last executing test programs: 29.328313713s ago: executing program 2 (id=3): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8099, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}]}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 29.054873329s ago: executing program 2 (id=8): socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a010203010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 26.458659416s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x214b02, 0x6) execveat(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) 26.173692216s ago: executing program 32 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x214b02, 0x6) execveat(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) 15.009424471s ago: executing program 0 (id=71): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0xfddd3ee310bc924f}, 0x6) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {0x94, 0x0, 0x0, 0x4}, {0x2, 0x0, 0x0, 0x7}, {0x6}]}, 0x10) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) 14.931130051s ago: executing program 5 (id=27): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x52491627, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x6, 0xfffffffd, 0x201f, 0x7, 0x8, 0x0, 0x3, 0x3}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x40010) r4 = syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000), &(0x7f0000ffb000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x4, 0x1000000000000, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0xf, 0x22, {0x22, 0x0, "a725ebbd3df391a0cde7c63587b80800"/32}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 13.200773805s ago: executing program 0 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 10.937225587s ago: executing program 0 (id=77): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 10.617998605s ago: executing program 0 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x18}, 0x18) write$FUSE_ENTRY(r2, &(0x7f0000000380)={0x90}, 0x90) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) stat(&(0x7f0000000280)='./file0\x00', 0x0) 10.384861986s ago: executing program 0 (id=82): mkdir(&(0x7f0000000300)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) 10.298668141s ago: executing program 5 (id=27): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x52491627, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x6, 0xfffffffd, 0x201f, 0x7, 0x8, 0x0, 0x3, 0x3}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x40010) r4 = syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000), &(0x7f0000ffb000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x4, 0x1000000000000, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0xf, 0x22, {0x22, 0x0, "a725ebbd3df391a0cde7c63587b80800"/32}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.253607221s ago: executing program 0 (id=83): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x2) 7.743590936s ago: executing program 5 (id=27): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x52491627, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x6, 0xfffffffd, 0x201f, 0x7, 0x8, 0x0, 0x3, 0x3}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x40010) r4 = syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000), &(0x7f0000ffb000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x4, 0x1000000000000, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0xf, 0x22, {0x22, 0x0, "a725ebbd3df391a0cde7c63587b80800"/32}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.448766302s ago: executing program 3 (id=97): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[], 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.322735422s ago: executing program 5 (id=27): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x52491627, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x6, 0xfffffffd, 0x201f, 0x7, 0x8, 0x0, 0x3, 0x3}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x40010) r4 = syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000), &(0x7f0000ffb000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x4, 0x1000000000000, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0xf, 0x22, {0x22, 0x0, "a725ebbd3df391a0cde7c63587b80800"/32}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.279182646s ago: executing program 3 (id=100): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) shutdown(r0, 0x2) 3.182358015s ago: executing program 4 (id=103): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x15, 0x4, 'a@ro'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.052161408s ago: executing program 1 (id=105): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b220c65367}) 3.023390017s ago: executing program 5 (id=27): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x52491627, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x6, 0xfffffffd, 0x201f, 0x7, 0x8, 0x0, 0x3, 0x3}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x40010) r4 = syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000), &(0x7f0000ffb000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x4, 0x1000000000000, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0xf, 0x22, {0x22, 0x0, "a725ebbd3df391a0cde7c63587b80800"/32}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.922399052s ago: executing program 1 (id=106): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, '\x00'}}]}}) 1.921103273s ago: executing program 3 (id=107): open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f00000010c0)={0x2ce4, 0x81, 0x0, 0x1ff, 0x0, "610400"}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0xa) 1.907473371s ago: executing program 4 (id=108): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_BLKSECTGET(r0, 0x1267, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) 1.836840185s ago: executing program 3 (id=109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003ac0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0xfeffff, &(0x7f00000007c0)="df"}) syz_clone3(&(0x7f0000003a40)={0x107100000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[0x0], 0x1, {r2}}, 0x58) 1.714794834s ago: executing program 1 (id=110): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.state\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x101cc1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c41, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file2\x00', 0x109042, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') 1.714616711s ago: executing program 4 (id=111): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x3dd}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1}) 1.576895237s ago: executing program 1 (id=112): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.563717218s ago: executing program 5 (id=27): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x52491627, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x6, 0xfffffffd, 0x201f, 0x7, 0x8, 0x0, 0x3, 0x3}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x40010) r4 = syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000), &(0x7f0000ffb000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x4, 0x1000000000000, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0xf, 0x22, {0x22, 0x0, "a725ebbd3df391a0cde7c63587b80800"/32}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 289.499656ms ago: executing program 1 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 287.667987ms ago: executing program 3 (id=114): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8002) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 285.061737ms ago: executing program 4 (id=115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @flat=@weak_binder={0x77622a85, 0x110b}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x10, 0x0, &(0x7f0000000380)=[@request_death={0x400c6313}], 0x0, 0x1000000000000, 0x0}) 193.22194ms ago: executing program 3 (id=116): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0) 162.347256ms ago: executing program 4 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="0407"], 0x2, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x100000000000000) 106.778666ms ago: executing program 1 (id=118): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 4 (id=119): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x64, r5, 0x601, 0x70bd2b, 0x0, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x20040090) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 54.984363][ T5812] cgroup: Unknown subsys name 'net' [ 55.097055][ T5812] cgroup: Unknown subsys name 'cpuset' [ 55.105263][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.330198][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.952198][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.961086][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.969951][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.970167][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.985506][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.992979][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.993450][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.000797][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.015278][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.022639][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.023313][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.038861][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.040853][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.046679][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.053528][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.062949][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.070148][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.074067][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.082139][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.089558][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.095872][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.102154][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.119067][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.126626][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.133882][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.141009][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.145546][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.156503][ T5132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.169151][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.177298][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.500891][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 60.640288][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 60.657863][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 60.678344][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.686724][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.694358][ T5824] bridge_slave_0: entered allmulticast mode [ 60.701099][ T5824] bridge_slave_0: entered promiscuous mode [ 60.711504][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.718680][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.726231][ T5824] bridge_slave_1: entered allmulticast mode [ 60.733137][ T5824] bridge_slave_1: entered promiscuous mode [ 60.790218][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 60.866486][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.877897][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.929711][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 60.942873][ T5824] team0: Port device team_slave_0 added [ 60.984401][ T5824] team0: Port device team_slave_1 added [ 61.046112][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.053279][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.061068][ T5823] bridge_slave_0: entered allmulticast mode [ 61.067939][ T5823] bridge_slave_0: entered promiscuous mode [ 61.077152][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.084410][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.091547][ T5823] bridge_slave_1: entered allmulticast mode [ 61.099112][ T5823] bridge_slave_1: entered promiscuous mode [ 61.105674][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.112757][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.120228][ T5831] bridge_slave_0: entered allmulticast mode [ 61.126825][ T5831] bridge_slave_0: entered promiscuous mode [ 61.164442][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.171419][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.197560][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.210729][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.217812][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.244422][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.268461][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.275799][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.283005][ T5831] bridge_slave_1: entered allmulticast mode [ 61.290060][ T5831] bridge_slave_1: entered promiscuous mode [ 61.335842][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.342993][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.350433][ T5822] bridge_slave_0: entered allmulticast mode [ 61.357364][ T5822] bridge_slave_0: entered promiscuous mode [ 61.374069][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.381181][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.388525][ T5825] bridge_slave_0: entered allmulticast mode [ 61.395650][ T5825] bridge_slave_0: entered promiscuous mode [ 61.404849][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.420396][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.427832][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.435102][ T5822] bridge_slave_1: entered allmulticast mode [ 61.441676][ T5822] bridge_slave_1: entered promiscuous mode [ 61.457334][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.464738][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.471991][ T5825] bridge_slave_1: entered allmulticast mode [ 61.479132][ T5825] bridge_slave_1: entered promiscuous mode [ 61.488426][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.508460][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.554535][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.584435][ T5824] hsr_slave_0: entered promiscuous mode [ 61.590992][ T5824] hsr_slave_1: entered promiscuous mode [ 61.608501][ T5823] team0: Port device team_slave_0 added [ 61.624553][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.636586][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.660520][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.671306][ T5823] team0: Port device team_slave_1 added [ 61.687648][ T5831] team0: Port device team_slave_0 added [ 61.713920][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.734399][ T5831] team0: Port device team_slave_1 added [ 61.759885][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.766983][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.793084][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.814314][ T5822] team0: Port device team_slave_0 added [ 61.830573][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.837812][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.863962][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.889131][ T5822] team0: Port device team_slave_1 added [ 61.901127][ T5825] team0: Port device team_slave_0 added [ 61.909840][ T5825] team0: Port device team_slave_1 added [ 61.918772][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.925989][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.952275][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.989599][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.997626][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.024018][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.068625][ T5823] hsr_slave_0: entered promiscuous mode [ 62.075423][ T5823] hsr_slave_1: entered promiscuous mode [ 62.081502][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.089452][ T5823] Cannot create hsr debugfs directory [ 62.096435][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.103504][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.130316][ T5833] Bluetooth: hci1: command tx timeout [ 62.130327][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.137934][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.154039][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.180689][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.199892][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.207511][ T5833] Bluetooth: hci0: command tx timeout [ 62.209689][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.239010][ T5833] Bluetooth: hci2: command tx timeout [ 62.244780][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.258025][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.265103][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.286498][ T5833] Bluetooth: hci4: command tx timeout [ 62.292115][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.297084][ T5833] Bluetooth: hci3: command tx timeout [ 62.340229][ T5831] hsr_slave_0: entered promiscuous mode [ 62.346911][ T5831] hsr_slave_1: entered promiscuous mode [ 62.352876][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.360559][ T5831] Cannot create hsr debugfs directory [ 62.470112][ T5825] hsr_slave_0: entered promiscuous mode [ 62.476326][ T5825] hsr_slave_1: entered promiscuous mode [ 62.482348][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.490533][ T5825] Cannot create hsr debugfs directory [ 62.503226][ T5822] hsr_slave_0: entered promiscuous mode [ 62.509857][ T5822] hsr_slave_1: entered promiscuous mode [ 62.516734][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.524493][ T5822] Cannot create hsr debugfs directory [ 62.648445][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.682992][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.700012][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.728078][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.849187][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.859236][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.887161][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.898005][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.941624][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.961564][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.972194][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.997073][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.055088][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.069904][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.080241][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.108794][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.153751][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.180240][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.210485][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.229568][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.276206][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.299460][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.350008][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.362216][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.381233][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.388601][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.419981][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.427134][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.436398][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.443548][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.453261][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.460390][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.472301][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.504176][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.549439][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.556635][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.568480][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.575636][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.638248][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.661760][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.681220][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.688375][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.713298][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.742719][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.767592][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.808345][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.815507][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.901546][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.933704][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.979647][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.019467][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.026666][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.070941][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.086935][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.094164][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.122946][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.156236][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.204788][ T5833] Bluetooth: hci1: command tx timeout [ 64.260673][ T5831] veth0_vlan: entered promiscuous mode [ 64.285456][ T5833] Bluetooth: hci2: command tx timeout [ 64.285464][ T5839] Bluetooth: hci0: command tx timeout [ 64.300365][ T5824] veth0_vlan: entered promiscuous mode [ 64.317506][ T5831] veth1_vlan: entered promiscuous mode [ 64.349412][ T5824] veth1_vlan: entered promiscuous mode [ 64.366674][ T5833] Bluetooth: hci3: command tx timeout [ 64.366683][ T5839] Bluetooth: hci4: command tx timeout [ 64.396101][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.429258][ T5823] veth0_vlan: entered promiscuous mode [ 64.458860][ T5823] veth1_vlan: entered promiscuous mode [ 64.500685][ T5824] veth0_macvtap: entered promiscuous mode [ 64.511528][ T5831] veth0_macvtap: entered promiscuous mode [ 64.526519][ T5823] veth0_macvtap: entered promiscuous mode [ 64.535793][ T5824] veth1_macvtap: entered promiscuous mode [ 64.550543][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.560580][ T5831] veth1_macvtap: entered promiscuous mode [ 64.570365][ T5823] veth1_macvtap: entered promiscuous mode [ 64.617445][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.630382][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.642258][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.658179][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.676306][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.703337][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.715940][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.728306][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.739308][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.748459][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.757519][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.768610][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.780520][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.791599][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.802005][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.812888][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.824604][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.836871][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.846681][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.855597][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.864352][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.882992][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.893644][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.903940][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.914992][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.926952][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.957152][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.966618][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.975692][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.985048][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.062579][ T5822] veth0_vlan: entered promiscuous mode [ 65.095802][ T5822] veth1_vlan: entered promiscuous mode [ 65.110369][ T5825] veth0_vlan: entered promiscuous mode [ 65.142999][ T5825] veth1_vlan: entered promiscuous mode [ 65.176182][ T5822] veth0_macvtap: entered promiscuous mode [ 65.179225][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.199519][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.234242][ T5822] veth1_macvtap: entered promiscuous mode [ 65.256578][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.275401][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.282932][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.283230][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.303207][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.319506][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.330329][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.340852][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.351033][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.361795][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.372566][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.391488][ T5825] veth0_macvtap: entered promiscuous mode [ 65.393595][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.403532][ T5825] veth1_macvtap: entered promiscuous mode [ 65.416377][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.433900][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.446158][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.458260][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.468816][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.478758][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.489372][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.499955][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.526404][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.541355][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.550445][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.559320][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.586376][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.604834][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.614977][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.625525][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.636027][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.646569][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.656502][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.667023][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.678785][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.693941][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.701804][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.705729