last executing test programs: 20.324957928s ago: executing program 3 (id=13): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 19.681470864s ago: executing program 3 (id=17): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8000040008, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0xe, 0x0, 0x1, {0x105, 0x3, 0xd, 0x1}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1}, &(0x7f00000001c0), &(0x7f0000000000)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x436000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x5}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 15.703479799s ago: executing program 3 (id=25): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_uring_setup(0x1de0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300) close(r1) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0xd9}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102384, 0x18ff0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006180)={0x2020}, 0x2020) 11.829341213s ago: executing program 1 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)={0x2c, r1, 0x625, 0x70bd29, 0x82, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params]}, 0x2c}, 0x1, 0x0, 0x0, 0x100040c5}, 0x40040) 11.431142926s ago: executing program 2 (id=37): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 11.430043001s ago: executing program 1 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a030200000000000000000200fffd0900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010000000000000007"], 0x68}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 11.003702113s ago: executing program 2 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 10.083338881s ago: executing program 4 (id=42): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 9.938870055s ago: executing program 2 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002040)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x89) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000580)=[@acquire, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="450000000607010300000000000000000300fffe0900010073797a3000000000c379bbde19568f2ced57d61d52fde5df68101d1f8a0700d1fa7ae3f79c69d3bfaca4bd08bc744bb42b36d3b89a0506348a6d0708c192d74b8c8709cf1997187ada2cc1"], 0x20}}, 0x4040011) 9.373148363s ago: executing program 4 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 8.415838695s ago: executing program 2 (id=46): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 7.65439187s ago: executing program 4 (id=47): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x7, 0xfffffffe, 0x0, 0x0, 0x80000000) 7.467044013s ago: executing program 3 (id=49): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r9 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x1, &(0x7f0000000140)) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, 0x0, &(0x7f0000000000)=0x17) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) 7.252279573s ago: executing program 4 (id=50): syz_open_dev$dri(&(0x7f0000000000), 0xc, 0x190c02) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsmount(r3, 0x0, 0x86) 7.16573325s ago: executing program 2 (id=51): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mkdir(&(0x7f0000000440)='./bus\x00', 0x20) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x8, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 7.014143853s ago: executing program 5 (id=52): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 6.110313412s ago: executing program 2 (id=54): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, 0x0, 0x1f8) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e000000200000000ffffffffac14"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYRES32=r2], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1f4, 0xd, 0x7, 0x4}, 0x9c) 6.104946869s ago: executing program 5 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 5.211611472s ago: executing program 5 (id=57): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$'], 0x24}}, 0x0) r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xefa8, 0x10000, 0x7ffe, 0xc0024e}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r1 = eventfd2(0x100, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4.825519154s ago: executing program 0 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002040)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x89) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000580)=[@acquire, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="450000000607010300000000000000000300fffe0900010073797a3000000000c379bbde19568f2ced57d61d52fde5df68101d1f8a0700d1fa7ae3f79c69d3bfaca4bd08bc744bb42b36d3b89a0506348a6d0708c192d74b8c8709cf1997187ada2cc1"], 0x20}}, 0x4040011) 4.148614875s ago: executing program 5 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 3.764855724s ago: executing program 1 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 3.727821077s ago: executing program 5 (id=61): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000680)={0x1, 0x0, {0x0, 0x0, 0x3008, 0x1, 0x3, 0x0, 0x2}}) 2.548290592s ago: executing program 1 (id=62): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_uring_setup(0x1de0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300) close(r1) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0xd9}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102384, 0x18ff0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006180)={0x2020}, 0x2020) 2.510063075s ago: executing program 0 (id=63): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a00060008021100000100000600100080050000060012000000000005"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.383538003s ago: executing program 5 (id=64): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x20000400) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000100)=0xfffffffffffffe7a) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x0, r0}, 0x18) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r6, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) close_range(r4, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}}}, 