 89 f7 e8 09 5c da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 64 63 fb ff e8 2f 17 6f ff eb 8c e8 28 17 6f ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 1a 17 6f ff 90 0f 0b 90 e9 cf fd ff ff [ 175.935927][ T6519] RSP: 0018:ffffc9000e4b7608 EFLAGS: 00010283 [ 175.942798][ T6519] RAX: ffffffff82569ed8 RBX: ffff88803556de80 RCX: 0000000000080000 [ 175.951083][ T6519] RDX: ffffc90003f62000 RSI: 000000000000186a RDI: 000000000000186b [ 175.959127][ T6519] RBP: ffff88807d434001 R08: ffff88803556de87 R09: 1ffff11006aadbd0 [ 175.967282][ T6519] R10: dffffc0000000000 R11: ffffed1006aadbd1 R12: ffff88804faf1600 [ 175.975533][ T6519] R13: ffff88807623ce80 R14: ffff88803556de80 R15: 000000000000000a [ 175.983662][ T6519] FS: 00007fd9939166c0(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 175.992770][ T6519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.999480][ T6519] CR2: 0000200000003000 CR3: 0000000051bf9000 CR4: 0000000000350ef0 [ 176.007546][ T6519] Call Trace: [ 176.011175][ T6519] [ 176.014304][ T6519] bfs_get_block+0x5da/0xae0 [ 176.020024][ T6519] __block_write_begin_int+0x6c6/0x1910 [ 176.025631][ T6519] ? __pfx_bfs_get_block+0x10/0x10 [ 176.031706][ T6519] ? __pfx___block_write_begin_int+0x10/0x10 [ 176.037888][ T6519] ? __pfx_bfs_get_block+0x10/0x10 [ 176.043160][ T6519] block_write_begin+0x8d/0x120 [ 176.048249][ T6519] ? bfs_write_begin+0x1e/0xd0 [ 176.053131][ T6519] bfs_write_begin+0x35/0xd0 [ 176.057758][ T6519] generic_perform_write+0x2e2/0x8f0 [ 176.063182][ T6519] ? __pfx_generic_perform_write+0x10/0x10 [ 176.069122][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.074849][ T6519] ? file_update_time_flags+0x219/0x4a0 [ 176.080798][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.086477][ T6519] ? __generic_file_write_iter+0xf9/0x230 [ 176.092443][ T6519] ? generic_file_write_iter+0x136/0x680 [ 176.098236][ T6519] generic_file_write_iter+0x14a/0x680 [ 176.103811][ T6519] ? __pfx_generic_file_write_iter+0x10/0x10 [ 176.110338][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.116297][ T6519] ? __lock_acquire+0x6b5/0x2cf0 [ 176.122313][ T6519] ? __pfx_aa_file_perm+0x10/0x10 [ 176.127386][ T6519] ? __pfx_futex_wake_mark+0x10/0x10 [ 176.133697][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.139485][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.145405][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.151229][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.157010][ T6519] vfs_write+0x61d/0xb90 [ 176.161408][ T6519] ? __pfx_vfs_write+0x10/0x10 [ 176.166314][ T6519] ? __fget_files+0x2a/0x420 [ 176.171126][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.176877][ T6519] ksys_write+0x150/0x270 [ 176.181406][ T6519] ? __pfx_ksys_write+0x10/0x10 [ 176.186402][ T6519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.192575][ T6519] do_syscall_64+0x15f/0x560 [ 176.197304][ T6519] ? trace_irq_disable+0x3b/0x140 [ 176.202700][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.208996][ T6519] RIP: 0033:0x7fd99299ce59 [ 176.213574][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.235178][ T6519] RSP: 002b:00007fd993916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.244497][ T6519] RAX: ffffffffffffffda RBX: 00007fd992c15fa0 RCX: 00007fd99299ce59 [ 176.253118][ T6519] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007 [ 176.261408][ T6519] RBP: 00007fd992a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 176.269504][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.277890][ T6519] R13: 00007fd992c16038 R14: 00007fd992c15fa0 R15: 00007ffef2d05648 [ 176.286068][ T6519] [ 176.289116][ T6519] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.296493][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.1.166 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.307377][ T6519] Tainted: [L]=SOFTLOCKUP [ 176.311723][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.321777][ T6519] Call Trace: [ 176.325139][ T6519] [ 176.328066][ T6519] vpanic+0x56c/0xa60 [ 176.332070][ T6519] ? __pfx__printk+0x10/0x10 [ 176.336675][ T6519] ? __pfx_vpanic+0x10/0x10 [ 176.341193][ T6519] ? is_bpf_text_address+0x292/0x2b0 [ 176.346482][ T6519] ? is_bpf_text_address+0x26/0x2b0 [ 176.351873][ T6519] panic+0xc5/0xd0 [ 176.355644][ T6519] ? __pfx_panic+0x10/0x10 [ 176.360138][ T6519] __warn+0x315/0x4c0 [ 176.364227][ T6519] ? mark_buffer_dirty+0x299/0x410 [ 