last executing test programs: 23.588397344s ago: executing program 1 (id=204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x3000046, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000001600)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24008890) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1c, {0x9, 0x1}, 0x6}, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000200)={r1, 0x1, 0x1000, 0x2000}) epoll_create1(0x80000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, 0x0) timerfd_gettime(r1, &(0x7f0000000280)) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 18.541128511s ago: executing program 1 (id=212): epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x20, 0x16, 0x2, '7A'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 18.158969559s ago: executing program 3 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r4, &(0x7f00000014c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) 16.241635706s ago: executing program 3 (id=216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x3000046, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000001600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24008890) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1c, {0x9, 0x1}, 0x6}, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000200)={r2, 0x1, 0x1000, 0x2000}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r1, r1, r0, r5, r2, 0xffffffffffffffff], 0x6) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, 0x0) timerfd_gettime(r2, &(0x7f0000000280)) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 13.93945752s ago: executing program 1 (id=219): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000003030000bb060000a99700d781bd24fd", @ANYRES32, @ANYBLOB="02000000"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x40201, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100), 0x120) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 13.734459124s ago: executing program 2 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x2, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_io_uring_setup(0x6f9f, &(0x7f0000000180)={0x0, 0xbc8f, 0xa008, 0x1, 0x331}, &(0x7f0000000280), &(0x7f0000000040)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 9.444647298s ago: executing program 1 (id=223): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000600)={0x40, 0x31, 0x6, 'Jgq2KT'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) 9.443033268s ago: executing program 3 (id=224): syz_open_dev$usbfs(0x0, 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) 7.593192343s ago: executing program 0 (id=225): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) read$char_usb(r0, &(0x7f0000000040)=""/188, 0xbc) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.552131414s ago: executing program 2 (id=226): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000003030000bb060000a99700", @ANYRES32, @ANYBLOB="0200000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069840b000000000000000800010002"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800"/24], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0xfc}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100), 0x120) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.405202177s ago: executing program 3 (id=227): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000003030000bb060000a99700d781bd24fd", @ANYRES32, @ANYBLOB="0200000000000000", @ANYRES32], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069840b000000000000000800010002"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x40201, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100), 0x120) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.362528888s ago: executing program 2 (id=228): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) io_uring_setup(0x2e34, &(0x7f0000000240)={0x0, 0xe148, 0x0, 0x0, 0xd4}) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r5, &(0x7f0000000840)=""/40, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) 7.035419214s ago: executing program 3 (id=229): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000019300)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000019200)={'syz', 0x3}, &(0x7f0000019240)="3150bce562735501c682aaa7de7adf4ce09f766ed6f1fc2640602c508507360cede1d3bd971202686dc0784f76", 0x2d, r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000019340)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d000000000400000005000000070000000000001205000000000000000000000d0000000000007f7260708553fdd9393894e9e0dade460e9b4b2b7a6cd031accedf20d9da03a8d92b3d5a69a80065c49a7a697ec6f1d5ff570318e10905e38cd9f17c4b280840954379793903d4625fbd7a39a0ad63b6402148111d8bbb3761c0b25e4ba0599b8b5d5c814f78755284a6658f5bc33b4d4434f97127e98542d52cede4b445859e9b389a04d8f39eaceccf878eb5d6b1217c3c96e45d6d3b50e8194c03f6a812"], 0x0, 0x46, 0x0, 0x1, 0x7}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) 2.290803236s ago: executing program 2 (id=230): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="030000000500000005"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069840b0000000000000008000100"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x40201, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100), 0x120) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.249683567s ago: executing program 1 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x3000046, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000001600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24008890) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1c, {0x9, 0x1}, 0x6}, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000200)={r2, 0x1, 0x1000, 0x2000}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r1, r1, r0, r5, r2, 0xffffffffffffffff], 0x6) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, 0x0) timerfd_gettime(r2, &(0x7f0000000280)) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.129873769s ago: executing program 0 (id=232): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000003030000bb060000a99700d781bd24fd", @ANYRES32, @ANYBLOB="02000000"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x40201, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100), 0x120) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.910671653s ago: executing program 0 (id=233): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000003030000bb060000a99700d781bd24fd", @ANYRES32, @ANYBLOB="0200000000000000", @ANYRES32, @ANYBLOB="030000000500000005"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069840b000000000000000800010002"], 0x20}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0xfc}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x40201, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100), 0x120) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.252507266s ago: executing program 2 (id=234): chdir(0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@discard}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) 1.153120988s ago: executing program 3 (id=235): syz_open_dev$usbfs(0x0, 0x76, 0x101301) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) 1.067210719s ago: executing program 0 (id=236): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000003030000bb060000a99700", @ANYRES32, @ANYBLOB="0200000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069840b000000000000000800010002"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0xfc}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100), 0x120) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 382.221222ms ago: executing program 0 (id=237): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000003030000bb060000a99700d781bd24fd", @ANYRES32, @ANYBLOB="0200000000000000", @ANYRES32], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069840b000000000000000800010002"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x40201, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100), 0x120) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 247.901485ms ago: executing program 0 (id=238): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) read$char_usb(r0, &(0x7f0000000040)=""/188, 0xbc) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 111.717947ms ago: executing program 2 (id=239): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000600)={0x40, 0x31, 0x6, 'Jgq2KT'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x20, 0x16, 0x1, '7'}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x33, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = memfd_secret(0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x695}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4000009f, 0x0, 0x63}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. [ 80.527138][ T5775] cgroup: Unknown subsys name 'net' [ 80.665622][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.444776][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.247551][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.249094][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.256187][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.264553][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.277465][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.281945][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.293938][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.297448][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.302507][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.317236][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.324450][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.324717][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.338021][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.340015][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.355085][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.357384][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.372269][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.381524][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.387317][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.397595][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.398255][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.412345][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.413018][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.427654][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.965131][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 84.980900][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 85.030853][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 85.229933][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.238764][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.246213][ T5787] bridge_slave_0: entered allmulticast mode [ 85.253592][ T5787] bridge_slave_0: entered promiscuous mode [ 85.262407][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 85.273800][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.281276][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.288950][ T5787] bridge_slave_1: entered allmulticast mode [ 85.295989][ T5787] bridge_slave_1: entered promiscuous mode [ 85.414125][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.421862][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.429230][ T5789] bridge_slave_0: entered allmulticast mode [ 85.437335][ T5789] bridge_slave_0: entered promiscuous mode [ 85.446606][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.453888][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.461334][ T5786] bridge_slave_0: entered allmulticast mode [ 85.468652][ T5786] bridge_slave_0: entered promiscuous mode [ 85.476940][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.484162][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.491677][ T5786] bridge_slave_1: entered allmulticast mode [ 85.499323][ T5786] bridge_slave_1: entered promiscuous mode [ 85.515093][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.529223][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.552829][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.560609][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.568100][ T5789] bridge_slave_1: entered allmulticast mode [ 85.575176][ T5789] bridge_slave_1: entered promiscuous mode [ 85.644664][ T5787] team0: Port device team_slave_0 added [ 85.665389][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.680520][ T5787] team0: Port device team_slave_1 added [ 85.714986][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.731033][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.742501][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.765462][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.773382][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.781141][ T5785] bridge_slave_0: entered allmulticast mode [ 85.788819][ T5785] bridge_slave_0: entered