last executing test programs: 1m48.395650835s ago: executing program 2 (id=148): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0xef, "e34655", 0x4, 0x80}) 1m46.509518159s ago: executing program 2 (id=152): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1m45.427563236s ago: executing program 2 (id=157): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r4, 0x0) 1m38.676694785s ago: executing program 2 (id=163): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000a95a6e870200010000000008004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, 0x0, 0x0) 1m37.494004906s ago: executing program 2 (id=168): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 1m36.361464068s ago: executing program 2 (id=171): socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) unshare(0x400) r3 = eventfd2(0xffffff10, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)={0x10000008}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4140aecd, 0x0) mkdir(0x0, 0x2c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 1m20.22776256s ago: executing program 32 (id=171): socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) unshare(0x400) r3 = eventfd2(0xffffff10, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)={0x10000008}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4140aecd, 0x0) mkdir(0x0, 0x2c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 26.31959745s ago: executing program 3 (id=294): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000001200)=0x4, 0x4) 20.327729234s ago: executing program 0 (id=303): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x5, [@typedef={0x9, 0x0, 0x0, 0x8, 0x1}, @enum64={0x4, 0x2, 0x0, 0x13, 0x0, 0x4, [{0xa, 0x400, 0x7}, {0x1, 0x6, 0x4}]}, @struct={0x7, 0x1, 0x0, 0x4, 0x0, 0x5, [{0xe, 0x1, 0x7}]}, @var={0xc, 0x0, 0x0, 0xe, 0x2, 0x1}, @struct={0xb, 0x7, 0x0, 0x4, 0x0, 0x5, [{0xe, 0x4, 0x100}, {0x7, 0x1, 0x1c2}, {0xb, 0x2, 0x82}, {0x9, 0x0, 0x5}, {0xe, 0x3, 0x7}, {0x5, 0x4, 0x4}, {0x9, 0x1, 0x1}]}, @const={0xe, 0x0, 0x0, 0xa, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x4}}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x61c76142bdd588b3]}}, &(0x7f0000000240), 0x105, 0x0, 0x0, 0x1, 0x10000, @value}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) read$dsp(r4, &(0x7f0000000000)=""/47, 0x2f) 18.528721002s ago: executing program 4 (id=304): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded', 0x200000, 0x10) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x1, 0x1, @stop_pts=0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000006, 0xffffffff80004040}}, 0x50) acct(&(0x7f0000000140)='./file0/file0\x00') syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x2, {0x1, 0x2, 0xff7ffffffffffffc, 0x0, 0x0, 0x0, {0x100000000, 0x3, 0x10000004, 0xfffffffffffffff7, 0x0, 0x3, 0x0, 0xfffff7fc, 0x9, 0x8000, 0x1fc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) dup(0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=@dstopts={0x87}, 0x8) 15.569597534s ago: executing program 1 (id=305): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x124}}, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r4, 0x0) 15.564403087s ago: executing program 4 (id=306): mprotect(&(0x7f0000406000/0x2000)=nil, 0x2000, 0x1000004) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x4080) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000c}, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) get_mempolicy(&(0x7f0000000100), &(0x7f00000001c0), 0x9a, &(0x7f00004f6000/0x2000)=nil, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) rt_tgsigqueueinfo(r1, r4, 0x1b, &(0x7f0000000040)={0xb, 0x3fe, 0x4debdfd7}) wait4(r4, &(0x7f00000000c0), 0x1, &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 15.297092876s ago: executing program 3 (id=307): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x36}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 13.532087697s ago: executing program 1 (id=308): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x5d, 0xfffffffffffffffe) utime(&(0x7f0000000140)='./file0\x00', 0x0) r1 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}}) 13.015160328s ago: executing program 0 (id=309): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x30}], 0x1, 0x0, 0x0, 0x0) 12.500125649s ago: executing program 3 (id=310): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.928878115s ago: executing program 4 (id=311): recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/12, 0x13}], 0x1}}], 0x71e, 0x142, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="190000", @ANYRES16, @ANYBLOB="00032dbd7000fbdbdf25070000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x6080) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 11.744150568s ago: executing program 1 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') lstat(&(0x7f0000000dc0)='./file0\x00', 0x0) 11.02222532s ago: executing program 3 (id=313): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000008) write$uinput_user_dev(r0, 0x0, 0x0) 10.764851677s ago: executing program 0 (id=314): unshare(0x600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000002380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0xc8, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x88, 0x3, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1400000000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}]}]}, @NFT_MSG_DELTABLE={0xa8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x30, 0x6, "72f5416b691bb14a1e4c4261472498c64865789a671ff487fc2b2e5068490624e1c648b5a28ac7b2ba583fe8"}, @NFTA_TABLE_USERDATA={0x4a, 0x6, "75e86c861a7fd9017bd2a27e65dd99f0ea2a830dee1cff8b79b7d541cdb348a95623369b7ef4eee3dbe4e98263d98d75fe41ceb1e4203dfc38e8a14f098895b4b12daddbe3a8"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0xe4, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x330}, 0x1, 0x0, 0x0, 0x8800}, 0x4000801) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0xb78}, 0x1, 0x0, 0x0, 0x804c8c0}, 0x0) 10.251757962s ago: executing program 4 (id=315): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded', 0x200000, 0x10) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x1, 0x1, @stop_pts=0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000006, 0xffffffff80004040}}, 0x50) acct(&(0x7f0000000140)='./file0/file0\x00') syz_fuse_handle_req(r2, &(0x7f00000066c0)="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", 0x2000, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) dup(0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=@dstopts={0x87}, 0x8) 10.218050169s ago: executing program 1 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8004) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) r6 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$SNAPSHOT_FREE(r6, 0x3305) sendto$inet6(r6, &(0x7f0000000540)="da", 0x11, 0x0, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000540)={'syz0\x00', {0x2, 0x3000, 0x5, 0x8}, 0x39, [0x5, 0x200, 0x10000, 0x5, 0xfff, 0x6, 0x7, 0x9, 0x64550991, 0x594b, 0x9, 0x8, 0x0, 0x8, 0x9, 0x49ca, 0x4, 0xfffffff8, 0x7, 0x6a7, 0xffff, 0x6, 0x8, 0x2, 0x19d6c000, 0x1ff, 0x7, 0x200, 0xfffffff9, 0x6, 0x6, 0x8, 0x6, 0x55, 0x8, 0xd, 0x1, 0x8, 0x3, 0x1, 0x3, 0x3ff, 0x4, 0x10000, 0x2, 0x68, 0x1ff, 0x80000000, 0x3, 0x47f8, 0x9, 0x10001, 0x5, 0xfffffff2, 0x2, 0x7, 0xb8, 0xe, 0x4, 0x2, 0x901c, 0x10, 0x7, 0x5], [0x5, 0xc, 0x5057, 0x5, 0x2, 0x1, 0x4, 0x1, 0x10001, 0x7f, 0x989, 0x0, 0xf, 0x7, 0x0, 0x4992, 0x5, 0x9, 0x401, 0xa, 0x3ff, 0x4, 0x7, 0x1ff, 0x4, 0x7, 0x1, 0x4, 0x0, 0x825, 0x1, 0x401, 0x80, 0xe49d, 0x4c1, 0x5, 0x1, 0x4c1, 0x7dd94868, 0xb, 0x1, 0x8, 0x7, 0x4, 0xffffffff, 0x3, 0x8e, 0xff, 0x1, 0x7, 0x2fd72953, 0x1, 0xd822, 0x1000, 0x9, 0x9, 0x3, 0x56b, 0x1, 0x0, 0x6, 0xf, 0x5, 0x1], [0x5, 0x77394e22, 0x7320, 0xffff, 0x2, 0x6, 0x8, 0xa, 0x8, 0x2, 0x3, 0x9, 0x1, 0x1000, 0x8, 0xfff, 0x200, 0x3, 0x400, 0x3ff, 0x9, 0x401, 0x5, 0x4, 0x4, 0x10001, 0x8, 0xd, 0xb, 0x5, 0x2, 0xce0, 0x2, 0x10000, 0x79, 0x5, 0x0, 0x1ff, 0x5, 0xb, 0x3, 0x857f, 0x5, 0xfff, 0xe3c, 0x2, 0xa, 0x20, 0xd, 0x4, 0x101, 0x46, 0x9, 0x1, 0x10, 0x3, 0x77, 0x9, 0x8, 0x15, 0x5, 0xf9b6, 0x8, 0x3], [0x1000000, 0x8, 0x6, 0x1, 0x6, 0x8, 0xfffffff7, 0x3, 0x5, 0x4, 0x10, 0x2, 0x7, 0x8000, 0x7, 0x5, 0x8, 0x3ff, 0xfbfd, 0x5, 0xffffff8b, 0x7, 0x1, 0x9, 0x10000, 0xfffffff8, 0x81, 0x2, 0x57b7, 0x8, 0x0, 0x100, 0x59b33ab7, 0x198, 0xfffffffc, 0x9, 0x7fff, 0x4, 0x2, 0x1, 0x10001, 0x5, 0x8, 0x9, 0x3, 0x3, 0x800, 0x8, 0xa, 0x2, 0x400, 0x2, 0x0, 0x100, 0x3, 0x7, 0x4, 0x1, 0x40, 0x5, 0x7, 0xd, 0x5, 0xd0]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f4, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) 6.802249174s ago: executing program 0 (id=317): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x124}}, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r4, 0x0) 6.799624906s ago: executing program 3 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/36, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.631824638s ago: executing program 4 (id=319): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x36}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 2.597821732s ago: executing program 0 (id=320): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002801000"], 0xa0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.270664988s ago: executing program 1 (id=321): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="4100040400000000280012800b0001006272696467650000180002800a0014000180c2000003000008000900"], 0x48}}, 0x0) 501.515145ms ago: executing program 0 (id=322): io_setup(0x6, &(0x7f0000001380)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 489.475946ms ago: executing program 4 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="331601000013"}) 92.941611ms ago: executing program 1 (id=324): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 0s ago: executing program 3 (id=325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) open_tree(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x840) kernel console output (not intermixed with test programs): no interfaces have a carrier forked to background, child pid 5433 [ 132.149793][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.186907][ T5434] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. syzkaller login: [ 176.502169][ T5765] cgroup: Unknown subsys name 'net' [ 176.645425][ T5765] cgroup: Unknown subsys name 'cpuset' [ 176.663158][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.417988][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.424610][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.102065][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 229.370362][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.384050][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.397206][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.407923][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.421080][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.432195][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.444291][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.454166][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.467788][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.481118][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.493762][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.503317][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.516385][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.526958][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.541808][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.577933][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.662653][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.675462][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.729175][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.741966][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.753752][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.769191][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.780173][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.790747][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.853889][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.888543][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.910299][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.972700][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.985428][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.996169][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.504331][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 