last executing test programs: 14.295560014s ago: executing program 2 (id=43): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) 10.712857435s ago: executing program 5 (id=57): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40) 9.678346492s ago: executing program 5 (id=61): newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x4182, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @private, @remote}, &(0x7f00000005c0)=0xc) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) r5 = dup(r4) sendmsg$key(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180000030000000000000000000000010018"], 0x18}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r6) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0xf8dd83d2baf4c5e6}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x101}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@dont_measure}]}}, 0x0, 0x0, &(0x7f0000000400)="b3eacdb8816db052e5e60ab66319108bfffd79eea9313012833c2e46153ea140d0b8ce17e7d560340c8028dd106aa149534236412e7e67e2ac3ab9ddf27437abe6b3ce9c3a56d9968f90f793c07f253f458dd7523db851f6d6a0b0ec03bb0b3fd5658a04edf7d48875b27f41c7009b6cb16462a184f5eae021e08a1d506c720afb6bcd3b78e63c63966758f18bdc33bebc4142689f661e5af01ee03afec0444625e66390a6cccd167f014caff84959e898202b02b7e492bbf969693607b2868162") r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}}, 0x0) 7.675094203s ago: executing program 2 (id=62): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x201480f, &(0x7f0000000100)={[{@map_off}, {@block={'block', 0x3d, 0x200}, 0x0}, {}, {@check_relaxed}, {@check_relaxed}, {@norock, 0x41}, {}, {@check_strict}, {@mode={'mode', 0x3d, 0x3}}, {@map_acorn}, {@session={'session', 0x3d, 0x29}}, {@unhide}]}, 0x2, 0x67b, &(0x7f0000000980)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r3 = dup(r1) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x64004040) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c0300000000000000370d5800454a5fd760d8a81c788f3a66ff0ca3f9950047013f72611586edf5eefc10514ee5dd89fb39f5c83c3f206ffc5e792a744a369a41bb8f418b298fdc540544d7da2fad464afda58f20e30cb597bbaf1a44ef6e5f7c8af2cd1ed419150000000000000000000000123a4d2575f58f7706eebab005fac6f91ffba651786bdfc1342fbb2354a4"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r8}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r9}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_misc(r11, &(0x7f0000000400)=ANY=[], 0x386) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1701ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 7.31381202s ago: executing program 2 (id=63): socket(0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x3, 0x1}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) mbind(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f00003ba000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x3d3, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x9f, 0x96, 0x45, 0x10, 0xb05, 0x18f0, 0x5a43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c1, 0x1, 0x8, 0x1f, 0x60, 0x7f, [{{0x9, 0x4, 0x13, 0x81, 0xc, 0xff, 0xff, 0xff, 0x9, [], [{{0x9, 0x5, 0x9, 0x10, 0x400, 0x9, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x59}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7e, 0x7fff}]}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x81, 0x2, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x6}, @generic={0x2a, 0x22, "2c0b5ff9680023e3ec9f0edee18492842c2bdc02ec37f091433baeb9c7caeca6fe1279c89437a35e"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x0, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x52, 0x8001}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x3, 0x1f, 0x8, [@generic={0xab, 0x31, "53d031b0cc9845818f20a384ef2fd10b66421e8dc9afea7d7193ae93e62e02aba1e06f37b264de569da15cb0886863f138aee764a6b094845d0d058e64b2c76e08a2b77fabec5029ec8e2606c5f7bf2e41165f97c16455d6654675324df3c2a76c3a979acc10f9a5fd4b6d99ccb494f457c7f8e22cdf3361e96be60b98ae1719d1c21fd00f74590386c432b1e76dee8284e1f82ffe6957f8c4f843296100b1d6d4a1f8e762c319d953"}]}}, {{0x9, 0x5, 0xe, 0xdc5bab343694aecf, 0x8, 0x4, 0xe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x3bb0}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0xc, 0x9, 0x40, [@generic={0xf8, 0x4, "ef238d591f05754d1fd5e40a300f0f162f1d090033ef2074fa7cde44766c06a013482e40bf85ad6b7ecb4a299412fec218300f67f880c7d1f7b192e483b61fa1eb4f26d420be7e7278dbb5515df62995fe1c0e7e5a20f6e649a31bc34b2d1063b135f015718987489de5ec77af66476313012eb2eaecb5e81edf14e33a57bd59f129f64b1a4c86476dcc188274a0a87baeef06d350539f2d67b5c9f43aa3f54c931391fd34fad3bdd5b872ce55ce8417ea0aebaa27a77dfcb0da61a35b89730fe319a4b43742378cf823d2b4d5df9db1761a08a0be679d36d6c0d72f8d7303a94a7945778ec32b535560189dedab90e3dfbce1b8cd2d"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x7b, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x4393}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xff, 0x7, 0xfd}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x57, 0x8}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xfb, 0xe7, 0x1, [@generic={0xfb, 0xd, "f608d88d9cfbafd0e354735b7d353b0eb01d666eb2bfa17c8bbc8dbc8fecf9d23662f3aa53628ad139034bebbfc21775f05181a4b8bb204c7a481e732e57f07ecbd7dbfbd1946ba321f7de2f6a63edf96f7495eb1715186a24fa0871be9d7bf6888b43a943e1e6bbef4c998a7a9e9e816585d8a3437be607661c421329d4b71a3e42c79fb15e129d22408f19dd020665c30ff9bac22a126f62922cac77d08963749022c855f000c07a38949750d9fc7087c0f369e3141db37b531165e3351fb646b4a1bdb146d5ed0bd38689b3f3b26307c6eb77afaf5c21f83701097068b9e1609a6e3001cb36149d03e5329e77f9bd4cbfd40f824073c885"}, @generic={0x3c, 0xe, "1954ea3261df9a3a041c5e13526b3f34452eadad5a7a2149bf0ac4b8735fd00dcd2be4c8d3b687c52ed75107bcfc5c836c53081cdce9d26f1ef0"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x7f, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x37}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0xfa, 0x40, 0x2, 0x0, 0x5}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x8, [{0x6d, &(0x7f0000000640)=@string={0x6d, 0x3, "44a1ab3711276c65c05679e9dd67a10120c740b92dc2e0f55a30e446a3c09ca7a3315635cce59c4b4318d0d6c15496d0d6daeca536d0fd085b21f6e066e637e7e67f38be595816b1b356a9653fbc7a4251722299ca7e83ccd272cefbc66b0e9d51d5d8948134dc3e48ff64"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x441}}, {0xf5, &(0x7f0000000780)=@string={0xf5, 0x3, "0ece79e2e3adbb97c3684d37f3be0b2c624b58e7c393e4eaf84e4cce0c5249826a22c6eeff0785488d97de1abb850ecc2d27dce74002609553eaa534c92a7d4670a3670feda7dd937e2af6be1206ed14283dec37742ad7b4ad3d5f32139ed954b7114297b79675757da6dcb60f2c71c82eaf9195ed434f9429f9b5e25cbef196187b3dd40aa0af65cbd0237dcf6628e7e5271d188e88a7d4804da0f8a6e4c9bf789ecccbe42184730ee74c0883aba15ef381473c482f77f08fa05f25c926f39e2fdda5f64a359df372cfddd66df7da50624ddb0dd46ac3193ade85f6022ee30f24686eb88957525b26c1ad2973d589c88488f0"}}, {0xc4, &(0x7f0000000880)=@string={0xc4, 0x3, "70cc28660576a46f9cd1317c134074e4f55a3de14133d762b24e414168a8d331a5a80cc1620c12f65ec42af222c7b043fe4bb98c025280f730c59de737bf124a0101f6af2789b1f29500de64ac6fdab19d0fe602b7357e86624c8d3a7e0b97a02ea4357047058721a3cdaef5a1ce86d9633353aaa3086b006bd52df5a8a5a7d71989b1455f6da7d9049963d868c6084c3f8b8b7c6cf8da3274572fe166b35f174414f2d8e93fd6abb3cf20ffd0cf078d43349568f5fecb46976c346b612a34c762cb"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x429}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, 0xffffffffffffffff, 0x16, 0x0, 0x7, @prog_id}, 0x20) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000500)={0x1, 0x0, &(0x7f00000004c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000600)={r5, 0x0, 0x0}) syz_usb_connect$uac1(0x5, 0xea, &(0x7f0000000ac0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xf7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0xae, 0x40, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x3, 0x3, 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x6, 0x4, [0x1, 0x6, 0x7, 0x1], 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x4, 0x29, 0x5, 0x9, 0x7}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x5, 0x81, "ffe99f"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x205, 0x6, 0x3, 0x6, 0x9, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x7f, 0xc2, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x9, 0xf8, "fa61458db5bc65"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x9, 0x5, "c3a49e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x1, 0x0, {0x7, 0x25, 0x1, 0x1, 0x2, 0xfff8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x4, 0xe, 0xa9, "b7cbe13d04b17c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1f, 0x7f, 0x6, {0x7, 0x25, 0x1, 0x0, 0xcc, 0x3}}}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x1, 0x7, 0x51, 0x10, 0xbc}, 0x1b2, &(0x7f0000000c00)={0x5, 0xf, 0x1b2, 0x5, [@generic={0xd6, 0x10, 0x4ec8083b7785fe0d, "d72f2e8a4e411cfddc1e3f4e585cc9c92bf7c26b381483b6f9d4cf669373d349fafb4c4ecea45dd3d8a7ac761e0b06ebd6097adaf7017f39a5faba62a5f3b768b8ae4c19abd6102056398b3624192aa1e0b770c967b3d513ebf2d942745f595f0629ff89d2448c1082f23752a243d48bab0c8cf7c94e8faf8e49f12ac336c040a5941bfe4e094197b876f96164a123879a1ce9922d4cfff8bdd3091658a76a6d40eb8d2381ed11b31738022d689c41f1b577d9b8f046adcc74b8087c82a96858d9d56f6d95393f7aaa873176dd378c311a354c"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x5, 0x2}, @generic={0x59, 0x10, 0x2, "a1db6c3c5064f4820a1e2f1c30a898e97d49f73d48f2ef1bb2ceda7fde1cb1df8c4f4e3eac300f0af21de55a3755240ead03b40876cc9fd2559dc7fcd71609399853aa9dfae5ec5663cf05588c724eddc811d63e5961"}, @generic={0x63, 0x10, 