last executing test programs: 15.400307591s ago: executing program 3 (id=87): syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x18, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) syz_open_dev$vim2m(&(0x7f0000000080), 0xe2, 0x2) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2}) 14.546726814s ago: executing program 0 (id=88): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 14.105085966s ago: executing program 3 (id=89): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000)='batadv_slave_1\x00', 0x101200, &(0x7f0000000100)={@_ha_fsid={[0x0, 0x5]}, {0x1, 0x9, 0x0, 0xc}}, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x2}) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) 12.791391921s ago: executing program 0 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180)) clock_gettime(0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r5, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x880) close(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') 12.618712756s ago: executing program 3 (id=92): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x18000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x13}, 0x1, 0x4, 0x88, {}, 0x0, 0x4000ffff}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 11.628510663s ago: executing program 0 (id=93): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) syz_open_procfs$userns(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) 8.881183408s ago: executing program 0 (id=94): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c", 0x18}, {0x0}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.35125842s ago: executing program 3 (id=98): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) pipe(&(0x7f00000000c0)) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) fsmount(r0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* w'], 0xa) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r5) 6.294798898s ago: executing program 2 (id=99): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.761427683s ago: executing program 3 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) inotify_init() syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_uring_setup(0x1c97, &(0x7f0000000600)={0x0, 0x1ad0, 0x100, 0x2, 0x1df}) epoll_create1(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) fsopen(&(0x7f0000000340)='rpc_pipefs\x00', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) pipe2(&(0x7f0000000000), 0x80080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6) 5.716635124s ago: executing program 1 (id=101): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c405"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61", 0x5c}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018", 0x55}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.613357697s ago: executing program 2 (id=102): creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r7, &(0x7f0000000000)=""/28, 0x1c) 5.51690951s ago: executing program 1 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x70, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 4.548603466s ago: executing program 2 (id=104): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.453378039s ago: executing program 1 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000b6e000/0x1000)=nil, 0x1000, 0x19) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x81e, &(0x7f00000001c0)={[{@nolazytime}, {@inlinecrypt}, {@debug}, {@lazytime}, {@init_itable}, {@debug}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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") open(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8921, &(0x7f0000000040)={'veth1_vlan\x00', @remote}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 4.323159552s ago: executing program 2 (id=106): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) epoll_create1(0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001340)={[{@shortname_lower}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@fat=@check_normal}, {@uni_xlate}, {@rodir}, {@fat=@nocase}, {@rodir}]}, 0x1, 0x227, &(0x7f0000001100)="$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") 3.062698966s ago: executing program 1 (id=107): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3136564e, 0x1, @discrete={0xff, 0x1}}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000001640)}}], 0x1, 0x8080) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x8) write$cgroup_subtree(r2, &(0x7f0000000a80)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab0700f2000523a6"], 0xfe33) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x462040, 0x0) epoll_create(0x7e) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xd, 0x80000002}, 0x0, 0x0) 2.899935611s ago: executing program 2 (id=108): r0 = socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2.791355694s ago: executing program 0 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r3, &(0x7f0000000000)={@void, @void, @eth={@random="000000f400", @empty, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x15) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000100)='cpuacct.usage\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 2.670764417s ago: executing program 1 (id=110): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 105.394417ms ago: executing program 3 (id=111): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000440)={[&(0x7f0000000280)='\x00', &(0x7f0000000300)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, &(0x7f0000000580)={[&(0x7f0000000480)='*^\x00']}, 0x800) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 40.744828ms ago: executing program 2 (id=112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x591f) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x1301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x3, 0x80000006}, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) 569.13µs ago: executing program 0 (id=113): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VT_DISALLOCATE(r1, 0x5608) sendmsg$nl_xfrm(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$XFS_IOC_GOINGDOWN(r6, 0x8004587d, &(0x7f0000000440)=0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 0s ago: executing program 1 (id=114): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 81.919027][ T5759] cgroup: Unknown subsys name 'net' [ 82.084822][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.828039][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.574615][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.585586][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.593934][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.603780][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.612083][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.620032][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.640387][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.650100][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.657010][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.664068][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.668198][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.679982][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.688291][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.696155][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.706855][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.723450][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.732164][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.741081][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.764414][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.773971][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.782781][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.797257][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.806878][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.818147][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.277653][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.392826][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 86.454776][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 86.483755][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.495077][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.503424][ T5774] bridge_slave_0: entered allmulticast mode [ 86.512122][ T5774] bridge_slave_0: entered promiscuous mode [ 86.532189][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.539657][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.547311][ T5774] bridge_slave_1: entered allmulticast mode [ 86.554686][ T5774] bridge_slave_1: entered promiscuous mode [ 86.603286][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 86.653139][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.668000][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.821475][ T5774] team0: Port device team_slave_0 added [ 86.828180][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.835615][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.843719][ T5777] bridge_slave_0: entered allmulticast mode [ 86.852002][ T5777] bridge_slave_0: entered promiscuous mode [ 86.883640][ T5774] team0: Port device team_slave_1 added [ 86.901780][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.910429][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.920948][ T5777] bridge_slave_1: entered allmulticast mode [ 86.928245][ T5777] bridge_slave_1: entered promiscuous mode [ 86.935843][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.945210][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.954159][ T5783] bridge_slave_0: entered allmulticast mode [ 86.962346][ T5783] bridge_slave_0: entered promiscuous mode [ 86.970683][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.979958][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.987757][ T5770] bridge_slave_0: entered allmulticast mode [ 86.994980][ T5770] bridge_slave_0: entered promiscuous mode [ 87.016234][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.023567][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.031110][ T5770] bridge_slave_1: entered allmulticast mode [ 87.038691][ T5770] bridge_slave_1: entered promiscuous mode [ 87.055714][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.063760][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.071638][ T5783] bridge_slave_1: entered allmulticast mode [ 87.079371][ T5783] bridge_slave_1: entered promiscuous mode [ 87.098256][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.105299][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.131678][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.145085][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.152651][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.179739][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.235066][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.266764][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.279243][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.292436][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.327629][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.373500][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.463518][ T5774] hsr_slave_0: entered promiscuous mode [ 87.473534][ T5774] hsr_slave_1: