last executing test programs: 462.646038ms ago: executing program 1 (id=2): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)='o', 0x1}], 0x1}}], 0x1, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000000240)={'bridge0\x00', 0x1}) 448.966114ms ago: executing program 4 (id=5): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_BIND=@ipv4={0x38, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) 439.243125ms ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000140)=@ethtool_gfeatures}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000000109010100"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) r9 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8000, 0x0, 0x2, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000000c0)={r10, 0x9}, &(0x7f0000000100)=0x8) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x100, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xd, 0x0, 0x1, 0x2, 0x6, 0x0, 0x7}}, {0x12, 0x2, [0xfff7, 0x7f, 0x5, 0x5, 0x7ff, 0x8, 0x2]}}, {{0x1c, 0x1, {0x9, 0x5, 0xffff, 0x2, 0x1, 0x8, 0xfffffff7, 0x4}}, {0xc, 0x2, [0x3, 0x7, 0xf, 0x1]}}, {{0x1c, 0x1, {0x6, 0x9, 0x96, 0x2, 0x2, 0x91c, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0xff, 0x5, 0x7, 0x5, 0x5, 0x2, 0x0]}}, {{0x1c, 0x1, {0x5, 0x1, 0x5, 0x100, 0x1, 0xf7b0, 0x57, 0x1}}, {0x6, 0x2, [0xa]}}, {{0x1c, 0x1, {0xf, 0x9, 0x7, 0x101, 0x2, 0x9, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x100}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x40}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 322.711657ms ago: executing program 2 (id=3): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "a95cf113a9850b7270b76494292e059f41ff7c7530c410fe5650b69c5c1d8ac2", 0xffffffffffffffff}) pwritev(r0, &(0x7f0000000040), 0x0, 0x3a0, 0x9) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000280)={{r0}, r1, 0x4, @unused=[0x5, 0x1fc0000, 0xffff, 0x9], @name="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"}) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) pipe2$9p(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0), 0x11, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '.'}}, {@ignoreqv}], [{@smackfsroot={'smackfsroot', 0x3d, '}*\xa6*$)-):$(-^]^'}}]}}) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000013c0)={0x3, 0x7f}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000001400)) (async, rerun: 32) exit(0x1) (rerun: 32) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000016c0)={0x2, 0x1, &(0x7f0000001480)=""/165, &(0x7f0000001540)=""/139, &(0x7f0000001600)=""/157, 0x7000}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f0000001740)={0x3, 0x8, &(0x7f0000001700)}) ioctl$VHOST_VDPA_SET_CONFIG(r6, 0x4008af74, &(0x7f0000001780)={0x5, 0x82, "65640683ef3c613f2e79e02120c734b79ae50623d98789f7a3c13aece621bfd5e7fd0ddde559993cda89516dcab3450d240bc493a7fc6a252b912ca74db05a3c60c7a3ea0fb49c990c0a59f81190b73a0f0057999e4a0392e3f0e53f323cf3a8a9b6f505621c616c082bedf23b1f9f652f751a1c0ffc676e61a065fabe458aa0f6b7"}) (async) getpid() gettid() (async, rerun: 64) ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80809440, &(0x7f0000001a00)={&(0x7f00000019c0)=[{&(0x7f0000001840)="e7bb673e22b05872e4fa03580b9b3ae5a53550564c1b677e29ebc6cb7ba02ba46f83590264c53249fb9a376399c47827b26b55d526caab94d37bb2886cfe9fbd7f0868b409ff2e55b1969f85eb392020a4a8752c4d25fdb20de5204dd17d9cd4cb59d157d3c38832e12c97241c209098af016bc542d69bf291dcc1bffc013e8cfa2d3541557e2c26f806f5", 0x8b}, {&(0x7f0000001900)="78ce7633aec85981d115b485f90db3f58f56935ba5579c56edcebd543194d5e6bdebe6e53c59d14559b27463ce677ea7f9d0cc0bb16da24c56dde2f8185f2d6368e7d728711cf4aa0a9bcdff6354e871da2db34f1acc8c07a85c157be10bba021d81e4c7b34f301bd24e9777c994a2201c4fac3acbc14f8303279047d384562c9f4ed9bb029e4a328967b29014935991306ce7c50147fd62351c6846e860f5ea4aec0575b835570989f1d9b8032a905c6cae", 0xb2}], 0x2, 0xaba, 0x0, 0x3, 0x7, 0x8000000000000001, 0x1, 0x4}) (async, rerun: 64) r7 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000001a80)=0x5, 0x76, 0x0) (async, rerun: 32) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0), 0x400001, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) (async) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r7, 0x942e, 0x0) (async) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001b00)={0x32, @empty, 0x4e21, 0x0, 'wrr\x00', 0x1, 0xe, 0x3d}, 0x2c) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0/file0\x00', &(0x7f0000001b80), 0x1000) (async) r9 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) preadv(r9, &(0x7f0000001d40)=[{&(0x7f0000001c80)=""/37, 0x25}, {&(0x7f0000001cc0)=""/104, 0x68}], 0x2, 0xfe, 0x9) 322.048007ms ago: executing program 3 (id=4): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xd4}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000040)) 321.575007ms ago: executing program 4 (id=6): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000009140)={0x2020, 0x0, 0x0}, 0x2020) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x4) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0xffffffffffffffda, r2, {0x7, 0x2b, 0xbee1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 287.229174ms ago: executing program 1 (id=7): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x44, r2, 0x100, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x4010) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x2004010) listen(r0, 0xc) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xa500, 0x19) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, 0x0) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 236.11971ms ago: executing program 3 (id=8): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0xa) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0x5, 0x5ae9}, {0x20, 0x7f, 0x6, 