0x2, "f9e43c230c92aa99b6cee2aae22018066a93f569efeff4c0a3e66a4d929e3e92742d7d83a9f985d7a416d615a779c47cda638f4e966e1acf2215d8bec2072567e0fdc92c33b59ff5618c04c6a7f8732781b94e864d021b8ba35a1ab0225a920d"}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "fcaec8e851941e09d05129b55a16d79a"}]}, 0x3, [{0xa, &(0x7f0000000dc0)=@string={0xa, 0x3, "f46bac471c7685b5"}}, {0xa3, &(0x7f0000000e00)=@string={0xa3, 0x3, "4cdaca136289811707d9bf6a48d655a0d1948ba35db406c8f0078c5b9b5febba8b157f022f9cd71db5ccfefce35a4457f9d4fc89d6ed2ec5daf9e3b308169dde526f158158aa83ccae0f8110543805d35f55a2720c86372825aa0e2fb5b87ebdab72598eb552a3baa195c77d81fec680864074909be77a83a5fcb1e7258b75ae059292877ec640fb3cc134e7f8eadf86005f665ec65dbf95e6b260f8b769204766"}}, {0x68, &(0x7f0000000ec0)=@string={0x68, 0x3, "c67ea546d3a64973a9ed4f253a9be56a7a24a0e9f5c624951264bcc1870dd3b431e5e102b9a1379c241ce083a94b9ae3f0660572e4f256302d9c1534d4810ba3661a38e5df1bcfc90d31bb1fa33762dd5bfd354151df252a6cdc080e00bc2a2bedecb0928404"}}]}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r6, &(0x7f0000002a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x5, 0x0, 0x40}, [{}]}, 0x78) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000140)={r7, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r9, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x40000000, 0xfffffffa}}) syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x42800) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 5.630022144s ago: executing program 5 (id=68): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 5.226791732s ago: executing program 5 (id=72): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 3.565041582s ago: executing program 2 (id=87): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001000000aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 3.563599638s ago: executing program 3 (id=88): bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000010c0), &(0x7f0000001100)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003f00)={{{@in6, @in6=@private2}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f0000004000)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 3.562665378s ago: executing program 4 (id=89): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2042, 0x0) pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="06", 0x7ffffff2}], 0x1, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000000)='./file0\x00', 0x0) 3.326445459s ago: executing program 3 (id=90): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000840)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)="8557fba58fc0e2252453d84f8230cc96659d0e4458e818b02b45ec882ed49305fd6a8bbf97ee86aba2872b72a7d93e714516be85372a95879b1799e107cced78cf0a438733de9ab3b114cca01d55950000000000000080f15645ba13c7b50d81f56217b25afaea809398a3bca505b5920766e3aa8000a6", 0x77}, {&(0x7f0000000a40)="383f64d83a04ee94219d9e4b8a44c8e7a53731d262650dafe882ea140e87b25032b5f626f0d53153", 0x28}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r1, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 3.243893697s ago: executing program 0 (id=91): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x7, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) io_setup(0x0, &(0x7f0000000300)) io_setup(0x8, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x40000000015, 0x5, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES16=r6, @ANYRES8=r0, @ANYRES16=r5], 0xfdef) 3.162443641s ago: executing program 3 (id=92): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x53) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) 2.961399962s ago: executing program 4 (id=93): r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) 2.86733582s ago: executing program 1 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000005304"], 0x70}}, 0x0) 2.674950891s ago: executing program 3 (id=95): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x100584c, 0x0) 2.506184748s ago: executing program 1 (id=96): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='hrtimer_init\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) 2.175899817s ago: executing program 4 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x30}, 0x0) 2.122494633s ago: executing program 1 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x59d, &(0x7f00000009c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.97249663s ago: executing program 0 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0x20008, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x0, 0xcc}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) 1.829996975s ago: executing program 3 (id=100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) write$cgroup_pid(r1, 0x0, 0xfffffe89) 1.799815776s ago: executing program 4 (id=101): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000700)) getsockname$packet(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r3, 0x0, 0x4) msgsnd(0x0, 0x0, 0x2000, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000002980)={@loopback, 0x76}) statx(r2, &(0x7f0000000280)='./file0\x00', 0x100, 0x10, &(0x7f0000000780)) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) fcntl$getown(r1, 0x9) getuid() socket(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='jbd2_handle_stats\x00'}, 0x10) unlink(&(0x7f0000000080)='./cgroup\x00') 1.649929856s ago: executing program 0 (id=102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) 1.553748103s ago: executing program 1 (id=103): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r1, &(0x7f00000009c0)=""/156, 0x9c, 0x0) 1.380824382s ago: executing program 4 (id=104): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000840), 0x4f3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000980)={0x1, @win={{0x85b, 0x0, 0x0, 0x179c}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 1.368731261s ago: executing program 0 (id=105): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) chroot(&(0x7f0000000240)='./file3\x00') 1.172625409s ago: executing program 1 (id=106): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c80010000c000100030508000000000004fc000061b71808419bd7b9166299d65da957dfa518f797dc651316c182f93a2563ffb1ad684c557aef73142c3508ae9b84dfc88ea0bfcdc86d86eec53f9fdb9a001165a5b4c540d8e9862867f80f14551240c05a"], 0x15) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04310600eeff000000"], 0x9) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f00000000c0)=""/231, 0xe7}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000280)=""/25, 0x19}], 0x4, 0x337070cc, 0x9) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x2fb}, {0x3, [{@none, 0x9a, 0x4, "e670b5", 0x0, 0x7, "709d61a33823e2b6d7852bcc5976c4f4d1af24885cf83fe596c49e0755d164502460be03acd8cc7f7143b1ceb560b3f6cedf60c07a68e9b50a0b85fc16c1490a3d122c8026b67098fab2ec3778b0ff73745b4909023a11b9cdaee2e749bd2e5071cff25964124fb4e7ff9771bad77ccb9836a7cd2b2a07eddba6d1b532e7adcf9decaf71966bea908a5b69a10d905948161ee64e5981c3fe4f2ceb3ee2f8a30aa41b0028f9fbaaa8fd1c812f482eafd6e8e8ce2e2f95d77c4e7728e65458224f9a63ddd3cb629d0f908b867bfdf92f5a3e8b9edc9771acd88f0f384653d268ccee43b53c4da52a9a639c7810897ebfe9"}, {@none, 0x5, 0x1, "f8ba14", 0x3ff, 0x1, "b779576776e4805321e0d0cfa7bd3c1dae0196c78bbb274a8ae92e960ddfcb518a6be690064aa0e4728e31b31d05df18f497c402cb60c6aa405ab09887a13f61a84dbe86576de68171edaa68c3dcb987c18ff600389524df5c471d6625d4fccb4228ba92c1ab1ea394caaed4e8dce4be0026e18587e7cf889613941d3bb02cef50613dd2ce1161604c47a364ba3de44970abaff444f7b061691647c4c8a4f60e6456f995ef9b8e27e0b0abb8050f11bc5096b5b03cb41e5b161b2a1228f8bafed714db3bc659f3c9961fa4e099bcbd541a9e27daa4ac3194639f115dc783501a9c71fd0c8cbf47df4ffd634d26787a69"}, {@none, 0x6, 0x9, "8e515e", 0x0, 0x1, "d3f98d0977e822fd92992784613b8b1840819778c144adcaf0e5207567686efe974f41ab1930e9f73c274a3d5684f2bc932be27e34b82ff36e76fac07618570845d246af61be7a4f9d58f71876c139a1ad5870b47f5d30d4097620e624bcf7384defa2e7bd3e99779d15d87c7d8a4890db8ce086a200f0d08593a2999133fdfa362c628ebef88582f95aff34dbdd6b3c57becbf4b9f77e08692f17f92e0d85d3467f344952f902eb420fe0481c72dd8bdc54873e83dc67bc0b37bdeddf4410a58a9cc4c34dd232438354f28846ed2916056a3885753426702fe3908b4f40bf265abfb77125058869efdd6c7f93965528"}]}}}, 0x2fe) r1 = socket(0xa, 0x6, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(0xffffffffffffffff, 0x0) accept$inet6(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)={0x1b8, 0x0, 0x4, 0x0, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x84, 0xc5, "bf72ebb928a61e707b9b713c4ab0dc24c0461b4512d21e4c5a67a2eff4779af3f750361ee18dde99ee534082ef25106d02dd35489551a820948406a2199f126add0c50deb5c038bd35775fc22ebfba37687d3b0098ffd6656dc1b0f8b5b26e028304a617cb334e722981cbee364671d5070c1f1d227bc3ce7bd4972ab3312ca8"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x166}, @NL80211_ATTR_VENDOR_DATA={0xf0, 0xc5, "2cf63e876057421211e5dea968676e1380e149becd172604d623eb0cb7c8821e91fb541f9e8fc38f31b1a50058f2036cf058667956e2e182a1e70a8e17849decf6b6cf3e5f510f5b2d7db664e6fd684a5f5ba41cad65dcfd904597b183305ca572e7c9a96f8f7c57626a52d786568609fc06a753ec050ba364bcf82c4a36b37a296e26ffefbd18e14a285b729b781a9104ae02200edcd26dba5c2872d87ddb08d57997f70cc2247fcc0e86e2fea9ea2eb36f0ebc1328bfc996661cbec24c6351e78201c694140b429ace4d6dd2532e4cd29845c3d4c452642c94f0e5d2fa46c21a511da11d62dba92e5d337c"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1f}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(0xffffffffffffffff) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000280)) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x3c, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x25, 0x11, 0x0, 0x1, [@generic="43027c2b0269152f038733a7725526362062ce174f160f6fb82027a031c2a97c79"]}]}, 