][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.713906][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.722859][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.750459][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.767580][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.778563][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.795638][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.822183][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.843868][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.854164][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.866140][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.877239][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.915094][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.952520][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.970336][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.981557][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.114703][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.122537][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.341388][ T5833] Bluetooth: hci1: command tx timeout [ 66.364990][ T5839] Bluetooth: hci0: command tx timeout [ 66.371482][ T5833] Bluetooth: hci2: command tx timeout [ 66.453932][ T5839] Bluetooth: hci4: command tx timeout [ 66.459744][ T5833] Bluetooth: hci3: command tx timeout [ 66.843089][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.868337][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.921727][ T5912] Bluetooth: MGMT ver 1.23 [ 67.062206][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.084837][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.129027][ T5918] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.157254][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.178485][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.242846][ T5920] binder: 5919:5920 ioctl c0306201 20000940 returned -14 [ 68.100665][ T5938] Zero length message leads to an empty skb [ 68.333637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.381183][ T5833] Bluetooth: hci1: command tx timeout [ 68.549806][ T5833] Bluetooth: hci3: command tx timeout [ 68.555843][ T5839] Bluetooth: hci4: command tx timeout [ 70.692194][ T3552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.774201][ T29] audit: type=1800 audit(1733014693.321:2): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.24" name="/" dev="9p" ino=2 res=0 errno=0 [ 71.281416][ T3552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.462356][ T3552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.704063][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.710648][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.640850][ T3552] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.813771][ T5999] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 73.103767][ T3552] bridge_slave_1: left allmulticast mode [ 73.123651][ T3552] bridge_slave_1: left promiscuous mode [ 73.130809][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.188707][ T3552] bridge_slave_0: left allmulticast mode [ 73.205676][ T3552] bridge_slave_0: left promiscuous mode [ 73.212568][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.359441][ T6022] xt_ecn: cannot match TCP bits for non-tcp packets [ 75.359497][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.385123][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.422050][ T3552] bond0 (unregistering): Released all slaves [ 80.142885][ T3552] hsr_slave_0: left promiscuous mode [ 80.148941][ T3552] hsr_slave_1: left promiscuous mode [ 80.155528][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.162984][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.171340][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.181124][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.198294][ T3552] veth1_macvtap: left promiscuous mode [ 80.204290][ T3552] veth0_macvtap: left promiscuous mode [ 80.209824][ T3552] veth1_vlan: left promiscuous mode [ 80.215429][ T3552] veth0_vlan: left promiscuous mode [ 80.531645][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 80.564887][ T3552] team0 (unregistering): Port device team_slave_0 removed [ 80.649348][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.690385][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 80.723003][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 80.758777][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 80.923811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.932442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.058613][ T6173] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.076383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.510620][ T1206] cfg80211: failed to load regulatory.db [ 84.924237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.583686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.592250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.601081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 87.133798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.031422][ T29] audit: type=1804 audit(1733014713.641:3): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.96" name="/newroot/23/bus/bus" dev="overlay" ino=143 res=1 errno=0 [ 91.054667][ T6362] evm: overlay not supported [ 91.076695][ T6362] Invalid ELF header magic: != ELF [ 93.075437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.416683][ T6397] 9pnet_fd: Insufficient options for proto=fd [ 96.038125][ T6423] binder: 6420:6423 ioctl c0306201 20000680 returned -22 [ 96.151446][ T6426] warning: `syz.3.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.189722][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 96.198400][ T29] audit: type=1804 audit(1733014718.811:4): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.117" name="/newroot/29/bus/bus" dev="overlay" ino=182 res=1 errno=0 [ 96.221430][ T6429] Invalid ELF header magic: != ELF [ 96.250732][ T6426] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 96.252034][ C0] ------------[ cut here ]------------ [ 96.263552][ C0] WARNING: CPU: 0 PID: 16 at net/mac80211/rx.c:5382 ieee80211_rx_list+0x2b59/0x3810 [ 96.272971][ C0] Modules linked in: [ 96.276978][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-12038-gc4bb3a2d641c #0 [ 96.287289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.297460][ C0] RIP: 0010:ieee80211_rx_list+0x2b59/0x3810 [ 96.303439][ C0] Code: 90 e9 c9 d8 ff ff e8 a6 15 61 f6 e9 bf d8 ff ff e8 9c 15 61 f6 e9 b5 d8 ff ff e8 92 15 61 f6 e9 ab d8 ff ff e8 88 15 61 f6 90 <0f> 0b 90 e9 9d d8 ff ff e8 7a 15 61 f6 31 c0 48 89 44 24 70 e9 30 [ 96.323118][ C0] RSP: 0018:ffffc900001577c0 EFLAGS: 00010246 [ 96.329268][ C0] RAX: ffffffff8b3e5bb8 