176.369359][ T6519] ? mark_buffer_dirty+0x299/0x410 [ 176.374500][ T6519] __report_bug+0x29a/0x540 [ 176.379479][ T6519] ? filemap_get_entry+0xcd/0x3f0 [ 176.384594][ T6519] ? filemap_get_entry+0xcd/0x3f0 [ 176.389656][ T6519] ? mark_buffer_dirty+0x299/0x410 [ 176.394863][ T6519] ? __pfx___report_bug+0x10/0x10 [ 176.400074][ T6519] ? __pfx_folio_mark_accessed+0x10/0x10 [ 176.405726][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.411512][ T6519] ? mark_buffer_dirty+0x299/0x410 [ 176.416671][ T6519] report_bug+0x16a/0x220 [ 176.421025][ T6519] ? mark_buffer_dirty+0x299/0x410 [ 176.426222][ T6519] ? mark_buffer_dirty+0x29b/0x410 [ 176.431587][ T6519] handle_bug+0x9c/0x200 [ 176.435992][ T6519] exc_invalid_op+0x1a/0x50 [ 176.440528][ T6519] asm_exc_invalid_op+0x1a/0x20 [ 176.445384][ T6519] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 176.451298][ T6519] Code: 4c 89 f7 e8 09 5c da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 64 63 fb ff e8 2f 17 6f ff eb 8c e8 28 17 6f ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 1a 17 6f ff 90 0f 0b 90 e9 cf fd ff ff [ 176.471290][ T6519] RSP: 0018:ffffc9000e4b7608 EFLAGS: 00010283 [ 176.477368][ T6519] RAX: ffffffff82569ed8 RBX: ffff88803556de80 RCX: 0000000000080000 [ 176.485339][ T6519] RDX: ffffc90003f62000 RSI: 000000000000186a RDI: 000000000000186b [ 176.493570][ T6519] RBP: ffff88807d434001 R08: ffff88803556de87 R09: 1ffff11006aadbd0 [ 176.501583][ T6519] R10: dffffc0000000000 R11: ffffed1006aadbd1 R12: ffff88804faf1600 [ 176.509581][ T6519] R13: ffff88807623ce80 R14: ffff88803556de80 R15: 000000000000000a [ 176.517654][ T6519] ? mark_buffer_dirty+0x298/0x410 [ 176.522828][ T6519] ? mark_buffer_dirty+0x298/0x410 [ 176.528006][ T6519] bfs_get_block+0x5da/0xae0 [ 176.532792][ T6519] __block_write_begin_int+0x6c6/0x1910 [ 176.538362][ T6519] ? __pfx_bfs_get_block+0x10/0x10 [ 176.543477][ T6519] ? __pfx___block_write_begin_int+0x10/0x10 [ 176.549557][ T6519] ? __pfx_bfs_get_block+0x10/0x10 [ 176.554669][ T6519] block_write_begin+0x8d/0x120 [ 176.559713][ T6519] ? bfs_write_begin+0x1e/0xd0 [ 176.564654][ T6519] bfs_write_begin+0x35/0xd0 [ 176.569287][ T6519] generic_perform_write+0x2e2/0x8f0 [ 176.574945][ T6519] ? __pfx_generic_perform_write+0x10/0x10 [ 176.580762][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.586567][ T6519] ? file_update_time_flags+0x219/0x4a0 [ 176.592137][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.597775][ T6519] ? __generic_file_write_iter+0xf9/0x230 [ 176.603589][ T6519] ? generic_file_write_iter+0x136/0x680 [ 176.609329][ T6519] generic_file_write_iter+0x14a/0x680 [ 176.614806][ T6519] ? __pfx_generic_file_write_iter+0x10/0x10 [ 176.620794][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.626424][ T6519] ? __lock_acquire+0x6b5/0x2cf0 [ 176.631366][ T6519] ? __pfx_aa_file_perm+0x10/0x10 [ 176.636488][ T6519] ? __pfx_futex_wake_mark+0x10/0x10 [ 176.641984][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.647925][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.653652][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.659389][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.665326][ T6519] vfs_write+0x61d/0xb90 [ 176.669591][ T6519] ? __pfx_vfs_write+0x10/0x10 [ 176.674380][ T6519] ? __fget_files+0x2a/0x420 [ 176.679007][ T6519] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.684821][ T6519] ksys_write+0x150/0x270 [ 176.689492][ T6519] ? __pfx_ksys_write+0x10/0x10 [ 176.694471][ T6519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.700546][ T6519] do_syscall_64+0x15f/0x560 [ 176.705192][ T6519] ? trace_irq_disable+0x3b/0x140 [ 176.710273][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.716185][ T6519] RIP: 0033:0x7fd99299ce59 [ 176.720771][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.741001][ T6519] RSP: 002b:00007fd993916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.749691][ T6519] RAX: ffffffffffffffda RBX: 00007fd992c15fa0 RCX: 00007fd99299ce59 [ 176.757845][ T6519] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007 [ 176.766022][ T6519] RBP: 00007fd992a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 176.774514][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.783055][ T6519] R13: 00007fd992c16038 R14: 00007fd992c15fa0 R15: 00007ffef2d05648 [ 176.791055][ T6519] [ 176.794763][ T6519] Kernel Offset: disabled [ 176.799295][ T6519] Rebooting in 86400 seconds..