231.496978][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 231.516057][ T5785] Bluetooth: hci0: command tx timeout [ 231.596098][ T5785] Bluetooth: hci1: command tx timeout [ 231.654961][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 231.675295][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.686282][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.696584][ T5784] bridge_slave_0: entered allmulticast mode [ 231.705686][ T5784] bridge_slave_0: entered promiscuous mode [ 231.786656][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.799859][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.807842][ T5784] bridge_slave_1: entered allmulticast mode [ 231.816841][ T5784] bridge_slave_1: entered promiscuous mode [ 231.856314][ T5785] Bluetooth: hci2: command tx timeout [ 231.863437][ T5785] Bluetooth: hci3: command tx timeout [ 231.873583][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 232.052459][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.116615][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 232.174964][ T5782] Bluetooth: hci4: command tx timeout [ 232.209092][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.524921][ T5784] team0: Port device team_slave_0 added [ 232.591606][ T5784] team0: Port device team_slave_1 added [ 232.852002][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.862742][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.872846][ T5792] bridge_slave_0: entered allmulticast mode [ 232.881448][ T5792] bridge_slave_0: entered promiscuous mode [ 232.927283][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.935599][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.944529][ T5794] bridge_slave_0: entered allmulticast mode [ 232.954058][ T5794] bridge_slave_0: entered promiscuous mode [ 233.010021][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.017896][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.025530][ T5792] bridge_slave_1: entered allmulticast mode [ 233.035409][ T5792] bridge_slave_1: entered promiscuous mode [ 233.084444][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.093853][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.121969][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.140203][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.149331][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.157328][ T5794] bridge_slave_1: entered allmulticast mode [ 233.165776][ T5794] bridge_slave_1: entered promiscuous mode [ 233.284256][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.296719][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.305372][ T5781] bridge_slave_0: entered allmulticast mode [ 233.314257][ T5781] bridge_slave_0: entered promiscuous mode [ 233.338204][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.347236][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.377241][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.523365][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.553170][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.564791][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.572903][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.582064][ T5781] bridge_slave_1: entered allmulticast mode [ 233.592810][ T5781] bridge_slave_1: entered promiscuous mode [ 233.612827][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.624306][ T5782] Bluetooth: hci0: command tx timeout [ 233.634185][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.676520][ T5782] Bluetooth: hci1: command tx timeout [ 233.922730][ T5782] Bluetooth: hci3: command tx timeout [ 233.926577][ T5785] Bluetooth: hci2: command tx timeout [ 233.943506][ T5792] team0: Port device team_slave_0 added [ 234.006298][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.014055][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.023930][ T5787] bridge_slave_0: entered allmulticast mode [ 234.034868][ T5787] bridge_slave_0: entered promiscuous mode [ 234.055193][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.067561][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.075299][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.083698][ T5787] bridge_slave_1: entered allmulticast mode [ 234.092863][ T5787] bridge_slave_1: entered promiscuous mode [ 234.110631][ T5792] team0: Port device team_slave_1 added [ 234.161378][ T5794] team0: Port device team_slave_0 added [ 234.181567][ T5784] hsr_slave_0: entered promiscuous mode [ 234.191622][ T5784] hsr_slave_1: entered promiscuous mode [ 234.238425][ T5785] Bluetooth: hci4: command tx timeout [ 234.242300][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.289695][ T5794] team0: Port device team_slave_1 added [ 234.430239][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.440195][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.468014][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.501409][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.509849][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.542148][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.597861][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.660719][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.677055][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.706174][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.740958][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.751211][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.782652][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.835349][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.888193][ T5781] team0: Port device team_slave_0 added [ 234.942032][ T5787] team0: Port device team_slave_0 added [ 234.994871][ T5781] team0: Port device team_slave_1 added [ 235.010061][ T5787] team0: Port device team_slave_1 added [ 235.220491][ T5792] hsr_slave_0: entered promiscuous mode [ 235.229389][ T5792] hsr_slave_1: entered promiscuous mode [ 235.238586][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.247056][ T5792] Cannot create hsr debugfs directory [ 235.339245][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.347933][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.375312][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.392674][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.400211][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.426599][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.477641][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.485395][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.517648][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.573468][ T5794] hsr_slave_0: entered promiscuous mode [ 235.584253][ T5794] hsr_slave_1: entered promiscuous mode [ 235.596030][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.604399][ T5794] Cannot create hsr debugfs directory [ 235.676079][ T5785] Bluetooth: hci0: command tx timeout [ 235.699390][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.707113][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.735514][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.756165][ T5785] Bluetooth: hci1: command tx timeout [ 235.997160][ T5785] Bluetooth: hci2: command tx timeout [ 236.012055][ T5785] Bluetooth: hci3: command tx timeout [ 236.183701][ T5781] hsr_slave_0: entered promiscuous mode [ 236.194454][ T5781] hsr_slave_1: entered promiscuous mode [ 236.203147][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.210998][ T5781] Cannot create hsr debugfs directory [ 236.269432][ T5787] hsr_slave_0: entered promiscuous mode [ 236.279664][ T5787] hsr_slave_1: entered promiscuous mode [ 236.290225][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.300683][ T5787] Cannot create hsr debugfs directory [ 236.327637][ T5785] Bluetooth: hci4: command tx timeout [ 236.739137][ T5784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.866048][ T5784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.943247][ T5784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.014925][ T5784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.391180][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.418090][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.443568][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.518396][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.701300][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.754787][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.771502][ T5785] Bluetooth: hci0: command tx timeout [ 237.836730][ T5785] Bluetooth: hci1: command tx timeout [ 237.858154][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.888951][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.045159][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.076806][ T5785] Bluetooth: hci3: command tx timeout [ 238.086198][ T5785] Bluetooth: hci2: command tx timeout [ 238.152177][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.174781][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.198425][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.220902][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.292216][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.435655][ T5785] Bluetooth: hci4: command tx timeout [ 238.450197][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.519035][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.704691][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.999931][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.039546][ T3822] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.047532][ T3822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.173484][ T3822] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.181292][ T3822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.208075][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.397948][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.489775][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.627912][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.635753][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.738447][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.787167][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.830125][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.838395][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.902376][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.983238][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.991709][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.087857][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.124612][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.191089][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.198846][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.349431][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.411156][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.451109][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.459317][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.494879][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.502764][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.540178][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.548270][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.693736][ T5787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.706521][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.792658][ T5792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.807794][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.880483][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.888763][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.197701][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.209560][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.110587][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.372231][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.972943][ T5794] veth0_vlan: entered promiscuous mode [ 243.021130][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.089067][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.118119][ T5794] veth1_vlan: entered promiscuous mode [ 243.143642][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.561203][ T5794] veth0_macvtap: entered promiscuous mode [ 243.690566][ T5792] veth0_vlan: entered promiscuous mode [ 243.725264][ T5787] veth0_vlan: entered promiscuous mode [ 243.739285][ T5794] veth1_macvtap: entered promiscuous mode [ 243.858493][ T5781] veth0_vlan: entered promiscuous mode [ 243.894315][ T5792] veth1_vlan: entered promiscuous mode [ 243.911659][ T5787] veth1_vlan: entered promiscuous mode [ 243.989588][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.002419][ T5781] veth1_vlan: entered promiscuous mode [ 244.119365][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.203565][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.212822][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.222153][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.231288][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.432063][ T5781] veth0_macvtap: entered promiscuous mode [ 244.450695][ T5792] veth0_macvtap: entered promiscuous mode [ 244.498021][ T5787] veth0_macvtap: entered promiscuous mode [ 244.510179][ T5781] veth1_macvtap: entered promiscuous mode [ 244.587571][ T5787] veth1_macvtap: entered promiscuous mode [ 244.618228][ T5792] veth1_macvtap: entered promiscuous mode [ 244.777595][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.790961][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.806994][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.847255][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.862873][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.876053][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.890406][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.905929][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.971168][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.982954][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.998170][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.009546][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.021766][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.040858][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.056887][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.068567][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.080722][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.097501][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.121026][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.133033][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.144255][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.155763][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.174511][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.271247][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.287573][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.300665][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.312054][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.322219][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.333109][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.348095][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.381337][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.391307][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.400587][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.409671][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.488979][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.499425][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.508525][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.517693][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.554819][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.564069][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.573628][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.583537][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.724108][ T5784] veth0_vlan: entered promiscuous mode [ 245.847815][ T5784] veth1_vlan: entered promiscuous mode [ 246.270728][ T5784] veth0_macvtap: entered promiscuous mode [ 246.371464][ T5784] veth1_macvtap: entered promiscuous mode [ 246.520702][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.532272][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.543497][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.556140][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.566409][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.578147][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.588589][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.599684][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.614161][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.810145][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.820904][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.836609][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.848655][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.863009][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.876918][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.889966][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.902400][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.916818][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.182963][ T5784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.193389][ T5784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.203422][ T5784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.213012][ T5784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.865571][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.874584][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.071902][ T3822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.081397][ T3822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.603248][ T5794] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 251.681939][ T3697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.692117][ T3697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.954381][ T3697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.963567][ T3697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.138879][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 252.501601][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.509851][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.834778][ T4152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.843052][ T4152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.078374][ T4152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.087732][ T4152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.174360][ T5965] netlink: 'syz.0.6': attribute type 39 has an invalid length. [ 253.209729][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.315314][ T5965] bridge_slave_0 (unregistering): left allmulticast mode [ 253.322781][ T5965] bridge_slave_0 (unregistering): left promiscuous mode [ 253.330578][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.490496][ T3757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.500055][ T3757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.835652][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.850600][ T3822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.852327][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.861419][ T3822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.317527][ T5982] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 261.047352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 262.713661][ T6019] capability: warning: `syz.1.14' uses 32-bit capabilities (legacy support in use) [ 286.572225][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.580394][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.143519][ T6301] : renamed from bond0 (while UP) [ 314.537043][ T6338] syzkaller0: entered allmulticast mode [ 320.959088][ T6377] syzkaller0: entered allmulticast mode [ 322.952997][ T6400] netlink: 92 bytes leftover after parsing attributes in process `syz.2.157'. [ 330.123907][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 332.718519][ T6444] netlink: 92 bytes leftover after parsing attributes in process `syz.1.173'. [ 337.170974][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 341.603264][ T6503] netlink: 92 bytes leftover after parsing attributes in process `syz.1.192'. [ 346.358340][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'. [ 347.368961][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.375710][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.240889][ T6538] netlink: 92 bytes leftover after parsing attributes in process `syz.0.205'. [ 351.403394][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.415482][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.442719][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.474552][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.489511][ T5782] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 352.481540][ T6564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.455066][ T6574] netlink: 92 bytes leftover after parsing attributes in process `syz.3.218'. [ 354.580098][ T6565] Bluetooth: hci5: command tx timeout [ 354.580317][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 354.588098][ T6565] Bluetooth: hci1: command 0x0406 tx timeout [ 354.592723][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 354.603334][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 354.604954][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 355.601017][ T6579] 9pnet_fd: Insufficient options for proto=fd [ 355.751097][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.220'. [ 356.641820][ T5789] Bluetooth: hci5: command tx timeout [ 356.831114][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 358.743735][ T5789] Bluetooth: hci5: command tx timeout [ 360.827427][ T5789] Bluetooth: hci5: command tx timeout [ 362.273582][ T6619] 9pnet_fd: Insufficient options for proto=fd [ 365.124793][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.134849][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.146483][ T6553] bridge_slave_0: entered allmulticast mode [ 365.155671][ T6553] bridge_slave_0: entered promiscuous mode [ 365.509097][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.517768][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.526001][ T6553] bridge_slave_1: entered allmulticast mode [ 365.538148][ T6553] bridge_slave_1: entered promiscuous mode [ 366.449531][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.583407][ T6642] fuse: Bad value for 'fd' [ 366.599573][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.636290][ T1134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.337298][ T6553] team0: Port device team_slave_0 added [ 368.572751][ T1134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.668234][ T6553] team0: Port device team_slave_1 added [ 368.937353][ T6652] 9pnet_fd: Insufficient options for proto=fd [ 369.363922][ T1134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.400885][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.408182][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.436090][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.774085][ T1134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.835688][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.844376][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.881048][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.751408][ T6553] hsr_slave_0: entered promiscuous mode [ 371.763526][ T6553] hsr_slave_1: entered promiscuous mode [ 371.772319][ T6553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.781372][ T6553] Cannot create hsr debugfs directory [ 372.729209][ T1134] bridge_slave_1: left allmulticast mode [ 372.735364][ T1134] bridge_slave_1: left promiscuous mode [ 372.742575][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.051715][ T1134] bridge_slave_0: left allmulticast mode [ 373.058208][ T1134] bridge_slave_0: left promiscuous mode [ 373.068020][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.121025][ T6690] 9pnet_fd: Insufficient options for proto=fd [ 376.285446][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.448283][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.540553][ T1134] bond0 (unregistering): Released all slaves [ 378.558999][ T1134] hsr_slave_0: left promiscuous mode [ 378.633672][ T1134] hsr_slave_1: left promiscuous mode [ 378.641996][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.650114][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.904143][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.912199][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.134562][ T1134] veth1_macvtap: left promiscuous mode [ 379.143343][ T1134] veth0_macvtap: left promiscuous mode [ 379.150561][ T1134] veth1_vlan: left promiscuous mode [ 379.156995][ T1134] veth0_vlan: left promiscuous mode [ 379.897015][ T6553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 380.806108][ T6728] 9pnet_fd: Insufficient options for proto=fd [ 384.668183][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 384.969973][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 385.246637][ T6553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 385.488088][ T6553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 386.614669][ T6553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 387.445450][ T6762] 9pnet_fd: Insufficient options for proto=fd [ 387.652312][ T6761] syzkaller0: entered allmulticast mode [ 389.742138][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.889440][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.157889][ T3918] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.167167][ T3918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.182618][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.191320][ T3918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.049000][ T6799] 9pnet_fd: Insufficient options for proto=fd [ 395.287664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 395.696593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 395.704983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 395.907584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 396.106165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 396.516204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 397.846998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 398.256528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 398.666156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 402.818699][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.609643][ T6853] 9pnet_fd: Insufficient options for proto=fd [ 407.134701][ T6553] veth0_vlan: entered promiscuous mode [ 407.320321][ T6553] veth1_vlan: entered promiscuous mode [ 407.819411][ T6553] veth0_macvtap: entered promiscuous mode [ 407.925028][ T6553] veth1_macvtap: entered promiscuous mode [ 408.172358][ T5835] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 408.194730][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.207774][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.219011][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.230760][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.241622][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.253003][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.266039][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.277281][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.295190][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.456147][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 408.537188][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 408.673108][ T5835] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 408.684082][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.694260][ T5835] usb 1-1: Product: syz [ 408.698872][ T5835] usb 1-1: Manufacturer: syz [ 408.712981][ T5835] usb 1-1: SerialNumber: syz [ 408.752187][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.761501][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.087542][ T5835] usb 1-1: config 0 descriptor?? [ 409.183863][ T5835] hub 1-1:0.0: bad descriptor, ignoring hub [ 409.190915][ T5835] hub 1-1:0.0: probe with driver hub failed with error -5 [ 409.227651][ T5835] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 411.434471][ T5835] input: failed to attach handler mousedev to device input12, error: -5 [ 411.989055][ T5078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.047956][ T5078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.068857][ T5078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.097983][ T5078] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.110568][ T5078] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 412.128855][ T5078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.249189][ T5839] usb 1-1: USB disconnect, device number 2 [ 414.278057][ T5078] Bluetooth: hci3: command tx timeout [ 416.327917][ T5078] Bluetooth: hci3: command tx timeout [ 416.428411][ T6908] 9pnet_fd: Insufficient options for proto=fd [ 417.591703][ T6878] chnl_net:caif_netlink_parms(): no params data found [ 418.929658][ T5078] Bluetooth: hci3: command tx timeout [ 420.956395][ T5078] Bluetooth: hci3: command tx timeout [ 426.351561][ T6928] kvm: kvm [6927]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 426.430123][ T6940] netlink: 'syz.1.321': attribute