0x3c}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) flock(0xffffffffffffffff, 0x0) 1.112710948s ago: executing program 0 (id=107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1.03903315s ago: executing program 3 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[], 0xffdd) 1.738388ms ago: executing program 0 (id=110): pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 2 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x446, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x8, 0x2ef, &(0x7f0000000800)="$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") timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f0000000180)=[{0x0}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 72.018945][ T5077] cgroup: Unknown subsys name 'net' [ 72.190688][ T5077] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.823414][ T5077] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.096602][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.113203][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.123368][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.132034][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.140802][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.143519][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.150131][ T5106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.156324][ T5107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.169624][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.171821][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.180241][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.188275][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.199641][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.205573][ T5108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.207079][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.217460][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.221524][ T5106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.237620][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.238889][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.247355][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.255036][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.260879][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.266090][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.273047][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.280132][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.293990][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.296383][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.308697][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.316032][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.316874][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.323678][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.332848][ T5108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.347794][ T5097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.355375][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.363359][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.372704][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.229358][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 76.269179][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 76.410524][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 76.474848][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 76.592783][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 76.696629][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 76.750797][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.758853][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.766912][ T5092] bridge_slave_0: entered allmulticast mode [ 76.774730][ T5092] bridge_slave_0: entered promiscuous mode [ 76.861003][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.868204][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.876412][ T5087] bridge_slave_0: entered allmulticast mode [ 76.885803][ T5087] bridge_slave_0: entered promiscuous mode [ 76.894837][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.902983][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.910479][ T5092] bridge_slave_1: entered allmulticast mode [ 76.917590][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.925815][ T5092] bridge_slave_1: entered promiscuous mode [ 76.932116][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.024618][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.031921][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.039352][ T5088] bridge_slave_0: entered allmulticast mode [ 77.046872][ T5088] bridge_slave_0: entered promiscuous mode [ 77.055411][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.065985][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.073287][ T5087] bridge_slave_1: entered allmulticast mode [ 77.081193][ T5087] bridge_slave_1: entered promiscuous mode [ 77.143247][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.151636][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.159066][ T5090] bridge_slave_0: entered allmulticast mode [ 77.166499][ T5090] bridge_slave_0: entered promiscuous mode [ 77.175647][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.189644][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.196963][ T5088] bridge_slave_1: entered allmulticast mode [ 77.205411][ T5088] bridge_slave_1: entered promiscuous mode [ 77.231436][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.246054][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.295845][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.303717][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.312091][ T5090] bridge_slave_1: entered allmulticast mode [ 77.319881][ T5090] bridge_slave_1: entered promiscuous mode [ 77.355251][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.380565][ T5102] Bluetooth: hci1: command tx timeout [ 77.380597][ T5097] Bluetooth: hci3: command tx timeout [ 77.381029][ T5108] Bluetooth: hci0: command tx timeout [ 77.431120][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.438424][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.446236][ T5091] bridge_slave_0: entered allmulticast mode [ 77.455014][ T5091] bridge_slave_0: entered promiscuous mode [ 77.461336][ T5102] Bluetooth: hci2: command tx timeout [ 77.468757][ T5108] Bluetooth: hci4: command tx timeout [ 77.469067][ T5102] Bluetooth: hci5: command tx timeout [ 77.481602][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.489337][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.496609][ T5091] bridge_slave_1: entered allmulticast mode [ 77.504697][ T5091] bridge_slave_1: entered promiscuous mode [ 77.555769][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.570205][ T5092] team0: Port device team_slave_0 added [ 77.607184][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.615082][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.623654][ T5089] bridge_slave_0: entered allmulticast mode [ 77.631880][ T5089] bridge_slave_0: entered promiscuous mode [ 77.691344][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.706492][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.735516][ T5092] team0: Port device team_slave_1 added [ 77.760920][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.768159][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.781628][ T5089] bridge_slave_1: entered allmulticast mode [ 77.789750][ T5089] bridge_slave_1: entered promiscuous mode [ 77.800143][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.814940][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.827583][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.923830][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.960763][ T5087] team0: Port device team_slave_0 added [ 77.968497][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.975758][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.002743][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.069509][ T5088] team0: Port device team_slave_0 added [ 78.077977][ T5087] team0: Port device team_slave_1 added [ 78.101662][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.109347][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.136106][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.160117][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.175499][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.190497][ T5091] team0: Port device team_slave_0 added [ 78.211571][ T5088] team0: Port device team_slave_1 added [ 78.223046][ T5090] team0: Port device team_slave_0 added [ 78.246610][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.253661][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.279974][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.297880][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.305041][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.331395][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.401121][ T5091] team0: Port device team_slave_1 added [ 78.427612][ T5090] team0: Port device team_slave_1 added [ 78.624248][ T5092] hsr_slave_0: entered promiscuous mode [ 78.632613][ T5092] hsr_slave_1: entered promiscuous mode [ 78.644921][ T5089] team0: Port device team_slave_0 added [ 