last executing test programs: 42.6637601s ago: executing program 0 (id=1): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_j1939(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000b0000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000280), 0xffff, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 37.44626632s ago: executing program 0 (id=16): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xc1}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 36.384510691s ago: executing program 0 (id=20): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='cmdline\x00') lseek(r3, 0x9, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01040c000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a"], 0xc0}}, 0x0) r7 = inotify_init1(0x80000) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0xffff0018) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r8, 0x4b46, &(0x7f00000000c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/11], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r4, &(0x7f00000002c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0xffe, 0x0, 0xfffffdaa) 20.515279266s ago: executing program 32 (id=20): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='cmdline\x00') lseek(r3, 0x9, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01040c000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a"], 0xc0}}, 0x0) r7 = inotify_init1(0x80000) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0xffff0018) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r8, 0x4b46, &(0x7f00000000c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/11], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r4, &(0x7f00000002c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0xffe, 0x0, 0xfffffdaa) 12.897475722s ago: executing program 3 (id=59): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0xd, 0x0, 0x8001}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0xec5, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x10000000, 0xffffffff}, 0x0, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) fallocate(r0, 0x23, 0x3, 0x7f) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000480)='y\x105\x14\xf8u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\x15]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xb4\x95\xd1\xc8s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\x06\xee\x91\'\xae\x9c\x06\xb2\xd4\xfa,\xc0\xca\xd90$\xd7\xfe\xae\xddf?$\xb1\xeeE\b\xbc\xd1[\xd5tO`Z\x15 1\v\xa6\xd0[K!+>,FE\x10\t\xbb\x90Jj\xb8{', 0x2) ftruncate(r2, 0x400ffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000000}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080)={0x0, 0xa7}, 0x2) preadv(r3, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/241, 0xf1}], 0x1, 0x9, 0x4) 11.557432278s ago: executing program 2 (id=60): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x6, 0xfffffffffffffffb, 0x0, 0x390000, 0x1000001000, 0x4d}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x6, 0xfffffffffffffff7, 0x0, 0x4a58, 0x7f, 0x6}, 0x0, 0x0) 8.824739221s ago: executing program 2 (id=61): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz0\x00', {0x4, 0xff00, 0x3, 0x81}, 0x39, [0x5, 0x1, 0x3, 0x10000, 0x2, 0x8, 0x7, 0x1, 0x1ff, 0x6, 0xf, 0x9, 0x3ff, 0x8, 0xfffffff8, 0xd0, 0x5954f38f, 0xfffffeff, 0xff, 0x5, 0x8d, 0x760f, 0x0, 0x0, 0x7fffffff, 0xb5d3, 0x4, 0x9, 0xf1, 0x1, 0x8000, 0x89d, 0x6, 0x2, 0x5524, 0x7ec, 0xc, 0x0, 0x5, 0x5, 0x8, 0x5, 0x32, 0x83, 0x3, 0x1, 0x8, 0x5, 0x0, 0x8, 0x8, 0x6, 0xa09, 0xe72, 0x8001, 0xd, 0x2, 0x5, 0x1, 0x1, 0xca3, 0x8, 0x5, 0x8], [0x3ff, 0x4, 0x0, 0xffff7fff, 0x4, 0x173, 0xc, 0x3, 0x5, 0x2, 0xad, 0x8d, 0x3, 0x5, 0x7fffffff, 0x0, 0x5, 0x7, 0xba2, 0x4, 0x5, 0x3, 0xa, 0x8, 0xe, 0x5, 0xff, 0x0, 0x8, 0x2, 0x65, 0x7, 0x80000001, 0x8, 0x6a4, 0xfffff390, 0xf, 0xc1c1, 0x6, 0x1000, 0xd004, 0x80000000, 0x755d, 0x9, 0x8, 0x66, 0x6c845abb, 0x1, 0x7fffffff, 0x4, 0x2, 0x0, 0x9, 0x3, 0x2, 0x7, 0xfff, 0x4, 0x4, 0x80000001, 0x100, 0x1, 0x0, 0x9], [0x9, 0x200, 0xfffffffc, 0x80000000, 0xb90, 0x5, 0x9, 0x10001, 0x12, 0x2, 0x6, 0x25e, 0x6, 0x4, 0xcaa, 0x0, 0x5, 0x400, 0x6275, 0x8, 0x400, 0x5, 0x200, 0x3, 0xff, 0xffff, 0x6, 0x7, 0x9, 0x7, 0x738f, 0x80000000, 0x9, 0x3, 0x8ff, 0x3, 0x9, 0x2, 0x8, 0x10, 0x5, 0x7fff, 0x9, 0x9, 0xa0, 0x200, 0x5a60, 0x4, 0x9, 0x28, 0x1, 0x1, 0x2, 0x5, 0xb4f, 0xf70f, 0x7a, 0x8, 0x1, 0xc, 0xf, 0xfffffc00, 0x1000, 0x7], [0x80, 0x5, 0xfffffe01, 0xe0, 0x101, 0xfffffffe, 0x4, 0x38000, 0x0, 0x1e2f2fed, 0x81, 0x800, 0xf8, 0x100, 0x42a, 0x2, 0x6, 0x8, 0xc079, 0xffffffff, 0x2, 0x2, 0x7, 0x9, 0x5, 0x4, 0x9, 0x1, 0x1, 0x2, 0x7, 0x5, 0x4, 0x776, 0x2, 0x40, 0x1107ea51, 0x305ca5a, 0x3, 0x8fc, 0xdb, 0x3, 0x3, 0xf, 0x4, 0xe3, 0x8, 0x0, 0x6, 0x2, 0x0, 0x7f, 0x5, 0x5, 0x9, 0xff05, 0x6, 0x0, 0xfffffff9, 0x1, 0x3, 0x2, 0x3, 0xf]}, 0x45c) 8.268665111s ago: executing program 3 (id=62): r0 = syz_io_uring_setup(0x8e, &(0x7f0000000280)={0x0, 0xd146, 0x1000, 0x2, 0x222}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_setup(0x5990, &(0x7f0000000300)={0x0, 0xeae0, 0x2, 0x2, 0x385, 0x0, r0}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000040)=[0xf, 0x6], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000118040000000000000000020000001800018014000180080001000000000008000200ac141400260002800c0002800500010000000000140001"], 0x50}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_skbmod={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0xffffffff, 0x0, 0xffffffffffffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x9c}}, 0x24000040) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xbb8) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/meminfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000002640)={0x7, 0x0, 0x2, 0x400, 0x2, 0x4, 0x6, 0xc44}, &(0x7f0000002680)={0x5, 0x3, 0x349, 0x1b, 0x0, 0x3, 0x8, 0x98e}, &(0x7f00000026c0)={0x9, 0x89, 0xc3a, 0x5, 