0x48) socket$unix(0x1, 0x1, 0x0) r7 = dup(0xffffffffffffffff) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_clone(0x54480, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x3f14, &(0x7f00000002c0)={0x0, 0x7495, 0x10000, 0x2, 0x29e}, &(0x7f0000000380)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x104, &(0x7f0000000080)=0xffffeffc, 0x0, 0x4) socket$l2tp(0x2, 0x2, 0x73) r10 = syz_io_uring_setup(0x6bad, &(0x7f0000000480)={0x0, 0xa838, 0x9cb7c1c9301dfd1f, 0x0, 0xad, 0x0, r8}, &(0x7f0000000280), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) 2.162107012s ago: executing program 0 (id=65): futex(0x0, 0x6, 0x4, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x7, 0xfffffffe, 0x0, 0x0, 0x80000000) 1.339928193s ago: executing program 0 (id=66): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mkdir(&(0x7f0000000440)='./bus\x00', 0x20) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000200)) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 774.028756ms ago: executing program 3 (id=67): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 760.211373ms ago: executing program 1 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x44}}, 0x0) 483.662998ms ago: executing program 0 (id=69): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)='D', 0x1) 411.951608ms ago: executing program 4 (id=70): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 411.63324ms ago: executing program 1 (id=71): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x4b95ae73a23ae83e, 0xff) r4 = socket$key(0xf, 0x3, 0x2) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d84a56bd0d001c00180081064e32e82331734c368cc79100", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r6, r5}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)={0xffffffffffffffff, r5}) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500020200"/16], 0x10}, 0x1, 0x400000000000000}, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x4000, 0x2, 0x17d}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0x3}, {0xd, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1ff, 0x1, 0x7, 0xfffffffd, 0x7}, 0x4, 0x1, 0x4, 0x0, 0xbb, 0x19, 0x8, 0x14, 0x2, 0x6, {0x0, 0x7, 0x2, 0x3, 0x7, 0x2}}}}]}, 0x78}}, 0x40) socket(0x9, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r10, 0x854, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r10, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1, 0x80}, 0x8) 404.259545ms ago: executing program 3 (id=72): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0xfffffffffffffff9) 43.167984ms ago: executing program 0 (id=73): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x4, &(0x7f00000002c0)="0040ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x27) 0s ago: executing program 4 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 99.521785][ T5804] cgroup: Unknown subsys name 'net' [ 99.670458][ T5804] cgroup: Unknown subsys name 'cpuset' [ 99.680578][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.358577][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.479380][ T30] cfg80211: failed to load regulatory.db [ 103.939378][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.959356][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.972749][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.982179][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.985852][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.990569][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.997165][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.004936][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.012042][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.025078][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.029525][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.032660][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.041562][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.046806][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.054977][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.060804][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.074565][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.082525][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.085835][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.091231][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.106109][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.113677][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.121027][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.121057][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.138533][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.138738][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.153297][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.158258][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.171534][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.177328][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.119283][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 105.141750][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 105.157867][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 105.241702][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 105.280633][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 105.408312][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 105.645449][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.653399][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.661636][ T5825] bridge_slave_0: entered allmulticast mode [ 105.669332][ T5825] bridge_slave_0: entered promiscuous mode [ 105.692487][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.699841][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.707456][ T5827] bridge_slave_0: entered allmulticast mode [ 105.715272][ T5827] bridge_slave_0: entered promiscuous mode [ 105.735280][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.742574][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.749878][ T5823] bridge_slave_0: entered allmulticast mode [ 105.757695][ T5823] bridge_slave_0: entered promiscuous mode [ 105.781424][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.788704][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.796332][ T5825] bridge_slave_1: entered allmulticast mode [ 105.803877][ T5825] bridge_slave_1: entered promiscuous mode [ 105.824065][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.831327][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.838733][ T5827] bridge_slave_1: entered allmulticast mode [ 105.846407][ T5827] bridge_slave_1: entered promiscuous mode [ 105.866942][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.874104][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.881779][ T5823] bridge_slave_1: entered allmulticast mode [ 105.889602][ T5823] bridge_slave_1: entered promiscuous mode [ 105.933580][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.940927][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.948337][ T5824] bridge_slave_0: entered allmulticast mode [ 105.956279][ T5824] bridge_slave_0: entered promiscuous mode [ 105.976281][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.983423][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.991781][ T5826] bridge_slave_0: entered allmulticast mode [ 105.999749][ T5826] bridge_slave_0: entered promiscuous mode [ 106.046367][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.053597][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.061114][ T5824] bridge_slave_1: entered allmulticast mode [ 106.068951][ T5824] bridge_slave_1: entered promiscuous mode [ 106.088979][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.096377][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.104610][ T5826] bridge_slave_1: entered allmulticast mode [ 106.112372][ T5826] bridge_slave_1: entered promiscuous mode [ 106.122852][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.132650][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.140867][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.148196][ T5828] bridge_slave_0: entered allmulticast mode [ 106.156005][ T5828] bridge_slave_0: entered promiscuous mode [ 106.167146][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.192480][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.206002][ T5839] Bluetooth: hci5: command tx timeout [ 106.211759][ T5839] Bluetooth: hci2: command tx timeout [ 106.218136][ T5829] Bluetooth: hci3: command tx timeout [ 106.222469][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.223992][ T5832] Bluetooth: hci0: command tx timeout [ 106.247097][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.254326][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.261902][ T5828] bridge_slave_1: entered allmulticast mode [ 106.269487][ T5828] bridge_slave_1: entered promiscuous mode [ 106.275796][ T5839] Bluetooth: hci4: command tx timeout [ 106.281475][ T5832] Bluetooth: hci1: command tx timeout [ 106.294643][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.318435][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.382187][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.407001][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.419414][ T5823] team0: Port device team_slave_0 added [ 106.428370][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.441790][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.466193][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.490116][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.516046][ T5823] team0: Port device team_slave_1 added [ 106.536849][ T5825] team0: Port device team_slave_0 added [ 106.557409][ T5827] team0: Port device team_slave_0 added [ 106.617974][ T5825] team0: Port device team_slave_1 added [ 106.626251][ T5828] team0: Port device team_slave_0 added [ 106.634302][ T5824] team0: Port device team_slave_0 added [ 106.641980][ T5827] team0: Port device team_slave_1 added [ 106.651345][ T5826] team0: Port device team_slave_0 added [ 106.684880][ T5828] team0: Port device team_slave_1 added [ 106.692983][ T5824] team0: Port device team_slave_1 added [ 106.714093][ T5826] team0: Port device team_slave_1 added [ 106.720875][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.728112][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.754399][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.831321][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.838537][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.864818][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.876907][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.883855][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.910446][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.947225][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.954208][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.980370][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.014282][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.021788][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.048556][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.060613][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.067767][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.093910][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.106050][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.113006][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.139463][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.151626][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.158987][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.185102][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.197085][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.204058][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.230662][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.251850][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.258964][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.285818][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.319011][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.326094][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.353836][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.366091][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.373037][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.399442][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.475088][ T5824] hsr_slave_0: entered promiscuous mode [ 107.482653][ T5824] hsr_slave_1: entered promiscuous mode [ 107.562701][ T5823] hsr_slave_0: entered promiscuous mode [ 107.569749][ T5823] hsr_slave_1: entered promiscuous mode [ 107.577509][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 107.583291][ T5823] Cannot create hsr debugfs directory [ 107.635698][ T5826] hsr_slave_0: entered promiscuous mode [ 107.642487][ T5826] hsr_slave_1: entered promiscuous mode [ 107.649197][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 107.654927][ T5826] Cannot create hsr debugfs directory [ 107.681385][ T5827] hsr_slave_0: entered promiscuous mode [ 107.698081][ T5827] hsr_slave_1: entered promiscuous mode [ 107.704362][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 107.734481][ T5827] Cannot create hsr debugfs directory [ 107.778994][ T5828] hsr_slave_0: entered promiscuous mode [ 107.785527][ T5828] hsr_slave_1: entered promiscuous mode [ 107.792142][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 107.797962][ T5828] Cannot create hsr debugfs directory [ 107.836523][ T5825] hsr_slave_0: entered promiscuous mode [ 107.843069][ T5825] hsr_slave_1: entered promiscuous mode [ 107.849912][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 107.856374][ T5825] Cannot create hsr debugfs directory [ 108.275955][ T5138] Bluetooth: hci3: command tx timeout [ 108.281411][ T5138] Bluetooth: hci5: command tx timeout [ 108.285824][ T5832] Bluetooth: hci0: command tx timeout [ 108.287532][ T5839] Bluetooth: hci2: command tx timeout [ 108.356629][ T5138] Bluetooth: hci4: command tx timeout [ 108.362169][ T5839] Bluetooth: hci1: command tx timeout [ 108.650420][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.666430][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.681198][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.702362][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.761403][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.779128][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.806310][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.822728][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.895487][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.911638][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.932532][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.963647][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.045324][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.077271][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.089886][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.126914][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.279659][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.298930][ T5827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.312446][ T5827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.323842][ T5827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.347186][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.358959][ T5827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.440174][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.509753][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.517090][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.532316][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.539593][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.554713][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.578829][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.603228][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.614912][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.637271][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.656693][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.684565][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.691965][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.762309][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.779902][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.787102][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.799933][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.869300][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.876523][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.897093][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.930320][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.937509][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.963451][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.970674][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.042700][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.093891][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.140179][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.147515][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.364298][ T5839] Bluetooth: hci0: command tx timeout [ 110.372326][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.372441][ T5839] Bluetooth: hci2: command tx timeout [ 110.385212][ T5138] Bluetooth: hci5: command tx timeout [ 110.391824][ T5832] Bluetooth: hci3: command tx timeout [ 110.436029][ T5829] Bluetooth: hci4: command tx timeout [ 110.441559][ T5832] Bluetooth: hci1: command tx timeout [ 110.535485][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.571100][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.648065][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.655249][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.769704][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.776932][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.802563][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.816571][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.874316][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.907480][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.914797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.943105][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.950280][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.980265][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.062765][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.126281][ T5828] veth0_vlan: entered promiscuous mode [ 111.177793][ T5826] veth0_vlan: entered promiscuous mode [ 111.201574][ T5828] veth1_vlan: entered promiscuous mode [ 111.251757][ T5826] veth1_vlan: entered promiscuous mode [ 111.380810][ T5824] veth0_vlan: entered promiscuous mode [ 111.413996][ T5824] veth1_vlan: entered promiscuous mode [ 111.464381][ T5823] veth0_vlan: entered promiscuous mode [ 111.502509][ T5826] veth0_macvtap: entered promiscuous mode [ 111.532203][ T5826] veth1_macvtap: entered promiscuous mode [ 111.552450][ T5828] veth0_macvtap: entered promiscuous mode [ 111.572870][ T5823] veth1_vlan: entered promiscuous mode [ 111.597672][ T5828] veth1_macvtap: entered promiscuous mode [ 111.665446][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.686895][ T5824] veth0_macvtap: entered promiscuous mode [ 111.700762][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.712715][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.735159][ T5824] veth1_macvtap: entered promiscuous mode [ 111.763929][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.780766][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.813982][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.824621][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.847621][ T5823] veth0_macvtap: entered promiscuous mode [ 111.858070][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.871944][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.920157][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.927949][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.950463][ T5823] veth1_macvtap: entered promiscuous mode [ 111.989632][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.020110][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.042838][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.053065][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.122381][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.192978][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.239932][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.282661][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.288826][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.307721][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.358834][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.367874][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.392052][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.437120][ T5832] Bluetooth: hci5: command tx timeout [ 112.442735][ T5832] Bluetooth: hci2: command tx timeout [ 112.448419][ T5829] Bluetooth: hci0: command tx timeout [ 112.448444][ T5138] Bluetooth: hci3: command tx timeout [ 112.471458][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.515996][ T5138] Bluetooth: hci1: command tx timeout [ 112.516347][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.521488][ T5839] Bluetooth: hci4: command tx timeout [ 112.551316][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.556207][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.560443][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.618287][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.623836][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.626261][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.642588][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.643264][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.832218][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.930844][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.940531][ T5827] veth0_vlan: entered promiscuous mode [ 112.956609][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.051030][ T5966] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.139066][ T5825] veth0_vlan: entered promiscuous mode [ 113.158338][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.181414][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.201184][ T5827] veth1_vlan: entered promiscuous mode [ 113.287926][ T5825] veth1_vlan: entered promiscuous mode [ 113.299231][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.308748][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.717183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.819747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.091792][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.104608][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.225112][ T5827] veth0_macvtap: entered promiscuous mode [ 114.284523][ T5827] veth1_macvtap: entered promiscuous mode [ 114.293074][ T5825] veth0_macvtap: entered promiscuous mode [ 114.395039][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.427893][ T5825] veth1_macvtap: entered promiscuous mode [ 114.496294][ T5981] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 114.545456][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.664246][ T1106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.075993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.243749][ T1106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.259877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18e!!! [ 115.319464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4e!!! [ 115.332546][ T5923] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.381778][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.515742][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 115.556871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.581686][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.603327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.630171][ T5923] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 115.667665][ T5923] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.712969][ T5923] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.744531][ T5923] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.757835][ T791] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.781361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24e!!! [ 115.864388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0c!!! [ 115.878588][ T5923] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.888169][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.971104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.484192][ T1106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.493201][ T1106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.512639][ T5923] usb 3-1: GET_CAPABILITIES returned 0 [ 116.520982][ T791] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.531141][ T791] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 116.543635][ T791] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 116.559721][ T5923] usbtmc 3-1:16.0: can't read capabilities [ 116.576682][ T1106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.609928][ T791] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 116.657172][ T1106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.682878][ T1106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.693793][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.714714][ T791] usb 1-1: Product: syz [ 116.746609][ T791] usb 1-1: Manufacturer: syz [ 116.751281][ T791] usb 1-1: SerialNumber: syz [ 116.766280][ T1221] usb 3-1: USB disconnect, device number 2 [ 117.007970][ T1106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.688018][ T791] usb 1-1: USB disconnect, device number 2 [ 117.826399][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.861026][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.960448][ T5995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 118.021622][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.068254][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.362457][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.395323][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.527668][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.573663][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.768411][ T6003] binder: BINDER_SET_CONTEXT_MGR already set [ 118.793633][ T6003] binder: 6002:6003 ioctl 4018620d 200000000040 returned -16 [ 120.120502][ T5902] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 120.254083][ T6024] netlink: 35 bytes leftover after parsing attributes in process `syz.2.18'. [ 120.280151][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 120.495687][ T5902] usb 2-1: no configurations [ 121.475899][ T5902] usb 2-1: can't read configurations, error -22 [ 121.975635][ T5902] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 122.288312][ T5923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.504288][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 122.514279][ T5902] usb 2-1: device descriptor read/all, error -71 [ 122.565340][ T5923] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.588114][ T5902] usb usb2-port1: attempt power cycle [ 122.619596][ T5923] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 122.645089][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.676837][ T5923] usb 1-1: Product: syz [ 122.681035][ T5923] usb 1-1: Manufacturer: syz [ 122.708424][ T5923] usb 1-1: SerialNumber: syz [ 122.767844][ T5923] usb 1-1: config 0 descriptor?? [ 122.987578][ T6037] netlink: 'syz.4.23': attribute type 13 has an invalid length. [ 123.017919][ T6037] macvtap0: refused to change device tx_queue_len [ 123.029611][ T6037] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 123.033849][ T5923] usb 1-1: USB disconnect, device number 3 [ 123.617337][ T5923] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.656036][ T6043] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 123.656036][ T6043] program syz.4.26 not setting count and/or reply_len properly [ 123.775667][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 123.808145][ T5923] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.875198][ T5923] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 123.920361][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.944005][ T5923] usb 1-1: Product: syz [ 123.954132][ T5923] usb 1-1: Manufacturer: syz [ 123.974697][ T5923] usb 1-1: SerialNumber: syz [ 124.007655][ T5923] usb 1-1: config 0 descriptor?? [ 124.215922][ T6047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.260969][ T5923] usb 1-1: USB disconnect, device number 4 [ 126.736695][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 127.354729][ T6068] evm: overlay not supported [ 127.428862][ T6068] overlayfs: missing 'lowerdir' [ 127.513426][ T6071] binder: BINDER_SET_CONTEXT_MGR already set [ 127.530784][ T6071] binder: 6069:6071 ioctl 4018620d 200000000040 returned -16 [ 127.898546][ T6082] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.38'. [ 128.569257][ T6086] fuse: Bad value for 'rootmode' [ 129.538254][ T6096] binder: 6094:6096 unknown command 0 [ 129.543802][ T6096] binder: 6094:6096 ioctl c0306201 200000000080 returned -22 [ 131.315913][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 131.929466][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 131.938490][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 132.130999][ T6119] overlayfs: missing 'lowerdir' [ 133.606051][ T6133] syz_tun: entered allmulticast mode [ 133.626201][ T6129] syz_tun: left allmulticast mode [ 134.452296][ T6145] binder: 6142:6145 unknown command 0 [ 134.956080][ T6145] binder: 6142:6145 ioctl c0306201 200000000080 returned -22 [ 136.534913][ T6160] fuse: Unknown parameter 'use00000000000000000000' [ 137.945985][ T6172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.105908][ T6173] overlayfs: missing 'lowerdir' [ 138.587035][ T6187] syz_tun: entered allmulticast mode [ 138.627353][ T6183] syz_tun: left allmulticast mode [ 138.759508][ T1204] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 138.814337][ T6189] ------------[ cut here ]------------ [ 138.820036][ T6189] in_task() && kcov_mode_enabled(mode) [ 138.820054][ T6189] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x152/0x660, CPU#1: syz.1.71/6189 [ 138.835002][ T6189] Modules linked in: [ 138.839040][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT(full) [ 138.848311][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.858418][ T6189] RIP: 0010:kcov_remote_start+0x152/0x660 [ 138.864178][ T6189] Code: 85 ed 74 0f 4d 3b 75 00 74 6a 4d 8b 6d 10 4d 85 ed 75 e8 48 c7 c7 40 94 66 8e e8 b9 3b 71 09 eb 0c 81 e2 ff ff ff bf 74 a7 90 <0f> 0b 90 e8 16 74 6e 09 44 8b 15 6f d9 ec 18 89 c0 48 03 1c c5 20 [ 138.883895][ T6189] RSP: 0018:ffffc9000b967448 EFLAGS: 00010002 [ 138.889985][ T6189] RAX: 0000000080000200 RBX: ffffffff93e4d108 RCX: 0000000000000001 [ 138.897969][ T6189] RDX: 0000000000000002 RSI: ffffffff8dc1cf03 RDI: ffffffff8bfa3320 [ 138.905950][ T6189] RBP: ffff888027c55b80 R08: ffffffff95f0aeb0 R09: 000000000000001c [ 138.913938][ T6189] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000200 [ 138.921921][ T6189] R13: ffff8880b8529108 R14: 0000000000000000 R15: 000000000000000c [ 138.929997][ T6189] FS: 00007fe51b8066c0(0000) GS:ffff8881246dc000(0000) knlGS:0000000000000000 [ 138.939464][ T6189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.946063][ T6189] CR2: 000055dbddb83000 CR3: 000000007970e000 CR4: 0000000000350ef0 [ 138.954048][ T6189] Call Trace: [ 138.957340][ T6189] [ 138.960278][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.965944][ T6189] ieee80211_rx_list+0x497/0x2df0 [ 138.971009][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.976752][ T6189] ? __lock_acquire+0x4a5/0x2630 [ 138.981730][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.987395][ T6189] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 138.992881][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.998535][ T6189] ? __lock_acquire+0x4a5/0x2630 [ 139.003524][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.009185][ T6189] ? lock_acquire+0x17c/0x330 [ 139.013900][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.019563][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.025227][ T6189] ieee80211_rx_napi+0xdc/0x400 [ 139.030109][ T6189] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 139.035600][ T6189] ? lockdep_hardirqs_on+0x78/0x100 [ 139.040825][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.046566][ T6189] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 139.052397][ T6189] ieee80211_handle_queued_frames+0xc8/0x120 [ 139.058395][ T6189] ? ieee80211_stop_device+0x14/0x110 [ 139.063814][ T6189] ieee80211_stop_device+0x32/0x110 [ 139.069055][ T6189] ieee80211_do_stop+0x1be8/0x2600 [ 139.074207][ T6189] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 139.079696][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.085381][ T6189] ? do_raw_spin_lock+0x128/0x260 [ 139.090441][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.096104][ T6189] ? mark_held_locks+0x40/0x70 [ 139.100918][ T6189] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 139.106745][ T6189] ? __pfx_ieee80211_stop+0x10/0x10 [ 139.111968][ T6189] ieee80211_stop+0x169/0x320 [ 139.116679][ T6189] ? __pfx_ieee80211_stop+0x10/0x10 [ 139.122161][ T6189] __dev_close_many+0x30d/0x700 [ 139.127029][ T6189] ? __pfx___dev_close_many+0x10/0x10 [ 139.132429][ T6189] ? __pfx___might_resched+0x10/0x10 [ 139.137753][ T6189] netif_close_many+0x233/0x630 [ 139.142619][ T6189] ? __mutex_lock+0x26a/0x1b90 [ 139.147412][ T6189] ? __pfx_netif_close_many+0x10/0x10 [ 139.152812][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.158485][ T6189] netif_close+0x17f/0x230 [ 139.162927][ T6189] ? __pfx_netif_close+0x10/0x10 [ 139.167886][ T6189] dev_close+0xaa/0x240 [ 139.172050][ T6189] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 139.178247][ T6189] cfg80211_rfkill_set_block+0x35/0x50 [ 139.183751][ T6189] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 139.190203][ T6189] rfkill_set_block+0x205/0x510 [ 139.195075][ T6189] rfkill_fop_write+0x2c0/0x580 [ 139.199946][ T6189] ? __pfx_rfkill_fop_write+0x10/0x10 [ 139.205337][ T6189] ? __entry_text_end+0x1020b5/0x1020b9 [ 139.210904][ T6189] ? security_file_permission+0x76/0x210 [ 139.216624][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.222278][ T6189] ? rw_verify_area+0xce/0x6d0 [ 139.227070][ T6189] vfs_write+0x2aa/0x1070 [ 139.231439][ T6189] ? __pfx_rfkill_fop_write+0x10/0x10 [ 139.236835][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.242508][ T6189] ? __pfx_vfs_write+0x10/0x10 [ 139.247320][ T6189] ? find_held_lock+0x2b/0x80 [ 139.252127][ T6189] ? __fget_files+0x215/0x3d0 [ 139.256827][ T6189] ? __fget_files+0x215/0x3d0 [ 139.261517][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.267265][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.272924][ T6189] ? __fget_files+0x21f/0x3d0 [ 139.277637][ T6189] ksys_write+0x1f8/0x250 [ 139.282096][ T6189] ? __pfx_ksys_write+0x10/0x10 [ 139.287081][ T6189] do_syscall_64+0xc9/0xf80 [ 139.291703][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.297614][ T6189] RIP: 0033:0x7fe51a99aeb9 [ 139.302037][ T6189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.321753][ T6189] RSP: 002b:00007fe51b806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.330194][ T6189] RAX: ffffffffffffffda RBX: 00007fe51ac16180 RCX: 00007fe51a99aeb9 [ 139.338177][ T6189] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b [ 139.346159][ T6189] RBP: 00007fe51aa08c1f R08: 0000000000000000 R09: 0000000000000000 [ 139.354139][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.362116][ T6189] R13: 00007fe51ac16218 R14: 00007fe51ac16180 R15: 00007ffe5ecdf1c8 [ 139.370119][ T6189] [ 139.373159][ T6189] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.380444][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT(full) [ 139.389670][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.399825][ T6189] Call Trace: [ 139.403104][ T6189] [ 139.406047][ T6189] dump_stack_lvl+0x100/0x190 [ 139.410755][ T6189] vpanic+0x20d/0x630 [ 139.414754][ T6189] panic+0xd1/0xd1 [ 139.418489][ T6189] ? __pfx_panic+0x10/0x10 [ 139.422939][ T6189] check_panic_on_warn.cold+0x19/0x34 [ 139.428371][ T6189] ? kcov_remote_start+0x152/0x660 [ 139.433514][ T6189] __warn.cold+0x191/0x2f8 [ 139.437975][ T6189] __report_bug+0x296/0x3d0 [ 139.442499][ T6189] ? kcov_remote_start+0x152/0x660 [ 139.447651][ T6189] ? __pfx___report_bug+0x10/0x10 [ 139.452702][ T6189] ? check_noncircular+0x97/0x160 [ 139.457771][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.463434][ T6189] ? kcov_remote_start+0x152/0x660 [ 139.468601][ T6189] report_bug+0xb2/0x220 [ 139.472862][ T6189] ? kcov_remote_start+0x152/0x660 [ 139.478003][ T6189] handle_bug+0x166/0x2a0 [ 139.482370][ T6189] exc_invalid_op+0x17/0x50 [ 139.486907][ T6189] asm_exc_invalid_op+0x1a/0x20 [ 139.491773][ T6189] RIP: 0010:kcov_remote_start+0x152/0x660 [ 139.497547][ T6189] Code: 85 ed 74 0f 4d 3b 75 00 74 6a 4d 8b 6d 10 4d 85 ed 75 e8 48 c7 c7 40 94 66 8e e8 b9 3b 71 09 eb 0c 81 e2 ff ff ff bf 74 a7 90 <0f> 0b 90 e8 16 74 6e 09 44 8b 15 6f d9 ec 18 89 c0 48 03 1c c5 20 [ 139.517183][ T6189] RSP: 0018:ffffc9000b967448 EFLAGS: 00010002 [ 139.523272][ T6189] RAX: 0000000080000200 RBX: ffffffff93e4d108 RCX: 0000000000000001 [ 139.531259][ T6189] RDX: 0000000000000002 RSI: ffffffff8dc1cf03 RDI: ffffffff8bfa3320 [ 139.539345][ T6189] RBP: ffff888027c55b80 R08: ffffffff95f0aeb0 R09: 000000000000001c [ 139.547332][ T6189] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000200 [ 139.555313][ T6189] R13: ffff8880b8529108 R14: 0000000000000000 R15: 000000000000000c [ 139.563319][ T6189] ? kcov_remote_start+0xac/0x660 [ 139.568384][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.574089][ T6189] ieee80211_rx_list+0x497/0x2df0 [ 139.579152][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.584811][ T6189] ? __lock_acquire+0x4a5/0x2630 [ 139.589790][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.595455][ T6189] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 139.601382][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.607046][ T6189] ? __lock_acquire+0x4a5/0x2630 [ 139.612025][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.617678][ T6189] ? lock_acquire+0x17c/0x330 [ 139.622400][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.628062][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.633726][ T6189] ieee80211_rx_napi+0xdc/0x400 [ 139.638626][ T6189] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 139.644198][ T6189] ? lockdep_hardirqs_on+0x78/0x100 [ 139.649427][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.655088][ T6189] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 139.660920][ T6189] ieee80211_handle_queued_frames+0xc8/0x120 [ 139.666919][ T6189] ? ieee80211_stop_device+0x14/0x110 [ 139.672329][ T6189] ieee80211_stop_device+0x32/0x110 [ 139.677573][ T6189] ieee80211_do_stop+0x1be8/0x2600 [ 139.682729][ T6189] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 139.688306][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.694048][ T6189] ? do_raw_spin_lock+0x128/0x260 [ 139.699104][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.704756][ T6189] ? mark_held_locks+0x40/0x70 [ 139.709588][ T6189] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 139.715412][ T6189] ? __pfx_ieee80211_stop+0x10/0x10 [ 139.720640][ T6189] ieee80211_stop+0x169/0x320 [ 139.725351][ T6189] ? __pfx_ieee80211_stop+0x10/0x10 [ 139.730583][ T6189] __dev_close_many+0x30d/0x700 [ 139.735454][ T6189] ? __pfx___dev_close_many+0x10/0x10 [ 139.740940][ T6189] ? __pfx___might_resched+0x10/0x10 [ 139.746259][ T6189] netif_close_many+0x233/0x630 [ 139.751147][ T6189] ? __mutex_lock+0x26a/0x1b90 [ 139.755945][ T6189] ? __pfx_netif_close_many+0x10/0x10 [ 139.761516][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.767180][ T6189] netif_close+0x17f/0x230 [ 139.771702][ T6189] ? __pfx_netif_close+0x10/0x10 [ 139.776668][ T6189] dev_close+0xaa/0x240 [ 139.780854][ T6189] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 139.787127][ T6189] cfg80211_rfkill_set_block+0x35/0x50 [ 139.792628][ T6189] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 139.798821][ T6189] rfkill_set_block+0x205/0x510 [ 139.803706][ T6189] rfkill_fop_write+0x2c0/0x580 [ 139.808579][ T6189] ? __pfx_rfkill_fop_write+0x10/0x10 [ 139.813972][ T6189] ? __entry_text_end+0x1020b5/0x1020b9 [ 139.819626][ T6189] ? security_file_permission+0x76/0x210 [ 139.825382][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.831035][ T6189] ? rw_verify_area+0xce/0x6d0 [ 139.835836][ T6189] vfs_write+0x2aa/0x1070 [ 139.840211][ T6189] ? __pfx_rfkill_fop_write+0x10/0x10 [ 139.845604][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.851264][ T6189] ? __pfx_vfs_write+0x10/0x10 [ 139.856055][ T6189] ? find_held_lock+0x2b/0x80 [ 139.860762][ T6189] ? __fget_files+0x215/0x3d0 [ 139.865536][ T6189] ? __fget_files+0x215/0x3d0 [ 139.870233][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.875900][ T6189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.881568][ T6189] ? __fget_files+0x21f/0x3d0 [ 139.886268][ T6189] ksys_write+0x1f8/0x250 [ 139.890631][ T6189] ? __pfx_ksys_write+0x10/0x10 [ 139.895529][ T6189] do_syscall_64+0xc9/0xf80 [ 139.900152][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.906061][ T6189] RIP: 0033:0x7fe51a99aeb9 [ 139.910486][ T6189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.930112][ T6189] RSP: 002b:00007fe51b806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.938547][ T6189] RAX: ffffffffffffffda RBX: 00007fe51ac16180 RCX: 00007fe51a99aeb9 [ 139.946789][ T6189] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b [ 139.954763][ T6189] RBP: 00007fe51aa08c1f R08: 0000000000000000 R09: 0000000000000000 [ 139.962742][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.970720][ T6189] R13: 00007fe51ac16218 R14: 00007fe51ac16180 R15: 00007ffe5ecdf1c8 [ 139.978725][ T6189] [ 139.982221][ T6189] Kernel Offset: disabled [ 139.986552][ T6189] Rebooting in 86400 seconds..