last executing test programs: 5.034146611s ago: executing program 3 (id=4): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="100000000000000001000000", 0xc) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x9}}, 0x3b, @void}}]}, 0xfeac}, 0x1, 0x0, 0x0, 0x20040085}, 0x28004800) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 4.512330869s ago: executing program 3 (id=9): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) shmget$private(0x0, 0xa000, 0x40, &(0x7f0000ff6000/0xa000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 4.160203811s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x68c50012, 0x4, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x2}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 3.461495734s ago: executing program 0 (id=17): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ctinfo={0x44, 0x20, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa83}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80000001}]}, {0x7, 0x6, "3878c8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}, 0x5c}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)=""/243, 0xf3}], 0x1, 0x1, 0x853, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3.340751638s ago: executing program 0 (id=18): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="100000000000000001000000", 0xc) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x9}}, 0x3b, @void}}]}, 0xfeac}, 0x1, 0x0, 0x0, 0x20040085}, 0x28004800) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 3.165584354s ago: executing program 3 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002c00)=@newtfilter={0x1904, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18d4, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x43, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}, @TCA_CGROUP_ACT={0x410, 0x1, [@m_simple={0xe4, 0xf, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xfffffff8, 0x2, 0x5, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x3ff, 0x10000000, 0x9, 0x1}}, @TCA_DEF_DATA={0x9, 0x3, '&:&\\\x00'}]}, {0x7c, 0x6, "be44ea6125b64e633635f15406dfbff8f23ea8b12a0dbca057832a8f8fa7163d6fdb656cb460564bd2e9b449e0349dfbb4d52a6dca35024424ecc399f5ea60d2a4be7d01e48c2275830617dc8c797ab2bb14f2cd417cbe67bdac5cfb89dd194d5acb6e97f363d577e809abbb5eaa71d91e4ac6223626a785"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x5c, 0x9, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'policy\x00'}]}, {0x24, 0x6, "57b1cc3b2dbad13cca7a303cd021ea51767bb99e984d1c2e91adf26320901f37"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xd0, 0x1f, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '$[-:%\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x80000001, 0x6, 0x1, 0x7}}, @TCA_DEF_DATA={0x10, 0x3, '/!])&!\x03( ^#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xf, 0x62, 0x1, 0x2, 0x3}}]}, {0x58, 0x6, "d81da2dd1b343631db2b2997dd124ac3f01f65707f3de67106b22f2b7872f107728e3e5acd7c11952b5af0d2b4a30ca4903f8a9a36c2bff2b5d029265991034cdeb201672007fbb6101c60713e36d1b22ef850ef"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x124, 0x1c, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x2, 0x5, 0x7fff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x5, 0x4, 0x991}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe0000, 0x6, 0x2, 0x5, 0x10}, 0x1c3}}]}, {0x9e, 0x6, "c54b199bac60a4cb1f188023ec452882412d5480be38213b15bfd75ee059ae84bbf9535bfd7630184aa005f0088deecd0703b0c0f2b432bfb84b0d6019619f7c98df233b52d93e472eed92351e4d03fb6c57a72748802d1ebec54a9cadb760eee9fb74540c8514ebf7d0ab6d8f617a8bbd2b82d56dd18455623e08e9f89b79aed6721b1d7921eb1c43944d1cee976d782f819b12448e0f4b5236"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd8, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeba}]}, {0xa1, 0x6, "6e133abf8cd054eed24f6d77f1483cf3576ffa8bc90136cb04dd4973f4c48d72b89fec0b2125267f1cc22367ae018172cded0a4b292ff1df1307c6aff35679fd6ecbe89ed2cdd401dc7064dfabe27da4ccbb90a12d75f34f90c669a94fe4fcad462b9d424dda2df3eb9a28fa56adce12e71a137d3b7adbcf3495aa4abcf001523ebd469124bf185b99b2abc3ec75c2687e1c69d960b90649fdaded4051"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_ACT={0x147c, 0x1, [@m_ctinfo={0x1048, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe63b}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x12c, 0x10, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xfff2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}]}, {0xde, 0x6, "636ff9874b87f5b2e518317bbc5ba77d75bf637fc7ffac2b9530a812592313ab35d91c4b7192798aaf4b5cf3793ca84d7a6e62b90456e21ba10227053a8c7d0420bb1e2a05b790e607b1b58d083b2c4ec2623bd9a9abf8e0e0fed79405a4b7ac4c6e8b8380f9ecefa8f47bb22537334e9e3bcbd08375a1d790c0514b4847731be63951d97ea94f459eaa7938cbee4657b94f9f4143e7bc6ed761035b29f1e2aeeb209f2449ffd3f5eebe392e848af999d1b5d2def87b28d8e88f6739cc5b416123e633f2a8391dd397f414d624450508704aba6aec9f75531f2b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x154, 0x5, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x3, 0x20000000, 0x9, 0x1}, 0x2}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x15c, 0xf, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffe}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fffffff, 0xa3b1, 0x4, 0x0, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8001, 0x6, 0x0, 0x3, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0xd7, 0x6, "d3a0369abefe543e2d5ae4b0af5feb7d51d46d0737ed4900b5b76190e696eb38c7c01902ab1b6a2d9619bde410097a02d938e2e83288fc857cd9bfec212e8a2e2dc69d0909307a605c57af2e44f64792076213bca45fc9b4a1d64f2120ec558ae2130cfe3fb1516758b5176d39cdb8a34baad33297d584d9a9393bc19992313c8cca34cd0d506e5b2f0b95999a9138f6efd04727c179373d0a3b29776ebe3a47babf7efd4e2c0cfd22b6fabc358c46a4696b4977b84dbe2c8fc4db3d5b3f4ceca8bf6220806f9168a224bf20f3f8b4af7bc1bc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x54, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5aac, 0x5, 0xe52, 0x8}, 0x3, r3}}]}, {0x5, 