last executing test programs: 19.739902859s ago: executing program 2 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0403d11, 0x0) socket$inet(0xa, 0x801, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000800)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f4, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@empty, [0x1fe, 0xff000000, 0xffffff00, 0xff], 0x4e21, 0x4e23, 0x4e22, 0x4e21, 0xd04, 0x7f, 0x0, 0x6, 0x8}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff], [0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x3, 0x0, 0x50}, 0x0, 0xfc, 0x12c, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'virt_wifi0\x00', {0x0, 0x0, 0x40004, 0x0, 0xffffffff, 0x7, 0x3ff, 0x98}, {0xfffffffffffffffe}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x350) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x84, 0x8, 0x0, 0x0}}, 0x10) 16.101566402s ago: executing program 2 (id=280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x100100, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 13.543300118s ago: executing program 2 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000016c0)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1/file0\x00', 0x200042, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0x9362, 0x0) 12.274068321s ago: executing program 2 (id=288): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0xc, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x21, 0x2, 0xa) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000240)={0x1, 0x4}) socket(0x11, 0x5, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x41b69000) 11.146365372s ago: executing program 2 (id=291): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) stat(&(0x7f0000004d80)='./cgroup\x00', &(0x7f0000004dc0)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00') r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'}) write$input_event(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xc9f, &(0x7f0000019100)={0x0, 0x8abd, 0x200, 0x1, 0xab, 0x0, r2}, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000240)=""/9, 0x9) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000019080)=ANY=[]) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_IOCTL(r5, &(0x7f0000000100)={0x20, 0x0, r6, {0x800, 0x0, 0x4, 0x3}}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, r7) 9.711969257s ago: executing program 1 (id=296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = dup(r0) syz_genetlink_get_family_id$mptcp(0x0, r1) sendmmsg$unix(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x4048000) 7.764963944s ago: executing program 1 (id=297): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000180), 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 7.548073772s ago: executing program 0 (id=298): socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) getpgrp(r4) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000380)="8799bef58b1c4d7b1ebda07349d4c6d87276b50700f356c4edf9c4026e338a7350ffcc9a64b6b5a9b77e428d1f9f10420d767a092d07", 0x36, 0x4}]) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_io_uring_setup(0xcbf, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x1}, &(0x7f00000003c0)=0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0xfffffff8, 0x7, {}, {0xee00}, 0x10000, 0x9}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 6.415895343s ago: executing program 3 (id=300): r0 = socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000240)={0x1, 0x4}) socket(0x11, 0x5, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x41b69000) 5.488251568s ago: executing program 0 (id=301): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 5.126034027s ago: executing program 3 (id=302): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006"], 0x44}}, 0x0) io_uring_setup(0x5ef9, 0x0) socket$inet6(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x208100) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000500fbffffff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) 4.755692966s ago: executing program 2 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100015040000", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) 3.899788296s ago: executing program 3 (id=304): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@perf_event={0x9}}, 0x18) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)={0x2, 0x0, [{0xf000, 0x86, &(0x7f0000000740)=""/134}, {0x2, 0x7, &(0x7f0000000640)=""/7}]}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000680)=0x41) 3.853708939s ago: executing program 1 (id=305): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x2, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0xffff1000, 0x43, &(0x7f00000010c0)=""/67}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 3.47565332s ago: executing program 0 (id=306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = dup(r0) syz_genetlink_get_family_id$mptcp(0x0, r1) sendmmsg$unix(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x4048000) 3.360003119s ago: executing program 0 (id=307): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0xdd5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8140, 0x0) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x8, 0x1}, {0xffff, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000000)=0x15, 0x4) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000400)={'\x00', 0xfffffffe, 0x1, 0x48}) shutdown(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.807834354s ago: executing program 1 (id=308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0xfd00, @l2tp={0x2, 0x0, @empty, 0x3, 0x1000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, @vsock={0x28, 0x0, 0xffffffff}, 0x4be, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000f9, 0xfffffffc, 0x4}) 2.804966144s ago: executing program 3 (id=309): socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) getpgrp(r4) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000380)="8799bef58b1c4d7b1ebda07349d4c6d87276b50700f356c4edf9c4026e338a7350ffcc9a64b6b5a9b77e428d1f9f10420d767a092d07", 0x36, 0x4}]) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_io_uring_setup(0xcbf, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x1}, &(0x7f00000003c0)=0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0xfffffff8, 0x7, {}, {0xee00}, 0x10000, 0x9}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2.700648572s ago: executing program 1 (id=310): r0 = socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000240)={0x1, 0x4}) socket(0x11, 0x5, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x41b69000) 1.845676471s ago: executing program 0 (id=311): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x100, 0xfc) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000200)={0xf8, 0x0, 0x0, 0x0, 0x12000000}) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80104132, 0x0) 1.683898964s ago: executing program 0 (id=312): clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mkdir(&(0x7f0000000100)='./file1\x00', 0xbd) r4 = socket$packet(0x11, 0x3, 0x300) close(r4) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30}, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000127bd7000fb1191c092f9203631352056", @ANYRES32=r3, @ANYBLOB="08005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000092}, 0x4001) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) io_pgetevents(r0, 0x5, 0x0, 0x0, 0x0, 0x0) 1.626807629s ago: executing program 3 (id=313): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006"], 0x44}}, 0x0) io_uring_setup(0x5ef9, 0x0) socket$inet6(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x208100) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000500fbffffff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) 912.962016ms ago: executing program 1 (id=314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 0s ago: executing program 3 (id=315): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000180), 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 63.408054][ T5777] cgroup: Unknown subsys name 'net' [ 63.542232][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.934583][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.422077][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.426323][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.431097][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.445684][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.446648][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.453294][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.468281][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.473434][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.476694][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.485968][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.498582][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.499491][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.507113][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.513693][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.521982][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.529846][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.536877][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.551277][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.554589][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.559684][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.574976][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.585572][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.592509][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.601661][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.987043][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 