entered promiscuous mode [ 87.525090][ T5777] team0: Port device team_slave_0 added [ 87.535741][ T5783] team0: Port device team_slave_0 added [ 87.547829][ T5783] team0: Port device team_slave_1 added [ 87.558197][ T5770] team0: Port device team_slave_0 added [ 87.568252][ T5777] team0: Port device team_slave_1 added [ 87.604335][ T5770] team0: Port device team_slave_1 added [ 87.687881][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.695178][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.723022][ T5087] Bluetooth: hci0: command tx timeout [ 87.729248][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.762828][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.773747][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.786539][ T5087] Bluetooth: hci1: command tx timeout [ 87.806655][ T5773] Bluetooth: hci2: command tx timeout [ 87.812570][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.849040][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.862816][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.889253][ T5087] Bluetooth: hci3: command tx timeout [ 87.902229][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.915705][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.929102][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.962004][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.988144][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.995340][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.028061][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.053391][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.066058][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.096123][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.244928][ T5777] hsr_slave_0: entered promiscuous mode [ 88.252884][ T5777] hsr_slave_1: entered promiscuous mode [ 88.260059][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.268279][ T5777] Cannot create hsr debugfs directory [ 88.305313][ T5783] hsr_slave_0: entered promiscuous mode [ 88.312746][ T5783] hsr_slave_1: entered promiscuous mode [ 88.319927][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.327918][ T5783] Cannot create hsr debugfs directory [ 88.372792][ T5770] hsr_slave_0: entered promiscuous mode [ 88.380878][ T5770] hsr_slave_1: entered promiscuous mode [ 88.389133][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.397756][ T5770] Cannot create hsr debugfs directory [ 88.630430][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.668398][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.690958][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.739430][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.881020][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.909381][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.923132][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.935376][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.035698][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.051732][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.064467][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.076723][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.184545][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.197416][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.209660][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.221389][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.270256][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.351559][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.384234][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.414185][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.421757][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.437973][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.464372][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.471713][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.488487][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.495804][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.539741][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.547224][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.574405][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.674919][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.702583][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.741614][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.749814][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.788805][ T5087] Bluetooth: hci0: command tx timeout [ 89.800227][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.843421][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.850993][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.867748][ T5087] Bluetooth: hci1: command tx timeout [ 89.873425][ T5087] Bluetooth: hci2: command tx timeout [ 89.911106][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.918486][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.946186][ T5087] Bluetooth: hci3: command tx timeout [ 89.974045][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.981370][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.130673][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.213702][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.340868][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.364382][ T5770] veth0_vlan: entered promiscuous mode [ 90.420621][ T5770] veth1_vlan: entered promiscuous mode [ 90.532301][ T5774] veth0_vlan: entered promiscuous mode [ 90.570569][ T5774] veth1_vlan: entered promiscuous mode [ 90.580055][ T5770] veth0_macvtap: entered promiscuous mode [ 