0x6, "16"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1904}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3.164295034s ago: executing program 2 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) 3.138426735s ago: executing program 0 (id=22): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200018, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x9b9c}) 2.919199872s ago: executing program 0 (id=23): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xf27b) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 2.864450394s ago: executing program 2 (id=24): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) close(r0) 2.752273898s ago: executing program 3 (id=25): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2.598194823s ago: executing program 2 (id=26): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ctinfo={0x44, 0x20, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa83}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80000001}]}, {0x7, 0x6, "3878c8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}, 0x5c}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)=""/243, 0xf3}], 0x1, 0x1, 0x853, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.823184669s ago: executing program 0 (id=28): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000900)}], 0x1) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x1, 0x5, "1ae586d32101b5128ed271c679583d00", 0x3f, 0x2}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/150, 0x96}], 0x1) 1.78909173s ago: executing program 2 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x68c50012, 0x4, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x2}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 1.713279202s ago: executing program 3 (id=30): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.589316727s ago: executing program 1 (id=31): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200018, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x9b9c}) 1.544601699s ago: executing program 1 (id=32): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 1.449198722s ago: executing program 1 (id=33): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x30, 0x0, 0x8, 0x1000}) 1.289428857s ago: executing program 1 (id=34): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x40800) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000006c0)={0xf, {{0xa, 0x4e20, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffa}}}, 0x88) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_PUBL_GET(r0, 0x0, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r2, 0x14, 0xb9c, 0x2b, 0x0, 0x18) r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/91, 0x5b}], 0x1}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x10040, 0x0) 1.163272421s ago: executing program 1 (id=35): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffef9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x25}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000004440)=""/4096, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x346afffd, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 767.957225ms ago: executing program 0 (id=36): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r0) r1 = socket(0x23, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 738.566386ms ago: executing program 2 (id=37): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/138, 0x8a}], 0x1, 0x7, 0x5) 493.555924ms ago: executing program 2 (id=38): fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000041000/0x3000)=nil, 0x3000, 0x8) syz_clone3(&(0x7f00000004c0)={0x84004400, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) 0s ago: executing program 1 (id=39): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000004c0)}], 0x1}, 0x80) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. [ 80.473715][ T5761] cgroup: Unknown subsys name 'net' [ 80.610400][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.300383][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.699962][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.741547][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.752068][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.766261][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.774463][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.781726][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.786354][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.797383][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.799935][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.812361][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.820231][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.823858][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.829264][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.837029][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.845737][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.850429][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.862590][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.863841][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.874868][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.881838][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.890815][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.898792][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.905111][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.915445][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.423707][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 85.438994][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 85.567221][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 85.579108][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 85.653813][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.661288][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.668753][ T5775] bridge_slave_0: entered allmulticast mode [ 85.679348][ T5775] bridge_slave_0: entered promiscuous