RBX: 0000000000000000 RCX: ffff88801bef5a00 [ 96.337326][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.345362][ C0] RBP: ffffc900001579f0 R08: ffffffff8b3e3299 R09: 1ffffffff2850510 [ 96.353424][ C0] R10: dffffc0000000000 R11: fffffbfff2850511 R12: ffff88807f2e8e40 [ 96.361506][ C0] R13: dffffc0000000000 R14: ffff88807f2eb0c8 R15: ffff88805a990b40 [ 96.369560][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 96.378569][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.385239][ C0] CR2: 00005555708a35c8 CR3: 0000000060fd6000 CR4: 00000000003526f0 [ 96.393250][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.401313][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.409360][ C0] Call Trace: [ 96.412666][ C0] [ 96.415666][ C0] ? __warn+0x165/0x4d0 [ 96.419855][ C0] ? ieee80211_rx_list+0x2b59/0x3810 [ 96.425240][ C0] ? report_bug+0x2b3/0x500 [ 96.429776][ C0] ? ieee80211_rx_list+0x2b59/0x3810 [ 96.435156][ C0] ? handle_bug+0x60/0x90 [ 96.439532][ C0] ? exc_invalid_op+0x1a/0x50 [ 96.444294][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 96.449372][ C0] ? ieee80211_rx_list+0x239/0x3810 [ 96.454649][ C0] ? ieee80211_rx_list+0x2b58/0x3810 [ 96.459973][ C0] ? ieee80211_rx_list+0x2b59/0x3810 [ 96.465383][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 96.470883][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 96.476003][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.482021][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.488432][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 96.493524][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 96.498497][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 96.504928][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 96.510436][ C0] ? skb_dequeue+0x113/0x150 [ 96.515126][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 96.521151][ C0] tasklet_action_common+0x426/0x620 [ 96.526546][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 96.532386][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.538793][ C0] ? __schedule+0x1803/0x4be0 [ 96.543534][ C0] ? workqueue_softirq_action+0xce/0x140 [ 96.549201][ C0] handle_softirqs+0x2d4/0x9b0 [ 96.554074][ C0] ? run_ksoftirqd+0xca/0x130 [ 96.558782][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 96.564154][ C0] run_ksoftirqd+0xca/0x130 [ 96.568685][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 96.573867][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 96.579625][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 96.584826][ C0] smpboot_thread_fn+0x544/0xa30 [ 96.589806][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 96.594931][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 96.600419][ C0] kthread+0x2f0/0x390 [ 96.604573][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 96.610078][ C0] ? __pfx_kthread+0x10/0x10 [ 96.614757][ C0] ret_from_fork+0x4b/0x80 [ 96.619199][ C0] ? __pfx_kthread+0x10/0x10 [ 96.623878][ C0] ret_from_fork_asm+0x1a/0x30 [ 96.628673][ C0] [ 96.631701][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.638993][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-12038-gc4bb3a2d641c #0 [ 96.649229][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.659288][ C0] Call Trace: [ 96.662581][ C0] [ 96.665505][ C0] dump_stack_lvl+0x241/0x360 [ 96.670179][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.675378][ C0] ? __pfx__printk+0x10/0x10 [ 96.679962][ C0] ? _printk+0xd5/0x120 [ 96.684116][ C0] ? __init_begin+0x41000/0x41000 [ 96.689159][ C0] ? vscnprintf+0x5d/0x90 [ 96.693502][ C0] panic+0x349/0x880 [ 96.697388][ C0] ? __warn+0x174/0x4d0 [ 96.701541][ C0] ? __pfx_panic+0x10/0x10 [ 96.705965][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 96.710896][ C0] __warn+0x344/0x4d0 [ 96.714885][ C0] ? ieee80211_rx_list+0x2b59/0x3810 [ 96.720160][ C0] report_bug+0x2b3/0x500 [ 96.724482][ C0] ? ieee80211_rx_list+0x2b59/0x3810 [ 96.729755][ C0] handle_bug+0x60/0x90 [ 96.733920][ C0] exc_invalid_op+0x1a/0x50 [ 96.738444][ C0] asm_exc_invalid_op+0x1a/0x20 [ 96.743287][ C0] RIP: 0010:ieee80211_rx_list+0x2b59/0x3810 [ 96.749176][ C0] Code: 90 e9 c9 d8 ff ff e8 a6 15 61 f6 e9 bf d8 ff ff e8 9c 15 61 f6 e9 b5 d8 ff ff e8 92 15 61 f6 e9 ab d8 ff ff e8 88 15 61 f6 90 <0f> 0b 90 e9 9d d8 ff ff e8 7a 15 61 f6 31 c0 48 89 44 24 70 e9 30 [ 96.768779][ C0] RSP: 0018:ffffc900001577c0 EFLAGS: 00010246 [ 96.774844][ C0] RAX: ffffffff8b3e5bb8 RBX: 0000000000000000 RCX: ffff88801bef5a00 [ 96.782813][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.790775][ C0] RBP: ffffc900001579f0 R08: ffffffff8b3e3299 R09: 1ffffffff2850510 [ 96.798735][ C0] R10: dffffc0000000000 R11: fffffbfff2850511 R12: ffff88807f2e8e40 [ 96.806695][ C0] R13: dffffc0000000000 R14: ffff88807f2eb0c8 R15: ffff88805a990b40 [ 96.814664][ C0] ? ieee80211_rx_list+0x239/0x3810 [ 96.819873][ C0] ? ieee80211_rx_list+0x2b58/0x3810 [ 96.825163][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 96.830627][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 96.835660][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.841654][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.847973][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 96.852990][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 96.857924][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 96.864261][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 96.869792][ C0] ? skb_dequeue+0x113/0x150 [ 96.874379][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 96.880366][ C0] tasklet_action_common+0x426/0x620 [ 96.885667][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 96.891508][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.897828][ C0] ? __schedule+0x1803/0x4be0 [ 96.902496][ C0] ? workqueue_softirq_action+0xce/0x140 [ 96.908120][ C0] handle_softirqs+0x2d4/0x9b0 [ 96.912879][ C0] ? run_ksoftirqd+0xca/0x130 [ 96.917566][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 96.922864][ C0] run_ksoftirqd+0xca/0x130 [ 96.927380][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 96.932481][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 96.938204][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 96.943321][ C0] smpboot_thread_fn+0x544/0xa30 [ 96.948282][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 96.953318][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 96.958785][ C0] kthread+0x2f0/0x390 [ 96.962848][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 96.968299][ C0] ? __pfx_kthread+0x10/0x10 [ 96.972879][ C0] ret_from_fork+0x4b/0x80 [ 96.977281][ C0] ? __pfx_kthread+0x10/0x10 [ 96.981859][ C0] ret_from_fork_asm+0x1a/0x30 [ 96.986643][ C0] [ 96.989973][ C0] Kernel Offset: disabled [ 96.994314][ C0] Rebooting in 86400 seconds..