0x8, 0x7fff0000, 0x400, 0x4}, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d22, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) 8.145744544s ago: executing program 1 (id=63): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x4c, 0x4, 0x7, 0x1, 0x7}) 7.214944672s ago: executing program 1 (id=64): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5f7, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0xc}, {0xfe, 0x5, 0x6, '\x00', 0x5}, {0x81, 0x3, 0x8}, {0xb, 0x50, 0x7f, '\x00', 0x20}, {0x0, 0x0, 0x4}, {0x6, 0x9, 0x84, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xd6}, {0x5, 0x4f, 0x2}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x6}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x1, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7.214511622s ago: executing program 3 (id=65): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf253800000008000300", @ANYRES32=r2, @ANYBLOB='\f\x00X\x009\x00\x00\x00\x00\x00\x00\x00\f\x00X'], 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 7.206379742s ago: executing program 2 (id=66): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 7.033498645s ago: executing program 2 (id=67): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x8, 0x0, 0x0}}, 0x34) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x0, 0xb, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) creat(&(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r5, 0xd05, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x48881}, 0x810) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xff32, &(0x7f00000001c0)) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, 0x0, 0x8000) utimes(&(0x7f0000000200)='./file0\x00', 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x189900, 0x0) poll(0x0, 0x0, 0x403ff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x5100, 0x0) 4.586139212s ago: executing program 1 (id=68): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x6, 0xfffffffffffffffb, 0x0, 0x390000, 0x1000001000, 0x4d}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x6, 0xfffffffffffffff7, 0x0, 0x4a58, 0x7f, 0x6}, 0x0, 0x0) 4.449190725s ago: executing program 1 (id=69): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0xd, 0x0, 0x8001}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0xec5, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x10000000, 0xffffffff}, 0x0, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) fallocate(r0, 0x23, 0x3, 0x7f) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000480)='y\x105\x14\xf8u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\x15]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xb4\x95\xd1\xc8s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\x06\xee\x91\'\xae\x9c\x06\xb2\xd4\xfa,\xc0\xca\xd90$\xd7\xfe\xae\xddf?$\xb1\xeeE\b\xbc\xd1[\xd5tO`Z\x15 1\v\xa6\xd0[K!+>,FE\x10\t\xbb\x90Jj\xb8{', 0x2) ftruncate(r2, 0x400ffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000000}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000080)={0x0, 0xa7}, 0x2) preadv(r3, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/241, 0xf1}], 0x1, 0x9, 0x4) 2.641519909s ago: executing program 3 (id=70): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 2.027664872s ago: executing program 1 (id=71): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r0, 0x5412, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket(0x22, 0x2, 0x24) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=""/4083, 0x0, 0xff32, 0x1, 0x1}, 0x28) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x34}, 0x10) close(r6) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) 2.005103452s ago: executing program 2 (id=72): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x58400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlink(&(0x7f0000000000)='./file1\x00') 1.345210215s ago: executing program 3 (id=73): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="600200001000090100000000fddbdf25fc0000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000a000000af0000004800020063626328646573335f6564652900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000600ac1e", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d3330000007f0000010000000000000000000000000300000000000000a8cb0000000000000700000000000000ff0f0000000000000300000000000000010001000000000002000000000000000900000000000000040000000000000004000000000000000200000000000000060000000000000008000000630f0000d600000028bd70000135000002000209160000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000"], 0x260}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000580)='w', 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x37}) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$bt_l2cap(r10, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffa, 0x2}, 0xe) connect$can_bcm(r9, &(0x7f0000000140), 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 648.938188ms ago: executing program 2 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 323.87µs ago: executing program 3 (id=75): r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x1) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d0, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x1}}, 0x10) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f547b9dba0957c7b", @ANYRESHEX=r7, @ANYBLOB=',wfd', @ANYRESHEX=r6, @ANYBLOB=',\x00']) 0s ago: executing program 1 (id=76): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt(0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x6, 0xfffffffffffffffb, 0x0, 0x390000, 0x1000001000, 0x4d}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x6, 0xfffffffffffffff7, 0x0, 0x4a58, 0x7f, 0x6}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 82.352060][ T5776] cgroup: Unknown subsys name 'net' [ 