90.603481][ T5770] veth1_macvtap: entered promiscuous mode [ 90.685016][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.727420][ T5774] veth0_macvtap: entered promiscuous mode [ 90.744416][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.758758][ T5774] veth1_macvtap: entered promiscuous mode [ 90.778680][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.799557][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.809132][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.822037][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.832039][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.853945][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.903443][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.915171][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.929443][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.942984][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.959004][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.973040][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.060649][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.070547][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.079790][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.090661][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.133958][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.153815][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.274766][ T5777] veth0_vlan: entered promiscuous mode [ 91.285299][ T5783] veth0_vlan: entered promiscuous mode [ 91.314567][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.337519][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.354618][ T5777] veth1_vlan: entered promiscuous mode [ 91.376874][ T5783] veth1_vlan: entered promiscuous mode [ 91.451806][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.463530][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.595505][ T5777] veth0_macvtap: entered promiscuous mode [ 91.639451][ T5783] veth0_macvtap: entered promiscuous mode [ 91.652789][ T5777] veth1_macvtap: entered promiscuous mode [ 91.667635][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.675818][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.693212][ T5783] veth1_macvtap: entered promiscuous mode [ 91.794994][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.813550][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.824487][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.842614][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.861787][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.897082][ T5087] Bluetooth: hci0: command tx timeout [ 91.946909][ T5087] Bluetooth: hci2: command tx timeout [ 91.952529][ T5087] Bluetooth: hci1: command tx timeout [ 91.972030][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.027140][ T5773] Bluetooth: hci3: command tx timeout [ 92.066292][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.083330][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.096761][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.113804][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.127562][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.468142][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.959060][ T5841] syz.0.1[5841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.990097][ T5841] loop0: detected capacity change from 0 to 64 [ 93.006336][ T5841] ======================================================= [ 93.006336][ T5841] WARNING: The mand mount option has been deprecated and [ 93.006336][ T5841] and is ignored by this kernel. Remove the mand [ 93.006336][ T5841] option from the mount to silence this warning. [ 93.006336][ T5841] ======================================================= [ 93.144098][ T5841] hfs: get root inode failed [ 93.714930][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.757124][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.774138][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.785409][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.800859][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.818115][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.836179][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.877941][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.917686][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.944273][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.955445][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.976231][ T5773] Bluetooth: hci0: command tx timeout [ 93.988372][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.013737][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.028179][ T5087] Bluetooth: hci2: command tx timeout [ 94.045199][ T5773] Bluetooth: hci1: command tx timeout [ 94.052053][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.081561][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.093042][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.107429][ T5773] Bluetooth: hci3: command tx timeout [ 94.290665][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.467578][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.508072][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.589027][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.808269][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.136543][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.582134][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.591061][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.700002][ T5861] sched: RT throttling activated [ 