78.657795][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.665619][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.691892][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.706062][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.713237][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.739423][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.753454][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.760596][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.786679][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.798870][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.805861][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.832161][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.866038][ T5087] hsr_slave_0: entered promiscuous mode [ 78.874912][ T5087] hsr_slave_1: entered promiscuous mode [ 78.881659][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.889808][ T5087] Cannot create hsr debugfs directory [ 78.898334][ T5089] team0: Port device team_slave_1 added [ 78.915136][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.922297][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.948388][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.960701][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.967685][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.998676][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.121533][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.128545][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.160225][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.242200][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.249881][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.276902][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.325571][ T5090] hsr_slave_0: entered promiscuous mode [ 79.332592][ T5090] hsr_slave_1: entered promiscuous mode [ 79.345022][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.352823][ T5090] Cannot create hsr debugfs directory [ 79.448776][ T5088] hsr_slave_0: entered promiscuous mode [ 79.455756][ T5088] hsr_slave_1: entered promiscuous mode [ 79.462686][ T5102] Bluetooth: hci0: command tx timeout [ 79.462727][ T5108] Bluetooth: hci3: command tx timeout [ 79.473881][ T5102] Bluetooth: hci1: command tx timeout [ 79.484650][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.492875][ T5088] Cannot create hsr debugfs directory [ 79.528969][ T5091] hsr_slave_0: entered promiscuous mode [ 79.535882][ T5091] hsr_slave_1: entered promiscuous mode [ 79.538815][ T5108] Bluetooth: hci5: command tx timeout [ 79.541746][ T5102] Bluetooth: hci4: command tx timeout [ 79.546830][ T5097] Bluetooth: hci2: command tx timeout [ 79.564211][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.571861][ T5091] Cannot create hsr debugfs directory [ 79.754244][ T5089] hsr_slave_0: entered promiscuous mode [ 79.761433][ T5089] hsr_slave_1: entered promiscuous mode [ 79.768034][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.775776][ T5089] Cannot create hsr debugfs directory [ 80.237931][ T5092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.253514][ T5092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.278487][ T5092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.357409][ T5092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.487393][ T5087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.520246][ T5087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.550755][ T5087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.566440][ T5087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.655879][ T5088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.674050][ T5088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.693345][ T5088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.728423][ T5088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.823105][ T5090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.856161][ T5090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.867368][ T5090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.881525][ T5090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.045247][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.062899][ T5091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.083942][ T5091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.128024][ T5091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.184128][ T5091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.253433][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.333704][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.341158][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.367627][ T5089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.383901][ T5089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.422547][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.434297][ T5089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.455487][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.462741][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.499907][ T5089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.539447][ T5108] Bluetooth: hci3: command tx timeout [ 81.540407][ T5097] Bluetooth: hci1: command tx timeout [ 81.544917][ T5102] Bluetooth: hci0: command tx timeout [ 81.620509][ T5108] Bluetooth: hci4: command tx timeout [ 81.624536][ T5097] Bluetooth: hci2: command tx timeout [ 81.626120][ T5102] Bluetooth: hci5: command tx timeout [ 81.702756][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.734007][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.815856][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.823266][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.877334][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.894877][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.934501][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.942061][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.025267][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.032569][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.046004][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.053325][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.072943][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.147459][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.154944][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.205283][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.233540][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.240800][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.357830][ T5088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.368415][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.454511][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.541762][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.673534][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.735370][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.782181][ T5092] veth0_vlan: entered promiscuous mode [ 82.814467][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.821786][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.877060][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.884359][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.931732][ T5092] veth1_vlan: entered promiscuous mode [ 82.954883][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.962209][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.990764][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.997992][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.147923][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.188192][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.290375][ T5089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.365358][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.455175][ T5092] veth0_macvtap: entered promiscuous mode [ 83.501074][ T5092] veth1_macvtap: entered promiscuous mode [ 83.620970][ T5102] Bluetooth: hci1: command tx timeout [ 83.633385][ T5102] Bluetooth: hci0: command tx timeout [ 83.633520][ T5097] Bluetooth: hci3: command tx timeout [ 83.674947][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.695284][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.698893][ T5097] Bluetooth: hci2: command tx timeout [ 83.703502][ T5102] Bluetooth: hci5: command tx timeout [ 83.707897][ T5097] Bluetooth: hci4: command tx timeout [ 83.748272][ T5087] veth0_vlan: entered promiscuous mode [ 83.793900][ T5092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.814189][ T5092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.838797][ T5092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.847610][ T5092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.927571][ T5090] veth0_vlan: entered promiscuous mode [ 83.997103][ T5087] veth1_vlan: entered promiscuous mode [ 84.023803][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.074196][ T5090] veth1_vlan: entered promiscuous mode [ 84.148004][ T5088] veth0_vlan: entered promiscuous mode [ 84.171731][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.323901][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.343974][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.374287][ T5088] veth1_vlan: entered promiscuous mode [ 84.428153][ T5090] veth0_macvtap: entered promiscuous mode [ 84.481583][ T5087] veth0_macvtap: entered promiscuous mode [ 84.493226][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.521816][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.542323][ T5087] veth1_macvtap: entered promiscuous mode [ 84.555227][ T5090] veth1_macvtap: entered promiscuous mode [ 84.637056][ T5089] veth0_vlan: entered promiscuous mode [ 84.695219][ T5088] veth0_macvtap: entered promiscuous mode [ 84.766889][ T5089] veth1_vlan: entered promiscuous mode [ 