last executing test programs: 9.820567323s ago: executing program 3 (id=51): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0xfffffffe, 0x33a}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffc, 0x40, 0x0, 0x0) 8.84626754s ago: executing program 3 (id=56): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 8.080690541s ago: executing program 3 (id=61): r0 = syz_clone(0x4386111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x3a, 0xb, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x60480) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') setns(r2, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs$userns(r0, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000, 0x0) 5.30875783s ago: executing program 3 (id=73): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 4.925191794s ago: executing program 1 (id=75): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x4, 0x6, 0x0, @multicast1, @private=0xa010102}, {0x0, 0x4, 0x8}}}}}, 0x0) 4.501833676s ago: executing program 2 (id=78): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0xfffffffc, 0x40, 0x0, 0x0) 4.282602341s ago: executing program 1 (id=79): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.972761158s ago: executing program 4 (id=80): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x8000) 3.823586435s ago: executing program 0 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x18010, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6004, 0x1) 3.706915628s ago: executing program 2 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x10}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040015}, 0x4010) 3.432117304s ago: executing program 4 (id=83): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x1, 0x2, 0x1, {0x1c, 0x20, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x6080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.119355223s ago: executing program 0 (id=84): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000a40)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1101, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000540)="9d7cbda9ae1ff47b1514f8672295cec32c14e75f38b50da0ffcc3da9512870eec41a491e87afcbe6967d643c35e279c44e745e98fbcb89077d238670fb1e023f9bf0953bc9274a4da2d529115031bf1f1ea9dd"}) 2.940994018s ago: executing program 3 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.914174322s ago: executing program 2 (id=86): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x2}) 2.833609738s ago: executing program 1 (id=87): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 2.662088151s ago: executing program 4 (id=88): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0xfdef}], 0x1) sendmsg$inet(r0, 0x0, 0x840) 2.438316536s ago: executing program 0 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x4, 0x6, 0x0, @multicast1, @private=0xa010102}, {0x0, 0x4, 0x8}}}}}, 0x0) 2.228651073s ago: executing program 2 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6004, 0x1) 2.045017352s ago: executing program 1 (id=91): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x600400, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x3], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 1.722283594s ago: executing program 0 (id=92): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0xfffffffc, 0x40, 0x0, 0x0) 1.6491856s ago: executing program 4 (id=93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x3f00, "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.573404773s ago: executing program 2 (id=94): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 1.203212255s ago: executing program 1 (id=95): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 871.964502ms ago: executing program 0 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x10}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040015}, 0x4010) 871.765708ms ago: executing program 2 (id=97): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 643.47323ms ago: executing program 4 (id=98): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x1, 0x2, 0x1, {0x1c, 0x20, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x6080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 527.178348ms ago: executing program 1 (id=99): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000a40)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1101, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000540)="9d7cbda9ae1ff47b1514f8672295cec32c14e75f38b50da0ffcc3da9512870eec41a491e87afcbe6967d643c35e279c44e745e98fbcb89077d238670fb1e023f9bf0953bc9274a4da2d529115031bf1f1ea9dd"}) 244.936399ms ago: executing program 3 (id=100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x2}) 241.794094ms ago: executing program 0 (id=101): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040ed7"], 0x6) 0s ago: executing program 4 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x4, 0x6, 0x0, @multicast1, @private=0xa010102}, {0x0, 0x4, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. [ 195.562027][ T5768] cgroup: Unknown subsys name 'net' [ 195.696382][ T5768] cgroup: Unknown subsys name 'cpuset' [ 195.712417][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.509430][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.516473][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.631464][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 