0xffeff00c}, {0x6, 0xff, 0xa1, 0x401}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e05004b20"], 0x28) 8.181594ms ago: executing program 4 (id=9): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000380)=0x200000000000000c, 0x5, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), 0x0}, 0x20) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f000006c000/0x3000)=nil) shmat(r4, &(0x7f000005a000/0x2000)=nil, 0xa000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000340)) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000100)=0x0) getgroups(0xa, &(0x7f0000000180)=[0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001e00)={0x0, 0x0}, &(0x7f0000001e40)=0xc) setreuid(r11, r11) getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mmap$xdp(&(0x7f0000809000/0x1000)=nil, 0x1000, 0x5, 0x100010, r5, 0x80000000) mount$bpf(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000, &(0x7f00000004c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r9, @ANYBLOB="2c7569641c", @ANYRESHEX=r6, @ANYBLOB=',uid=', @ANYRESHEX=r13, @ANYBLOB=',gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=r6, @ANYBLOB=',uid=', @ANYRESHEX=r6, @ANYBLOB=',mode=00000000000000000000011,obj_role=*&,\x00']) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) shmctl$IPC_SET(r4, 0x1, &(0x7f00000002c0)={{0x2, r6, r7, r11, r8, 0x1, 0x1}, 0x4ee9, 0x100000000, 0x0, 0x8, r12, r14, 0x7}) syz_emit_ethernet(0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500262f00e21c020000000000000000000000000001fefb51318000000000000000000000000000aa3c0022eb2871c631febb2214417377616d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000d43f602566b7c9fb00"/26], 0x0) 0s ago: executing program 3 (id=10): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000100)) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x14}, 0x40000c4) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb}, {0x3, 0xfff2}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) writev(r0, &(0x7f0000000580), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 28.434700][ T4696] cgroup: Unknown subsys name 'net' [ 28.584766][ T4696] cgroup: Unknown subsys name 'cpuset' [ 28.586766][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.756417][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.537012][ T4721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.538337][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.539864][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.540118][ T4723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.540704][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.541060][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.541228][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.541466][ T4723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.541705][ T4723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.542784][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.542836][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.543124][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.543269][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.543422][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.544339][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.544548][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.544705][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.545656][ T4723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.546601][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.546729][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.550211][ T4723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.553110][ T4723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.553243][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.564457][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.564531][ T4713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.938021][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.939761][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.941068][ T4709] bridge_slave_0: entered allmulticast mode [ 29.942633][ T4709] bridge_slave_0: entered promiscuous mode [ 29.944787][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.944807][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.944857][ T4709] bridge_slave_1: entered allmulticast mode [ 29.945272][ T4709] bridge_slave_1: entered promiscuous mode [ 29.954424][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.966277][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.975084][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.975144][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.975236][ T4708] bridge_slave_0: entered allmulticast mode [ 29.975631][ T4708] bridge_slave_0: entered promiscuous mode [ 29.976639][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.976684][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.976733][ T4708] bridge_slave_1: entered allmulticast mode [ 29.977159][ T4708] bridge_slave_1: entered promiscuous mode [ 29.983902][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.984784][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.991980][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.992033][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.992091][ T4707] bridge_slave_0: entered allmulticast mode [ 29.992507][ T4707] bridge_slave_0: entered promiscuous mode [ 29.993317][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.993335][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.993765][ T4707] bridge_slave_1: entered allmulticast mode [ 29.994172][ T4707] bridge_slave_1: entered promiscuous mode [ 30.007079][ T4708] team0: Port device team_slave_0 added [ 30.008213][ T4708] team0: Port device team_slave_1 added [ 30.012654][ T4709] team0: Port device team_slave_0 added [ 30.013484][ T4709] team0: Port device team_slave_1 added [ 30.017152][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.033088][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.044244][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.044288][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.044352][ T4716] bridge_slave_0: entered allmulticast mode [ 30.044809][ T4716] bridge_slave_0: entered promiscuous mode [ 30.058580][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.059959][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.063446][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.064264][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.064272][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.064287][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.077097][ T4709] hsr_slave_0: entered promiscuous mode [ 30.077432][ T4709] hsr_slave_1: entered promiscuous mode [ 30.081783][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.081803][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.081827][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.082185][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.082247][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.082315][ T4716] bridge_slave_1: entered allmulticast mode [ 30.082764][ T4716] bridge_slave_1: entered promiscuous mode [ 30.099743][ T4707] team0: Port device team_slave_0 added [ 30.103291][ T4707] team0: Port device team_slave_1 added [ 30.107515][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.107541][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.107557][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.133063][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.133163][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.133174][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.135536][ T4708] hsr_slave_0: entered promiscuous mode [ 30.135830][ T4708] hsr_slave_1: entered promiscuous mode [ 30.136031][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.136064][ T4708] Cannot create hsr debugfs directory [ 30.137869][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.141270][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.141357][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.141449][ T4715] bridge_slave_0: entered allmulticast mode [ 30.141849][ T4715] bridge_slave_0: entered promiscuous mode [ 30.146832][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.146841][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.146856][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.153783][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.153921][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.153951][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.154007][ T4715] bridge_slave_1: entered allmulticast mode [ 30.154439][ T4715] bridge_slave_1: entered promiscuous mode [ 30.194215][ T4707] hsr_slave_0: entered promiscuous mode [ 30.194496][ T4707] hsr_slave_1: entered promiscuous mode [ 30.194679][ T4707] debugfs: 'hsr0' already exists in 'hsr' [ 30.194688][ T4707] Cannot create hsr debugfs directory [ 30.195358][ T4716] team0: Port device team_slave_0 added [ 30.196432][ T4716] team0: Port device team_slave_1 added [ 30.202568][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.203964][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.212842][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.212865][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.212892][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.213614][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.213621][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.213633][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.234334][ T4715] team0: Port device team_slave_0 added [ 30.241145][ T4716] hsr_slave_0: entered promiscuous mode [ 30.241439][ T4716] hsr_slave_1: entered promiscuous mode [ 30.241630][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.241640][ T4716] Cannot create hsr debugfs directory [ 30.248847][ T4715] team0: Port device team_slave_1 added [ 30.277192][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.278564][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.283620][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.287768][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.289133][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.293439][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.332252][ T4715] hsr_slave_0: entered promiscuous mode [ 30.332887][ T4715] hsr_slave_1: entered promiscuous mode [ 30.333062][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.333071][ T4715] Cannot create hsr debugfs directory [ 30.340004][ T4709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.345611][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.345939][ T4709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.347989][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.350053][ T4709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.352379][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.354117][ T4709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.356390][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.383441][ T4707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.386155][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.389265][ T4707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.391614][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.400424][ T4707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.402852][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.404097][ T4707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.405414][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.406347][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.406377][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.406517][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.406545][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.439383][ T4716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.442256][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.444618][ T4716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.446835][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.448961][ T4716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.451218][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.453142][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.453192][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.453263][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.453294][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.464970][ T4716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.466969][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.472973][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.484484][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.488797][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.490306][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.492853][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.494668][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.506490][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.509822][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.509877][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.517760][ T4708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.519908][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.520340][ T4708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.522150][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.527476][ T4708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.529692][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.530020][ T4708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.532203][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.536127][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.536170][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.552825][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.578215][ T4715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.580442][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.582389][ T4715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.585884][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.587719][ T4715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.590206][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.591081][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.591106][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.597677][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.597718][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.601534][ T4715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.604609][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.612220][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.618680][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.628184][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.628227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.628725][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.628745][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.651694][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.667013][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.679873][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.685790][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.687615][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.707004][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.708948][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.716354][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.716400][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.716843][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.716862][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.720103][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.746592][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.746635][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.746985][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.747004][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.767644][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.806982][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.919749][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.924607][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.947964][ T4707] veth0_vlan: entered promiscuous mode [ 30.949660][ T4707] veth1_vlan: entered promiscuous mode [ 30.959853][ T4709] veth0_vlan: entered promiscuous mode [ 30.966586][ T4716] veth0_vlan: entered promiscuous mode [ 30.979158][ T4709] veth1_vlan: entered promiscuous mode [ 30.984558][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.990850][ T4707] veth0_macvtap: entered promiscuous mode [ 30.991993][ T4707] veth1_macvtap: entered promiscuous mode [ 30.999498][ T4716] veth1_vlan: entered promiscuous mode [ 31.002094][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.012358][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.017227][ T4715] veth0_vlan: entered promiscuous mode [ 31.022359][ T4708] veth0_vlan: entered promiscuous mode [ 31.025066][ T4709] veth0_macvtap: entered promiscuous mode [ 31.026217][ T4709] veth1_macvtap: entered promiscuous mode [ 31.037865][ T4715] veth1_vlan: entered promiscuous mode [ 31.039786][ T4716] veth0_macvtap: entered promiscuous