82.490981][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.190185][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.462303][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.469158][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.472516][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.478502][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.491925][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.492959][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.499945][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.514323][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.516138][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.522375][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.529729][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.537122][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.544860][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.550846][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.559139][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.572674][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.575027][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.581245][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.594756][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.603372][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.617165][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.626514][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.642250][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.650507][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.350956][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 87.367386][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 87.394195][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 87.519522][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 87.684671][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.692232][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.699675][ T5790] bridge_slave_0: entered allmulticast mode [ 87.707986][ T5790] bridge_slave_0: entered promiscuous mode [ 87.746807][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.754263][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.761468][ T5789] bridge_slave_0: entered allmulticast mode [ 87.768719][ T5789] bridge_slave_0: entered promiscuous mode [ 87.778232][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.785829][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.793309][ T5790] bridge_slave_1: entered allmulticast mode [ 87.800332][ T5790] bridge_slave_1: entered promiscuous mode [ 87.826615][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.833840][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.841144][ T5792] bridge_slave_0: entered allmulticast mode [ 87.848613][ T5792] bridge_slave_0: entered promiscuous mode [ 87.855960][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.863375][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.870752][ T5789] bridge_slave_1: entered allmulticast mode [ 87.877958][ T5789] bridge_slave_1: entered promiscuous mode [ 87.925280][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.932638][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.939873][ T5792] bridge_slave_1: entered allmulticast mode [ 87.947853][ T5792] bridge_slave_1: entered promiscuous mode [ 88.010371][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.024300][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.036742][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.049434][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.059399][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.067011][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.074349][ T5794] bridge_slave_0: entered allmulticast mode [ 88.081434][ T5794] bridge_slave_0: entered promiscuous mode [ 88.153420][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.160692][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.168358][ T5794] bridge_slave_1: entered allmulticast mode [ 88.176009][ T5794] bridge_slave_1: entered promiscuous mode [ 88.198266][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.212591][ T5789] team0: Port device team_slave_0 added [ 88.220889][ T5789] team0: Port device team_slave_1 added [ 88.230274][ T5790] team0: Port device team_slave_0 added [ 88.257720][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.307548][ T5790] team0: Port device team_slave_1 added [ 88.330061][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.353674][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.360685][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.387726][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.415797][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.428223][ T5792] team0: Port device team_slave_0 added [ 88.438223][ T5792] team0: Port device team_slave_1 added [ 88.445007][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.452403][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.478611][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.498750][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.505888][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.531926][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.545111][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.552216][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.579599][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.654600][ T5805] Bluetooth: hci0: command tx timeout [ 88.658695][ T5794] team0: Port device team_slave_0 added [ 88.667535][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.674987][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.701026][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.714175][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.721262][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.747336][ T5805] Bluetooth: hci1: command tx timeout [ 88.747342][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.752892][ T5796] Bluetooth: hci2: command tx timeout [ 88.753125][ T5796] Bluetooth: hci3: command tx timeout [ 88.798654][ T5794] team0: Port device team_slave_1 added [ 88.841034][ T5789] hsr_slave_0: entered promiscuous mode [ 88.847658][ T5789] hsr_slave_1: entered promiscuous mode [ 88.870895][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.878624][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.904765][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.918388][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.925485][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.951458][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.031576][ T5790] hsr_slave_0: entered promiscuous mode [ 89.038598][ T5790] hsr_slave_1: entered promiscuous mode [ 89.045573][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.054043][ T5790] Cannot create hsr debugfs directory [ 89.093247][ T5792] hsr_slave_0: entered promiscuous mode [ 89.099965][ T5792] hsr_slave_1: entered promiscuous mode [ 89.107999][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.115877][ T5792] Cannot create hsr debugfs directory [ 89.184222][ T5794] hsr_slave_0: entered promiscuous mode [ 89.192582][ T5794] hsr_slave_1: entered promiscuous mode [ 89.198833][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.207261][ T5794] Cannot create hsr debugfs directory [ 89.599649][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.614131][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.628239][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.639498][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.728747][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.740417][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.762698][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.774409][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.855259][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.869381][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.880813][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.896574][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.997552][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.008960][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.020440][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.033571][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.075399][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.130049][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.174402][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.181886][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.197622][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.204838][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.314364][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.339356][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.379484][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.411582][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.438322][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.447798][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.455087][ T4194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.477190][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.497779][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.505273][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.533438][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.540631][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.576647][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.583912][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.595188][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.602790][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.646748][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.653990][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.732923][ T5796] Bluetooth: hci0: command tx timeout [ 90.812154][ T5796] Bluetooth: hci3: command tx timeout [ 90.812456][ T5799] Bluetooth: hci2: command tx timeout [ 90.822622][ T5805] Bluetooth: hci1: command tx timeout [ 90.940127][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.087037][ T5789] veth0_vlan: entered promiscuous mode [ 91.128450][ T5789] veth1_vlan: entered promiscuous mode [ 91.246018][ T5789] veth0_macvtap: entered promiscuous mode [ 91.267007][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.289887][ T5789] veth1_macvtap: entered promiscuous mode [ 91.310430][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.353351][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.380226][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.418457][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.428221][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.437230][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.446103][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.518865][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.546836][ T5790] veth0_vlan: entered promiscuous mode [ 91.608937][ T5790] veth1_vlan: entered promiscuous mode [ 91.640319][ T5794] veth0_vlan: entered promiscuous mode [ 91.679572][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.691542][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.740775][ T5794] veth1_vlan: entered promiscuous mode [ 91.781851][ T4194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.789732][ T4194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.793164][ T5790] veth0_macvtap: entered promiscuous mode [ 91.814532][ T5792] veth0_vlan: entered promiscuous mode [ 91.831175][ T5792] veth1_vlan: entered promiscuous mode [ 91.844162][ T5790] veth1_macvtap: entered promiscuous mode [ 91.893041][ T5794] veth0_macvtap: entered promiscuous