98.026301][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.316349][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.561880][ T8] cfg80211: failed to load regulatory.db [ 98.672941][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.703556][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.764906][ T5869] loop1: detected capacity change from 0 to 512 [ 98.847896][ T5869] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.876026][ T5869] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 99.173137][ T5868] Zero length message leads to an empty skb [ 99.180443][ T5868] process 'syz.1.9' launched './file0' with NULL argv: empty string added [ 100.103596][ T966] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.360210][ T966] usb 3-1: device descriptor read/64, error -71 [ 101.186368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 101.666579][ T966] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.788050][ T5891] loop3: detected capacity change from 0 to 512 [ 101.795690][ T5891] EXT4-fs: Ignoring removed nobh option [ 101.947882][ T966] usb 3-1: device descriptor read/64, error -71 [ 102.053639][ T5895] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 102.201064][ T966] usb usb3-port1: attempt power cycle [ 102.727837][ T5891] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.13: iget: bad i_size value: 38620345925642 [ 102.777517][ T5891] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.13: couldn't read orphan inode 15 (err -117) [ 102.827837][ T5891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.421019][ T5773] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 105.421135][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 106.107555][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.456801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 113.147436][ T5775] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.449138][ T5775] usb 1-1: device descriptor read/64, error -71 [ 116.356169][ T5775] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.878854][ T5978] overlayfs: failed to clone upperpath [ 120.575854][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 120.660484][ T5988] ceph: No mds server is up or the cluster is laggy [ 120.745995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.776281][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 120.880271][ T5994] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.536166][ T5775] usb 1-1: device descriptor read/64, error -110 [ 122.196437][ T5775] usb usb1-port1: attempt power cycle [ 122.646118][ T5775] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.686992][ T5775] usb 1-1: device descriptor read/8, error -32 [ 122.966187][ T5775] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.006463][ T5775] usb 1-1: device descriptor read/8, error -32 [ 123.151355][ T5775] usb usb1-port1: unable to enumerate USB device [ 124.354383][ T6016] overlayfs: failed to clone upperpath [ 124.562855][ T6023] loop0: detected capacity change from 0 to 512 [ 124.725705][ T6023] EXT4-fs: Ignoring removed nobh option [ 125.636007][ T6023] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.39: iget: bad i_size value: 38620345925642 [ 125.650537][ T6023] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.39: couldn't read orphan inode 15 (err -117) [ 125.683808][ T6023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.002180][ T6039] overlayfs: failed to clone upperpath [ 128.160678][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.672575][ T6058] o2cb: This node has not been configured. [ 128.678875][ T6058] o2cb: Cluster check failed. Fix errors before retrying. [ 128.686749][ T6058] (syz.1.45,6058,1):user_dlm_register:674 ERROR: status = -22 [ 128.694323][ T6058] (syz.1.45,6058,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 129.263652][ T6055] overlayfs: invalid origin (0000) [ 132.413861][ T6091] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 133.390983][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.398231][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.651600][ T6097] overlayfs: failed to clone upperpath [ 134.045516][ T6102] overlayfs: invalid origin (0000) [ 134.946235][ T6117] mmap: syz.2.62 (6117) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.168551][ T6116] syzkaller0: entered promiscuous mode [ 135.340186][ T6116] syzkaller0: entered allmulticast mode [ 135.595867][ T6125] No such timeout policy "syz1" [ 137.299649][ T6134] overlayfs: failed to clone upperpath [ 139.037699][ T6143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.326477][ T6152] overlayfs: invalid origin (0000) [ 140.487966][ T6167] netlink: 'syz.2.72': attribute type 4 has an invalid length. [ 140.764573][ T6172] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 140.776217][ T6172] macsec1: entered promiscuous mode [ 140.797879][ T6172] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 140.984508][ T6176] overlayfs: failed to clone upperpath [ 141.640672][ T6181] overlayfs: invalid origin (0000) [ 141.646821][ T6181] overlayfs: overlapping lowerdir path [ 143.660654][ T6200] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 144.296644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 144.675427][ T6206] ptrace attach of "./syz-executor exec"[5770] was attempted by "./syz-executor exec"[6206] [ 145.378880][ T6207] overlayfs: invalid origin (0000) [ 147.311977][ T6228] overlayfs: invalid origin (0000) [ 147.326432][ T6229] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 147.351742][ T6228] overlayfs: overlapping lowerdir path [ 151.976623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 153.658095][ T6317] overlayfs: failed to clone upperpath [ 155.481972][ T6328] overlayfs: failed to clone upperpath [ 156.406563][ T5775] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 156.745818][ T5775] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 156.766055][ T5775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.780940][ T5775] usb 4-1: Product: syz [ 156.785206][ T5775] usb 4-1: Manufacturer: syz [ 156.796480][ T6344] overlayfs: failed to clone upperpath [ 156.823349][ T5775] usb 4-1: SerialNumber: syz [ 157.463076][ T5775] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 157.480816][ T5775] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 158.260918][ T5775] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 158.278423][ T5775] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 158.290372][ T5775] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 158.311339][ T5775] lan78xx: probe of 4-1:1.0 failed with error -71 [ 158.333031][ T5775] usb 4-1: USB disconnect, device number 2 [ 158.343652][ T6359] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.107'. [ 160.567405][ T6370] overlayfs: failed to clone upperpath [ 160.950311][ T6366] overlayfs: failed to clone upperpath [ 161.105253][ T6367] syz.0.109 (6367) used greatest stack depth: 17384 bytes left [ 162.216825][ C1] ------------[ cut here ]------------ [ 162.223169][ C1] WARNING: CPU: 1 PID: 6378 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 162.233335][ C1] Modules linked in: [ 162.237436][ C1] CPU: 1 PID: 6378 Comm: syz.3.111 Not tainted syzkaller #0 [ 162.244904][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.255343][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 162.261782][ C1] Code: 24 4c 89 e7 e8 fe 69 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 a7 82 f7 0f 0b e9 f6 f7 ff ff e8 ed a7 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 a7 82 f7 48 c7 c7 60 89 64 8e 4c 89 e6 [ 162.281761][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 162.287977][ C1] RAX: ffffffff8a047a13 RBX: ffffffff8a046816 RCX: ffff88807e118000 [ 162.296050][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.304072][ C1] RBP: 0000000000000000 R08: ffff88807e118000 R09: 0000000000000003 [ 162.312314][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880305423c0 [ 162.320762][ C1] R13: dffffc0000000000 R14: ffff8880305428b0 R15: ffff88802f4da424 [ 162.329010][ C1] FS: 00007f071cabd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 162.338136][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.345146][ C1] CR2: 000020000006b000 CR3: 000000005de57000 CR4: 00000000003506e0 [ 162.353526][ C1] Call Trace: [ 162.357179][ C1] [ 162.360222][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 162.366083][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 162.371720][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 162.378673][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 162.384405][ C1] __iterate_interfaces+0x243/0x500 [ 162.389764][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 162.396282][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 162.403573][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 162.409994][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 162.417123][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 162.422390][ C1] __hrtimer_run_queues+0x520/0xc40 [ 162.427692][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 162.433744][ C1] ? hw_scan_work+0xf60/0xf60 [ 162.438521][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 162.443698][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 162.449973][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 162.455248][ C1] handle_softirqs+0x280/0x820 [ 162.460293][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 162.465120][ C1] ? do_softirq+0x1a0/0x1a0 [ 162.469718][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 162.475080][ C1] __irq_exit_rcu+0xd3/0x190 [ 162.479843][ C1] ? irq_exit_rcu+0x20/0x20 [ 162.484426][ C1] irq_exit_rcu+0x9/0x20 [ 162.488875][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 162.494698][ C1] [ 162.497855][ C1] [ 162.500843][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.506992][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 162.512946][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 e9 de 04 00 00 4c 8b 75 d0 4c 89 e7 e8 00 b9 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 162.532749][ C1] RSP: 0018:ffffc9000c9b74b8 EFLAGS: 00000286 [ 162.539093][ C1] RAX: e975a88090365e00 RBX: 0000000000000000 RCX: e975a88090365e00 [ 162.547520][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fe0 [ 162.555655][ C1] RBP: ffffc9000c9b7510 R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d [ 162.563912][ C1] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: ffff88807e118000 [ 162.572006][ C1] R13: dffffc0000000000 R14: ffff888025535a00 R15: ffff8880b8f3cac8 [ 162.580201][ C1] ? finish_task_switch+0x265/0x8f0 [ 162.585476][ C1] __schedule+0x155b/0x45a0 [ 162.590559][ C1] ? put_pid+0xc7/0x120 [ 162.594976][ C1] ? asan.module_dtor+0x20/0x20 [ 162.599962][ C1] ? mark_lock+0x94/0x320 [ 162.604367][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 162.610622][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 162.616055][ C1] preempt_schedule_irq+0xbf/0x150 [ 162.621253][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 162.627103][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 162.633247][ C1] irqentry_exit+0x67/0x70 [ 162.637766][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 162.643501][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 