84.813569][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.837282][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.851500][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.861636][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.874431][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.887372][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.897992][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.913721][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.928663][ T5088] veth1_macvtap: entered promiscuous mode [ 84.950882][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.964171][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.976633][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.991628][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.002995][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.014630][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.026498][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.040646][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.183102][ T5090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.191157][ T5198] loop2: detected capacity change from 0 to 2048 [ 85.198257][ T5090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.198408][ T5090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.224012][ T5090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.275185][ T5087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.284679][ T5087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.286585][ T5198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.294569][ T5087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.317285][ T5087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.394635][ T5092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.451940][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.463881][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.475483][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.487105][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.497099][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.507607][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.520526][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.532405][ T5089] veth0_macvtap: entered promiscuous mode [ 85.621115][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.658849][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.673679][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.685532][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.696892][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.700547][ T5203] syz.2.8[5203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.708544][ T5203] syz.2.8[5203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.710046][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.744189][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.773250][ T5089] veth1_macvtap: entered promiscuous mode [ 85.828369][ T5088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.838174][ T5088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.849215][ T5088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.861728][ T5088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.941353][ T5091] veth0_vlan: entered promiscuous mode [ 85.975990][ T948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.995899][ T948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.028144][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.043098][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.053434][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.064015][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.074642][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.085290][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.095661][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.107188][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.121158][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.165869][ T5091] veth1_vlan: entered promiscuous mode [ 86.183417][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.208066][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.238887][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.250362][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.269178][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.280744][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.292446][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.303493][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.319306][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.387936][ T5089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.397783][ T5089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.406763][ T5089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.415878][ T5089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.501897][ T5210] Zero length message leads to an empty skb [ 86.524941][ T5210] loop2: detected capacity change from 0 to 256 [ 86.532898][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.584163][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.596345][ T5210] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 86.647620][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.675428][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.696197][ T5092] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 86.734102][ T5091] veth0_macvtap: entered promiscuous mode [ 86.873568][ T5091] veth1_macvtap: entered promiscuous mode [ 86.941294][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.950515][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.059898][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.074615][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.243051][ T2440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.266518][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.277999][ T2440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.287669][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.298366][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.312076][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.322805][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.334023][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.347222][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.362788][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.373449][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.387109][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.401847][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.491936][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.502988][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.514843][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.526179][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.537003][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.552184][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.562986][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.574267][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.597690][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.617068][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.643437][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.664849][ T5091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.682941][ T5091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.696521][ T5091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.721625][ T5091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.764707][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.795928][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.132270][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.151248][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.151701][ T5225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.203061][ T5226] loop2: detected capacity change from 0 to 128 [ 88.289387][ T5099] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.346573][ T2440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.400128][ T2440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.529186][ T5099] usb 1-1: Using ep0 maxpacket: 8 [ 88.555289][ T5099] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 88.566371][ T948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.598099][ T948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.606274][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.644874][ T5099] usb 1-1: config 0 descriptor?? [ 88.879033][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.929448][ T5238] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.128877][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 89.142927][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 89.171918][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.183031][ T8] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 89.194815][ T8] usb 3-1: string descriptor 0 read error: -22 [ 89.202074][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.212966][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.311961][ T5222] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 89.415111][ T5222] team0: Device veth1_macvtap failed to register rx_handler [ 89.618281][ T5249] loop4: detected capacity change from 0 to 256 [ 89.785966][ T5249] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196) [ 90.051760][ T5088] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196) [ 90.989383][ T5099] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 91.034537][ T5099] asix 1-1:0.0: probe with driver asix failed with error -71 [ 91.120387][ T5099] usb 1-1: USB disconnect, device number 2 [ 