mode [ 85.696250][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.703875][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.711400][ T5773] bridge_slave_0: entered allmulticast mode [ 85.718953][ T5773] bridge_slave_0: entered promiscuous mode [ 85.737268][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.745277][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.752751][ T5775] bridge_slave_1: entered allmulticast mode [ 85.759898][ T5775] bridge_slave_1: entered promiscuous mode [ 85.778438][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.786374][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.794428][ T5773] bridge_slave_1: entered allmulticast mode [ 85.801867][ T5773] bridge_slave_1: entered promiscuous mode [ 85.889649][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.909508][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.929727][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.952892][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.017605][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.025220][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.032946][ T5776] bridge_slave_0: entered allmulticast mode [ 86.040489][ T5776] bridge_slave_0: entered promiscuous mode [ 86.072675][ T5775] team0: Port device team_slave_0 added [ 86.079088][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.086675][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.094308][ T5776] bridge_slave_1: entered allmulticast mode [ 86.101720][ T5776] bridge_slave_1: entered promiscuous mode [ 86.108438][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.116018][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.123776][ T5774] bridge_slave_0: entered allmulticast mode [ 86.131459][ T5774] bridge_slave_0: entered promiscuous mode [ 86.142040][ T5773] team0: Port device team_slave_0 added [ 86.150030][ T5775] team0: Port device team_slave_1 added [ 86.189044][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.198558][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.206746][ T5774] bridge_slave_1: entered allmulticast mode [ 86.214485][ T5774] bridge_slave_1: entered promiscuous mode [ 86.224760][ T5773] team0: Port device team_slave_1 added [ 86.254223][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.261531][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.287729][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.324314][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.343844][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.350837][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.377349][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.390935][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.404583][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.428182][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.466254][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.473681][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.500023][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.516271][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.523403][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.549626][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.610665][ T5776] team0: Port device team_slave_0 added [ 86.622463][ T5774] team0: Port device team_slave_0 added [ 86.653011][ T5776] team0: Port device team_slave_1 added [ 86.671585][ T5774] team0: Port device team_slave_1 added [ 86.684361][ T5775] hsr_slave_0: entered promiscuous mode [ 86.690951][ T5775] hsr_slave_1: entered promiscuous mode [ 86.713498][ T5773] hsr_slave_0: entered promiscuous mode [ 86.720250][ T5773] hsr_slave_1: entered promiscuous mode [ 86.726768][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.735196][ T5773] Cannot create hsr debugfs directory [ 86.766771][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.774158][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.800228][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.843054][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.850071][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.876375][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.888133][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.895716][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.922043][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.952219][ T5085] Bluetooth: hci3: command tx timeout [ 86.957983][ T5085] Bluetooth: hci1: command tx timeout [ 86.961395][ T5790] Bluetooth: hci0: command tx timeout [ 86.980313][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.987701][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.013981][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.031336][ T5790] Bluetooth: hci2: command tx timeout [ 87.216370][ T5774] hsr_slave_0: entered promiscuous mode [ 87.225873][ T5774] hsr_slave_1: entered promiscuous mode [ 87.235497][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.246011][ T5774] Cannot create hsr debugfs directory [ 87.264041][ T5776] hsr_slave_0: entered promiscuous mode [ 87.274730][ T5776] hsr_slave_1: entered promiscuous mode [ 87.283629][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.293692][ T5776] Cannot create hsr debugfs directory [ 