162.649841][ C1] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 1c fa 03 0d 48 89 de 5b e9 d3 67 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b0 93 7c 7e 65 8b 15 b1 93 7c 7e 81 e2 00 01 ff 00 74 [ 162.669949][ C1] RSP: 0018:ffffc9000c9b78b0 EFLAGS: 00000246 [ 162.676488][ C1] RAX: ffffffff813bfae9 RBX: 000020000006b000 RCX: 0000000000000002 [ 162.684696][ C1] RDX: ffff88807e118000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.692846][ C1] RBP: 0000000000000000 R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d [ 162.701265][ C1] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: ffffc9000c9b79a8 [ 162.709445][ C1] R13: ffffc9000c9b7a30 R14: ffff8880216a8980 R15: 0000000000000214 [ 162.717561][ C1] ? do_user_addr_fault+0x309/0x12c0 [ 162.722960][ C1] do_user_addr_fault+0x309/0x12c0 [ 162.728175][ C1] ? rcu_is_watching+0x15/0xb0 [ 162.733055][ C1] exc_page_fault+0x64/0x100 [ 162.737761][ C1] asm_exc_page_fault+0x26/0x30 [ 162.742684][ C1] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 162.748597][ C1] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 162.768371][ C1] RSP: 0018:ffffc9000c9b7a50 EFLAGS: 00050206 [ 162.774477][ C1] RAX: ffffffff842a2a01 RBX: 0000000000000038 RCX: 0000000000000038 [ 162.782754][ C1] RDX: 0000000000000001 RSI: 000020000006b000 RDI: ffffc9000c9b7ae0 [ 162.790853][ C1] RBP: ffffc9000c9b7c70 R08: ffffc9000c9b7b17 R09: 1ffff92001936f62 [ 162.799030][ C1] R10: dffffc0000000000 R11: fffff52001936f63 R12: 000020000006b038 [ 162.807224][ C1] R13: dffffc0000000000 R14: ffffc9000c9b7ae0 R15: 000020000006b000 [ 162.815657][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 162.816511][ C1] ? _copy_from_user+0x11/0xe0 [ 162.816568][ C1] _copy_from_user+0x8b/0xe0 [ 162.816598][ C1] ___sys_recvmsg+0x176/0x590 [ 162.816631][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 162.816676][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 162.816710][ C1] ? __might_fault+0xc6/0x120 [ 162.816730][ C1] ? __might_fault+0xaa/0x120 [ 162.816759][ C1] do_recvmmsg+0x39a/0x870 [ 162.816790][ C1] ? __sys_recvmmsg+0x290/0x290 [ 162.816835][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 162.816871][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 162.816898][ C1] ? do_recvmmsg+0x870/0x870 [ 162.816934][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 162.816966][ C1] do_syscall_64+0x55/0xa0 [ 162.816987][ C1] ? clear_bhb_loop+0x40/0x90 [ 162.817014][ C1] ? clear_bhb_loop+0x40/0x90 [ 162.817043][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.817070][ C1] RIP: 0033:0x7f071bb9cdd9 [ 162.817104][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.817124][ C1] RSP: 002b:00007f071cabd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 162.817152][ C1] RAX: ffffffffffffffda RBX: 00007f071be16090 RCX: 00007f071bb9cdd9 [ 162.817169][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 162.817185][ C1] RBP: 00007f071bc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 162.817199][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 162.817222][ C1] R13: 00007f071be16128 R14: 00007f071be16090 R15: 00007ffe5be1fbd8 [ 162.817254][ C1] [ 162.817265][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.817282][ C1] CPU: 1 PID: 6378 Comm: syz.3.111 Not tainted syzkaller #0 [ 162.817304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.817316][ C1] Call Trace: [ 162.817325][ C1] [ 162.817333][ C1] dump_stack_lvl+0x18c/0x250 [ 162.817371][ C1] ? show_regs_print_info+0x20/0x20 [ 162.817405][ C1] ? load_image+0x420/0x420 [ 162.817447][ C1] panic+0x2dc/0x730 [ 162.817486][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 162.817529][ C1] __warn+0x2e0/0x470 [ 162.817553][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 162.817584][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 162.817611][ C1] report_bug+0x2be/0x4f0 [ 162.817633][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 162.817661][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 162.817688][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 162.817715][ C1] handle_bug+0xcf/0x120 [ 162.817736][ C1] exc_invalid_op+0x1a/0x50 [ 162.817766][ C1] asm_exc_invalid_op+0x1a/0x20 [ 162.817790][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 162.817819][ C1] Code: 24 4c 89 e7 e8 fe 69 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 a7 82 f7 0f 0b e9 f6 f7 ff ff e8 ed a7 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 a7 82 f7 48 c7 c7 60 89 64 8e 4c 89 e6 [ 162.817836][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 162.817855][ C1] RAX: ffffffff8a047a13 RBX: ffffffff8a046816 RCX: ffff88807e118000 [ 162.817871][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.817884][ C1] RBP: 0000000000000000 R08: ffff88807e118000 R09: 0000000000000003 [ 162.817897][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880305423c0 [ 162.817910][ C1] R13: dffffc0000000000 R14: ffff8880305428b0 R15: ffff88802f4da424 [ 162.817938][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 162.817967][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 162.818001][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 162.818030][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 162.818065][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 162.818096][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 162.818135][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 162.818168][ C1] __iterate_interfaces+0x243/0x500 [ 162.818199][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 162.818223][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 