last executing test programs: 761.42873ms ago: executing program 0 (id=1): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x2}}, 0x18) lseek(r3, 0x0, 0x4) mkdirat(r3, &(0x7f00000001c0)='./file0\x00', 0x182) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$read(0xb, r4, &(0x7f0000000180)=""/42, 0x2a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x14, 0x1, 0x70bd2b, 0x25dfdbfc, {0x11, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "8afec7291edcf79c8d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x880) prctl$PR_SET_MM_EXE_FILE(0x36, 0xd, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 674.662199ms ago: executing program 1 (id=6): socket(0xa, 0x3, 0x87) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10001, 0x40000, 0x4, 0xf, 0x639, 0x4, 0x4, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0xb0f, 0x4, 0x6, 0x5, 0x4, 0x4cb6, 0x0, 0x1, 0xa, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x7, 0x1, 0xeb, 0x5743393a, 0x1, 0x2e, 0x8000, 0x2, 0x2, 0x8, 0xf, 0x10000, 0x3, 0x3, 0x20101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x10001, 0x6, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0x4, 0x7, 0x4, 0x5, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x2, 0x8, 0x9, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0xfc, 0xe3, 0x11, 0xa39a, 0x8, 0x76, 0x2, 0x8, 0x3, 0xa, 0x40, 0x4, 0x4, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x5a6, 0x3, 0x9, 0x3, 0x7d1b, 0x5, 0x5, 0x6, 0x6, 0x2, 0x2, 0x8, 0x69e, 0x6, 0x8244, 0x9, 0xacf, 0xedb, 0xe772, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0x5, 0x6, 0x9, 0x5, 0x10006, 0x0, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x5, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x6, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0x1, 0x8, 0x3ff, 0x2, 0x0, 0x8001, 0x33, 0x5, 0x0, 0x6, 0xaf, 0x1, 0x3ff, 0x80000001, 0x0, 0x2, 0x6, 0x20000000, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x2, 0x7fffffff, 0xe, 0x1, 0xffffffff, 0xffffffff, 0x46, 0xa5f, 0xfff, 0x2, 0x7, 0xf, 0x1, 0x3db1], [0x0, 0x1, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x4, 0x400008, 0x2, 0x4, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x3, 0x7ff, 0x5, 0x4, 0x1, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0xfffffff9, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x8, 0x24, 0x5, 0x9, 0xffffffff, 0x80000000, 0x5c6, 0xc, 0x1, 0x9, 0xf1, 0x81, 0x9, 0x4, 0x3, 0x4, 0x1f8c, 0xffffefff, 0x5, 0xb]}, 0x45c) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 346.494102ms ago: executing program 4 (id=5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000440)=""/136, 0x88}], 0x1}, 0x10000003}], 0x1, 0x40010021, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) 300.636556ms ago: executing program 1 (id=7): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000019200)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 300.144098ms ago: executing program 1 (id=8): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x4, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0xfffffffc, 0x0, 0x0, 0x400, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0xcca, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x201, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x33, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x0, 0x8, 0x7, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x2, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x10, 0x0, 0x635, 0x0, 0x7fffffc, 0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x40, 0x9, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 243.914516ms ago: executing program 1 (id=9): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f0000000000)=""/85, 0x55}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000002d00)=""/4102, 0x1006}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f00000009c0)=""/259, 0x103}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f00000000c0)=""/113, 0x71}], 0x9}, 0x71}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x99c5}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe52}], 0x7, 0x0, 0x0) 184.713524ms ago: executing program 1 (id=10): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x0, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 120.505573ms ago: executing program 1 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) open$dir(&(0x7f0000002040)='./file0\x00', 0x10000, 0x14) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x9400000, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x50) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r2}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6080, 0x1) 26.651519ms ago: executing program 4 (id=12): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x2}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0xc07, 0x10000021, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040084}, 0xc050) 10.708594ms ago: executing program 3 (id=4): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x43, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 2 (id=3): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x19e0, 0x1}, 0xe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe8c, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 0s ago: executing program 4 (id=13): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 28.760886][ T4697] cgroup: Unknown subsys name 'net' [ 28.870706][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.872610][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.992322][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.806446][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.806481][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.807680][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.807814][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.808323][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.808645][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.808874][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.809028][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.809429][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.810018][ T4721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.810399][ T4721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.811159][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.811300][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.811458][ T4721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.811887][ T4721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.812481][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.817616][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.817836][ T4714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.818552][ T4726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.818580][ T4714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.818784][ T4725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.819748][ T4725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.821032][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.822506][ T4714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.824042][ T4716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.150502][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.150753][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.151047][ T4709] bridge_slave_0: entered allmulticast mode [ 30.151701][ T4709] bridge_slave_0: entered promiscuous mode [ 30.156692][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.157016][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.157076][ T4709] bridge_slave_1: entered allmulticast mode [ 30.157490][ T4709] bridge_slave_1: entered promiscuous mode [ 30.172512][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.180444][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.214164][ T4709] team0: Port device team_slave_0 added [ 30.230687][ T4709] team0: Port device team_slave_1 added [ 30.260603][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.261919][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.262073][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.262801][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.262808][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.262821][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.288524][ T4709] hsr_slave_0: entered promiscuous mode [ 30.288970][ T4709] hsr_slave_1: entered promiscuous mode [ 30.295947][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.296452][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.296508][ T4710] bridge_slave_0: entered allmulticast mode [ 30.296907][ T4710] bridge_slave_0: entered promiscuous mode [ 30.311296][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.311342][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.311398][ T4719] bridge_slave_0: entered allmulticast mode [ 30.311797][ T4719] bridge_slave_0: entered promiscuous mode [ 30.312507][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.312525][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.312576][ T4719] bridge_slave_1: entered allmulticast mode [ 30.312968][ T4719] bridge_slave_1: entered promiscuous mode [ 30.313458][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.313482][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.313529][ T4717] bridge_slave_0: entered allmulticast mode [ 30.313924][ T4717] bridge_slave_0: entered promiscuous mode [ 30.314441][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.314463][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.314509][ T4710] bridge_slave_1: entered allmulticast mode [ 30.314874][ T4710] bridge_slave_1: entered promiscuous mode [ 30.327148][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.327209][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.327264][ T4717] bridge_slave_1: entered allmulticast mode [ 30.327653][ T4717] bridge_slave_1: entered promiscuous mode [ 30.331673][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.346318][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.350588][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.356972][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.362061][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.369690][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.371884][ T4710] team0: Port device team_slave_0 added [ 30.372974][ T4710] team0: Port device team_slave_1 added [ 30.392895][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.394199][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.398575][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.399778][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.399853][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.399949][ T4723] bridge_slave_0: entered allmulticast mode [ 30.400360][ T4723] bridge_slave_0: entered promiscuous mode [ 30.401496][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.401516][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.401566][ T4723] bridge_slave_1: entered allmulticast mode [ 30.402057][ T4723] bridge_slave_1: entered promiscuous mode [ 30.411287][ T4717] team0: Port device team_slave_0 added [ 30.411634][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.411642][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.411655][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.423745][ T4719] team0: Port device team_slave_0 added [ 30.424583][ T4719] team0: Port device team_slave_1 added [ 30.425878][ T4717] team0: Port device team_slave_1 added [ 30.429843][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.430869][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.441781][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.442943][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.447060][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.462255][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.463591][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.468092][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.474982][ T4723] team0: Port device team_slave_0 added [ 30.475812][ T4723] team0: Port device team_slave_1 added [ 30.478808][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.478831][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.478847][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.479435][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.479441][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.479453][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.502126][ T4710] hsr_slave_0: entered promiscuous mode [ 30.502461][ T4710] hsr_slave_1: entered promiscuous mode [ 30.502665][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.502695][ T4710] Cannot create hsr debugfs directory [ 30.507818][ T4719] hsr_slave_0: entered promiscuous mode [ 30.509273][ T4719] hsr_slave_1: entered promiscuous mode [ 30.510748][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 30.511796][ T4719] Cannot create hsr debugfs directory [ 30.516890][ T4717] hsr_slave_0: entered promiscuous mode [ 30.518142][ T4717] hsr_slave_1: entered promiscuous mode [ 30.519039][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.519049][ T4717] Cannot create hsr debugfs directory [ 30.523020][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.524308][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.528439][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.530143][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.530152][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.530164][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.552585][ T4723] hsr_slave_0: entered promiscuous mode [ 30.552886][ T4723] hsr_slave_1: entered promiscuous mode [ 30.553089][ T4723] debugfs: 'hsr0' already exists in 'hsr' [ 30.553099][ T4723] Cannot create hsr debugfs directory [ 