249.801532][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.812293][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.822156][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.831075][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.843748][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.844635][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.854724][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.868692][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.928769][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.956532][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.001354][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.110249][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.126602][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.134694][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.148016][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.161904][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.171302][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.177221][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.192768][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.212275][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.216946][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.231543][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.255052][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.284689][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.418055][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.397290][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 251.590939][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 251.886916][ T5795] Bluetooth: hci1: command tx timeout [ 252.047312][ T5795] Bluetooth: hci0: command tx timeout [ 252.224375][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 252.295516][ T5795] Bluetooth: hci2: command tx timeout [ 252.366175][ T5795] Bluetooth: hci3: command tx timeout [ 252.446664][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 252.526437][ T5795] Bluetooth: hci4: command tx timeout [ 252.789368][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.797201][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.804992][ T5792] bridge_slave_0: entered allmulticast mode [ 252.814947][ T5792] bridge_slave_0: entered promiscuous mode [ 252.841988][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.850144][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.858025][ T5792] bridge_slave_1: entered allmulticast mode [ 252.867992][ T5792] bridge_slave_1: entered promiscuous mode [ 252.879911][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.889438][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.897406][ T5801] bridge_slave_0: entered allmulticast mode [ 252.907158][ T5801] bridge_slave_0: entered promiscuous mode [ 252.924589][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.932612][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.940532][ T5801] bridge_slave_1: entered allmulticast mode [ 252.950105][ T5801] bridge_slave_1: entered promiscuous mode [ 252.961708][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 253.236493][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.331367][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.357053][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.496928][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.592501][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.603287][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.611414][ T5798] bridge_slave_0: entered allmulticast mode [ 253.621259][ T5798] bridge_slave_0: entered promiscuous mode [ 253.719055][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.728007][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.735828][ T5790] bridge_slave_0: entered allmulticast mode [ 253.745851][ T5790] bridge_slave_0: entered promiscuous mode [ 253.760856][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.770410][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.778279][ T5798] bridge_slave_1: entered allmulticast mode [ 253.787942][ T5798] bridge_slave_1: entered promiscuous mode [ 253.908736][ T5792] team0: Port device team_slave_0 added [ 253.929503][ T5801] team0: Port device team_slave_0 added [ 253.951125][ T5801] team0: Port device team_slave_1 added [ 253.961028][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.969687][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.977532][ T5790] bridge_slave_1: entered allmulticast mode [ 253.986952][ T5790] bridge_slave_1: entered promiscuous mode [ 253.994702][ T5795] Bluetooth: hci1: command tx timeout [ 254.041046][ T5792] team0: Port device team_slave_1 added [ 254.127767][ T5795] Bluetooth: hci0: command tx timeout [ 254.314541][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.365452][ T5795] Bluetooth: hci2: command tx timeout [ 254.383611][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.391834][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.418421][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.441111][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.448615][ T5795] Bluetooth: hci3: command tx timeout [ 254.462906][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.482078][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.565775][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.572966][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.599501][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.605525][ T5795] Bluetooth: hci4: command tx timeout [ 254.620324][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.629076][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.656662][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.741350][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.748671][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.775315][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.787796][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.795857][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.803519][ T5805] bridge_slave_0: entered allmulticast mode [ 254.814028][ T5805] bridge_slave_0: entered promiscuous mode [ 254.935760][ T5798] team0: Port device team_slave_0 added [ 254.960801][ T5798] team0: Port device team_slave_1 added [ 254.969891][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.978430][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.986424][ T5805] bridge_slave_1: entered allmulticast mode [ 254.995465][ T5805] bridge_slave_1: entered promiscuous mode [ 255.011491][ T5790] team0: Port device team_slave_0 added [ 255.112114][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.163559][ T5790] team0: Port device team_slave_1 added [ 