162.818256][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 162.818366][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 162.818504][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 162.818572][ C1] __hrtimer_run_queues+0x520/0xc40 [ 162.818636][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 162.818725][ C1] ? hw_scan_work+0xf60/0xf60 [ 162.818813][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 162.818877][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 162.818977][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 162.819055][ C1] handle_softirqs+0x280/0x820 [ 162.819130][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 162.819210][ C1] ? do_softirq+0x1a0/0x1a0 [ 162.819277][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 162.819355][ C1] __irq_exit_rcu+0xd3/0x190 [ 162.819418][ C1] ? irq_exit_rcu+0x20/0x20 [ 162.819494][ C1] irq_exit_rcu+0x9/0x20 [ 162.819540][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 162.819615][ C1] [ 162.819635][ C1] [ 162.819650][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.819733][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 162.819804][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 e9 de 04 00 00 4c 8b 75 d0 4c 89 e7 e8 00 b9 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 162.819869][ C1] RSP: 0018:ffffc9000c9b74b8 EFLAGS: 00000286 [ 162.820076][ C1] RAX: e975a88090365e00 RBX: 0000000000000000 RCX: e975a88090365e00 [ 162.820132][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fe0 [ 162.820175][ C1] RBP: ffffc9000c9b7510 R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d [ 162.820248][ C1] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: ffff88807e118000 [ 162.820291][ C1] R13: dffffc0000000000 R14: ffff888025535a00 R15: ffff8880b8f3cac8 [ 162.820389][ C1] ? finish_task_switch+0x265/0x8f0 [ 162.820488][ C1] __schedule+0x155b/0x45a0 [ 162.820622][ C1] ? put_pid+0xc7/0x120 [ 162.820727][ C1] ? asan.module_dtor+0x20/0x20 [ 162.820806][ C1] ? mark_lock+0x94/0x320 [ 162.820904][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 162.821010][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 162.821076][ C1] preempt_schedule_irq+0xbf/0x150 [ 162.821132][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 162.821231][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 162.821327][ C1] irqentry_exit+0x67/0x70 [ 162.821432][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 162.821518][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 162.821598][ C1] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 1c fa 03 0d 48 89 de 5b e9 d3 67 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b0 93 7c 7e 65 8b 15 b1 93 7c 7e 81 e2 00 01 ff 00 74 [ 162.821672][ C1] RSP: 0018:ffffc9000c9b78b0 EFLAGS: 00000246 [ 162.821728][ C1] RAX: ffffffff813bfae9 RBX: 000020000006b000 RCX: 0000000000000002 [ 162.821771][ C1] RDX: ffff88807e118000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.821805][ C1] RBP: 0000000000000000 R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d [ 162.821842][ C1] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: ffffc9000c9b79a8 [ 162.821886][ C1] R13: ffffc9000c9b7a30 R14: ffff8880216a8980 R15: 0000000000000214 [ 162.821936][ C1] ? do_user_addr_fault+0x309/0x12c0 [ 162.822023][ C1] do_user_addr_fault+0x309/0x12c0 [ 162.822112][ C1] ? rcu_is_watching+0x15/0xb0 [ 162.822204][ C1] exc_page_fault+0x64/0x100 [ 162.822281][ C1] asm_exc_page_fault+0x26/0x30 [ 162.822346][ C1] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 162.822410][ C1] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 162.822453][ C1] RSP: 0018:ffffc9000c9b7a50 EFLAGS: 00050206 [ 162.822499][ C1] RAX: ffffffff842a2a01 RBX: 0000000000000038 RCX: 0000000000000038 [ 162.822542][ C1] RDX: 0000000000000001 RSI: 000020000006b000 RDI: ffffc9000c9b7ae0 [ 162.822585][ C1] RBP: ffffc9000c9b7c70 R08: ffffc9000c9b7b17 R09: 1ffff92001936f62 [ 162.822621][ C1] R10: dffffc0000000000 R11: fffff52001936f63 R12: 000020000006b038 [ 162.822665][ C1] R13: dffffc0000000000 R14: ffffc9000c9b7ae0 R15: 000020000006b000 [ 162.822737][ C1] ? _copy_from_user+0x11/0xe0 [ 162.822864][ C1] _copy_from_user+0x8b/0xe0 [ 162.822940][ C1] ___sys_recvmsg+0x176/0x590 [ 162.823029][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 162.823141][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 162.823237][ C1] ? __might_fault+0xc6/0x120 [ 162.823292][ C1] ? __might_fault+0xaa/0x120 [ 162.823358][ C1] do_recvmmsg+0x39a/0x870 [ 162.823449][ C1] ? __sys_recvmmsg+0x290/0x290 [ 162.823568][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 162.823656][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 162.823723][ C1] ? do_recvmmsg+0x870/0x870 [ 162.823796][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 162.823873][ C1] do_syscall_64+0x55/0xa0 [ 162.823927][ C1] ? clear_bhb_loop+0x40/0x90 [ 162.823997][ C1] ? clear_bhb_loop+0x40/0x90 [ 162.824074][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.824161][ C1] RIP: 0033:0x7f071bb9cdd9 [ 162.824227][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.824277][ C1] RSP: 002b:00007f071cabd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 162.824341][ C1] RAX: ffffffffffffffda RBX: 00007f071be16090 RCX: 00007f071bb9cdd9 [ 162.824377][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 162.824410][ C1] RBP: 00007f071bc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 162.824450][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 162.824476][ C1] R13: 00007f071be16128 R14: 00007f071be16090 R15: 00007ffe5be1fbd8 [ 162.824562][ C1] [ 162.827764][ C1] Kernel Offset: disabled