mode [ 31.040852][ T4716] veth1_macvtap: entered promiscuous mode [ 31.042159][ T4708] veth1_vlan: entered promiscuous mode [ 31.044669][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.048421][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.058965][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.076365][ T4715] veth0_macvtap: entered promiscuous mode [ 31.085115][ T4715] veth1_macvtap: entered promiscuous mode [ 31.088596][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.090202][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.090937][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.091961][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.093630][ T3436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.093706][ T3436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.093732][ T3436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.093755][ T3436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.093780][ T3436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.093803][ T3436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.093825][ T3436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.093847][ T3436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.112478][ T4708] veth0_macvtap: entered promiscuous mode [ 31.113697][ T4708] veth1_macvtap: entered promiscuous mode [ 31.116901][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.117903][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.155664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.157376][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.159964][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.159985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.185859][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.185888][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.201207][ T3380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.201236][ T3380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.217000][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.217033][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.218148][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220127][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220296][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220400][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220540][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220630][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220721][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220806][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220876][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220900][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220913][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220927][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.232503][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.232515][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.251004][ T4707] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.257383][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.257418][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.259607][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.259619][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.279153][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.279184][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.315526][ T504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.315551][ T504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.318780][ T4892] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 31.369904][ T4900] loop3: detected capacity change from 0 to 1024 [ 31.375305][ T4900] EXT4-fs: Ignoring removed bh option [ 31.430338][ T4900] EXT4-fs: Invalid want_extra_isize 212 [ 31.434347][ T30] audit: type=1326 audit(31.410:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4896 comm="syz.2.3" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff831792a8 code=0x0 [ 31.441418][ T4909] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 31.441935][ T30] audit: type=1326 audit(31.410:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4896 comm="syz.2.3" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff831792a8 code=0x0 [ 31.442240][ T30] audit: type=1326 audit(31.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4896 comm="syz.2.3" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff831792a8 code=0x0 [ 31.473279][ T4719] Bluetooth: hci3: unexpected cc 0x204b length: 34 > 3 [ 31.614062][ T4719] Bluetooth: hci2: command tx timeout [ 31.614306][ T4719] Bluetooth: hci0: command tx timeout [ 31.623433][ T4719] Bluetooth: hci4: command tx timeout [ 31.624779][ T4719] Bluetooth: hci1: command tx timeout [ 31.738663][ T4915] loop1: detected capacity change from 0 to 2048 [ 31.765727][ T4915] loop1: p1 < > p4 [ 31.765727][ T4915] p4: [ 31.770332][ T4915] loop1: p4 size 722688 extends beyond EOD, truncated [ 31.783247][ T4341] loop1: p1 < > p4 [ 31.783247][ T4341] p4: [ 31.786324][ T4341] loop1: p4 size 722688 extends beyond EOD, truncated [ 31.817339][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 31.859818][ T4730] udevd[4730]: inotify_add_watch(7, /dev/loop1p1, 10) fail ** replaying previous printk message ** [ 31.859818][ T4730] udevd[4730]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 31.861156][ T4920] ------------[ cut here ]------------ [ 31.861163][ T4920] WARNING: mm/vma.h:277 at vma_add_pgoff+0x50c/0x700, CPU#0: syz.4.9/4920 [ 31.866433][ T4920] Modules linked in: [ 31.867154][ T4920] CPU: 0 UID: 0 PID: 4920 Comm: syz.4.9 Not tainted syzkaller #0 PREEMPT [ 31.868731][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 31.870480][ T4920] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 31.871875][ T4920] pc : vma_add_pgoff+0x50c/0x700 [ 31.872796][ T4920] lr : vma_add_pgoff+0x50c/0x700 [ 31.873662][ T4920] sp : ffff800092bb76e0 [ 31.874364][ T4920] x29: ffff800092bb7700 x28: 1fffe0001a6304d2 x27: 0000000000000001 [ 31.875765][ T4920] x26: ffff0000c62f1600 x25: dfff800000000000 x24: 1fffe0001a6304d8 [ 31.877154][ T4920] x23: ffff0000d31826c0 x22: 0000000000020a97 x21: ffff0000d3182688 [ 31.878223][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 31.880120][ T4920] x20: ffff0000d3182640 x19: 0000000020001000 x18: 1fffe00035b9ec28 [ 31.881550][ T4920] x17: 0000000000000003 x16: ffff800088bf7000 x15: ffff800088ca7ee0 [ 31.882996][ T4920] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 31.884392][ T4920] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000042199 [ 31.885782][ T4920] x8 : ffff80009c559000 x7 : 0000000000000000 x6 : 000000000000003f [ 31.887262][ T4920] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800080ae89e0 [ 31.888757][ T4920] x2 : 0000000000020001 x1 : ffff0000c9b11d80 x0 : 0000000000000001 [ 31.890249][ T4920] Call trace: [ 31.890823][ T4920] vma_add_pgoff+0x50c/0x700 (P) [ 31.891716][ T4920] __split_vma+0x6a8/0x83c [ 31.892528][ T4920] vma_modify+0x11ac/0x18f0 [ 31.893321][ T4920] vma_modify_policy+0x210/0x2b8 [ 31.894206][ T4920] mbind_range+0x160/0x3e4 [ 31.894983][ T4920] __arm64_sys_mbind+0x5c8/0x994 [ 31.895860][ T4920] invoke_syscall+0x98/0x244 [ 31.896664][ T4920] el0_svc_common+0xec/0x23c [ 31.897473][ T4920] do_el0_svc+0x4c/0x5c [ 31.898190][ T4920] el0_svc+0x64/0x260 [ 31.898898][ T4920] el0t_64_sync_handler+0x44/0x104 [ 31.899803][ T4920] el0t_64_sync+0x198/0x19c [ 31.900610][ T4920] irq event stamp: 14670 [ 31.901347][ T4920] hardirqs last enabled at (14669): [] _raw_spin_unlock_irq+0x30/0x80 [ 31.903011][ T4920] hardirqs last disabled at (14670): [] el1_brk64+0x20/0x54 [ 31.904529][ T4920] softirqs last enabled at (12016): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 31.906245][ T4920] softirqs last disabled at (12014): [] fpsimd_restore_current_state+0x44/0x9c8 [ 31.908016][ T4920] ---[ end trace 0000000000000000 ]--- [ 31.913442][ T4920] ------------[ cut here ]------------ [ 31.913455][ T4920] WARNING: mm/vma.h:277 at vma_set_range+0x3d0/0x508, CPU#0: syz.4.9/4920 [ 31.916003][ T4920] Modules linked in: [ 31.916718][ T4920] CPU: 0 UID: 0 PID: 4920 Comm: syz.4.9 Tainted: G W syzkaller #0 PREEMPT [ 31.918562][ T4920] Tainted: [W]=WARN [ 31.919165][ T4730] udevd[4730]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 31.920988][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 31.922825][ T4920] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 31.924181][ T4920] pc : vma_set_range+0x3d0/0x508 [ 31.925055][ T4920] lr : vma_set_range+0x3d0/0x508 [ 31.925929][ T4920] sp : ffff800092bb7720 [ 31.926663][ T4920] x29: ffff800092bb7720 x28: 1fffe0001a6304d8 x27: ffff0000d31826c0 [ 31.928154][ T4920] x26: ffff800088bfab88 x25: 1fffe0001a6304c8 x24: dfff800000000000 [ 31.929658][ T4920] x23: 0000000000000011 x22: 0000000020001000 x21: 0000000000020a97 [ 31.931162][ T4920] x20: ffff0000d3182640 x19: 0000000000020a97 x18: 1fffe00035b9ec28 [ 31.932566][ T4920] x17: 0000000021000fff x16: 0000000020dfffff x15: ffff800080b8bf18 [ 31.934032][ T4920] x14: ffff800080b96bac x13: 0000000000000001 x12: 0000000000000000 [ 31.935440][ T4920] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000059485 [ 31.936871][ T4920] x8 : ffff80009c559000 x7 : 0000000000000000 x6 : 000000000000003f [ 31.938343][ T4920] x5 : 0000000000000040 x4 : 0000000000020a97 x3 : ffff800080ae00f8 [ 31.939800][ T4920] x2 : 0000000000020001 x1 : ffff0000c9b11d80 x0 : 0000000000000001 [ 31.941256][ T4920] Call trace: [ 31.941839][ T4920] vma_set_range+0x3d0/0x508 (P) [ 31.942691][ T4920] commit_merge+0x300/0x538 [ 31.943486][ T4920] vma_modify+0xf28/0x18f0 [ 31.944256][ T4920] vma_modify_policy+0x210/0x2b8 [ 31.945090][ T4920] mbind_range+0x160/0x3e4 [ 31.945860][ T4920] __arm64_sys_mbind+0x5c8/0x994 [ 31.946726][ T4920] invoke_syscall+0x98/0x244 [ 31.947549][ T4920] el0_svc_common+0xec/0x23c [ 31.948365][ T4920] do_el0_svc+0x4c/0x5c [ 31.949084][ T4920] el0_svc+0x64/0x260 [ 31.949751][ T4920] el0t_64_sync_handler+0x44/0x104 [ 31.950627][ T4920] el0t_64_sync+0x198/0x19c [ 31.951461][ T4920] irq event stamp: 15058 [ 31.952216][ T4920] hardirqs last enabled at (15057): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 31.953999][ T4920] hardirqs last disabled at (15058): [] el1_brk64+0x20/0x54 [ 31.955514][ T4920] softirqs last enabled at (15050): [] handle_softirqs+0xc28/0xd98 [ 31.957155][ T4920] softirqs last disabled at (14673): [] __do_softirq+0x14/0x20 [ 31.958715][ T4920] ---[ end trace 0000000000000000 ]--- [ 33.693715][ T4719] Bluetooth: hci4: command tx timeout [ 33.693751][ T4719] Bluetooth: hci0: command tx timeout [ 33.693779][ T4719] Bluetooth: hci2: command tx timeout [ 33.694677][ T4713] Bluetooth: hci1: command tx timeout [ 35.533697][ T4713] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 35.534505][ T4713] Bluetooth: hci3: Injecting HCI hardware error event [ 35.536000][ T4717] Bluetooth: hci3: hardware error 0x00 [ 35.773407][ T4713] Bluetooth: hci2: command tx timeout [ 35.773449][ T4713] Bluetooth: hci0: command tx timeout [ 35.773479][ T4713] Bluetooth: hci4: command tx timeout [ 35.783621][ T4713] Bluetooth: hci1: command tx timeout [ 37.693460][ T4717] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 37.853416][ T4717] Bluetooth: hci4: command tx timeout [ 37.853453][ T4717] Bluetooth: hci0: command tx timeout [ 37.863513][ T4717] Bluetooth: hci1: command tx timeout [ 37.863571][ T4713] Bluetooth: hci2: command tx timeout