255.222181][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.416316][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.423546][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.449984][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.512954][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.520509][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.546942][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.625375][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.632578][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.659068][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.684730][ T5801] hsr_slave_0: entered promiscuous mode [ 255.693641][ T5801] hsr_slave_1: entered promiscuous mode [ 255.705312][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.712484][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.739111][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.784912][ T5792] hsr_slave_0: entered promiscuous mode [ 255.795095][ T5792] hsr_slave_1: entered promiscuous mode [ 255.803227][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.811177][ T5792] Cannot create hsr debugfs directory [ 255.824864][ T5805] team0: Port device team_slave_0 added [ 255.954269][ T5790] hsr_slave_0: entered promiscuous mode [ 255.964399][ T5790] hsr_slave_1: entered promiscuous mode [ 255.973185][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.981204][ T5790] Cannot create hsr debugfs directory [ 255.996012][ T5805] team0: Port device team_slave_1 added [ 256.047998][ T5795] Bluetooth: hci1: command tx timeout [ 256.206537][ T5795] Bluetooth: hci0: command tx timeout [ 256.445482][ T5795] Bluetooth: hci2: command tx timeout [ 256.463784][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.471084][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.497466][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.526886][ T5795] Bluetooth: hci3: command tx timeout [ 256.542635][ T5798] hsr_slave_0: entered promiscuous mode [ 256.552628][ T5798] hsr_slave_1: entered promiscuous mode [ 256.561356][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.569227][ T5798] Cannot create hsr debugfs directory [ 256.626100][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.633289][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.659933][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.699570][ T5795] Bluetooth: hci4: command tx timeout [ 257.303358][ T5805] hsr_slave_0: entered promiscuous mode [ 257.313652][ T5805] hsr_slave_1: entered promiscuous mode [ 257.323073][ T5805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.331089][ T5805] Cannot create hsr debugfs directory [ 257.910297][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.962685][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.053989][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.125804][ T5795] Bluetooth: hci1: command tx timeout [ 258.233711][ T5792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.259446][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.287349][ T5795] Bluetooth: hci0: command tx timeout [ 258.313486][ T5792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.348593][ T5792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.412431][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.496401][ T5792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.518919][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.527848][ T5795] Bluetooth: hci2: command tx timeout [ 258.618208][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.619057][ T5795] Bluetooth: hci3: command tx timeout [ 258.664274][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.721689][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.767275][ T5795] Bluetooth: hci4: command tx timeout [ 258.773085][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 258.909248][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 258.934380][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.097439][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 259.147234][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 259.233383][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 259.306853][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 259.584157][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.820507][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.908587][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.916295][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.040578][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.079811][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.087475][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.146084][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.316844][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.410759][ T4984] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.418417][ T4984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.461214][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.540638][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.565948][ T4984] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.573496][ T4984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.767969][ T4984] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.775677][ T4984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.801367][ T4984] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.809126][ T4984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.873394][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.022863][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.059787][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.078086][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.203859][ T4984] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.211538][ T4984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.228116][ T4984] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.235811][ T4984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.330370][ T5801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.341914][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.512617][ T4984] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.520316][ T4984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.579128][ T4984] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.586792][ T4984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.540827][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.118290][ T5790] veth0_vlan: entered promiscuous mode [ 263.193729][ T5790] veth1_vlan: entered promiscuous mode [ 263.328555][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.461216][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.586429][ T5790] veth0_macvtap: entered promiscuous mode [ 263.629608][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.691918][ T5790] veth1_macvtap: entered promiscuous mode [ 263.934044][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.072785][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.096312][ T5798] veth0_vlan: entered promiscuous mode [ 264.154338][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.188197][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.197857][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.207198][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.216886][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.253521][ T5798] veth1_vlan: entered promiscuous mode [ 264.403248][ T5801] veth0_vlan: entered promiscuous mode [ 264.547380][ T5801] veth1_vlan: entered promiscuous mode [ 264.659249][ T5798] veth0_macvtap: entered promiscuous mode [ 264.780294][ T5805] veth0_vlan: entered promiscuous mode [ 264.798171][ T5798] veth1_macvtap: entered promiscuous mode [ 264.960704][ T5805] veth1_vlan: entered promiscuous mode [ 264.994518][ T5801] veth0_macvtap: entered promiscuous mode [ 265.047499][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.096904][ T5801] veth1_macvtap: entered promiscuous mode [ 265.159334][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.285096][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.297084][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.306412][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.315576][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.414717][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.477217][ T5805] veth0_macvtap: entered promiscuous mode [ 265.544979][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.623135][ T5805] veth1_macvtap: entered promiscuous mode [ 265.664456][ T5801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.673834][ T5801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.684162][ T5801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.693501][ T5801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.818583][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.923080][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.010165][ T5805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.019707][ T5805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.028931][ T5805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.039092][ T5805] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.743925][ T5792] veth0_vlan: entered promiscuous mode [ 266.882582][ T5792] veth1_vlan: entered promiscuous mode [ 267.269468][ T5792] veth0_macvtap: entered promiscuous mode [ 267.362608][ T5792] veth1_macvtap: entered promiscuous mode [ 267.560085][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.724492][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.869604][ T5792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.881183][ T5792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.892022][ T5792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.901166][ T5792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.526910][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.535003][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.760886][ T4984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.770269][ T4984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.160978][ T5790] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 272.821670][ T4176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.830085][ T4176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.830286][ T5966] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 273.000314][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.073616][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.221721][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.230925][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.343461][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.352433][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.921328][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.929901][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.263199][ T3845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.271703][ T3845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.967685][ T5987] loop4: detected capacity change from 0 to 7 [ 274.982945][ T5987] Dev loop4: unable to read RDB block 7 [ 274.983103][ T5987] loop4: AHDI p2 [ 274.983217][ T5987] loop4: partition table partially beyond EOD, truncated [ 275.438257][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.446450][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.741548][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.750028][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.249724][ T5809] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 279.916066][ T6050] warning: `syz.2.