promiscuous mode [ 85.798531][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.805837][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.813230][ T5785] bridge_slave_1: entered allmulticast mode [ 85.820836][ T5785] bridge_slave_1: entered promiscuous mode [ 85.882315][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.890425][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.916889][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.947787][ T5789] team0: Port device team_slave_0 added [ 85.974524][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.982938][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.009192][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.036125][ T5789] team0: Port device team_slave_1 added [ 86.049073][ T5786] team0: Port device team_slave_0 added [ 86.079721][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.091510][ T5786] team0: Port device team_slave_1 added [ 86.127978][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.135178][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.161621][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.177789][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.232809][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.240232][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.266562][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.293106][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.300293][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.326687][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.362152][ T5785] team0: Port device team_slave_0 added [ 86.372579][ T5785] team0: Port device team_slave_1 added [ 86.379366][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.386562][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.413242][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.427362][ T5798] Bluetooth: hci3: command tx timeout [ 86.431801][ T5787] hsr_slave_0: entered promiscuous mode [ 86.440029][ T5787] hsr_slave_1: entered promiscuous mode [ 86.510671][ T5798] Bluetooth: hci2: command tx timeout [ 86.510694][ T5792] Bluetooth: hci0: command tx timeout [ 86.510936][ T5104] Bluetooth: hci1: command tx timeout [ 86.573463][ T5786] hsr_slave_0: entered promiscuous mode [ 86.581732][ T5786] hsr_slave_1: entered promiscuous mode [ 86.588755][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.596797][ T5786] Cannot create hsr debugfs directory [ 86.607598][ T5789] hsr_slave_0: entered promiscuous mode [ 86.614291][ T5789] hsr_slave_1: entered promiscuous mode [ 86.621378][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.629151][ T5789] Cannot create hsr debugfs directory [ 86.635594][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.644006][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.670750][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.684886][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.692424][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.718590][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.908745][ T5785] hsr_slave_0: entered promiscuous mode [ 86.915401][ T5785] hsr_slave_1: entered promiscuous mode [ 86.922533][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.930768][ T5785] Cannot create hsr debugfs directory [ 87.306930][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.332156][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.366193][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.392891][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.468681][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.481091][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.520010][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.535581][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.611587][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.631122][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.644570][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.681443][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.825469][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.842936][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.854126][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.869762][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.942568][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.035087][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.053951][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.095030][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.102592][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.115782][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.123025][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.146259][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.185110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.192545][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.228134][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.235380][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.259558][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.351393][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.363461][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.424191][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.444584][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.451892][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.469815][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.477160][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.507094][ T5104] Bluetooth: hci3: command tx timeout [ 88.558178][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.565412][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.588754][ T5104] Bluetooth: hci2: command tx timeout [ 88.588800][ T5792] Bluetooth: hci0: command tx timeout [ 88.601239][ T5798] Bluetooth: hci1: command tx timeout [ 88.639491][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.646963][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.952440][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.139797][ T5787] veth0_vlan: entered promiscuous mode [ 89.155481][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.193575][ T5787] veth1_vlan: entered promiscuous mode [ 89.210987][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.286093][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.321024][ T5787] veth0_macvtap: entered promiscuous mode [ 89.350421][ T5787] veth1_macvtap: entered promiscuous mode [ 89.373652][ T5789] veth0_vlan: entered promiscuous mode [ 89.389643][ T5786] veth0_vlan: entered promiscuous mode [ 89.409459][ T5789] veth1_vlan: entered promiscuous mode [ 89.455598][ T5786] veth1_vlan: entered promiscuous mode [ 89.502074][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.514891][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.525735][ T5785] veth0_vlan: entered promiscuous mode [ 89.540453][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.550540][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.561022][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.570284][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.600615][ T5789] veth0_macvtap: entered promiscuous mode [ 89.616415][ T5785] veth1_vlan: entered promiscuous mode [ 89.639869][ T5789] veth1_macvtap: entered promiscuous mode [ 89.684622][ T5786] veth0_macvtap: entered promiscuous mode [ 89.725756][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.745428][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.757901][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.769214][ T5786] veth1_macvtap: entered promiscuous mode [ 89.804981][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.815633][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.828444][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.889116][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.890522][ T5785] veth0_macvtap: entered promiscuous mode [ 89.903387][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.920952][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.935073][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.944288][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.953639][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.968282][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.979080][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.989334][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.999942][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.012226][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.040758][ T5785] veth1_macvtap: entered promiscuous mode [ 90.078994][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.091646][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.103038][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.115036][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.135296][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.155297][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.167565][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.177729][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.188814][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.199074][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.210009][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.223413][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.235374][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.248698][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.253795][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.265097][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.275446][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.284683][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.301023][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.311875][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.321896][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.332924][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.342892][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.353980][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.366534][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.401785][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.411948][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.421784][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.433170][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.569409][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.596017][ T5798] Bluetooth: hci3: command tx timeout [ 90.622762][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.668477][ T5792] Bluetooth: hci0: command tx timeout [ 90.668491][ T5104] Bluetooth: hci2: command tx timeout [ 90.674162][ T5798] Bluetooth: hci1: command tx timeout [ 90.785918][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.811252][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.822857][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.848746][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.936460][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.955928][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.097520][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.121009][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.139087][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.186768][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.358265][ T786] cfg80211: failed to load regulatory.db [ 92.666758][ T5798] Bluetooth: hci3: command tx timeout [ 92.746506][ T5798] Bluetooth: hci2: command tx timeout [ 92.892427][ T5798] Bluetooth: hci1: command tx timeout [ 92.899967][ T5798] Bluetooth: hci0: command tx timeout [ 93.167232][ T5900] syz.3.7[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.357786][ T5900] loop3: detected capacity change from 0 to 1024 [ 93.768263][ T5900] ======================================================= [ 93.768263][ T5900] WARNING: The mand mount option has been deprecated and [ 93.768263][ T5900] and is ignored by this kernel. Remove the mand [ 93.768263][ T5900] option from the mount to silence this warning. [ 93.768263][ T5900] ======================================================= [ 94.634827][ T5900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.648351][ T5900] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.355214][ T5911] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 96.256861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.320820][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.599566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.636997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.804398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.906797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.112421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.186907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.316379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.418782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.521433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.303691][ T5983] loop1: detected capacity change from 0 to 512 [ 113.397453][ T5983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.465643][ T5983] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.757299][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.426599][ T5998] loop1: detected capacity change from 0 to 512 [ 115.500952][ T5998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.515698][ T5998] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.603871][ T28] audit: type=1804 audit(1758993324.721:2): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.34" name="/newroot/10/file2/bus" dev="loop1" ino=18 res=1 errno=0 [ 116.192028][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.688412][ T6018] loop3: detected capacity change from 0 to 1024 [ 118.732035][ T6021] loop1: detected capacity change from 0 to 512 [ 118.734839][ T6018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.759540][ T6021] EXT4-fs: Ignoring removed oldalloc option [ 118.779925][ T6021] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.797948][ T6018] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.832489][ T6021] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.889831][ T6021] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 118.903507][ T6026] loop2: detected capacity change from 0 to 1024 [ 118.904864][ T6026] EXT4-fs: Ignoring removed i_version option [ 118.912484][ T6021] EXT4-fs (loop1): 1 truncate cleaned up [ 118.924605][ T6021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.991197][ T6026] EXT4-fs: Ignoring removed nobh option [ 118.997260][ T6026] EXT4-fs: Ignoring removed oldalloc option [ 119.018747][ T6026] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.051785][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.284762][ T6026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.586750][ T6037] capability: warning: `syz.3.38' uses 32-bit capabilities (legacy support in use) [ 120.294204][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.312868][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.863531][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.583985][ T6058] loop3: detected capacity change from 0 to 1024 [ 123.651523][ T6060] loop1: detected capacity change from 0 to 1024 [ 123.672332][ T6060] hfsplus: bad catalog file entry [ 123.678247][ T6060] hfsplus: failed to load root directory [ 123.703890][ T6062] loop2: detected capacity change from 0 to 1024 [ 123.709532][ T6058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 123.856459][ T5836] usb 1-1: device not accepting address 2, error -71 [ 123.961514][ T6062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 123.994199][ T6058] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.027373][ T6062] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.969019][ T6074] loop1: detected capacity change from 0 to 8192 [ 125.626936][ T6066] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 127.321918][ T6066] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 127.991763][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.014052][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.246260][ T6101] loop0: detected capacity change from 0 to 4096 [ 132.388245][ T6101] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 132.462132][ T6101] ntfs3: loop0: Failed to load $Extend (-22). [ 132.494913][ T6101] ntfs3: loop0: Failed to initialize $Extend. [ 132.949637][ T6109] loop3: detected capacity change from 0 to 512 [ 133.219984][ T6109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.299868][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.316043][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.414196][ T6109] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.603189][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.848743][ T6127] loop3: detected capacity change from 0 to 1024 [ 136.942633][ T6127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.005319][ T6127] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.966756][ T6130] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 139.738665][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 141.627480][ T6151] loop3: detected capacity change from 0 to 512 [ 142.687636][ T6151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.807710][ T6151] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.147581][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.851318][ T6230] loop0: detected capacity change from 0 to 512 [ 162.933112][ T6230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.993118][ T6230] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.273602][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.324426][ T6237] loop1: detected capacity change from 0 to 1024 [ 163.387775][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.278116][ T6226] sched: RT throttling activated [ 165.331794][ T6237] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.96: Allocating blocks 497-513 which overlap fs metadata [ 165.355884][ T6237] EXT4-fs (loop1): pa ffff888076953828: logic 256, phys. 385, len 8 [ 165.364728][ T6237] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 165.568004][ T6250] loop0: detected capacity change from 0 to 256 [ 165.582490][ T6250] exfat: Deprecated parameter 'namecase' [ 165.588671][ T6250] exfat: Deprecated parameter 'namecase' [ 165.693237][ T6250] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 167.030402][ T6236] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 167.631517][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.900257][ T6321] loop3: detected capacity change from 0 to 4096 [ 182.188402][ T6321] ntfs3: loop3: Failed to read $UpCase (-4). [ 186.784059][ T6361] loop0: detected capacity change from 0 to 1024 [ 186.797542][ T6361] EXT4-fs: Ignoring removed i_version option [ 186.803621][ T6361] EXT4-fs: Ignoring removed nobh option [ 186.830212][ T6359] loop1: detected capacity change from 0 to 1024 [ 186.847656][ T6361] EXT4-fs: Ignoring removed oldalloc option [ 186.854647][ T6361] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.870105][ T6364] loop2: detected capacity change from 0 to 1024 [ 186.906212][ T6361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.944179][ T6359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.984644][ T6364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.317560][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.949999][ T6375] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.132: Allocating blocks 497-513 which overlap fs metadata [ 188.965847][ T6375] EXT4-fs (loop1): pa ffff888076953910: logic 256, phys. 385, len 8 [ 188.974218][ T6375] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 189.064218][ T6358] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 189.600681][ T6382] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.134: Allocating blocks 497-513 which overlap fs metadata [ 191.984949][ T6382] EXT4-fs (loop2): pa ffff888076953bc8: logic 256, phys. 385, len 8 [ 191.993202][ T6382] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 192.129867][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.141947][ T6382] EXT4-fs error (device loop2): mb_free_blocks:1938: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 192.258952][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.499339][ T6396] loop2: detected capacity change from 0 to 256 [ 192.527146][ T6396] exfat: Deprecated parameter 'namecase' [ 192.649870][ T6396] exfat: Deprecated parameter 'namecase' [ 192.693298][ T6396] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 195.557073][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.563604][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.784513][ T6411] loop3: detected capacity change from 0 to 1024 [ 195.797524][ T6411] EXT4-fs: Ignoring removed i_version option [ 195.810320][ T6411] EXT4-fs: Ignoring removed nobh option [ 195.843953][ T6411] EXT4-fs: Ignoring removed oldalloc option [ 195.873228][ T6411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.458857][ T6411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.285925][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.633017][ T6431] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 203.534631][ T6459] loop1: detected capacity change from 0 to 1024 [ 203.562802][ T6459] EXT4-fs: Ignoring removed i_version option [ 203.592674][ T6459] EXT4-fs: Ignoring removed nobh option [ 203.709698][ T6459] EXT4-fs: Ignoring removed oldalloc option [ 203.913118][ T6459] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.373093][ T6467] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 204.791923][ T6459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.947947][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.989916][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 206.989933][ T5795] Bluetooth: hci1: command 0x0406 tx timeout [ 206.989968][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 206.996122][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 212.779841][ T6505] loop2: detected capacity change from 0 to 1024 [ 212.864635][ T6505] EXT4-fs: Ignoring removed i_version option [ 212.976721][ T6505] EXT4-fs: Ignoring removed nobh option [ 213.071486][ T6505] EXT4-fs: Ignoring removed oldalloc option [ 213.232393][ T6505] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.453429][ T6505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.015388][ T6512] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 214.630132][ T6516] loop1: detected capacity change from 0 to 1024 [ 214.707626][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.740051][ T6516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 214.787642][ T6516] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.007819][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 222.188742][ T5829] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 222.793832][ T6558] loop1: detected capacity change from 0 to 1024 [ 222.804162][ T6558] EXT4-fs: Ignoring removed i_version option [ 222.810958][ T6558] EXT4-fs: Ignoring removed nobh option [ 222.816853][ T6558] EXT4-fs: Ignoring removed oldalloc option [ 222.891769][ T6558] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.914527][ T5829] usb 3-1: device descriptor read/all, error -71 [ 223.032420][ T6558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.640733][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.103331][ T6309] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 228.508865][ T6309] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 228.638649][ T6309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.127090][ T6309] usb 1-1: config 0 descriptor?? [ 230.991663][ T6309] usb 1-1: Cannot set autoneg [ 231.003651][ T6309] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -61 [ 231.201192][ T6588] loop3: detected capacity change from 0 to 32768 [ 231.204615][ T5836] usb 1-1: USB disconnect, device number 4 [ 231.211573][ T6599] loop2: detected capacity change from 0 to 1024 [ 231.265171][ T6599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.329046][ T6309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 231.350547][ T6588] overlayfs: missing 'lowerdir' [ 231.544674][ T6309] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 231.557426][ T6309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.631135][ T6309] usb 2-1: config 0 descriptor?? [ 232.134394][ T6603] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.197: Allocating blocks 497-513 which overlap fs metadata [ 232.239911][ T6603] EXT4-fs (loop2): pa ffff88805fb86ae0: logic 256, phys. 385, len 8 [ 232.248081][ T6603] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 232.367137][ T6309] usb 2-1: Cannot read MAC address [ 232.372690][ T6309] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 232.440439][ T6309] usb 2-1: USB disconnect, device number 2 [ 232.455933][ T6598] EXT4-fs error (device loop2): mb_free_blocks:1938: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 232.565613][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.573768][ T6609] loop0: detected capacity change from 0 to 512 [ 232.636183][ T6609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.796196][ T6609] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.241721][ T28] audit: type=1804 audit(1758993443.351:3): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.201" name="/newroot/46/file2/bus" dev="loop0" ino=18 res=1 errno=0 [ 235.754682][ T6623] loop1: detected capacity change from 0 to 1024 [ 235.795023][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.046728][ T6623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.307975][ T6637] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 238.449648][ T6643] loop3: detected capacity change from 0 to 1024 [ 238.528675][ T5856] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 238.540832][ T6643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.580252][ T6623] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.204: Allocating blocks 497-513 which overlap fs metadata [ 238.628759][ T6623] EXT4-fs (loop1): pa ffff8880769530e8: logic 256, phys. 385, len 8 [ 238.637104][ T6623] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 238.978571][ T5856] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 239.156720][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.190023][ T5856] usb 3-1: config 0 descriptor?? [ 239.311711][ T6649] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.209: Allocating blocks 497-513 which overlap fs metadata [ 239.333503][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.341937][ T6649] EXT4-fs (loop3): pa ffff88805fb86740: logic 256, phys. 385, len 8 [ 239.350855][ T6649] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 239.522318][ T6642] EXT4-fs error (device loop3): mb_free_blocks:1938: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 239.614173][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.186572][ T6660] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 241.239036][ T2130] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 241.374160][ T5856] usb 3-1: Cannot set autoneg [ 241.499005][ T5856] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 241.581538][ T5856] usb 3-1: USB disconnect, device number 4 [ 241.660503][ T2130] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 241.679719][ T6665] loop3: detected capacity change from 0 to 1024 [ 241.694645][ T2130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.728874][ T2130] usb 2-1: config 0 descriptor?? [ 242.359796][ T6675] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 243.598545][ T6665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.795366][ T2130] usb 2-1: Cannot read MAC address [ 244.085310][ T2130] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 244.424809][ T6682] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 244.958711][ T2130] usb 2-1: USB disconnect, device number 3 [ 248.284742][ T6664] EXT4-fs error (device loop3): mb_free_blocks:1938: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 248.322462][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.886522][ T5777] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 250.338528][ T6714] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 250.409511][ T5777] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 250.432132][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.456040][ T5777] usb 2-1: config 0 descriptor?? [ 255.494709][ T5777] usb 2-1: Cannot set MAC address [ 255.503645][ T5777] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 255.537230][ T5777] usb 2-1: USB disconnect, device number 4 [ 255.803216][ T6733] loop1: detected capacity change from 0 to 1024 [ 255.883302][ T6733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.966708][ T6739] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 256.112265][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.119859][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.253846][ T6746] loop2: detected capacity change from 0 to 256 [ 257.361060][ T6733] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.231: Allocating blocks 497-513 which overlap fs metadata [ 257.385504][ T6746] exfat: Deprecated parameter 'namecase' [ 257.396909][ T6733] EXT4-fs (loop1): pa ffff8880769539f8: logic 256, phys. 385, len 8 [ 257.405087][ T6733] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 257.430638][ T6746] exfat: Deprecated parameter 'namecase' [ 257.478563][ T6746] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 257.615915][ T6731] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 257.771033][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.926444][ T5829] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 317.553448][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.561117][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 368.756353][ C0] ------------[ cut here ]------------ [ 368.762893][ C0] WARNING: CPU: 0 PID: 6754 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 368.773649][ C0] Modules linked in: [ 368.777592][ C0] CPU: 0 PID: 6754 Comm: syz.0.238 Not tainted syzkaller #0 [ 368.785066][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 368.795250][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 368.801597][ C0] Code: ff ff ff 48 c7 c7 a0 f4 ee 96 be 04 00 00 00 e8 ba ac 6c 00 48 89 df b8 01 00 00 00 87 05 ac bc 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 50 d3 8c 74 47 48 c7 c0 9c b4 4a 8e 48 c1 e8 03 [ 368.821580][ C0] RSP: 0018:ffffc90000007c58 EFLAGS: 00010046 [ 368.827663][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35080 RCX: ffffffff817037e6 [ 368.835674][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35080 [ 368.843688][ C0] RBP: ffffc90000007ed0 R08: 0000000000000003 R09: 0000000000000004 [ 368.851789][ C0] R10: dffffc0000000000 R11: fffffbfff2ddde94 R12: 0000000000002904 [ 368.860215][ C0] R13: 1ffff110171c7a22 R14: 0000000000000a06 R15: dffffc0000000000 [ 368.868807][ C0] FS: 00007f1d23cb46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 368.877972][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.884783][ C0] CR2: 00007fdd463e7dac CR3: 00000000751fe000 CR4: 00000000003506f0 [ 368.892883][ C0] Call Trace: [ 368.896333][ C0] [ 368.899222][ C0] rcu_core+0x612/0x1720 [ 368.903505][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 368.908559][ C0] ? ktime_get+0x7f/0x280 [ 368.912926][ C0] ? ktime_get+0x7f/0x280 [ 368.917642][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 368.923004][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 368.928269][ C0] ? sched_clock+0x3f/0x60 [ 368.932703][ C0] ? sched_clock_cpu+0x75/0x430 [ 368.937567][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 368.943778][ C0] ? lock_chain_count+0x20/0x20 [ 368.948697][ C0] ? lapic_next_event+0x11/0x20 [ 368.953766][ C0] handle_softirqs+0x280/0x820 [ 368.958556][ C0] ? do_softirq+0xed/0x180 [ 368.963077][ C0] ? do_softirq+0x180/0x180 [ 368.967700][ C0] ? fpu__restore_sig+0x3ce/0x10e0 [ 368.972871][ C0] do_softirq+0xed/0x180 [ 368.977196][ C0] [ 368.980136][ C0] [ 368.983074][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 368.988541][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 368.994533][ C0] ? rcu_is_watching+0x15/0xb0 [ 368.999490][ C0] __local_bh_enable_ip+0x178/0x1c0 [ 369.004694][ C0] ? _local_bh_enable+0xa0/0xa0 [ 369.009550][ C0] ? rcu_is_watching+0x15/0xb0 [ 369.014510][ C0] fpu__restore_sig+0x920/0x10e0 [ 369.019465][ C0] ? fpu__restore_sig+0x3ce/0x10e0 [ 369.024596][ C0] ? copy_fpstate_to_sigframe+0xbe0/0xbe0 [ 369.030340][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 369.035383][ C0] ? __might_fault+0xc6/0x120 [ 369.040154][ C0] ? __might_fault+0xaa/0x120 [ 369.044840][ C0] __ia32_sys_rt_sigreturn+0x65d/0x7b0 [ 369.050335][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 369.055637][ C0] ? x64_setup_rt_frame+0xcd0/0xcd0 [ 369.061036][ C0] ? lock_chain_count+0x20/0x20 [ 369.065951][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 369.071280][ C0] do_syscall_64+0x55/0xb0 [ 369.075808][ C0] ? clear_bhb_loop+0x40/0x90 [ 369.080583][ C0] ? clear_bhb_loop+0x40/0x90 [ 369.085279][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.091193][ C0] RIP: 0033:0x7f1d22d8eec7 [ 369.095683][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 369.115316][ C0] RSP: 002b:00007f1d23cb4038 EFLAGS: 00000246 [ 369.121401][ C0] RAX: 0000000000000000 RBX: 00007f1d22fe5fa0 RCX: 00007f1d22d8eec9 [ 369.129472][ C0] RDX: 00000000000000bc RSI: 0000200000000040 RDI: 0000000000000003 [ 369.137551][ C0] RBP: 00007f1d22e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 369.145529][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.153797][ C0] R13: 00007f1d22fe6038 R14: 00007f1d22fe5fa0 R15: 00007ffd50f79b08 [ 369.161837][ C0] [ 369.164911][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 369.172274][ C0] CPU: 0 PID: 6754 Comm: syz.0.238 Not tainted syzkaller #0 [ 369.179692][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.189969][ C0] Call Trace: [ 369.193255][ C0] [ 369.196103][ C0] dump_stack_lvl+0x16c/0x230 [ 369.200793][ C0] ? show_regs_print_info+0x20/0x20 [ 369.206019][ C0] ? load_image+0x3b0/0x3b0 [ 369.210533][ C0] panic+0x2c0/0x710 [ 369.214443][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 369.218998][ C0] __warn+0x2e0/0x470 [ 369.222989][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 369.228721][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 369.234453][ C0] report_bug+0x2be/0x4f0 [ 369.238792][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 369.244536][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 369.250289][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 369.256102][ C0] handle_bug+0xcf/0x120 [ 369.260353][ C0] exc_invalid_op+0x1a/0x50 [ 369.264862][ C0] asm_exc_invalid_op+0x1a/0x20 [ 369.270067][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 369.276419][ C0] Code: ff ff ff 48 c7 c7 a0 f4 ee 96 be 04 00 00 00 e8 ba ac 6c 00 48 89 df b8 01 00 00 00 87 05 ac bc 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 50 d3 8c 74 47 48 c7 c0 9c b4 4a 8e 48 c1 e8 03 [ 369.296146][ C0] RSP: 0018:ffffc90000007c58 EFLAGS: 00010046 [ 369.302230][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35080 RCX: ffffffff817037e6 [ 369.310237][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35080 [ 369.318411][ C0] RBP: ffffc90000007ed0 R08: 0000000000000003 R09: 0000000000000004 [ 369.326514][ C0] R10: dffffc0000000000 R11: fffffbfff2ddde94 R12: 0000000000002904 [ 369.334606][ C0] R13: 1ffff110171c7a22 R14: 0000000000000a06 R15: dffffc0000000000 [ 369.342609][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 369.348362][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 369.354357][ C0] rcu_core+0x612/0x1720 [ 369.358662][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 369.363787][ C0] ? ktime_get+0x7f/0x280 [ 369.368126][ C0] ? ktime_get+0x7f/0x280 [ 369.372553][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 369.377845][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 369.383501][ C0] ? sched_clock+0x3f/0x60 [ 369.388056][ C0] ? sched_clock_cpu+0x75/0x430 [ 369.392915][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 369.399034][ C0] ? lock_chain_count+0x20/0x20 [ 369.403899][ C0] ? lapic_next_event+0x11/0x20 [ 369.408771][ C0] handle_softirqs+0x280/0x820 [ 369.413628][ C0] ? do_softirq+0xed/0x180 [ 369.418218][ C0] ? do_softirq+0x180/0x180 [ 369.422754][ C0] ? fpu__restore_sig+0x3ce/0x10e0 [ 369.427901][ C0] do_softirq+0xed/0x180 [ 369.432160][ C0] [ 369.435202][ C0] [ 369.438139][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 369.443714][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 369.449715][ C0] ? rcu_is_watching+0x15/0xb0 [ 369.454573][ C0] __local_bh_enable_ip+0x178/0x1c0 [ 369.459774][ C0] ? _local_bh_enable+0xa0/0xa0 [ 369.465181][ C0] ? rcu_is_watching+0x15/0xb0 [ 369.469963][ C0] fpu__restore_sig+0x920/0x10e0 [ 369.474917][ C0] ? fpu__restore_sig+0x3ce/0x10e0 [ 369.480303][ C0] ? copy_fpstate_to_sigframe+0xbe0/0xbe0 [ 369.486037][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 369.491083][ C0] ? __might_fault+0xc6/0x120 [ 369.495914][ C0] ? __might_fault+0xaa/0x120 [ 369.500689][ C0] __ia32_sys_rt_sigreturn+0x65d/0x7b0 [ 369.506188][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 369.511409][ C0] ? x64_setup_rt_frame+0xcd0/0xcd0 [ 369.516667][ C0] ? lock_chain_count+0x20/0x20 [ 369.521565][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 369.526801][ C0] do_syscall_64+0x55/0xb0 [ 369.531240][ C0] ? clear_bhb_loop+0x40/0x90 [ 369.535944][ C0] ? clear_bhb_loop+0x40/0x90 [ 369.540641][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.546686][ C0] RIP: 0033:0x7f1d22d8eec7 [ 369.551243][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 369.571020][ C0] RSP: 002b:00007f1d23cb4038 EFLAGS: 00000246 [ 369.577113][ C0] RAX: 0000000000000000 RBX: 00007f1d22fe5fa0 RCX: 00007f1d22d8eec9 [ 369.585122][ C0] RDX: 00000000000000bc RSI: 0000200000000040 RDI: 0000000000000003 [ 369.593120][ C0] RBP: 00007f1d22e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 369.601285][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.609380][ C0] R13: 00007f1d22fe6038 R14: 00007f1d22fe5fa0 R15: 00007ffd50f79b08 [ 369.617385][ C0] [ 370.726923][ C0] Shutting down cpus with NMI [ 370.732099][ C0] Kernel Offset: disabled [ 370.736798][ C0] Rebooting in 86400 seconds..