87.803547][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.817780][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.828130][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.850623][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.903342][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.946344][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.969174][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.998868][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.032411][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.076748][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.088914][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.119337][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.167289][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.178975][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.194101][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.206393][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.410519][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.446722][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.474636][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.488460][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.513807][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.521272][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.553267][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.560467][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.577718][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.595445][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.625678][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.632907][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.649842][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.657045][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.673041][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.680244][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.694750][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.734643][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.741867][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.792163][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.821753][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.828962][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.869488][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.876973][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.000390][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.033316][ T5790] Bluetooth: hci0: command tx timeout [ 89.038890][ T5790] Bluetooth: hci1: command tx timeout [ 89.044898][ T5790] Bluetooth: hci3: command tx timeout [ 89.123087][ T5790] Bluetooth: hci2: command tx timeout [ 89.367175][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.538920][ T5774] veth0_vlan: entered promiscuous mode [ 89.562748][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.583650][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.600046][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.616351][ T5774] veth1_vlan: entered promiscuous mode [ 89.699018][ T5773] veth0_vlan: entered promiscuous mode [ 89.747437][ T5774] veth0_macvtap: entered promiscuous mode [ 89.762272][ T5774] veth1_macvtap: entered promiscuous mode [ 89.794922][ T5773] veth1_vlan: entered promiscuous mode [ 89.808635][ T5775] veth0_vlan: entered promiscuous mode [ 89.818140][ T5776] veth0_vlan: entered promiscuous mode [ 89.835650][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.859719][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.873449][ T5775] veth1_vlan: entered promiscuous mode [ 89.885301][ T5776] veth1_vlan: entered promiscuous mode [ 89.898626][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.907999][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.919234][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.928334][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.979104][ T5773] veth0_macvtap: entered promiscuous mode [ 90.010810][ T5773] veth1_macvtap: entered promiscuous mode [ 90.074876][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.089591][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.101773][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.121979][ T5775] veth0_macvtap: entered promiscuous mode [ 90.155928][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.169397][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.180879][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.206837][ T5776] veth0_macvtap: entered promiscuous mode [ 90.213766][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.227987][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.239193][ T5775] veth1_macvtap: entered promiscuous mode [ 90.264991][ T5776] veth1_macvtap: entered promiscuous mode [ 90.278376][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.287449][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.297294][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.306152][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.356724][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.367842][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.380208][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.390688][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.401100][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.411843][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.423893][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.434691][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.445623][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.456428][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.474461][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.486966][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.513258][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.525516][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.537113][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.549142][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.563131][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.574807][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.584865][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.595595][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.606098][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.616688][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.628528][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.674654][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.687388][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.699512][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.710409][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.730716][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.741743][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.755173][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.820080][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.850243][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.871864][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.880710][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.931134][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.939483][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.059404][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.074722][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.111486][ T5790] Bluetooth: hci1: command tx timeout [ 91.117011][ T5790] Bluetooth: hci0: command tx timeout [ 91.123345][ T5085] Bluetooth: hci3: command tx timeout [ 91.177324][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.191394][ T5085] Bluetooth: hci2: command tx timeout [ 91.218437][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.244286][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.264947][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.330504][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.368450][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.448737][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.481141][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.811666][ T5859] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.830194][ T5085] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 92.159052][ T9] cfg80211: failed to load regulatory.db [ 92.256378][ T5868] capability: warning: `syz.3.9' uses deprecated v2 capabilities in a way that may be insecure [ 92.317171][ T5870] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.352389][ T5870] overlayfs: failed to set xattr on upper [ 92.375474][ T5870] overlayfs: ...falling back to redirect_dir=nofollow. [ 92.422330][ T5870] overlayfs: ...falling back to index=off. [ 92.475201][ T5870] overlayfs: ...falling back to uuid=null. [ 92.584333][ T5874] overlayfs: failed to resolve './file0': -2 [ 92.597453][ T5874] overlayfs: failed to resolve './file0/file0': -2 [ 93.196154][ T5085] Bluetooth: hci3: command tx timeout [ 93.203009][ T5085] Bluetooth: hci0: command tx timeout [ 93.205866][ T5790] Bluetooth: hci1: command tx timeout [ 93.242635][ T5790] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 93.274590][ T5790] Bluetooth: hci2: command tx timeout [ 93.569454][ T5898] overlayfs: failed to resolve './file0': -2 [ 93.617035][ T5899] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.624827][ T5898] overlayfs: failed to resolve './file0/file0': -2 [ 93.633081][ T5899] overlayfs: failed to set xattr on upper [ 93.639006][ T5899] overlayfs: ...falling back to redirect_dir=nofollow. [ 93.648054][ T5895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'. [ 93.657426][ T5899] overlayfs: ...falling back to index=off. [ 93.677349][ T5899] overlayfs: ...falling back to uuid=null. [ 94.424369][ T5790] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 96.822145][ T5947] [ 96.824577][ T5947] ============================= [ 96.829466][ T5947] WARNING: suspicious RCU usage [ 96.834465][ T5947] syzkaller #0 Not tainted [ 96.838929][ T5947] ----------------------------- [ 96.843904][ T5947] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 96.852411][ T5947] [ 96.852411][ T5947] other info that might help us debug this: [ 96.852411][ T5947] [ 96.862813][ T5947] [ 96.862813][ T5947] rcu_scheduler_active = 2, debug_locks = 1 [ 96.870933][ T5947] 1 lock held by syz.1.39/5947: [ 96.878181][ T5947] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 96.887744][ T5947] [ 96.887744][ T5947] stack backtrace: [ 96.893877][ T5947] CPU: 0 PID: 5947 Comm: syz.1.39 Not tainted syzkaller #0 [ 96.901143][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.911272][ T5947] Call Trace: [ 96.914605][ T5947] [ 96.917590][ T5947] dump_stack_lvl+0x18c/0x250 [ 96.922337][ T5947] ? show_regs_print_info+0x20/0x20 [ 96.927590][ T5947] ? load_image+0x420/0x420 [ 96.932140][ T5947] lockdep_rcu_suspicious+0x1e1/0x300 [ 96.937548][ T5947] ieee80211_check_concurrent_iface+0x475/0x950 [ 96.943839][ T5947] ieee80211_open+0xc1/0x200 [ 96.948467][ T5947] __dev_open+0x2cb/0x430 [ 96.952845][ T5947] ? dev_open+0x190/0x190 [ 96.957234][ T5947] __dev_change_flags+0x211/0x6a0 [ 96.962296][ T5947] ? dev_get_flags+0x1c0/0x1c0 [ 96.967093][ T5947] ? mutex_lock_nested+0x20/0x20 [ 96.972072][ T5947] dev_change_flags+0x88/0x1a0 [ 96.976867][ T5947] dev_ioctl+0x7b4/0x1140 [ 96.981240][ T5947] sock_do_ioctl+0x239/0x310 [ 96.985875][ T5947] ? sock_show_fdinfo+0xb0/0xb0 [ 96.990771][ T5947] sock_ioctl+0x5ba/0x7e0 [ 96.995135][ T5947] ? sock_poll+0x3e0/0x3e0 [ 96.999626][ T5947] ? bpf_lsm_file_ioctl+0x9/0x10 [ 97.004595][ T5947] ? security_file_ioctl+0x80/0xa0 [ 97.009741][ T5947] ? sock_poll+0x3e0/0x3e0 [ 97.014195][ T5947] __se_sys_ioctl+0xfd/0x170 [ 97.018829][ T5947] do_syscall_64+0x55/0xb0 [ 97.023293][ T5947] ? clear_bhb_loop+0x40/0x90 [ 97.028052][ T5947] ? clear_bhb_loop+0x40/0x90 [ 97.032763][ T5947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.038693][ T5947] RIP: 0033:0x7ff7c8f9ce59 [ 97.043150][ T5947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.062801][ T5947] RSP: 002b:00007ff7c9f3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.071278][ T5947] RAX: ffffffffffffffda RBX: 00007ff7c9215fa0 RCX: 00007ff7c8f9ce59 [ 97.079310][ T5947] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000008 [ 97.087341][ T5947] RBP: 00007ff7c9032d6f R08: 0000000000000000 R09: 0000000000000000 [ 97.095369][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.103385][ T5947] R13: 00007ff7c9216038 R14: 00007ff7c9215fa0 R15: 00007ffdbd6cc3f8 [ 97.111420][ T5947]