67.074627][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 67.228085][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 67.239189][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.246650][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.254205][ T5787] bridge_slave_0: entered allmulticast mode [ 67.261786][ T5787] bridge_slave_0: entered promiscuous mode [ 67.270179][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 67.308296][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.316357][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.323614][ T5787] bridge_slave_1: entered allmulticast mode [ 67.330869][ T5787] bridge_slave_1: entered promiscuous mode [ 67.355372][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.362636][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.370453][ T5788] bridge_slave_0: entered allmulticast mode [ 67.377416][ T5788] bridge_slave_0: entered promiscuous mode [ 67.419113][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.426917][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.434138][ T5788] bridge_slave_1: entered allmulticast mode [ 67.441203][ T5788] bridge_slave_1: entered promiscuous mode [ 67.500498][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.512322][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.541128][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.553227][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.594644][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.602098][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.609514][ T5790] bridge_slave_0: entered allmulticast mode [ 67.617131][ T5790] bridge_slave_0: entered promiscuous mode [ 67.658900][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.666479][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.673795][ T5790] bridge_slave_1: entered allmulticast mode [ 67.681630][ T5790] bridge_slave_1: entered promiscuous mode [ 67.710745][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.717952][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.725955][ T5789] bridge_slave_0: entered allmulticast mode [ 67.732938][ T5789] bridge_slave_0: entered promiscuous mode [ 67.744152][ T5787] team0: Port device team_slave_0 added [ 67.754173][ T5787] team0: Port device team_slave_1 added [ 67.775455][ T5788] team0: Port device team_slave_0 added [ 67.781785][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.789605][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.796996][ T5789] bridge_slave_1: entered allmulticast mode [ 67.803899][ T5789] bridge_slave_1: entered promiscuous mode [ 67.824239][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.836767][ T5788] team0: Port device team_slave_1 added [ 67.873155][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.924048][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.931764][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.958874][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.982136][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.989359][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.016087][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.030283][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.037433][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.064425][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.078765][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.092175][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.102194][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.109495][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.135794][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.159633][ T5790] team0: Port device team_slave_0 added [ 68.168599][ T5790] team0: Port device team_slave_1 added [ 68.202210][ T5789] team0: Port device team_slave_0 added [ 68.229417][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.236701][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.263773][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.279233][ T5789] team0: Port device team_slave_1 added [ 68.298638][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.305976][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.332345][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.398708][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.406058][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.432524][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.468846][ T5787] hsr_slave_0: entered promiscuous mode [ 68.475423][ T5787] hsr_slave_1: entered promiscuous mode [ 68.483272][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.491355][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.517490][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.531540][ T5788] hsr_slave_0: entered promiscuous mode [ 68.538202][ T5788] hsr_slave_1: entered promiscuous mode [ 68.544500][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.552488][ T5788] Cannot create hsr debugfs directory [ 68.563077][ T5790] hsr_slave_0: entered promiscuous mode [ 68.570010][ T5790] hsr_slave_1: entered promiscuous mode [ 68.576274][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.584002][ T5790] Cannot create hsr debugfs directory [ 68.635951][ T5794] Bluetooth: hci0: command tx timeout [ 68.635962][ T5799] Bluetooth: hci1: command tx timeout [ 68.643753][ T5796] Bluetooth: hci3: command tx timeout [ 68.648514][ T5799] Bluetooth: hci2: command tx timeout [ 68.733831][ T5789] hsr_slave_0: entered promiscuous mode [ 68.740575][ T5789] hsr_slave_1: entered promiscuous mode [ 68.747039][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.754610][ T5789] Cannot create hsr debugfs directory [ 69.051671][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.067804][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.079643][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.091080][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.155499][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.172691][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.193115][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.204586][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.286246][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.307112][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.325807][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.340515][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.440373][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.452212][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.462649][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.472659][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.529926][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.590698][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.607577][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.625024][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.632457][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.654267][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.661462][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.700695][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.711607][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.738351][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.745537][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.754439][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.761761][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.831189][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.858994][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.866230][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.882093][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.906400][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.913697][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.950875][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.000302][ T2890] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.007894][ T2890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.019715][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.026976][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.141151][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.324094][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.478274][ T5788] veth0_vlan: entered promiscuous mode [ 70.531034][ T5788] veth1_vlan: entered promiscuous mode [ 70.573542][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.603172][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.622631][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.663624][ T5788] veth0_macvtap: entered promiscuous mode [ 70.712568][ T5788] veth1_macvtap: entered promiscuous mode [ 70.719516][ T5799] Bluetooth: hci0: command tx timeout [ 70.720985][ T5794] Bluetooth: hci3: command tx timeout [ 70.729978][ T5799] Bluetooth: hci1: command tx timeout [ 70.731585][ T5796] Bluetooth: hci2: command tx timeout [ 70.761976][ T5790] veth0_vlan: entered promiscuous mode [ 70.803180][ T5790] veth1_vlan: entered promiscuous mode [ 70.811732][ T5789] veth0_vlan: entered promiscuous mode [ 70.821656][ T5787] veth0_vlan: entered promiscuous mode [ 70.844592][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.865469][ T5789] veth1_vlan: entered promiscuous mode [ 70.881409][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.890406][ T5787] veth1_vlan: entered promiscuous mode [ 70.910818][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.920522][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.929566][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.938784][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.988858][ T5790] veth0_macvtap: entered promiscuous mode [ 71.029660][ T5790] veth1_macvtap: entered promiscuous mode [ 71.058737][ T5789] veth0_macvtap: entered promiscuous mode [ 71.076088][ T5787] veth0_macvtap: entered promiscuous mode [ 71.089191][ T5789] veth1_macvtap: entered promiscuous mode [ 71.129340][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.139754][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.152121][ T5787] veth1_macvtap: entered promiscuous mode [ 71.182278][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.197873][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.205644][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.210235][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.230236][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.244531][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.255389][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.268885][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.284312][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.296432][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.317035][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.328008][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.339988][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.354056][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.367458][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.378645][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.390087][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.400168][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.410948][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.424094][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.437050][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.455059][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.465660][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.476368][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.489591][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.502343][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.513783][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.523173][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.534641][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.552531][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.563851][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.573998][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.582992][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.607858][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.623408][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.633972][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.649947][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.663153][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.689143][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.702673][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.739828][ T5872] 9pnet_fd: Insufficient options for proto=fd [ 71.750922][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.763435][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.773438][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.784669][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.839309][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.854719][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.885406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.894437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.663159][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.672303][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.784560][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.803070][ T5794] Bluetooth: hci3: command tx timeout [ 72.809429][ T5796] Bluetooth: hci1: command tx timeout [ 72.809577][ T5794] Bluetooth: hci2: command tx timeout [ 72.818579][ T5796] Bluetooth: hci0: command tx timeout [ 72.820654][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.010408][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.025329][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.053372][ T2889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.062733][ T2889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.197177][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.235515][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.411053][ T5884] block device autoloading is deprecated and will be removed. [ 73.440847][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.523777][ T5884] syz.2.6[5884]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.609481][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.252934][ T5894] overlayfs: failed to resolve './file0': -2 [ 74.307213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.375838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.384451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.478231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.487038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.580585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.589426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.683316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.875371][ T5796] Bluetooth: hci2: command tx timeout [ 74.880870][ T5796] Bluetooth: hci0: command tx timeout [ 74.886510][ T5796] Bluetooth: hci1: command tx timeout [ 74.892202][ T5796] Bluetooth: hci3: command tx timeout [ 76.570442][ T5905] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.715677][ T5911] sched: RT throttling activated [ 79.933218][ T5932] 9pnet_fd: Insufficient options for proto=fd [ 81.507510][ T5945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.519428][ T5945] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 82.490333][ T54] cfg80211: failed to load regulatory.db [ 85.390222][ T5947] overlayfs: failed to resolve './file0': -2 [ 86.485642][ T5964] autofs4:pid:5964:autofs_fill_super: called with bogus options [ 86.506335][ T5962] autofs4:pid:5962:autofs_fill_super: called with bogus options [ 87.885401][ T2915] rds_connect_path_complete: Cannot transition to state UP, current state is 5 [ 88.000278][ T5977] 9pnet_fd: Insufficient options for proto=fd [ 91.372524][ T5995] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 91.379545][ T5995] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 91.390296][ T5995] vhci_hcd vhci_hcd.0: Device attached [ 92.358413][ T5997] vhci_hcd: connection closed [ 92.365038][ T41] vhci_hcd: stop threads [ 92.376340][ T41] vhci_hcd: release socket [ 92.381683][ T41] vhci_hcd: disconnect device [ 92.643842][ T6003] autofs4:pid:6003:autofs_fill_super: called with bogus options [ 92.884523][ T6011] autofs4:pid:6011:autofs_fill_super: called with bogus options [ 96.984010][ T6028] 9pnet_fd: Insufficient options for proto=fd [ 99.657853][ T6038] ptrace attach of ""[6036] was attempted by "./syz-executor exec"[6038] [ 100.666900][ T6050] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 100.673449][ T6050] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.681923][ T6050] vhci_hcd vhci_hcd.0: Device attached [ 101.032584][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'. [ 101.295579][ T5779] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 101.420670][ T6051] vhci_hcd: connection closed [ 101.437157][ T12] vhci_hcd: stop threads [ 101.994903][ T12] vhci_hcd: release socket [ 102.033347][ T12] vhci_hcd: disconnect device [ 102.285492][ T6063] overlayfs: failed to resolve './file0': -2 [ 102.360731][ T6070] fuse: Bad value for 'user_id' [ 102.540804][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 102.784476][ T6077] 9pnet_fd: Insufficient options for proto=fd [ 105.307334][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 106.434088][ T6101] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 106.440673][ T6101] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.449566][ T6101] vhci_hcd vhci_hcd.0: Device attached [ 106.466564][ T6104] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 106.487886][ T6102] vhci_hcd: connection closed [ 106.820967][ T12] vhci_hcd: stop threads [ 107.036879][ T12] vhci_hcd: release socket [ 107.076015][ T12] vhci_hcd: disconnect device [ 107.130173][ T6107] fuse: Bad value for 'user_id' [ 107.185100][ T5779] vhci_hcd: vhci_device speed not set [ 107.334068][ T6112] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.345894][ T6112] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 109.171220][ T6122] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 109.219530][ T6122] bridge1: entered allmulticast mode [ 109.792810][ T6125] MPI: mpi too large (124808 bits) [ 109.848330][ T6125] binder: Unknown parameter 'ma' [ 109.956026][ T6129] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.300185][ T6129] process 'syz.3.61' launched './file1' with NULL argv: empty string added [ 110.362017][ T6139] 9pnet_fd: Insufficient options for proto=fd [ 112.254120][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.266171][ T6146] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 112.272756][ T6146] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.280668][ T6146] vhci_hcd vhci_hcd.0: Device attached [ 112.313971][ T6147] vhci_hcd: connection closed [ 112.345010][ T12] vhci_hcd: stop threads [ 112.421661][ T12] vhci_hcd: release socket [ 112.478544][ T12] vhci_hcd: disconnect device [ 112.600636][ T23] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 112.799058][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.807773][ T6151] autofs4:pid:6151:autofs_fill_super: called with bogus options [ 112.859812][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.898706][ T6156] fuse: Bad value for 'user_id' [ 112.918349][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.941894][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.954670][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.996458][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.004471][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.014061][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.045986][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.058006][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.069542][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.081478][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.126898][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.136934][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.141393][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 113.148117][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.171112][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.182944][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.228564][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.247925][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.261312][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.273392][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.297462][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.318250][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.332294][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.358263][ T23] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 113.375116][ T23] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 113.435050][ T23] usb 1-1: Product: syz [ 113.525163][ T23] usb 1-1: Manufacturer: syz [ 113.565317][ T23] usb 1-1: SerialNumber: syz [ 113.740410][ T6164] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.753402][ T6164] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 113.765268][ T23] usb 1-1: config 0 descriptor?? [ 113.873757][ T23] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 114.370854][ T6172] autofs4:pid:6172:autofs_fill_super: called with bogus options [ 114.896002][ T6178] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 114.904683][ T6178] bridge1: entered allmulticast mode [ 114.980648][ T6180] Bluetooth: MGMT ver 1.22 [ 115.336133][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 115.678304][ T5870] usb 1-1: USB disconnect, device number 2 [ 115.791726][ T5870] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 117.096268][ T6191] block device autoloading is deprecated and will be removed. [ 117.100892][ T6193] block device autoloading is deprecated and will be removed. [ 118.504057][ T6204] autofs4:pid:6204:autofs_fill_super: called with bogus options [ 118.820731][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 119.317720][ T6213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.329404][ T6213] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 119.394582][ T6216] 9pnet_fd: Insufficient options for proto=fd [ 120.759841][ T6231] CIFS: VFS: Malformed UNC in devname [ 121.055074][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.295561][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 121.311439][ T23] usb 2-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 121.371348][ T23] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 121.426058][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.686602][ T54] usb 2-1: USB disconnect, device number 2 [ 123.695477][ T6247] autofs4:pid:6247:autofs_fill_super: called with bogus options [ 124.111047][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 124.833539][ T6253] overlayfs: failed to resolve './file0': -2 [ 125.355116][ T6261] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.366165][ T6261] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.377759][ T6261] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 125.398471][ T6261] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 125.495278][ T6259] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 126.750559][ T6283] autofs4:pid:6283:autofs_fill_super: called with bogus options [ 126.766743][ T6280] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.777955][ T6280] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 126.924680][ T6287] 9pnet_fd: Insufficient options for proto=fd [ 128.121528][ T6293] overlayfs: failed to resolve './file0': -2 [ 128.192581][ T6294] autofs4:pid:6294:autofs_fill_super: called with bogus options [ 128.406101][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 129.323922][ T6304] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 129.405708][ T6304] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.417199][ T6304] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 129.429190][ T6304] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 129.470500][ T6303] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 129.846981][ T6313] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.899920][ T6313] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 130.403563][ T6322] trusted_key: encrypted_key: keylen parameter is missing [ 130.809210][ T6330] overlayfs: failed to resolve './file0': -2 [ 131.786841][ T6336] autofs4:pid:6336:autofs_fill_super: called with bogus options [ 131.906183][ T6339] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 131.916947][ T6339] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 131.928369][ T6339] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 131.938842][ T6339] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 131.970584][ T6337] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 132.098714][ T6341] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 132.108883][ T6341] bridge2: entered allmulticast mode [ 132.373735][ T6347] MPI: mpi too large (124808 bits) [ 132.382473][ T6347] binder: Unknown parameter 'ma' [ 133.279987][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.298413][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.779867][ T6360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.791162][ T6360] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 134.309147][ T6367] overlayfs: failed to resolve './file0': -2 [ 135.403320][ T6375] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.416824][ T6375] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 135.428190][ T6375] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 135.441202][ T6375] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 135.473502][ T6374] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 135.481061][ T6377] autofs4:pid:6377:autofs_fill_super: called with bogus options [ 135.741931][ T6386] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 135.876435][ T6386] bridge2: entered allmulticast mode [ 136.913394][ T6410] overlayfs: failed to resolve './file0': -2 [ 137.982339][ T6413] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.994065][ T6413] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 138.242382][ T6415] fuse: Bad value for 'fd' [ 138.639274][ T6422] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 138.651259][ T6422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.663048][ T6422] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 138.777797][ T6422] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 138.810718][ T6421] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 139.716626][ T6441] overlayfs: failed to resolve './file0': -2 [ 141.783099][ T6446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.868080][ T6446] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 141.935572][ T6451] fuse: Bad value for 'fd' [ 142.125563][ T6455] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.136947][ T6455] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 142.379220][ T6457] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 142.391836][ T6457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.403296][ T6457] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 142.416902][ T6457] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 142.461248][ T6456] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 142.687487][ T6462] autofs4:pid:6462:autofs_fill_super: called with bogus options [ 143.667000][ T6476] fuse: Bad value for 'fd' [ 145.273982][ T6485] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 145.294765][ T6485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.306412][ T6485] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 145.491737][ T6485] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 145.563839][ T6484] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 145.857187][ T6489] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.904867][ T6489] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 146.051519][ T6491] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.063469][ T6491] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 147.004157][ T6503] fuse: Invalid rootmode [ 148.877879][ T6514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 148.888236][ T6514] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.899541][ T6514] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 148.910713][ T6514] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 148.947696][ T6509] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 150.292477][ T6536] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.303868][ T6536] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 150.513026][ T6537] trusted_key: encrypted_key: insufficient parameters specified [ 150.522943][ T6537] IPVS: set_ctl: invalid protocol: 44 172.20.20.46:20000 [ 151.199777][ T6542] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.264288][ T6542] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 151.494748][ T6548] fuse: Invalid rootmode [ 153.625887][ T6554] 9pnet_fd: Insufficient options for proto=fd [ 154.832550][ T6568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.843696][ T6568] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 155.772282][ T6580] fuse: Invalid rootmode [ 156.068826][ T6583] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 156.126827][ T6583] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 159.239401][ T6601] 9pnet_fd: Insufficient options for proto=fd [ 160.242555][ T6606] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.242657][ T6606] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 160.332984][ T6610] fuse: Unknown parameter '00000000000000000000' [ 160.579736][ T6619] 9pnet_virtio: no channels available for device syz [ 160.921533][ T6626] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.949142][ T6628] autofs4:pid:6628:autofs_fill_super: called with bogus options [ 160.997962][ T6626] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 161.560863][ T6636] overlayfs: failed to resolve './file0': -2 [ 162.487943][ T6640] 9pnet_fd: Insufficient options for proto=fd [ 164.609091][ T6653] nbd0: detected capacity change from 0 to 1024 [ 164.711870][ T6660] block nbd0: NBD_DISCONNECT [ 164.717292][ T6660] block nbd0: Send disconnect failed -89 [ 164.728336][ T5875] block nbd0: Send control failed (result -89) [ 164.734759][ T5875] block nbd0: Request send failed, requeueing [ 164.742696][ T5875] block nbd0: Disconnected due to user request. [ 164.752131][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.762037][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.771105][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.781834][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.790882][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.800997][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.811107][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.820687][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.829728][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.839241][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.847468][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.856942][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.864993][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.874312][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.977647][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.986900][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 164.998741][ T6660] ldm_validate_partition_table(): Disk read failed. [ 165.006917][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.016397][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.024965][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.034310][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.042867][ T6660] Dev nbd0: unable to read RDB block 0 [ 165.053174][ T6660] nbd0: unable to read partition table [ 165.097153][ T6657] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.129576][ T6056] ldm_validate_partition_table(): Disk read failed. [ 165.160558][ T6657] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 165.169232][ T6056] Dev nbd0: unable to read RDB block 0 [ 165.230668][ T6056] nbd0: unable to read partition table [ 165.241008][ T6056] ldm_validate_partition_table(): Disk read failed. [ 165.248804][ T6056] Dev nbd0: unable to read RDB block 0 [ 165.387980][ T6666] overlayfs: failed to resolve './file0': -2 [ 166.005232][ T6056] nbd0: unable to read partition table [ 167.196158][ T6670] 9pnet_fd: Insufficient options for proto=fd [ 169.920803][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.225'. [ 169.945752][ T6702] nbd3: detected capacity change from 0 to 1024 [ 169.957386][ T55] block nbd3: Send control failed (result -89) [ 169.963677][ T55] block nbd3: Request send failed, requeueing [ 169.970099][ T5794] block nbd3: Receive control failed (result -32) [ 169.970432][ T55] block nbd3: Dead connection, failed to find a fallback [ 169.986576][ T55] block nbd3: shutting down sockets [ 169.992183][ T55] blk_print_req_error: 43 callbacks suppressed [ 169.992197][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.999492][ T6706] block nbd3: NBD_DISCONNECT [ 170.020791][ T6706] block nbd3: Send disconnect failed -89 [ 170.032226][ T55] buffer_io_error: 43 callbacks suppressed [ 170.032241][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.051276][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.060696][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.072268][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.081472][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.094362][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.103741][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.112696][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.122588][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.134186][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.144929][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.157870][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.171868][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.181979][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.191679][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.205033][ T6056] ldm_validate_partition_table(): Disk read failed. [ 170.220230][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.229637][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.258067][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.268610][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 170.280015][ T6056] Dev nbd3: unable to read RDB block 0 [ 170.370461][ T6056] nbd3: unable to read partition table [ 170.403882][ T6702] ldm_validate_partition_table(): Disk read failed. [ 170.425246][ T6702] Dev nbd3: unable to read RDB block 0 [ 170.452294][ T6702] nbd3: unable to read partition table [ 170.500669][ T6056] ldm_validate_partition_table(): Disk read failed. [ 170.508372][ T6056] Dev nbd3: unable to read RDB block 0 [ 170.519307][ T6056] nbd3: unable to read partition table [ 170.743521][ T6713] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 170.755174][ T6713] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 170.780105][ T6714] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 170.790591][ T6714] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 170.802009][ T6714] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 170.813177][ T6714] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 170.852948][ T6711] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 171.212458][ T6718] 9pnet_fd: Insufficient options for proto=fd [ 172.765841][ T6735] nbd3: detected capacity change from 0 to 1024 [ 172.776624][ T10] block nbd3: Send control failed (result -89) [ 172.783969][ T10] block nbd3: Request send failed, requeueing [ 172.792305][ T10] block nbd3: Dead connection, failed to find a fallback [ 172.800559][ T5794] block nbd3: Receive control failed (result -32) [ 172.809038][ T10] block nbd3: shutting down sockets [ 172.815774][ T6735] block nbd3: NBD_DISCONNECT [ 172.820433][ T6735] block nbd3: Send disconnect failed -89 [ 172.841984][ T6056] ldm_validate_partition_table(): Disk read failed. [ 172.874773][ T6056] Dev nbd3: unable to read RDB block 0 [ 172.988869][ T6056] nbd3: unable to read partition table [ 173.040801][ T6056] ldm_validate_partition_table(): Disk read failed. [ 173.193355][ T6056] Dev nbd3: unable to read RDB block 0 [ 173.199989][ T6056] nbd3: unable to read partition table [ 173.211091][ T6735] ldm_validate_partition_table(): Disk read failed. [ 173.223941][ T6735] Dev nbd3: unable to read RDB block 0 [ 173.303614][ T6735] nbd3: unable to read partition table [ 173.499208][ T5159] ldm_validate_partition_table(): Disk read failed. [ 173.529617][ T5159] Dev nbd3: unable to read RDB block 0 [ 173.555497][ T5159] nbd3: unable to read partition table [ 173.574046][ T5159] ldm_validate_partition_table(): Disk read failed. [ 173.582647][ T5159] Dev nbd3: unable to read RDB block 0 [ 173.602904][ T5159] nbd3: unable to read partition table [ 173.987296][ T6753] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 173.997728][ T6753] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.009367][ T6753] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 174.043889][ T6753] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 174.080986][ T6752] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 174.417883][ T6763] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.429551][ T6763] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 174.602738][ T6767] 9pnet_fd: Insufficient options for proto=fd [ 177.786263][ T6780] random: crng reseeded on system resumption [ 178.199087][ T6784] nbd3: detected capacity change from 0 to 1024 [ 178.228021][ T10] block nbd3: Send control failed (result -89) [ 178.235136][ T10] block nbd3: Request send failed, requeueing [ 178.241365][ T5794] block nbd3: Receive control failed (result -32) [ 178.241415][ T10] block nbd3: Dead connection, failed to find a fallback [ 178.251109][ T6790] block nbd3: NBD_DISCONNECT [ 178.257369][ T10] block nbd3: shutting down sockets [ 178.265262][ T10] blk_print_req_error: 128 callbacks suppressed [ 178.265272][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.280924][ T10] buffer_io_error: 128 callbacks suppressed [ 178.280938][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 178.300544][ T6790] block nbd3: Send disconnect failed -89 [ 178.309527][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.320999][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 178.334913][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.344188][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 178.361194][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.370512][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 178.379613][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.389587][ T6789] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 178.400139][ T6789] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 178.411379][ T6789] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 178.425292][ T6789] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 178.458858][ T6788] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 178.478591][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 178.505653][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.514758][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 178.526164][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.535790][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 178.544425][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.554565][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 178.562785][ T6056] ldm_validate_partition_table(): Disk read failed. [ 178.569968][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.579407][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 178.589515][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.598988][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 178.625250][ T6056] Dev nbd3: unable to read RDB block 0 [ 178.660783][ T6056] nbd3: unable to read partition table [ 178.757985][ T6784] ldm_validate_partition_table(): Disk read failed. [ 178.773777][ T6784] Dev nbd3: unable to read RDB block 0 [ 178.937672][ T6784] nbd3: unable to read partition table [ 178.950770][ T6056] ldm_validate_partition_table(): Disk read failed. [ 178.972155][ T6056] Dev nbd3: unable to read RDB block 0 [ 178.980843][ T6056] nbd3: unable to read partition table [ 179.820292][ T6813] 9pnet_fd: Insufficient options for proto=fd [ 180.428155][ T6810] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 180.593653][ T6810] bridge3: entered allmulticast mode [ 181.605524][ T6828] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 181.626948][ T6828] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.638358][ T6828] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 181.648885][ T6828] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 181.687492][ T6826] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 181.946184][ T6832] nbd0: detected capacity change from 0 to 1024 [ 181.994489][ T10] block nbd0: Send control failed (result -89) [ 182.002998][ T10] block nbd0: Request send failed, requeueing [ 182.011963][ T5794] block nbd0: Receive control failed (result -32) [ 182.012082][ T5893] block nbd0: Dead connection, failed to find a fallback [ 182.026194][ T5893] block nbd0: shutting down sockets [ 182.035746][ T6056] ldm_validate_partition_table(): Disk read failed. [ 182.046858][ T6836] block nbd0: NBD_DISCONNECT [ 182.051650][ T6836] block nbd0: Send disconnect failed -89 [ 182.131976][ T6056] Dev nbd0: unable to read RDB block 0 [ 182.138264][ T6056] nbd0: unable to read partition table [ 182.150082][ T6836] ldm_validate_partition_table(): Disk read failed. [ 182.162459][ T6836] Dev nbd0: unable to read RDB block 0 [ 182.179921][ T6836] nbd0: unable to read partition table [ 182.194086][ T6056] ldm_validate_partition_table(): Disk read failed. [ 182.207001][ T6056] Dev nbd0: unable to read RDB block 0 [ 182.214973][ T6056] nbd0: unable to read partition table [ 182.367896][ T5159] ldm_validate_partition_table(): Disk read failed. [ 182.381219][ T5159] Dev nbd0: unable to read RDB block 0 [ 182.391189][ T5159] nbd0: unable to read partition table [ 182.406976][ T5159] ldm_validate_partition_table(): Disk read failed. [ 182.438361][ T5159] Dev nbd0: unable to read RDB block 0 [ 182.456454][ T5159] nbd0: unable to read partition table [ 182.636099][ T6847] 9pnet_fd: Insufficient options for proto=fd [ 184.315364][ T6864] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 184.326823][ T6864] bridge3: entered allmulticast mode [ 184.572995][ T6868] overlayfs: failed to resolve './file0': -2 [ 185.759427][ T6874] overlayfs: failed to resolve './file0': -2 [ 185.975475][ T6873] syzkaller0: entered promiscuous mode [ 186.012533][ T6873] syzkaller0: entered allmulticast mode [ 186.206955][ T6879] nbd0: detected capacity change from 0 to 1024 [ 186.230609][ T10] block nbd0: Send control failed (result -89) [ 186.237198][ T10] block nbd0: Request send failed, requeueing [ 186.243462][ T5794] block nbd0: Receive control failed (result -32) [ 186.243469][ T10] block nbd0: Dead connection, failed to find a fallback [ 186.243486][ T10] block nbd0: shutting down sockets [ 186.264469][ T10] blk_print_req_error: 128 callbacks suppressed [ 186.264479][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.280996][ T10] buffer_io_error: 128 callbacks suppressed [ 186.281009][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.296002][ T5893] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.315481][ T5893] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.324118][ T5893] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.333411][ T5893] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.337385][ T6879] block nbd0: NBD_DISCONNECT [ 186.345601][ T5893] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.364896][ T5893] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.372908][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.382190][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.390590][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.399079][ T6879] block nbd0: Send disconnect failed -89 [ 186.401679][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.423982][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.433825][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.442036][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.451160][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.459017][ T6056] ldm_validate_partition_table(): Disk read failed. [ 186.465936][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.475317][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.484871][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.494036][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.502677][ T6056] Dev nbd0: unable to read RDB block 0 [ 186.509617][ T6056] nbd0: unable to read partition table [ 186.518954][ T6056] ldm_validate_partition_table(): Disk read failed. [ 186.526000][ T6056] Dev nbd0: unable to read RDB block 0 [ 186.532148][ T6056] nbd0: unable to read partition table [ 186.550973][ T6879] ldm_validate_partition_table(): Disk read failed. [ 186.576172][ T6885] 9pnet_fd: Insufficient options for proto=fd [ 187.487265][ T6879] Dev nbd0: unable to read RDB block 0 [ 187.507930][ T6879] nbd0: unable to read partition table [ 188.485798][ T6908] overlayfs: failed to resolve './file0': -2 [ 190.525248][ T6924] 9pnet_fd: Insufficient options for proto=fd [ 191.675091][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 191.693978][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 191.700372][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 191.879595][ T6929] nbd3: detected capacity change from 0 to 1024 [ 192.307430][ T6933] block nbd3: NBD_DISCONNECT [ 192.360727][ T5893] block nbd3: Send control failed (result -89) [ 192.371153][ T5893] block nbd3: Request send failed, requeueing [ 192.381341][ T5794] block nbd3: Receive control failed (result -32) [ 192.381445][ T5893] block nbd3: Dead connection, failed to find a fallback [ 192.396008][ T5893] block nbd3: shutting down sockets [ 192.401352][ T5893] blk_print_req_error: 43 callbacks suppressed [ 192.401396][ T5893] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.417783][ T5893] buffer_io_error: 43 callbacks suppressed [ 192.417796][ T5893] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.435264][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.445120][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.455047][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.471570][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.493433][ T6933] block nbd3: Send disconnect failed -89 [ 192.505044][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.514246][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.523177][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.532892][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.541408][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.557775][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.567481][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.578006][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.587575][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.598618][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.606560][ T6056] ldm_validate_partition_table(): Disk read failed. [ 192.653447][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.666578][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.677039][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.698575][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.719171][ T6056] Dev nbd3: unable to read RDB block 0 [ 192.807088][ T6056] nbd3: unable to read partition table [ 192.828784][ T5159] ldm_validate_partition_table(): Disk read failed. [ 192.849979][ T5159] Dev nbd3: unable to read RDB block 0 [ 192.878401][ T5159] nbd3: unable to read partition table [ 192.906921][ T6056] ldm_validate_partition_table(): Disk read failed. [ 192.935513][ T6056] Dev nbd3: unable to read RDB block 0 [ 192.948418][ T6056] nbd3: unable to read partition table [ 193.015294][ T6056] ldm_validate_partition_table(): Disk read failed. [ 193.025888][ T6056] Dev nbd3: unable to read RDB block 0 [ 193.032922][ T6056] nbd3: unable to read partition table [ 193.058348][ T6056] ldm_validate_partition_table(): Disk read failed. [ 193.069771][ T6056] Dev nbd3: unable to read RDB block 0 [ 193.076701][ T6056] nbd3: unable to read partition table [ 193.218132][ T6944] overlayfs: failed to resolve './file0': -2 [ 194.732183][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.982330][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.352287][ T6967] 9pnet_fd: Insufficient options for proto=fd [ 197.463709][ T6972] overlayfs: failed to resolve './file0': -2 [ 198.624694][ T6977] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 198.686053][ T6977] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 198.927218][ T6981] overlayfs: overlapping lowerdir path [ 198.979988][ T6982] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 200.890364][ T7000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.303'. [ 201.104635][ T7004] 9pnet_fd: Insufficient options for proto=fd [ 202.048347][ T7010] overlayfs: failed to resolve './file0': -2 [ 202.995891][ T7018] overlayfs: overlapping lowerdir path [ 203.072398][ T7019] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 203.750172][ T7017] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.806942][ T7017] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 204.117429][ C0] ------------[ cut here ]------------ [ 204.123239][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 204.133855][ C0] WARNING: CPU: 0 PID: 2104 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 204.143926][ C0] Modules linked in: [ 204.147976][ C0] CPU: 0 PID: 2104 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 204.155697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.165920][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 204.172810][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 204.179290][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 9c be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 eb 14 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 204.199397][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 204.205680][ C0] RAX: 5ce8a58fdcd3ed00 RBX: 000000000000000c RCX: ffff8880264cda00 [ 204.213708][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 204.221807][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 204.229953][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000040 [ 204.237985][ C0] R13: dffffc0000000000 R14: ffff888021153358 R15: ffff888076372028 [ 204.246285][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 204.255309][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.261908][ C0] CR2: 000000110c3ee495 CR3: 000000002ce58000 CR4: 00000000003506f0 [ 204.270126][ C0] Call Trace: [ 204.273497][ C0] [ 204.276462][ C0] rate_control_send_low+0x194/0x790 [ 204.282060][ C0] rate_control_get_rate+0x20b/0x5c0 [ 204.287650][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 204.293606][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 204.299622][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 204.305186][ C0] ? _local_bh_enable+0xa0/0xa0 [ 204.310179][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 204.315898][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 204.321133][ C0] ? read_lock_is_recursive+0x20/0x20 [ 204.326643][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 204.332316][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 204.337966][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 204.343573][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 204.349135][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 204.356841][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 204.362709][ C0] __iterate_interfaces+0x243/0x500 [ 204.368431][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 204.375511][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 204.382792][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 204.389417][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 204.396785][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 204.402175][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 204.407502][ C0] ? hw_scan_work+0xf40/0xf40 [ 204.412218][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 204.417523][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 204.423907][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 204.429237][ C0] handle_softirqs+0x280/0x820 [ 204.434233][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 204.439196][ C0] ? do_softirq+0x180/0x180 [ 204.443748][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 204.449137][ C0] __irq_exit_rcu+0xc7/0x190 [ 204.453742][ C0] ? irq_exit_rcu+0x20/0x20 [ 204.458362][ C0] irq_exit_rcu+0x9/0x20 [ 204.462645][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 204.468340][ C0] [ 204.471451][ C0] [ 204.474589][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 204.480851][ C0] RIP: 0010:unwind_next_frame+0x1cb2/0x2970 [ 204.486830][ C0] Code: 00 49 8b 5c 24 08 4d 8d 7c 24 10 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 77 16 a2 00 49 8b 07 4c 39 f3 0f 96 c1 <4c> 39 f0 0f 97 c2 84 d1 74 3c 49 8d 4e 08 48 39 d9 0f 96 c2 48 39 [ 204.506547][ C0] RSP: 0018:ffffc90005517598 EFLAGS: 00000293 [ 204.512653][ C0] RAX: ffffc90005518000 RBX: ffffc90005510000 RCX: 0000000000000001 [ 204.520684][ C0] RDX: ffff8880264cda00 RSI: 0000000000000001 RDI: ffffc90005517670 [ 204.528764][ C0] RBP: ffffc90005517f30 R08: ffff8880264cda00 R09: 0000000000000003 [ 204.536981][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90005517668 [ 204.545198][ C0] R13: dffffc0000000000 R14: ffffc90005517f58 R15: ffffc90005517678 [ 204.553393][ C0] ? unwind_next_frame+0x1c47/0x2970 [ 204.558798][ C0] ? ret_from_fork+0x48/0x80 [ 204.563475][ C0] ? ret_from_fork+0x48/0x80 [ 204.568308][ C0] ? stack_trace_save+0xe0/0xe0 [ 204.573280][ C0] arch_stack_walk+0x144/0x190 [ 204.578115][ C0] ? ret_from_fork_asm+0x11/0x20 [ 204.583105][ C0] stack_trace_save+0x9c/0xe0 [ 204.588126][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 204.593291][ C0] ? skb_release_data+0x634/0x800 [ 204.598778][ C0] ? worker_thread+0xa55/0xfc0 [ 204.603696][ C0] ? kthread+0x2fa/0x390 [ 204.608215][ C0] ? ret_from_fork+0x48/0x80 [ 204.612999][ C0] ? ret_from_fork_asm+0x11/0x20 [ 204.618441][ C0] kasan_set_track+0x4e/0x70 [ 204.623324][ C0] ? kasan_set_track+0x4e/0x70 [ 204.628174][ C0] ? kasan_save_free_info+0x2e/0x50 [ 204.633426][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 204.638791][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 204.644639][ C0] ? kmem_cache_free+0xf8/0x280 [ 204.649607][ C0] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 204.656246][ C0] ? process_scheduled_works+0xa45/0x15b0 [ 204.662221][ C0] ? worker_thread+0xa55/0xfc0 [ 204.667305][ C0] ? kthread+0x2fa/0x390 [ 204.671855][ C0] ? ret_from_fork+0x48/0x80 [ 204.676578][ C0] ? kmem_cache_free+0xf8/0x280 [ 204.681703][ C0] kasan_save_free_info+0x2e/0x50 [ 204.686877][ C0] ____kasan_slab_free+0x126/0x1e0 [ 204.692012][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 204.697854][ C0] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 204.703793][ C0] kmem_cache_free+0xf8/0x280 [ 204.708709][ C0] nsim_dev_trap_report_work+0x76f/0xb00 [ 204.714767][ C0] ? process_scheduled_works+0x957/0x15b0 [ 204.720893][ C0] process_scheduled_works+0xa45/0x15b0 [ 204.726809][ C0] ? assign_work+0x400/0x400 [ 204.731790][ C0] ? assign_work+0x39e/0x400 [ 204.736481][ C0] worker_thread+0xa55/0xfc0 [ 204.741310][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 204.747396][ C0] ? _raw_spin_unlock+0x40/0x40 [ 204.752291][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 204.758259][ C0] kthread+0x2fa/0x390 [ 204.762331][ C0] ? pr_cont_work+0x560/0x560 [ 204.767110][ C0] ? kthread_blkcg+0xd0/0xd0 [ 204.771687][ C0] ret_from_fork+0x48/0x80 [ 204.776138][ C0] ? kthread_blkcg+0xd0/0xd0 [ 204.780720][ C0] ret_from_fork_asm+0x11/0x20 [ 204.785556][ C0] [ 204.788848][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.796129][ C0] CPU: 0 PID: 2104 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 204.803777][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.813860][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 204.820641][ C0] Call Trace: [ 204.823911][ C0] [ 204.826746][ C0] dump_stack_lvl+0x16c/0x230 [ 204.831420][ C0] ? show_regs_print_info+0x20/0x20 [ 204.836610][ C0] ? load_image+0x3b0/0x3b0 [ 204.841106][ C0] panic+0x2c0/0x710 [ 204.844988][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 204.849670][ C0] ? ret_from_fork_asm+0x11/0x20 [ 204.854597][ C0] __warn+0x2e0/0x470 [ 204.858594][ C0] ? __rate_control_send_low+0x635/0x880 [ 204.864233][ C0] ? __rate_control_send_low+0x635/0x880 [ 204.869951][ C0] report_bug+0x2be/0x4f0 [ 204.874363][ C0] ? __rate_control_send_low+0x635/0x880 [ 204.880167][ C0] ? __rate_control_send_low+0x635/0x880 [ 204.885916][ C0] ? __rate_control_send_low+0x637/0x880 [ 204.891642][ C0] handle_bug+0xcf/0x120 [ 204.895975][ C0] exc_invalid_op+0x1a/0x50 [ 204.900551][ C0] asm_exc_invalid_op+0x1a/0x20 [ 204.905400][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 204.912161][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 9c be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 eb 14 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 204.931928][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 204.938302][ C0] RAX: 5ce8a58fdcd3ed00 RBX: 000000000000000c RCX: ffff8880264cda00 [ 204.946515][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 204.954681][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 204.962753][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000040 [ 204.970839][ C0] R13: dffffc0000000000 R14: ffff888021153358 R15: ffff888076372028 [ 204.978845][ C0] rate_control_send_low+0x194/0x790 [ 204.984432][ C0] rate_control_get_rate+0x20b/0x5c0 [ 204.989771][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 204.995760][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 205.001769][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 205.007338][ C0] ? _local_bh_enable+0xa0/0xa0 [ 205.012566][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 205.018335][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 205.023642][ C0] ? read_lock_is_recursive+0x20/0x20 [ 205.029108][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 205.034646][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 205.040311][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 205.046009][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 205.051779][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 205.058770][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 205.064524][ C0] __iterate_interfaces+0x243/0x500 [ 205.069737][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 205.075987][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 205.083324][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 205.089774][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 205.096844][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 205.102158][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 205.107372][ C0] ? hw_scan_work+0xf40/0xf40 [ 205.112606][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 205.117812][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 205.124070][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 205.129518][ C0] handle_softirqs+0x280/0x820 [ 205.134638][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 205.139618][ C0] ? do_softirq+0x180/0x180 [ 205.144234][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 205.149566][ C0] __irq_exit_rcu+0xc7/0x190 [ 205.154156][ C0] ? irq_exit_rcu+0x20/0x20 [ 205.158882][ C0] irq_exit_rcu+0x9/0x20 [ 205.164107][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 205.170605][ C0] [ 205.173870][ C0] [ 205.177101][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.184013][ C0] RIP: 0010:unwind_next_frame+0x1cb2/0x2970 [ 205.190375][ C0] Code: 00 49 8b 5c 24 08 4d 8d 7c 24 10 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 77 16 a2 00 49 8b 07 4c 39 f3 0f 96 c1 <4c> 39 f0 0f 97 c2 84 d1 74 3c 49 8d 4e 08 48 39 d9 0f 96 c2 48 39 [ 205.211321][ C0] RSP: 0018:ffffc90005517598 EFLAGS: 00000293 [ 205.218192][ C0] RAX: ffffc90005518000 RBX: ffffc90005510000 RCX: 0000000000000001 [ 205.226872][ C0] RDX: ffff8880264cda00 RSI: 0000000000000001 RDI: ffffc90005517670 [ 205.235048][ C0] RBP: ffffc90005517f30 R08: ffff8880264cda00 R09: 0000000000000003 [ 205.243036][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90005517668 [ 205.251120][ C0] R13: dffffc0000000000 R14: ffffc90005517f58 R15: ffffc90005517678 [ 205.259561][ C0] ? unwind_next_frame+0x1c47/0x2970 [ 205.265062][ C0] ? ret_from_fork+0x48/0x80 [ 205.269760][ C0] ? ret_from_fork+0x48/0x80 [ 205.274480][ C0] ? stack_trace_save+0xe0/0xe0 [ 205.279357][ C0] arch_stack_walk+0x144/0x190 [ 205.284476][ C0] ? ret_from_fork_asm+0x11/0x20 [ 205.289551][ C0] stack_trace_save+0x9c/0xe0 [ 205.294351][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 205.299645][ C0] ? skb_release_data+0x634/0x800 [ 205.304797][ C0] ? worker_thread+0xa55/0xfc0 [ 205.309620][ C0] ? kthread+0x2fa/0x390 [ 205.314157][ C0] ? ret_from_fork+0x48/0x80 [ 205.318853][ C0] ? ret_from_fork_asm+0x11/0x20 [ 205.323999][ C0] kasan_set_track+0x4e/0x70 [ 205.328685][ C0] ? kasan_set_track+0x4e/0x70 [ 205.333461][ C0] ? kasan_save_free_info+0x2e/0x50 [ 205.338851][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 205.344429][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 205.350337][ C0] ? kmem_cache_free+0xf8/0x280 [ 205.355311][ C0] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 205.361137][ C0] ? process_scheduled_works+0xa45/0x15b0 [ 205.366986][ C0] ? worker_thread+0xa55/0xfc0 [ 205.371767][ C0] ? kthread+0x2fa/0x390 [ 205.376196][ C0] ? ret_from_fork+0x48/0x80 [ 205.380831][ C0] ? kmem_cache_free+0xf8/0x280 [ 205.385694][ C0] kasan_save_free_info+0x2e/0x50 [ 205.390861][ C0] ____kasan_slab_free+0x126/0x1e0 [ 205.396146][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 205.401734][ C0] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 205.407588][ C0] kmem_cache_free+0xf8/0x280 [ 205.412540][ C0] nsim_dev_trap_report_work+0x76f/0xb00 [ 205.418215][ C0] ? process_scheduled_works+0x957/0x15b0 [ 205.423935][ C0] process_scheduled_works+0xa45/0x15b0 [ 205.429591][ C0] ? assign_work+0x400/0x400 [ 205.434176][ C0] ? assign_work+0x39e/0x400 [ 205.438868][ C0] worker_thread+0xa55/0xfc0 [ 205.443451][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 205.449528][ C0] ? _raw_spin_unlock+0x40/0x40 [ 205.454410][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 205.460331][ C0] kthread+0x2fa/0x390 [ 205.464510][ C0] ? pr_cont_work+0x560/0x560 [ 205.469299][ C0] ? kthread_blkcg+0xd0/0xd0 [ 205.474066][ C0] ret_from_fork+0x48/0x80 [ 205.478950][ C0] ? kthread_blkcg+0xd0/0xd0 [ 205.483563][ C0] ret_from_fork_asm+0x11/0x20 [ 205.488372][ C0] [ 205.491721][ C0] Kernel Offset: disabled [ 205.496187][ C0] Rebooting in 86400 seconds..