mode [ 91.904654][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.919010][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.933613][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.954991][ T5794] veth1_macvtap: entered promiscuous mode [ 91.975193][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.987359][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.998906][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.047286][ T5792] veth0_macvtap: entered promiscuous mode [ 92.059602][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.089572][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.114527][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.124431][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.201212][ T8] cfg80211: failed to load regulatory.db [ 92.223987][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.240983][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.260404][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.276669][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.289372][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.333964][ T5792] veth1_macvtap: entered promiscuous mode [ 92.377009][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.388076][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.398525][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.410559][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.421073][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.434944][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.447954][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.777285][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.831863][ T5805] Bluetooth: hci0: command tx timeout [ 92.892526][ T5805] Bluetooth: hci1: command tx timeout [ 92.898329][ T5799] Bluetooth: hci3: command tx timeout [ 92.905615][ T5805] Bluetooth: hci2: command tx timeout [ 92.933928][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.172419][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.201565][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.220505][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.264460][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.285370][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.297810][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.314148][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.338692][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.368911][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.380635][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.392594][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.401441][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.415990][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.425253][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.452835][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.462010][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.470762][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.621760][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.914604][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.925364][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.945094][ T5889] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5'. [ 94.016121][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.032599][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.204307][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.213213][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.250422][ T4194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.280031][ T4194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.854728][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.876712][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.902502][ T5796] Bluetooth: hci0: command tx timeout [ 94.961902][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.969808][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.983551][ T5796] Bluetooth: hci2: command tx timeout [ 94.989964][ T5805] Bluetooth: hci3: command tx timeout [ 94.996034][ T5796] Bluetooth: hci1: command tx timeout [ 95.912217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.012795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.092250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.130450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.233036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.241434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.250351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.259339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.992150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.000997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.741300][ T28] audit: type=1326 audit(1758074257.955:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5917 comm="syz.3.9" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94d2b8eba9 code=0x0 [ 99.013642][ T28] audit: type=1400 audit(1758074258.185:3): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=5919 comm="syz.1.10" [ 99.363604][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 99.522840][ T5921] Zero length message leads to an empty skb [ 99.945398][ T5929] process 'syz.1.11' launched '/dev/fd/-1' with NULL argv: empty string added [ 100.569247][ T5938] syz.2.14[5938]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 102.824010][ T5942] tipc: Started in network mode [ 102.829112][ T5942] tipc: Node identity 264c7ab3bb4, cluster identity 4711 [ 102.837198][ T5942] tipc: Enabled bearer , priority 0 [ 102.860021][ T5942] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.883761][ T5942] tipc: Resetting bearer [ 102.908400][ T5941] tipc: Disabling bearer [ 103.684599][ T5951] netlink: 368 bytes leftover after parsing attributes in process `syz.3.18'. [ 104.833038][ T5960] syz.3.22[5960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.833295][ T5960] syz.3.22[5960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.158371][ T5967] warning: `syz.1.