91.198905][ T5241] loop1: detected capacity change from 0 to 32768 [ 91.244864][ T5241] XFS: ikeep mount option is deprecated. [ 91.352296][ T5261] syzkaller0: entered promiscuous mode [ 91.405980][ T5261] syzkaller0: entered allmulticast mode [ 91.414484][ T5241] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 91.416508][ T5245] loop3: detected capacity change from 0 to 32768 [ 91.441476][ T5245] XFS: noikeep mount option is deprecated. [ 91.569058][ T5245] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 91.589165][ T5222] syz.0.1 (5222) used greatest stack depth: 18224 bytes left [ 91.725586][ T8] cdc_ncm 3-1:1.0: bind() failure [ 91.750587][ T5241] XFS (loop1): Ending clean mount [ 91.819431][ T8] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 91.839484][ T8] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 91.867417][ T5241] XFS (loop1): Quotacheck needed: Please wait. [ 91.889934][ T5245] XFS (loop3): Ending clean mount [ 91.918378][ T8] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 91.929595][ T5289] overlayfs: failed to resolve './file0': -2 [ 91.940418][ T5245] XFS (loop3): Quotacheck needed: Please wait. [ 92.008971][ T8] usb 3-1: USB disconnect, device number 2 [ 92.095929][ T5241] XFS (loop1): Quotacheck: Done. [ 92.097605][ T5245] XFS (loop3): Quotacheck: Done. [ 92.221491][ T5089] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 92.269459][ T25] cfg80211: failed to load regulatory.db [ 92.365543][ T5090] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 92.683160][ T5298] loop2: detected capacity change from 0 to 256 [ 92.730460][ T5298] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 92.894913][ T5092] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 93.051856][ T5287] loop0: detected capacity change from 0 to 32768 [ 93.067628][ T5287] XFS: ikeep mount option is deprecated. [ 93.150113][ T5287] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 93.375009][ T5287] XFS (loop0): Ending clean mount [ 93.403101][ T5287] XFS (loop0): Quotacheck needed: Please wait. [ 93.484849][ T5287] XFS (loop0): Quotacheck: Done. [ 93.524884][ T57] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.604097][ T5087] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 93.738735][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 93.760532][ T57] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.784980][ T57] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 93.823880][ T57] usb 5-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.885437][ T57] usb 5-1: config 1 interface 0 has no altsetting 0 [ 93.928188][ T57] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.958725][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.966994][ T57] usb 5-1: Product: 㖷絩嬼埀ꯤꠣ璉䭪ꕂ鋀宂넻痎ጆ訄䨮䉓罴˙䒰⍇ᛆ袾䁚៸뚎餍譤὘ߒ흌哽ㅪ׉⢿賎螊⢣忞웉⦸ࠟ⊝穫⇊䊧䫁灪ᲃ᧦ⷮ噒遽 [ 94.038777][ T57] usb 5-1: Manufacturer: v鲆땀훯Ṽ酠饴໪嚦蒉혺莛번噸蔍핰裨ཁឌ즋蠹娦좀ﮫ澁喥௯붨錒詸㤸￾ᴈӸꮺ뀳돣쁻ᆯ㳨얘埦䊒੎鯩図怙츎礄⧳ﭺ✔꺳ꈑᾣ昇렳毧ၚ쬜ٞ懃썇ˢㄫታꔺ [ 94.108798][ T57] usb 5-1: SerialNumber: ш [ 94.141690][ T5311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.165808][ T5311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.780483][ T57] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 94.835413][ T57] usb 5-1: USB disconnect, device number 2 [ 94.990766][ T5308] loop2: detected capacity change from 0 to 65536 [ 95.067091][ T5308] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 95.106916][ T5153] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.319954][ T5153] usb 4-1: Using ep0 maxpacket: 8 [ 95.333847][ T5153] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 95.356979][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.387257][ T5153] usb 4-1: config 0 descriptor?? [ 95.765883][ T5340] overlayfs: failed to resolve './file0': -2 [ 96.767349][ T5343] loop0: detected capacity change from 0 to 32768 [ 96.874600][ T5343] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.992367][ T5343] XFS (loop0): Ending clean mount [ 97.186564][ T5343] syz.0.42 (5343) used greatest stack depth: 17744 bytes left [ 97.208085][ T5087] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 98.332384][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 98.358741][ T5331] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 98.462241][ T5331] team0: Device veth1_macvtap failed to register rx_handler [ 98.709939][ T5153] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 98.723068][ T5364] loop5: detected capacity change from 0 to 128 [ 98.760958][ T5153] asix 4-1:0.0: probe with driver asix failed with error -71 [ 98.805299][ T5364] syz.5.47[5364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.805492][ T5364] syz.5.47[5364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.867836][ T5153] usb 4-1: USB disconnect, device number 2 [ 99.379103][ T5377] loop0: detected capacity change from 0 to 16384 [ 99.579416][ T5382] overlayfs: failed to resolve './file0': -2 [ 99.586928][ T5383] loop4: detected capacity change from 0 to 512 [ 99.596466][ T5383] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.648178][ T5383] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.696217][ T5375] syzkaller0: entered promiscuous mode [ 99.702725][ T5383] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 99.737838][ T5375] syzkaller0: entered allmulticast mode [ 99.839023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.859219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 100.423045][ T5393] loop5: detected capacity change from 0 to 8192 [ 100.461209][ T5393] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.076261][ T5402] fuse: Bad value for 'fd' [ 101.082549][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.299559][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 101.311400][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 101.332213][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.359450][ T9] usb 1-1: config 0 descriptor?? [ 102.886185][ T5406] loop2: detected capacity change from 0 to 164 [ 103.013187][ T5406] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 103.044795][ T5406] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 103.103002][ T5406] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 103.642417][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.61'. [ 103.658803][ T5158] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.860302][ T5158] usb 3-1: Using ep0 maxpacket: 16 [ 103.891554][ T5400] netlink: 'syz.0.60': attribute type 10 has an invalid length. [ 103.907260][ T5400] team0: Device veth1_macvtap failed to register rx_handler [ 103.909434][ T5158] usb 3-1: config 8 has an invalid interface number: 19 but max is 0 [ 103.962526][ T5158] usb 3-1: config 8 has an invalid interface number: 239 but max is 0 [ 104.002254][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 104.003781][ T5158] usb 3-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 104.043018][ T5416] loop3: detected capacity change from 0 to 128 [ 104.051217][ T5416] ======================================================= [ 104.051217][ T5416] WARNING: The mand mount option has been deprecated and [ 104.051217][ T5416] and is ignored by this kernel. Remove the mand [ 104.051217][ T5416] option from the mount to silence this warning. [ 104.051217][ T5416] ======================================================= [ 104.091606][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 104.201226][ T5158] usb 3-1: config 8 has no interface number 0 [ 104.221485][ T5158] usb 3-1: config 8 has no interface number 1 [ 104.233573][ T5158] usb 3-1: config 8 interface 19 altsetting 129 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 104.306934][ T9] usb 1-1: USB disconnect, device number 3 [ 104.446445][ T5415] loop1: detected capacity change from 0 to 2048 [ 104.462056][ T5158] usb 3-1: config 8 interface 19 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 104.746514][ T5415] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.782916][ T5158] usb 3-1: config 8 interface 19 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 104.865080][ T5158] usb 3-1: config 8 interface 19 altsetting 129 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 104.876207][ T5158] usb 3-1: config 8 interface 19 altsetting 129 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 104.893873][ T5158] usb 3-1: too many endpoints for config 8 interface 239 altsetting 35: 141, using maximum allowed: 30 [ 104.911127][ T5158] usb 3-1: config 8 interface 239 altsetting 35 has a duplicate endpoint with address 0xE, skipping [ 104.951346][ T5415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.011858][ T5158] usb 3-1: config 8 interface 239 altsetting 35 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 105.029183][ T5415] EXT4-fs (loop1): bad geometry: block count 4096 exceeds size of device (512 blocks) [ 105.063630][ T5158] usb 3-1: config 8 interface 239 altsetting 35 bulk endpoint 0x1 has invalid maxpacket 16 [ 105.106732][ T5158] usb 3-1: config 8 interface 239 altsetting 35 has a duplicate endpoint with address 0x1, skipping [ 105.169247][ T5158] usb 3-1: config 8 interface 239 altsetting 35 has 5 endpoint descriptors, different from the interface descriptor's value: 141 [ 105.223869][ T5158] usb 3-1: config 8 interface 19 has no altsetting 0 [ 105.259674][ T5158] usb 3-1: config 8 interface 239 has no altsetting 0 [ 105.284995][ T5158] usb 3-1: New USB device found, idVendor=0b05, idProduct=18f0, bcdDevice=5a.43 [ 105.319468][ T5158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.348657][ T5158] usb 3-1: Product: О [ 105.356775][ T5158] usb 3-1: Manufacturer: Х [ 105.383997][ T5158] usb 3-1: SerialNumber: с [ 105.399969][ T5428] loop0: detected capacity change from 0 to 16384 [ 105.404895][ T5424] loop3: detected capacity change from 0 to 1024 [ 105.482598][ T5424] EXT4-fs: Ignoring removed orlov option [ 105.508813][ T5424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.517402][ T5424] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.586809][ T5424] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 105.656857][ T5408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.666013][ T5424] EXT4-fs (loop3): invalid journal inode [ 105.670112][ T5434] workqueue: name exceeds WQ_NAME_LEN. Truncating to: C|+i!3rU&6 bOo '1© [ 105.697666][ T5424] EXT4-fs (loop3): can't get journal size [ 105.711135][ T5408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.779041][ T5424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.024193][ T5158] usb 3-1: USB disconnect, device number 3 [ 106.101849][ T5431] I/O error, dev loop0, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 106.179049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.187537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.224308][ T5090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.536504][ T5443] loop0: detected capacity change from 0 to 2048 [ 106.668794][ T5443] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.016121][ T5463] loop4: detected capacity change from 0 to 1024 [ 107.108864][ T57] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.120834][ T5463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.278703][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.328841][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 107.342384][ T57] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 107.369502][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.395792][ T57] usb 6-1: config 0 descriptor?? [ 107.404781][ T5479] syz.3.92[5479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.404945][ T5479] syz.3.92[5479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.462972][ T5479] loop3: detected capacity change from 0 to 512 [ 107.488787][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 107.523046][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 107.545028][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.554950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.597026][ T9] usb 3-1: config 0 descriptor?? [ 107.623184][ T5479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.660390][ T5479] ext4 filesystem being mounted at /root/syzkaller.esbRGF/15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.696668][ T5088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.807656][ T5090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.832442][ T29] audit: type=1107 audit(1719497699.806:2): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 108.210182][ T5460] netlink: 'syz.5.84': attribute type 10 has an invalid length. [ 108.373317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.389597][ T5460] team0: Device veth1_macvtap failed to register rx_handler [ 108.501134][ T5495] raw_sendmsg: syz.4.97 forgot to set AF_INET. Fix it! [ 108.638220][ T5497] loop1: detected capacity change from 0 to 736 [ 108.688902][ T5497] iso9660: Bad value for 'mode' [ 108.839433][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 108.895139][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 108.937214][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 108.996720][ T9] usb 3-1: USB disconnect, device number 4 [ 109.440454][ T5097] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 109.669193][ T57] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 109.745487][ T57] asix 6-1:0.0: probe with driver asix failed with error -71 [ 109.795811][ T57] usb 6-1: USB disconnect, device number 2 [ 109.830885][ T2440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.930831][ T5515] sysfs: cannot create duplicate filename '/class/ieee80211/C|+i!3rU&6 bOo '1©|y' [ 109.950146][ T5515] CPU: 0 PID: 5515 Comm: syz.1.106 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 109.960247][ T5515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 109.970348][ T5515] Call Trace: [ 109.973659][ T5515] [ 109.976613][ T5515] dump_stack_lvl+0x241/0x360 [ 109.981372][ T5515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.986624][ T5515] ? __pfx__printk+0x10/0x10 [ 109.991263][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.996929][ T5515] ? sysfs_warn_dup+0x51/0xa0 [ 110.001654][ T5515] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 110.007140][ T5515] sysfs_warn_dup+0x8e/0xa0 [ 110.011800][ T5515] sysfs_do_create_link_sd+0xbe/0x110 [ 110.017227][ T5515] device_add_class_symlinks+0x1c5/0x250 [ 110.022933][ T5515] device_add+0x553/0xbf0 [ 110.027328][ T5515] wiphy_register+0x1d3f/0x2b30 [ 110.032256][ T5515] ? __pfx_wiphy_register+0x10/0x10 [ 110.037504][ T5515] ? minstrel_ht_alloc+0x72b/0x860 [ 110.042671][ T5515] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 110.048783][ T5515] ieee80211_register_hw+0x3098/0x3d80 [ 110.054310][ T5515] ? ieee80211_register_hw+0x1121/0x3d80 [ 110.059989][ T5515] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 110.065845][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.071505][ T5515] ? __asan_memset+0x23/0x50 [ 110.076117][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.081748][ T5515] ? __hrtimer_init+0x170/0x250 [ 110.086617][ T5515] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 110.092366][ T5515] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 110.098440][ T5515] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 110.104866][ T5515] ? kstrndup+0x5c/0xb0 [ 110.109034][ T5515] ? __asan_memcpy+0x40/0x70 [ 110.113650][ T5515] hwsim_new_radio_nl+0xe4c/0x21d0 [ 110.118829][ T5515] ? __pfx___nla_validate_parse+0x10/0x10 [ 110.124568][ T5515] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 110.129592][ T5522] loop2: detected capacity change from 0 to 128 [ 110.130174][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.142042][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.147743][ T5515] genl_rcv_msg+0xb16/0xec0 [ 110.152323][ T5515] ? mark_lock+0x9a/0x350 [ 110.156693][ T5515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.161746][ T5515] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 110.167722][ T5515] ? __pfx_lock_acquire+0x10/0x10 [ 110.172778][ T5515] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 110.178376][ T5515] ? __pfx___might_resched+0x10/0x10 [ 110.183722][ T5515] netlink_rcv_skb+0x1e5/0x430 [ 110.188533][ T5515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.193584][ T5515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.198907][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.204600][ T5515] ? __netlink_deliver_tap+0x77e/0x7c0 [ 110.210227][ T5515] genl_rcv+0x28/0x40 [ 110.214233][ T5515] netlink_unicast+0x7ec/0x980 [ 110.219071][ T5515] ? __pfx_netlink_unicast+0x10/0x10 [ 110.224385][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.230041][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.235698][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.241441][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.247269][ T5515] ? __check_object_size+0x49c/0x900 [ 110.252627][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.258368][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.264037][ T5515] netlink_sendmsg+0x8db/0xcb0 [ 110.268860][ T5515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.274185][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.279840][ T5515] ? aa_sock_msg_perm+0x91/0x160 [ 110.284864][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.290608][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.296259][ T5515] ? security_socket_sendmsg+0x87/0xb0 [ 110.301751][ T5515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.307079][ T5515] __sock_sendmsg+0x223/0x270 [ 110.311811][ T5515] ____sys_sendmsg+0x525/0x7d0 [ 110.316696][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.322448][ T5515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.327802][ T5515] __sys_sendmsg+0x2b0/0x3a0 [ 110.332462][ T5515] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.337678][ T5515] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.344038][ T5515] ? do_syscall_64+0x100/0x230 [ 110.348850][ T5515] ? do_syscall_64+0xb6/0x230 [ 110.353567][ T5515] do_syscall_64+0xf3/0x230 [ 110.358104][ T5515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.363772][ T5515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.369709][ T5515] RIP: 0033:0x7fc229575ae9 [ 110.374165][ T5515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.394101][ T5515] RSP: 002b:00007fc22a2d8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.402591][ T5515] RAX: ffffffffffffffda RBX: 00007fc229704070 RCX: 00007fc229575ae9 [ 110.410702][ T5515] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 110.418695][ T5515] RBP: 00007fc2295f6756 R08: 0000000000000000 R09: 0000000000000000 [ 110.426696][ T5515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.434707][ T5515] R13: 000000000000006e R14: 00007fc229704070 R15: 00007ffc05aee478 [ 110.442748][ T5515] [ 110.445972][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.829442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.238975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.649354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.059104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 214.998628][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 