30.587504][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.590777][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.591078][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.592852][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.595999][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.598081][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.611766][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.613999][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.675199][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.675262][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.675420][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.675455][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.694660][ T4710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.696791][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.697069][ T4710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.698789][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.700212][ T4710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.702084][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.703444][ T4710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.705741][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.728921][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.731474][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.732065][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.733608][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.737865][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.740212][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.742205][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.742648][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.744173][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.747447][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.747489][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.747565][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.747593][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.759370][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.763310][ T269] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.764598][ T269] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.767530][ T269] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.769287][ T269] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.783341][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.783385][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.783777][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.783795][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.799835][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.802850][ T4723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.805041][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.815551][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.815582][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.824844][ T4723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.828430][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.828785][ T4723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.832602][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.840557][ T4723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.842668][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.843889][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.846378][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.846413][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.857665][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.857707][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.863450][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.866380][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.867829][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.870581][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.876577][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.878815][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.880754][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.882613][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.895376][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.900039][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.908839][ T3199] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.908892][ T3199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.923463][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.923539][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.951910][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.974117][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.989279][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.005330][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.011874][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.011919][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.026182][ T4709] veth0_vlan: entered promiscuous mode [ 31.037353][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.046462][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.046502][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.046913][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.046937][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.066268][ T4709] veth1_vlan: entered promiscuous mode [ 31.074929][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.074970][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.085193][ T4709] veth0_macvtap: entered promiscuous mode [ 31.096834][ T4723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.096870][ T4723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.114222][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.116349][ T4709] veth1_macvtap: entered promiscuous mode [ 31.130758][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.145810][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.162812][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.166230][ T269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.166346][ T269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.166372][ T269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.166389][ T269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.186265][ T4717] veth0_vlan: entered promiscuous mode [ 31.191480][ T4717] veth1_vlan: entered promiscuous mode [ 31.217920][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.217948][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.224746][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.236470][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.236499][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.247654][ T4717] veth0_macvtap: entered promiscuous mode [ 31.256553][ T4717] veth1_macvtap: entered promiscuous mode [ 31.265245][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.266825][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.288849][ T3199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.289019][ T3199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.289043][ T3199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.289060][ T3199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.315508][ T3199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.315538][ T3199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.330751][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.330776][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.335496][ T4709] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.395191][ T4710] veth0_vlan: entered promiscuous mode [ 31.401350][ T4710] veth1_vlan: entered promiscuous mode [ 31.407483][ T4710] veth0_macvtap: entered promiscuous mode [ 31.410575][ T4710] veth1_macvtap: entered promiscuous mode [ 31.414750][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.417003][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.452221][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.455441][ T3199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.455476][ T3199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.455489][ T3199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.455598][ T3199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.455608][ T3199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.456970][ T3199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.457486][ T3199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.481974][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.504885][ T4723] veth0_vlan: entered promiscuous mode [ 31.508629][ T4723] veth1_vlan: entered promiscuous mode [ 31.513085][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.798957][ T4723] veth0_macvtap: entered promiscuous mode [ 31.807578][ T4723] veth1_macvtap: entered promiscuous mode [ 31.816708][ T4901] binder: 4899:4901 tried to acquire reference to desc 0, got 1 instead [ 31.821702][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.824699][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.827423][ T4811] binder: undelivered transaction 5, process died. [ 31.828976][ T4719] veth0_vlan: entered promiscuous mode [ 31.839581][ T4811] binder: undelivered TRANSACTION_COMPLETE [ 31.843749][ T4719] veth1_vlan: entered promiscuous mode [ 31.849785][ T4713] Bluetooth: hci0: command tx timeout [ 31.850305][ T50] Bluetooth: hci3: command tx timeout [ 31.850396][ T4714] Bluetooth: hci2: command tx timeout [ 31.852646][ T4716] Bluetooth: hci4: command tx timeout [ 31.860903][ T3540] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.861065][ T3540] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.861163][ T3540] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.861280][ T3540] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.874401][ T4719] veth0_macvtap: entered promiscuous mode [ 31.875450][ T4719] veth1_macvtap: entered promiscuous mode [ 31.914070][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.915549][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.935278][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.936779][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.936803][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.936819][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.940257][ T4716] Bluetooth: hci1: command tx timeout [ 32.015843][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.015990][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.046049][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.046078][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.058046][ T3955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.060472][ T3955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.065374][ T3955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.067057][ T3955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.177815][ T4921] ------------[ cut here ]------------ [ 32.177831][ T4921] WARNING: fs/exec.c:119 at path_noexec+0x1a4/0x1d4, CPU#1: syz.4.13/4921 [ 32.180002][ T4921] Modules linked in: [ 32.180641][ T4921] CPU: 1 UID: 0 PID: 4921 Comm: syz.4.13 Not tainted syzkaller #0 PREEMPT [ 32.182037][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 32.183615][ T4921] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 32.184756][ T4921] pc : path_noexec+0x1a4/0x1d4 [ 32.185445][ T4921] lr : path_noexec+0x1a4/0x1d4 [ 32.186238][ T4921] sp : ffff800097e97a50 [ 32.186894][ T4921] x29: ffff800097e97a50 x28: dfff800000000000 x27: ffff0000f503f440 [ 32.188124][ T4921] x26: 0000000000000011 x25: ffff0000da85ee40 x24: 0000000020000000 [ 32.189370][ T4921] x23: 1fffe0001b50bdc9 x22: 1fffe0001b50bdd0 x21: dfff800000000000 [ 32.190613][ T4921] x20: 0000000000000000 x19: ffff0000da85ee80 x18: 0000000000000000 [ 32.191886][ T4921] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 32.193168][ T4921] x14: 0000000000000007 x13: 0000000000000004 x12: 0000000000000000 [ 32.194426][ T4921] x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000000ee [ 32.195739][ T4921] x8 : ffff80009e902000 x7 : 0000000000000000 x6 : 0000000000000000 [ 32.196926][ T4921] x5 : 0000000000000077 x4 : 0000000000000008 x3 : ffff800080c7ce88 [ 32.198178][ T4921] x2 : 0000000000000000 x1 : ffff0000c858d700 x0 : 0000000000000001 [ 32.199397][ T4921] Call trace: [ 32.199909][ T4921] path_noexec+0x1a4/0x1d4 (P) [ 32.200635][ T4921] do_mmap+0x874/0xf0c [ 32.201322][ T4921] vm_mmap_pgoff+0x298/0x46c [ 32.202051][ T4921] ksys_mmap_pgoff+0x364/0x5b4 [ 32.202826][ T4921] __arm64_sys_mmap+0x108/0x120 [ 32.203555][ T4921] invoke_syscall+0x98/0x244 [ 32.204310][ T4921] el0_svc_common+0xec/0x23c [ 32.205086][ T4921] do_el0_svc+0x4c/0x5c [ 32.205750][ T4921] el0_svc+0x64/0x260 [ 32.206392][ T4921] el0t_64_sync_handler+0x48/0x148 [ 32.207186][ T4921] el0t_64_sync+0x198/0x19c [ 32.207850][ T4921] irq event stamp: 456 [ 32.208452][ T4921] hardirqs last enabled at (455): [] el0_svc+0x54/0x260 [ 32.209685][ T4921] hardirqs last disabled at (456): [] el1_brk64+0x20/0x54 [ 32.211039][ T4921] softirqs last enabled at (450): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 32.212651][ T4921] softirqs last disabled at (448): [] fpsimd_restore_current_state+0x44/0x9c8 [ 32.214205][ T4921] ---[ end trace 0000000000000000 ]--- [ 33.929666][ T4714] Bluetooth: hci4: command tx timeout [ 33.929705][ T4714] Bluetooth: hci0: command tx timeout [ 33.929735][ T4714] Bluetooth: hci3: command tx timeout [ 33.931119][ T4716] Bluetooth: hci2: command tx timeout [ 34.019546][ T4716] Bluetooth: hci1: command tx timeout [ 36.009581][ T4716] Bluetooth: hci3: command tx timeout [ 36.009661][ T4714] Bluetooth: hci0: command tx timeout [ 36.009890][ T4714] Bluetooth: hci4: command tx timeout [ 36.010775][ T4713] Bluetooth: hci2: command tx timeout [ 36.089601][ T4713] Bluetooth: hci1: command tx timeout [ 38.089551][ T4713] Bluetooth: hci3: command tx timeout [ 38.089564][ T4714] Bluetooth: hci4: command tx timeout [ 38.089592][ T4714] Bluetooth: hci2: command tx timeout [ 38.089618][ T4714] Bluetooth: hci0: command tx timeout [ 38.169361][ T4716] Bluetooth: hci1: command tx timeout