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.477303][ T5974] program syz.1.26 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.514169][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 105.567646][ T5975] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.314967][ T6017] capability: warning: `syz.3.33' uses deprecated v2 capabilities in a way that may be insecure [ 114.844772][ T6021] overlayfs: missing 'lowerdir' [ 116.088068][ T6024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.147921][ T6064] sched: RT throttling activated [ 123.217361][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.226815][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.261413][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.312375][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.320254][ T5805] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.327943][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.398320][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.562786][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.700628][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.853202][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.246740][ T6079] chnl_net:caif_netlink_parms(): no params data found [ 124.338344][ T6102] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.190339][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.252648][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.252893][ T6079] bridge_slave_0: entered allmulticast mode [ 125.254667][ T6079] bridge_slave_0: entered promiscuous mode [ 125.273553][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.274505][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.274702][ T6079] bridge_slave_1: entered allmulticast mode [ 125.276297][ T6079] bridge_slave_1: entered promiscuous mode [ 125.371961][ T5796] Bluetooth: hci2: command tx timeout [ 125.568811][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.589238][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.926447][ T6079] team0: Port device team_slave_0 added [ 126.048833][ T6079] team0: Port device team_slave_1 added [ 126.246823][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.267337][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.309352][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.359916][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.375905][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.412232][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.653613][ T6079] hsr_slave_0: entered promiscuous mode [ 126.662718][ T6079] hsr_slave_1: entered promiscuous mode [ 126.669757][ T6079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.691840][ T6079] Cannot create hsr debugfs directory [ 126.952642][ T58] hsr_slave_0: left promiscuous mode [ 126.980277][ T58] hsr_slave_1: left promiscuous mode [ 126.987610][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.021848][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.043453][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.051289][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.076224][ T58] bridge_slave_1: left allmulticast mode [ 127.092209][ T58] bridge_slave_1: left promiscuous mode [ 127.099615][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.175227][ T58] bridge_slave_0: left allmulticast mode [ 127.202636][ T58] bridge_slave_0: left promiscuous mode [ 127.208591][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.451790][ T5796] Bluetooth: hci2: command tx timeout [ 128.596831][ T58] veth1_macvtap: left promiscuous mode [ 128.639025][ T58] veth0_macvtap: left promiscuous mode [ 128.723783][ T58] veth1_vlan: left promiscuous mode [ 128.806831][ T58] veth0_vlan: left promiscuous mode [ 129.531790][ T5796] Bluetooth: hci2: command tx timeout [ 131.743134][ T5796] Bluetooth: hci2: command tx timeout [ 133.059586][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.65'. [ 133.138226][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.145226][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.892405][ T58] team0 (unregistering): Port device team_slave_1 removed [ 133.995493][ T58] team0 (unregistering): Port device team_slave_0 removed [ 134.141898][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.296259][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.608567][ T58] bond0 (unregistering): Released all slaves [ 139.052239][ T6216] netlink: 368 bytes leftover after parsing attributes in process `syz.3.73'. [ 139.128468][ T6079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.245194][ T6079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.326035][ T6079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.372912][ T6079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.690100][ T6229] tipc: Started in network mode [ 139.697062][ T6208] delete_channel: no stack [ 139.719658][ T6229] tipc: Node identity a275b3d53866, cluster identity 4711 [ 139.736717][ T6229] tipc: Enabled bearer , priority 0 [ 139.982839][ T6231] syzkaller0: entered promiscuous mode [ 139.988392][ T6231] syzkaller0: entered allmulticast mode [ 140.104500][ T6229] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 140.217981][ T6231] tipc: Resetting bearer [ 140.230626][ T6228] tipc: Resetting bearer [ 140.284706][ T6228] tipc: Disabling bearer [ 140.328567][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.015655][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 212.021823][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 212.027958][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 247.851735][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 