215.005639][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5508/1:b..l [ 215.014030][ C1] rcu: (detected by 1, t=10502 jiffies, g=13049, q=905 ncpus=2) [ 215.021766][ C1] task:syz.4.104 state:R running task stack:23984 pid:5508 tgid:5507 ppid:5088 flags:0x00004002 [ 215.034786][ C1] Call Trace: [ 215.038083][ C1] [ 215.041036][ C1] __schedule+0x17e8/0x4a20 [ 215.045598][ C1] ? __pfx___schedule+0x10/0x10 [ 215.050487][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.056140][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 215.062161][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 215.067475][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 215.072632][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 215.078375][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 215.083787][ C1] irqentry_exit+0x5e/0x90 [ 215.088233][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.094254][ C1] RIP: 0010:count_memcg_event_mm+0x334/0x420 [ 215.100266][ C1] Code: a2 26 b3 ff 4c 8b 6c 24 18 eb 1f e8 96 26 b3 ff e8 d1 d5 a2 09 4d 85 f6 74 84 e8 87 26 b3 ff fb 49 be 00 00 00 00 00 fc ff df 57 dc a2 09 89 c3 31 ff 89 c6 e8 ac 2a b3 ff 85 db 74 10 e8 23 [ 215.120184][ C1] RSP: 0018:ffffc90014c07740 EFLAGS: 00000246 [ 215.126284][ C1] RAX: ffffffff81e300e9 RBX: 0000000000000000 RCX: 0000000000040000 [ 215.134317][ C1] RDX: ffffc90009c8e000 RSI: 000000000003ffff RDI: 0000000000040000 [ 215.142332][ C1] RBP: ffffc90014c07810 R08: ffffffff81e30059 R09: 1ffffffff25f4eb6 [ 215.150351][ C1] R10: dffffc0000000000 R11: fffffbfff25f4eb7 R12: 0000000000000046 [ 215.158478][ C1] R13: ffffffff81e2fe54 R14: dffffc0000000000 R15: 1ffff92002980eec [ 215.166486][ C1] ? count_memcg_event_mm+0x94/0x420 [ 215.171820][ C1] ? count_memcg_event_mm+0x299/0x420 [ 215.177237][ C1] ? count_memcg_event_mm+0x329/0x420 [ 215.182685][ C1] ? count_memcg_event_mm+0x94/0x420 [ 215.188059][ C1] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 215.193857][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.199143][ C1] handle_mm_fault+0x16c4/0x1ba0 [ 215.204181][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 215.209527][ C1] ? __get_user_pages+0x71c/0x1590 [ 215.214813][ C1] __get_user_pages+0x6ef/0x1590 [ 215.219895][ C1] ? mt_find+0x62d/0x850 [ 215.224186][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 215.229612][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.235282][ C1] populate_vma_page_range+0x264/0x330 [ 215.240791][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 215.246810][ C1] ? userfaultfd_unmap_complete+0x30c/0x360 [ 215.252747][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.258400][ C1] ? do_mmap+0x915/0xfa0 [ 215.262689][ C1] __mm_populate+0x27a/0x460 [ 215.267325][ C1] ? __pfx___mm_populate+0x10/0x10 [ 215.272479][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.278152][ C1] vm_mmap_pgoff+0x2c3/0x3d0 [ 215.282782][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 215.287913][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.294356][ C1] ? do_syscall_64+0x100/0x230 [ 215.299153][ C1] ? ksys_mmap_pgoff+0xdf/0x720 [ 215.304126][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.309778][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 215.314582][ C1] do_syscall_64+0xf3/0x230 [ 215.319135][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.325151][ C1] RIP: 0033:0x7f4b1c175ae9 [ 215.329604][ C1] RSP: 002b:00007f4b1ce71048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 215.338092][ C1] RAX: ffffffffffffffda RBX: 00007f4b1c303fa0 RCX: 00007f4b1c175ae9 [ 215.346083][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 215.354090][ C1] RBP: 00007f4b1c1f6756 R08: ffffffffffffffff R09: 0000000000000000 [ 215.362075][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 215.370062][ C1] R13: 000000000000000b R14: 00007f4b1c303fa0 R15: 00007ffe51e10ff8 [ 215.378078][ C1] [ 215.381114][ C1] rcu: rcu_preempt kthread starved for 10530 jiffies! g13049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 215.392380][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 215.402457][ C1] rcu: RCU grace-period kthread stack dump: [ 215.408360][ C1] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 215.420143][ C1] Call Trace: [ 215.423509][ C1] [ 215.426459][ C1] __schedule+0x17e8/0x4a20 [ 215.428599][ C0] sched: RT throttling activated [ 215.435904][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.441549][ C1] ? __pfx___schedule+0x10/0x10 [ 215.446430][ C1] ? __pfx_lock_release+0x10/0x10 [ 215.451640][ C1] ? __asan_memset+0x23/0x50 [ 215.456245][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 215.462060][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.468439][ C1] ? schedule+0x90/0x320 [ 215.472722][ C1] schedule+0x14b/0x320 [ 215.476891][ C1] schedule_timeout+0x1be/0x310 [ 215.481861][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 215.487285][ C1] ? __pfx_process_timeout+0x10/0x10 [ 215.492610][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.498254][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 215.503810][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 215.508700][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 215.514775][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 215.520060][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 215.525983][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.531631][ C1] ? finish_swait+0xd4/0x1e0 [ 215.536232][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 215.540831][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 215.546029][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 215.551943][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.557577][ C1] ? __kthread_parkme+0x169/0x1d0 [ 215.562634][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 215.567858][ C1] kthread+0x2f2/0x390 [ 215.571964][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 215.577185][ C1] ? __pfx_kthread+0x10/0x10 [ 215.581949][ C1] ret_from_fork+0x4d/0x80 [ 215.586516][ C1] ? __pfx_kthread+0x10/0x10 [ 215.591171][ C1] ret_from_fork_asm+0x1a/0x30 [ 215.595994][ C1] [ 215.599022][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 215.605472][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 215.615290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 215.625449][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 215.630763][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d4 03 00 48 f7 00 08 00 00 00 75 10 eb 07 0f 00 2d 95 6c a3 00 f3 0f 1e fa fb f4 e9 d4 33 2a 00 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 215.650926][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 215.656997][ C1] RAX: ffff8880176e0000 RBX: ffff88801bab2864 RCX: 0000000000054171 [ 215.665057][ C1] RDX: 0000000000000001 RSI: ffff88801bab2800 RDI: ffff88801bab2864 [ 215.673031][ C1] RBP: 000000000003a578 R08: ffff8880b9537ccb R09: 1ffff110172a6f99 [ 215.681005][ C1] R10: dffffc0000000000 R11: ffffffff8b8608e0 R12: ffff88801cb38000 [ 215.688976][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eacdcc0 [ 215.696965][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 215.705889][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.712516][ C1] CR2: 0000001b31e0eff8 CR3: 00000000294f2000 CR4: 0000000000350ef0 [ 215.720599][ C1] Call Trace: [ 215.723876][ C1] [ 215.726738][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 215.733076][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 215.738709][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.744337][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 215.749399][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 215.755209][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.760893][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 215.767157][ C1] ? rcu_sched_clock_irq+0x9f4/0x10a0 [ 215.772532][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.778378][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 215.784011][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.789651][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 215.794903][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.800545][ C1] ? update_process_times+0x1ce/0x230 [ 215.805945][ C1] ? tick_nohz_handler+0x37c/0x500 [ 215.811089][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 215.816574][ C1] ? __hrtimer_run_queues+0x553/0xd50 [ 215.821969][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 215.828263][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 215.834015][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.839664][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 215.845782][ C1] ? hrtimer_interrupt+0x396/0x990 [ 215.850974][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 215.857142][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 215.863149][ C1] [ 215.866094][ C1] [ 215.869104][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.875271][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 215.880563][ C1] ? acpi_safe_halt+0x21/0x30 [ 215.885249][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.890939][ C1] acpi_idle_enter+0xe4/0x140 [ 215.895644][ C1] cpuidle_enter_state+0x114/0x480 [ 215.900768][ C1] ? __pfx_menu_select+0x10/0x10 [ 215.905723][ C1] cpuidle_enter+0x5d/0xa0 [ 215.910144][ C1] do_idle+0x375/0x5d0 [ 215.914223][ C1] ? __pfx_do_idle+0x10/0x10 [ 215.918851][ C1] cpu_startup_entry+0x42/0x60 [ 215.923623][ C1] start_secondary+0x100/0x100 [ 215.928408][ C1] common_startup_64+0x13e/0x147 [ 215.933379][ C1]