type 9 has an invalid length. [ 426.506224][ T6928] kvm: kvm [6927]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 427.559671][ T6953] ===================================================== [ 427.567669][ T6953] BUG: KMSAN: uninit-value in full_proxy_unlocked_ioctl+0xed/0x3a0 [ 427.577163][ T6953] full_proxy_unlocked_ioctl+0xed/0x3a0 [ 427.583058][ T6953] __se_sys_ioctl+0x246/0x440 [ 427.588319][ T6953] __x64_sys_ioctl+0x96/0xe0 [ 427.593289][ T6953] x64_sys_call+0x19f0/0x3c30 [ 427.598374][ T6953] do_syscall_64+0xcd/0x1e0 [ 427.603058][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.609406][ T6953] [ 427.612161][ T6953] Uninit was stored to memory at: [ 427.618717][ T6953] __debugfs_file_get+0xe59/0xef0 [ 427.624120][ T6953] full_proxy_open_regular+0x67/0xa00 [ 427.631012][ T6953] do_dentry_open+0x1bdd/0x26b0 [ 427.636461][ T6953] vfs_open+0x53/0x5b0 [ 427.640930][ T6953] path_openat+0x5667/0x6210 [ 427.650501][ T6953] do_filp_open+0x268/0x600 [ 427.655566][ T6953] do_sys_openat2+0x1bf/0x2f0 [ 427.663905][ T6953] __x64_sys_openat+0x2a1/0x310 [ 427.669566][ T6953] x64_sys_call+0x36f5/0x3c30 [ 427.674514][ T6953] do_syscall_64+0xcd/0x1e0 [ 427.679473][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.686647][ T6953] [ 427.689634][ T6953] Uninit was stored to memory at: [ 427.694545][ T6947] syzkaller0: entered allmulticast mode [ 427.694843][ T6953] __debugfs_file_get+0xdff/0xef0 [ 427.705657][ T6953] full_proxy_open_regular+0x67/0xa00 [ 427.711427][ T6953] do_dentry_open+0x1bdd/0x26b0 [ 427.716934][ T6953] vfs_open+0x53/0x5b0 [ 427.721213][ T6953] path_openat+0x5667/0x6210 [ 427.726337][ T6953] do_filp_open+0x268/0x600 [ 427.731311][ T6953] do_sys_openat2+0x1bf/0x2f0 [ 427.737444][ T6953] __x64_sys_openat+0x2a1/0x310 [ 427.742561][ T6953] x64_sys_call+0x36f5/0x3c30 [ 427.753558][ T6953] do_syscall_64+0xcd/0x1e0 [ 427.760118][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.766575][ T6953] [ 427.769099][ T6953] Uninit was created at: [ 427.773932][ T6953] __kmalloc_cache_noprof+0x8e3/0xdf0 [ 427.780116][ T6953] __debugfs_file_get+0x31d/0xef0 [ 427.786398][ T6953] full_proxy_open_regular+0x67/0xa00 [ 427.792326][ T6953] do_dentry_open+0x1bdd/0x26b0 [ 427.797642][ T6953] vfs_open+0x53/0x5b0 [ 427.801921][ T6953] path_openat+0x5667/0x6210 [ 427.807188][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.807681][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.814789][ T6953] do_filp_open+0x268/0x600 [ 427.825185][ T6878] bridge_slave_0: entered allmulticast mode [ 427.828366][ T6953] do_sys_openat2+0x1bf/0x2f0 [ 427.828474][ T6953] __x64_sys_openat+0x2a1/0x310 [ 427.828570][ T6953] x64_sys_call+0x36f5/0x3c30 [ 427.828676][ T6953] do_syscall_64+0xcd/0x1e0 [ 427.828779][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.828915][ T6953] [ 427.828966][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.1.324 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 427.840558][ T6878] bridge_slave_0: entered promiscuous mode [ 427.889709][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 427.900135][ T6953] ===================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 427.907305][ T6953] Disabling lock debugging due to kernel taint [ 427.913595][ T6953] Kernel panic - not syncing: kmsan.panic set ... [ 427.920692][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.1.324 Tainted: G B 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 427.933418][ T6953] Tainted: [B]=BAD_PAGE [ 427.937688][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 427.948273][ T6953] Call Trace: [ 427.952023][ T6953] [ 427.955326][ T6953] dump_stack_lvl+0x216/0x2d0 [ 427.960952][ T6953] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 427.967006][ T6953] dump_stack+0x1e/0x24 [ 427.971518][ T6953] panic+0x4e2/0xcf0 [ 427.975743][ T6953] ? kmsan_get_metadata+0x61/0x1c0 [ 427.981358][ T6953] kmsan_report+0x2c7/0x2d0 [ 427.987927][ T6953] ? kmsan_get_metadata+0x13e/0x1c0 [ 427.993700][ T6953] ? __msan_warning+0x95/0x120 [ 427.998672][ T6953] ? full_proxy_unlocked_ioctl+0xed/0x3a0 [ 428.004601][ T6953] ? __se_sys_ioctl+0x246/0x440 [ 428.009640][ T6953] ? __x64_sys_ioctl+0x96/0xe0 [ 428.014843][ T6953] ? x64_sys_call+0x19f0/0x3c30 [ 428.020059][ T6953] ? do_syscall_64+0xcd/0x1e0 [ 428.025096][ T6953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.031392][ T6953] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 428.037803][ T6953] ? tomoyo_path_number_perm+0x82d/0x8f0 [ 428.043767][ T6953] ? kmsan_get_metadata+0x13e/0x1c0 [ 428.050412][ T6953] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 428.056653][ T6953] ? do_vfs_ioctl+0x1cf5/0x3e60 [ 428.062680][ T6953] ? kmsan_get_metadata+0x13e/0x1c0 [ 428.068808][ T6953] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 428.075023][ T6953] __msan_warning+0x95/0x120 [ 428.080080][ T6953] full_proxy_unlocked_ioctl+0xed/0x3a0 [ 428.086294][ T6953] ? __pfx_full_proxy_unlocked_ioctl+0x10/0x10 [ 428.092677][ T6953] __se_sys_ioctl+0x246/0x440 [ 428.097567][ T6953] __x64_sys_ioctl+0x96/0xe0 [ 428.102350][ T6953] x64_sys_call+0x19f0/0x3c30 [ 428.107207][ T6953] do_syscall_64+0xcd/0x1e0 [ 428.112067][ T6953] ? clear_bhb_loop+0x25/0x80 [ 428.116965][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.123539][ T6953] RIP: 0033:0x7f170678cda9 [ 428.128109][ T6953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.151928][ T6953] RSP: 002b:00007f17075f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.160845][ T6953] RAX: ffffffffffffffda RBX: 00007f17069a5fa0 RCX: 00007f170678cda9 [ 428.169995][ T6953] RDX: 0000000000000000 RSI: 0000000040103d0b RDI: 0000000000000003 [ 428.178132][ T6953] RBP: 00007f170680e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 428.186268][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.194502][ T6953] R13: 0000000000000000 R14: 00007f17069a5fa0 R15: 00007ffea8a67258 [ 428.202652][ T6953] [ 428.206050][ T6953] Kernel Offset: disabled [ 428.210434][ T6953] Rebooting in 86400 seconds..