250.051629][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 250.058637][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5791/1:b..l P6228/1:b..l [ 250.068177][ C1] rcu: (detected by 1, t=10502 jiffies, g=14425, q=510 ncpus=2) [ 250.075955][ C1] task:syz.2.74 state:R running task stack:25320 pid:6228 ppid:5792 flags:0x00004000 [ 250.087733][ C1] Call Trace: [ 250.091055][ C1] [ 250.094034][ C1] __schedule+0x14d2/0x44d0 [ 250.098617][ C1] ? mark_lock+0x94/0x320 [ 250.102991][ C1] ? asan.module_dtor+0x20/0x20 [ 250.107905][ C1] ? preempt_schedule+0xab/0xc0 [ 250.112805][ C1] preempt_schedule_common+0x82/0xc0 [ 250.118132][ C1] preempt_schedule+0xab/0xc0 [ 250.122850][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 250.128547][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 250.133615][ C1] preempt_schedule_thunk+0x1a/0x30 [ 250.138880][ C1] _raw_spin_unlock+0x3a/0x40 [ 250.143599][ C1] unmap_page_range+0x236f/0x2fe0 [ 250.148691][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 250.154393][ C1] ? copy_page_range+0x3600/0x3600 [ 250.159561][ C1] ? unmap_single_vma+0x1b0/0x2a0 [ 250.164684][ C1] unmap_vmas+0x25e/0x3a0 [ 250.169071][ C1] ? unmap_page_range+0x2fe0/0x2fe0 [ 250.174416][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 250.179509][ C1] exit_mmap+0x200/0xb50 [ 250.183816][ C1] ? vm_brk+0x30/0x30 [ 250.187842][ C1] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 250.193550][ C1] ? uprobe_clear_state+0x278/0x290 [ 250.198795][ C1] ? mm_update_next_owner+0x650/0x6c0 [ 250.204216][ C1] __mmput+0x118/0x3c0 [ 250.208326][ C1] exit_mm+0x1da/0x2c0 [ 250.212437][ C1] ? do_exit+0x23c0/0x23c0 [ 250.216890][ C1] ? taskstats_exit+0x35e/0x9e0 [ 250.221787][ C1] do_exit+0x88e/0x23c0 [ 250.225989][ C1] ? preempt_schedule+0xab/0xc0 [ 250.230886][ C1] ? put_task_struct+0xc0/0xc0 [ 250.235693][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 250.240938][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 250.246627][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 250.252079][ C1] do_group_exit+0x21b/0x2d0 [ 250.256724][ C1] __x64_sys_exit_group+0x3f/0x40 [ 250.261808][ C1] do_syscall_64+0x55/0xb0 [ 250.266270][ C1] ? clear_bhb_loop+0x40/0x90 [ 250.270982][ C1] ? clear_bhb_loop+0x40/0x90 [ 250.275711][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.281659][ C1] RIP: 0033:0x7ff34ef8eba9 [ 250.286131][ C1] RSP: 002b:00007ffc6e8785f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 250.294584][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff34ef8eba9 [ 250.302592][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.310599][ C1] RBP: 00007ffc6e87865c R08: 0000000f6e8786ef R09: 00000000000927c0 [ 250.318604][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000012 [ 250.326616][ C1] R13: 00000000000927c0 R14: 0000000000021f6e R15: 00007ffc6e8786b0 [ 250.334643][ C1] [ 250.337747][ C1] task:udevd state:R running task stack:26376 pid:5791 ppid:5158 flags:0x00004002 [ 250.348583][ C1] Call Trace: [ 250.351897][ C1] [ 250.354875][ C1] __schedule+0x14d2/0x44d0 [ 250.359449][ C1] ? asan.module_dtor+0x20/0x20 [ 250.364338][ C1] ? mark_lock+0x94/0x320 [ 250.368715][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 250.374741][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 250.380071][ C1] preempt_schedule_irq+0xb5/0x140 [ 250.385329][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 250.391095][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 250.396939][ C1] irqentry_exit+0x67/0x70 [ 250.401400][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.407412][ C1] RIP: 0010:unwind_next_frame+0xa6/0x2970 [ 250.413263][ C1] Code: 00 00 4c 89 e3 48 c1 eb 03 42 0f b6 04 2b 84 c0 0f 85 df 21 00 00 41 8b 2c 24 31 ff 89 ee e8 91 f0 4a 00 89 ac 24 8c 00 00 00 <85> ed 74 77 4c 89 74 24 60 48 89 5c 24 18 bf 01 00 00 00 e8 92 c6 [ 250.432908][ C1] RSP: 0018:ffffc9000464f458 EFLAGS: 00000293 [ 250.439020][ C1] RAX: ffffffff813aa35f RBX: 1ffff920008c9ea5 RCX: 0000000000000000 [ 250.447028][ C1] RDX: ffff88807cf6da00 RSI: 0000000000000001 RDI: 0000000000000000 [ 250.455038][ C1] RBP: 0000000000000001 R08: ffffc9000464f5f0 R09: 000000000000000a [ 250.463033][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000464f528 [ 250.471032][ C1] R13: dffffc0000000000 R14: ffffc9000464f560 R15: ffffffff8151199f [ 250.479071][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 250.484330][ C1] ? unwind_next_frame+0x9f/0x2970 [ 250.489506][ C1] ? unwind_next_frame+0x9f/0x2970 [ 250.494673][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 250.499919][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 250.505267][ C1] ? stack_trace_save+0xe0/0xe0 [ 250.510158][ C1] arch_stack_walk+0x144/0x190 [ 250.514966][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 250.520219][ C1] stack_trace_save+0x9c/0xe0 [ 250.524945][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 250.530109][ C1] save_stack+0xf7/0x1f0 [ 250.534403][ C1] ? __reset_page_owner+0x190/0x190 [ 250.539647][ C1] ? free_unref_page_prepare+0x7ce/0x8e0 [ 250.545316][ C1] ? free_unref_page_list+0xbe/0x860 [ 250.550731][ C1] ? release_pages+0x1fa0/0x2220 [ 250.555704][ C1] ? tlb_flush_mmu+0x368/0x4f0 [ 250.560523][ C1] ? tlb_finish_mmu+0xc3/0x1d0 [ 250.565329][ C1] ? exit_mmap+0x3f0/0xb50 [ 250.569800][ C1] ? __mmput+0x118/0x3c0 [ 250.574077][ C1] ? exit_mm+0x1da/0x2c0 [ 250.578358][ C1] ? do_exit+0x88e/0x23c0 [ 250.582726][ C1] ? do_group_exit+0x21b/0x2d0 [ 250.587553][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 250.592819][ C1] ? page_ext_get+0x22/0x2b0 [ 250.597446][ C1] ? page_ext_get+0x1e2/0x2b0 [ 250.602160][ C1] __reset_page_owner+0x4e/0x190 [ 250.607150][ C1] ? rcu_is_watching+0x15/0xb0 [ 250.611982][ C1] free_unref_page_prepare+0x7ce/0x8e0 [ 250.617490][ C1] free_unref_page_list+0xbe/0x860 [ 250.622650][ C1] ? __folio_memcg+0x63/0x160 [ 250.627368][ C1] release_pages+0x1fa0/0x2220 [ 250.632173][ C1] ? mlock_drain_local+0x79/0x490 [ 250.637241][ C1] ? lru_cache_disable+0x30/0x30 [ 250.642220][ C1] ? free_swap_cache+0xe9/0x760 [ 250.647118][ C1] tlb_flush_mmu+0x368/0x4f0 [ 250.651760][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 250.656399][ C1] ? free_pgtables+0x743/0x770 [ 250.661213][ C1] exit_mmap+0x3f0/0xb50 [ 250.665494][ C1] ? exit_mm_release+0x1a/0x30 [ 250.670304][ C1] ? vm_brk+0x30/0x30 [ 250.674327][ C1] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 250.680033][ C1] ? uprobe_clear_state+0x278/0x290 [ 250.685268][ C1] ? mm_update_next_owner+0x562/0x6c0 [ 250.690691][ C1] __mmput+0x118/0x3c0 [ 250.694810][ C1] exit_mm+0x1da/0x2c0 [ 250.698924][ C1] ? do_exit+0x23c0/0x23c0 [ 250.703391][ C1] ? taskstats_exit+0x35e/0x9e0 [ 250.708296][ C1] do_exit+0x88e/0x23c0 [ 250.712510][ C1] ? put_task_struct+0xc0/0xc0 [ 250.717317][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 250.723341][ C1] ? lock_chain_count+0x20/0x20 [ 250.728224][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 250.733285][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 250.738698][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 250.744724][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.749979][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 250.755227][ C1] do_group_exit+0x21b/0x2d0 [ 250.759869][ C1] __x64_sys_exit_group+0x3f/0x40 [ 250.764943][ C1] do_syscall_64+0x55/0xb0 [ 250.769406][ C1] ? clear_bhb_loop+0x40/0x90 [ 250.774124][ C1] ? clear_bhb_loop+0x40/0x90 [ 250.778847][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.784787][ C1] RIP: 0033:0x7f6c4baf16c5 [ 250.789248][ C1] RSP: 002b:00007fffcc3fc9c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 250.797696][ C1] RAX: ffffffffffffffda RBX: 00005610f8c406d0 RCX: 00007f6c4baf16c5 [ 250.805703][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 250.813710][ C1] RBP: 00005610f8c19910 R08: 0000000000000000 R09: 0000000000000000 [ 250.821712][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.829728][ C1] R13: 00007fffcc3fca10 R14: 0000000000000000 R15: 0000000000000000 [ 250.837751][ C1] [ 250.840801][ C1] rcu: rcu_preempt kthread starved for 10178 jiffies! g14425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 250.852023][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 250.862026][ C1] rcu: RCU grace-period kthread stack dump: [ 250.867935][ C1] task:rcu_preempt state:R running task stack:27752 pid:17 ppid:2 flags:0x00004000 [ 250.878768][ C1] Call Trace: [ 250.882078][ C1] [ 250.885040][ C1] __schedule+0x14d2/0x44d0 [ 250.889615][ C1] ? asan.module_dtor+0x20/0x20 [ 250.894608][ C1] ? enqueue_timer+0x225/0x530 [ 250.899406][ C1] ? __mod_timer+0x984/0xdb0 [ 250.904047][ C1] schedule+0xbd/0x170 [ 250.908157][ C1] schedule_timeout+0x160/0x280 [ 250.913056][ C1] ? console_conditional_schedule+0x40/0x40 [ 250.918992][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 250.925008][ C1] ? update_process_times+0x1b0/0x1b0 [ 250.930444][ C1] ? prepare_to_swait_event+0x339/0x360 [ 250.936063][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 250.940979][ C1] ? rcu_gp_init+0x110e/0x1510 [ 250.945806][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 250.952004][ C1] ? rcu_gp_init+0x1510/0x1510 [ 250.956814][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 250.961725][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.966976][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 250.972221][ C1] rcu_gp_kthread+0x99/0x380 [ 250.976864][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 250.982018][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 250.987002][ C1] ? __kthread_parkme+0x162/0x1c0 [ 250.992074][ C1] kthread+0x2fa/0x390 [ 250.996204][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 251.001377][ C1] ? kthread_blkcg+0xd0/0xd0 [ 251.006017][ C1] ret_from_fork+0x48/0x80 [ 251.010480][ C1] ? kthread_blkcg+0xd0/0xd0 [ 251.015115][ C1] ret_from_fork_asm+0x11/0x20 [ 251.019940][ C1] [ 251.022995][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 251.029368][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 251.036424][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.046594][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 251.052361][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 18 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 251.072009][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 251.078113][ C1] RAX: a10468e855428300 RBX: ffffffff8161925b RCX: a10468e855428300 [ 251.086115][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabca0 RDI: ffffffff8afc72c0 [ 251.094116][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d6b R09: 1ffff110171e6dad [ 251.102133][ C1] R10: dffffc0000000000 R11: ffffed10171e6dae R12: ffffffff8e4a94e8 [ 251.110160][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037ca780 [ 251.118162][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 251.127125][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.133752][ C1] CR2: 00007f29fc7612f5 CR3: 0000000023eb1000 CR4: 00000000003506e0 [ 251.141772][ C1] Call Trace: [ 251.145092][ C1] [ 251.148051][ C1] default_idle+0x13/0x20 [ 251.152420][ C1] default_idle_call+0x6c/0xa0 [ 251.157223][ C1] do_idle+0x1eb/0x510 [ 251.161340][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 251.166585][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 251.172794][ C1] cpu_startup_entry+0x43/0x60 [ 251.177603][ C1] start_secondary+0xee/0xf0 [ 251.182249][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 251.188370][ C1] [ 252.367764][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.384242][ T1291] ieee802154 phy1 wpan1: encryption failed: -22