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 281.302478][ T6066] loop4: detected capacity change from 0 to 1764 [ 281.680342][ T6072] binder: 6071:6072 ioctl c0306201 200000000180 returned -14 [ 283.567145][ T6101] binder: BINDER_SET_CONTEXT_MGR already set [ 283.573492][ T6101] binder: 6098:6101 ioctl 4018620d 200000000040 returned -16 [ 284.856768][ T6117] binder: 6116:6117 ioctl c0306201 200000000180 returned -14 [ 285.359850][ T6123] loop0: detected capacity change from 0 to 2048 [ 285.510523][ T6123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.274868][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 286.290567][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 286.300126][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 286.309686][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 286.319328][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 286.328953][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 286.338406][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 286.348231][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 286.357645][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 286.367261][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 287.866482][ T6155] binder: 6154:6155 ioctl c0306201 200000000180 returned -14 [ 289.976774][ T6180] binder: BINDER_SET_CONTEXT_MGR already set [ 289.983186][ T6180] binder: 6179:6180 ioctl 4018620d 200000000040 returned -16 [ 290.158834][ T6182] binder: 6181:6182 ioctl c018620b 200000000240 returned -14 [ 290.978644][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.986152][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.787202][ T5795] ===================================================== [ 292.794501][ T5795] BUG: KMSAN: uninit-value in hci_cmd_complete_evt+0xbc7/0xe50 [ 292.802604][ T5795] hci_cmd_complete_evt+0xbc7/0xe50 [ 292.808193][ T5795] hci_event_packet+0xcb6/0x1df0 [ 292.813429][ T5795] hci_rx_work+0x9a8/0x12b0 [ 292.818539][ T5795] process_scheduled_works+0xb9a/0x1d90 [ 292.824341][ T5795] worker_thread+0xedf/0x1590 [ 292.835338][ T5795] kthread+0xd5c/0xf00 [ 292.841856][ T5795] ret_from_fork+0x71/0x90 [ 292.851497][ T5795] ret_from_fork_asm+0x1a/0x30 [ 292.861328][ T5795] [ 292.863784][ T5795] Uninit was stored to memory at: [ 292.869230][ T5795] hci_cmd_complete_evt+0xbc0/0xe50 [ 292.874645][ T5795] hci_event_packet+0xcb6/0x1df0 [ 292.880065][ T5795] hci_rx_work+0x9a8/0x12b0 [ 292.884884][ T5795] process_scheduled_works+0xb9a/0x1d90 [ 292.892157][ T5795] worker_thread+0xedf/0x1590 [ 292.897341][ T5795] kthread+0xd5c/0xf00 [ 292.901722][ T5795] ret_from_fork+0x71/0x90 [ 292.906461][ T5795] ret_from_fork_asm+0x1a/0x30 [ 292.911472][ T5795] [ 292.913922][ T5795] Uninit was stored to memory at: [ 292.919476][ T5795] hci_cmd_complete_evt+0x775/0xe50 [ 292.924880][ T5795] hci_event_packet+0xcb6/0x1df0 [ 292.930229][ T5795] hci_rx_work+0x9a8/0x12b0 [ 292.940447][ T5795] process_scheduled_works+0xb9a/0x1d90 [ 292.948444][ T5795] worker_thread+0xedf/0x1590 [ 292.953442][ T5795] kthread+0xd5c/0xf00 [ 292.957886][ T5795] ret_from_fork+0x71/0x90 [ 292.962567][ T5795] ret_from_fork_asm+0x1a/0x30 [ 292.967844][ T5795] [ 292.970293][ T5795] Uninit was created at: [ 292.974824][ T5795] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 292.981071][ T5795] kmalloc_reserve+0x13c/0x4b0 [ 292.986186][ T5795] __alloc_skb+0x347/0x7d0 [ 292.990826][ T5795] vhci_write+0x125/0x960 [ 292.995644][ T5795] vfs_write+0xb31/0x1560 [ 293.000291][ T5795] __x64_sys_write+0x1fb/0x4d0 [ 293.005522][ T5795] x64_sys_call+0x38c3/0x3db0 [ 293.010462][ T5795] do_syscall_64+0xd9/0x1b0 [ 293.015376][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.021502][ T5795] [ 293.023991][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: kworker/u9:4 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(undef) [ 293.042077][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.054368][ T5795] Workqueue: hci0 hci_rx_work [ 293.059378][ T5795] ===================================================== [ 293.066659][ T5795] Disabling lock debugging due to kernel taint [ 293.072967][ T5795] Kernel panic - not syncing: kmsan.panic set ... [ 293.079586][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: kworker/u9:4 Tainted: G B 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(undef) [ 293.093669][ T5795] Tainted: [B]=BAD_PAGE [ 293.097969][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.108230][ T5795] Workqueue: hci0 hci_rx_work [ 293.113165][ T5795] Call Trace: [ 293.116621][ T5795] [ 293.119701][ T5795] __dump_stack+0x26/0x30 [ 293.124270][ T5795] dump_stack_lvl+0x53/0x270 [ 293.129101][ T5795] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.135198][ T5795] dump_stack+0x1e/0x25 [ 293.139584][ T5795] panic+0x4bd/0xd50 [ 293.143756][ T5795] kmsan_report+0x29d/0x2a0 [ 293.148497][ T5795] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 293.154541][ T5795] ? __msan_warning+0x96/0x120 [ 293.159526][ T5795] ? hci_cmd_complete_evt+0xbc7/0xe50 [ 293.165085][ T5795] ? hci_event_packet+0xcb6/0x1df0 [ 293.170451][ T5795] ? hci_rx_work+0x9a8/0x12b0 [ 293.175321][ T5795] ? process_scheduled_works+0xb9a/0x1d90 [ 293.181268][ T5795] ? worker_thread+0xedf/0x1590 [ 293.186332][ T5795] ? kthread+0xd5c/0xf00 [ 293.190787][ T5795] ? ret_from_fork+0x71/0x90 [ 293.195601][ T5795] ? ret_from_fork_asm+0x1a/0x30 [ 293.200759][ T5795] ? ret_from_fork_asm+0x1a/0x30 [ 293.205964][ T5795] ? add_timer_global+0xbc/0x110 [ 293.211121][ T5795] ? __queue_delayed_work+0x25b/0x390 [ 293.216740][ T5795] ? kmsan_get_metadata+0x105/0x1b0 [ 293.222174][ T5795] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.228232][ T5795] ? kmsan_get_metadata+0x105/0x1b0 [ 293.233679][ T5795] __msan_warning+0x96/0x120 [ 293.238477][ T5795] hci_cmd_complete_evt+0xbc7/0xe50 [ 293.243884][ T5795] ? skb_pull_data+0x1a9/0x2d0 [ 293.248893][ T5795] hci_event_packet+0xcb6/0x1df0 [ 293.254073][ T5795] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 293.260032][ T5795] hci_rx_work+0x9a8/0x12b0 [ 293.264746][ T5795] ? __pfx_hci_rx_work+0x10/0x10 [ 293.269870][ T5795] process_scheduled_works+0xb9a/0x1d90 [ 293.275685][ T5795] worker_thread+0xedf/0x1590 [ 293.280615][ T5795] kthread+0xd5c/0xf00 [ 293.284896][ T5795] ? __pfx_worker_thread+0x10/0x10 [ 293.290250][ T5795] ? __pfx_kthread+0x10/0x10 [ 293.295061][ T5795] ret_from_fork+0x71/0x90 [ 293.299721][ T5795] ? __pfx_kthread+0x10/0x10 [ 293.304541][ T5795] ret_from_fork_asm+0x1a/0x30 [ 293.309561][ T5795] [ 293.312868][ T5795] Kernel Offset: disabled [ 293.317293][ T5795] Rebooting in 86400 seconds..