last executing test programs: 1.376950225s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000002200000009"], 0x33) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f00000003c0)=""/61}, 0x20) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsm_get_self_attr(0x65, 0xffffffffffffffff, &(0x7f0000000080), 0x0) 1.244618135s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$bind(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x10) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c", 0x3}], 0x1}}, {}], 0x3, 0x1c000) 810.185753ms ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltclass={0x38, 0x29, 0x908, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0xfff3, 0x8}, {0xfff2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @tclass_kind_options=@c_cake={0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x41000, 0xa}, 0x94) 685.697375ms ago: executing program 4 (id=5): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90656}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc12000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) 673.16351ms ago: executing program 3 (id=4): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x808c10, &(0x7f0000000000)=ANY=[], 0x3, 0x1cf, &(0x7f0000000280)="$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") r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYBLOB, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xce, 0x0, &(0x7f00000000c0)) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mremap(&(0x7f0000031000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000494000/0x3000)=nil) mlock2(&(0x7f00008cd000/0x4000)=nil, 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x20048895}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030800054000000000140000001100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x6, 0x0) close_range(r5, r1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(r7, 0x0, 0x20000050) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000004000000040000000035c06154ae8a615d090000000095e7ce40b479c450cc343ebd1e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 429.191556ms ago: executing program 1 (id=6): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$watch_queue(0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x14, 0x8, 0x7f, 0xfe, 0x0, 0x80, 0x1, 0x2b00}}, 0x1c}, 0x1, 0x0, 0x0, 0x30000001}, 0x4050) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb40209dcfa4666bbcc6ca80810e4d7cf28a3ef8da375451320574", 0xea}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x190}], 0x1}}], 0x2, 0x2090) close(r0) socket$rds(0x15, 0x5, 0x0) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x415c99, &(0x7f0000002780)=ANY=[]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x7, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_ZONE={0x6, 0x4, 0xfff9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 321.992292ms ago: executing program 2 (id=7): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x41000000}, 0x884) 284.939317ms ago: executing program 2 (id=8): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) userfaultfd(0x801) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xa}]}, &(0x7f0000000140)=0xc) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) 0s ago: executing program 4 (id=9): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000900ffffffffffff810036008848a4654176f2bb585313c8c4a7fc55f7ab65a59862065bb40d72ddd2e4c9cab9634103ab386bbc9d90b59b7a5ac5252e4615ccc376aa57f942282d5076f8a13c32d49c8df5c93abe6b914666a5cfa3a33a8a"], 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be"], 0x0) r4 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '#! '}]}, 0x10) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r5, &(0x7f0000000040)=[{0x0}], 0x1, 0x5, 0x0) unshare(0x64000600) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4623, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 29.213369][ T4656] cgroup: Unknown subsys name 'net' [ 29.314246][ T4656] cgroup: Unknown subsys name 'cpuset' [ 29.316324][ T4656] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.505881][ T4656] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.888258][ T4675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.890003][ T4675] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.891380][ T4675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.893550][ T4675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.895616][ T4678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.897547][ T4671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.898515][ T4671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.898820][ T4671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.898968][ T4671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.899297][ T4671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.899521][ T4671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.905392][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.907002][ T4671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.913148][ T4678] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.915723][ T4678] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.918797][ T4678] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.920222][ T4678] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.920480][ T4678] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.923507][ T4678] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.930243][ T4683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.930317][ T4683] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.931446][ T4675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.931726][ T4675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.937097][ T4674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.938857][ T4674] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.293293][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.293660][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.293974][ T4668] bridge_slave_0: entered allmulticast mode [ 31.294459][ T4668] bridge_slave_0: entered promiscuous mode [ 31.295590][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.295609][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.295660][ T4668] bridge_slave_1: entered allmulticast mode [ 31.296119][ T4668] bridge_slave_1: entered promiscuous mode [ 31.298519][ T4680] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.298550][ T4680] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.298616][ T4680] bridge_slave_0: entered allmulticast mode [ 31.299058][ T4680] bridge_slave_0: entered promiscuous mode [ 31.299834][ T4680] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.299858][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.299907][ T4680] bridge_slave_1: entered allmulticast mode [ 31.300368][ T4680] bridge_slave_1: entered promiscuous mode [ 31.345462][ T4668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.346436][ T4668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.352471][ T4680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.365592][ T4680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.374060][ T4668] team0: Port device team_slave_0 added [ 31.374921][ T4668] team0: Port device team_slave_1 added [ 31.380758][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.381242][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.381262][ T4668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.388361][ T4680] team0: Port device team_slave_0 added [ 31.389077][ T4680] team0: Port device team_slave_1 added [ 31.394400][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.394420][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.394437][ T4668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.403663][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.405023][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.406428][ T4669] bridge_slave_0: entered allmulticast mode [ 31.407998][ T4669] bridge_slave_0: entered promiscuous mode [ 31.411095][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.412767][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.412860][ T4669] bridge_slave_1: entered allmulticast mode [ 31.413303][ T4669] bridge_slave_1: entered promiscuous mode [ 31.427155][ T4668] hsr_slave_0: entered promiscuous mode [ 31.427546][ T4668] hsr_slave_1: entered promiscuous mode [ 31.434961][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.434985][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.435000][ T4680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.435552][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.435559][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.435570][ T4680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.448967][ T4679] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.448995][ T4679] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.449046][ T4679] bridge_slave_0: entered allmulticast mode [ 31.449482][ T4679] bridge_slave_0: entered promiscuous mode [ 31.450358][ T4679] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.450437][ T4679] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.450489][ T4679] bridge_slave_1: entered allmulticast mode [ 31.450923][ T4679] bridge_slave_1: entered promiscuous mode [ 31.461333][ T4680] hsr_slave_0: entered promiscuous mode [ 31.462892][ T4680] hsr_slave_1: entered promiscuous mode [ 31.464051][ T4680] debugfs: 'hsr0' already exists in 'hsr' [ 31.465037][ T4680] Cannot create hsr debugfs directory [ 31.476048][ T4669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.477153][ T4669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.484641][ T4679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.485831][ T4679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.508337][ T4669] team0: Port device team_slave_0 added [ 31.509212][ T4669] team0: Port device team_slave_1 added [ 31.524756][ T4679] team0: Port device team_slave_0 added [ 31.525548][ T4679] team0: Port device team_slave_1 added [ 31.541224][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.541249][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.541263][ T4669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.542369][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.542378][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.542389][ T4679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.542914][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.542920][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.542932][ T4679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.571093][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.572437][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.575486][ T4669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.588375][ T4669] hsr_slave_0: entered promiscuous mode [ 31.588675][ T4669] hsr_slave_1: entered promiscuous mode [ 31.588913][ T4669] debugfs: 'hsr0' already exists in 'hsr' [ 31.588922][ T4669] Cannot create hsr debugfs directory [ 31.590529][ T4679] hsr_slave_0: entered promiscuous mode [ 31.590811][ T4679] hsr_slave_1: entered promiscuous mode [ 31.591029][ T4679] debugfs: 'hsr0' already exists in 'hsr' [ 31.591037][ T4679] Cannot create hsr debugfs directory [ 31.599975][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.600768][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.600890][ T4676] bridge_slave_0: entered allmulticast mode [ 31.601346][ T4676] bridge_slave_0: entered promiscuous mode [ 31.619304][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.620601][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.621776][ T4676] bridge_slave_1: entered allmulticast mode [ 31.622224][ T4676] bridge_slave_1: entered promiscuous mode [ 31.634051][ T4676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.638749][ T4676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.666017][ T4676] team0: Port device team_slave_0 added [ 31.672829][ T4676] team0: Port device team_slave_1 added [ 31.683421][ T4680] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.686565][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.688138][ T4680] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.690203][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.696613][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.696641][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.696667][ T4676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.707861][ T4680] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.710088][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.710536][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.710544][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.710561][ T4676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.725318][ T4680] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.727600][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.730456][ T4676] hsr_slave_0: entered promiscuous mode [ 31.730883][ T4676] hsr_slave_1: entered promiscuous mode [ 31.731096][ T4676] debugfs: 'hsr0' already exists in 'hsr' [ 31.731105][ T4676] Cannot create hsr debugfs directory [ 31.752718][ T4668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.754588][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.755299][ T4668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.756805][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.763919][ T4668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.765997][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.767679][ T4668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.769582][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.782563][ T4680] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.782626][ T4680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.782776][ T4680] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.782804][ T4680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.810531][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.810578][ T4668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.810706][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.810734][ T4668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.821889][ T4669] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.824050][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.825684][ T4669] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.827950][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.829541][ T4669] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.831795][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.834311][ T4669] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.836422][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.851056][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.851106][ T4669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.851193][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.851227][ T4669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.864530][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.872813][ T4679] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.874956][ T4679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.876442][ T4679] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.878417][ T4679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.885048][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.886433][ T550] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.887771][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.889029][ T550] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.892573][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.893855][ T550] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.900005][ T4679] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.902592][ T4679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.905939][ T4668] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.909984][ T4679] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.912125][ T4679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.917505][ T4680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.927505][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.927549][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.927914][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.927932][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.931084][ T4680] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.949260][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.949305][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.956811][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.959046][ T4676] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.962396][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.974086][ T4676] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.976097][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.977970][ T4676] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.980025][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.983349][ T3395] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.983384][ T3395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.989051][ T4676] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.991188][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.006900][ T4669] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.022603][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.022643][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.043538][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.043577][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.068505][ T4679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.075983][ T4669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.081478][ T4679] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.109268][ T550] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.109322][ T550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.109657][ T550] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.109676][ T550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.114453][ T4676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.117994][ T4676] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.128958][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.128999][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.129403][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.129421][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.145638][ T4676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.147429][ T4676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.200682][ T4668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.228859][ T4668] veth0_vlan: entered promiscuous mode [ 32.240899][ T4668] veth1_vlan: entered promiscuous mode [ 32.250570][ T4668] veth0_macvtap: entered promiscuous mode [ 32.259921][ T4668] veth1_macvtap: entered promiscuous mode [ 32.268065][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.275716][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.283525][ T218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.283759][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.283787][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.283810][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300902][ T4680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.315918][ T4669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.342752][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.342781][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.358795][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.358824][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.368499][ T4669] veth0_vlan: entered promiscuous mode [ 32.373110][ T4669] veth1_vlan: entered promiscuous mode [ 32.379726][ T4669] veth0_macvtap: entered promiscuous mode [ 32.383833][ T4669] veth1_macvtap: entered promiscuous mode [ 32.388332][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.393972][ T4680] veth0_vlan: entered promiscuous mode [ 32.396955][ T4680] veth1_vlan: entered promiscuous mode [ 32.403595][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.417840][ T4680] veth0_macvtap: entered promiscuous mode [ 32.424366][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.424609][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.424628][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.424645][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.430349][ T4676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.431270][ T4680] veth1_macvtap: entered promiscuous mode [ 32.459495][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.467317][ T4668] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.476180][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.476210][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.495017][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.505908][ T4679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.507352][ T218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.507401][ T218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.507421][ T218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.507437][ T218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.533003][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.533034][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.588048][ T4679] veth0_vlan: entered promiscuous mode [ 32.603159][ T4679] veth1_vlan: entered promiscuous mode [ 32.614440][ T4676] veth0_vlan: entered promiscuous mode [ 32.620360][ T4676] veth1_vlan: entered promiscuous mode [ 32.970040][ T506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.970068][ T506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.972126][ T4671] Bluetooth: hci0: command tx timeout [ 32.972253][ T4671] Bluetooth: hci1: command tx timeout [ 32.980132][ T506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.980142][ T506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.981877][ T4674] Bluetooth: hci2: command tx timeout [ 32.981957][ T4674] Bluetooth: hci3: command tx timeout [ 32.982019][ T4674] Bluetooth: hci4: command tx timeout [ 32.996798][ T4676] veth0_macvtap: entered promiscuous mode [ 33.000344][ T4676] veth1_macvtap: entered promiscuous mode [ 33.004195][ T4679] veth0_macvtap: entered promiscuous mode [ 33.008230][ T4679] veth1_macvtap: entered promiscuous mode [ 33.011480][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.016503][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.021913][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.021965][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.021989][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.022006][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.040520][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.054004][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.085937][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.087878][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.089523][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.091125][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.101498][ T506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.103353][ T506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.103389][ T506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.103413][ T506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.155033][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.155066][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.164425][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.164452][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.439778][ T4864] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 33.441973][ T4863] loop3: detected capacity change from 0 to 8 [ 33.457324][ T4863] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 33.457353][ T4863] unable to read xattr id index table [ 33.458652][ T4863] SQUASHFS error: zlib decompression failed, data probably corrupt [ 33.458668][ T4863] SQUASHFS error: Failed to read block 0x9b: -5 [ 33.458675][ T4863] SQUASHFS error: Unable to read metadata cache entry [99] [ 33.458681][ T4863] SQUASHFS error: Unable to read inode 0x127 [ 33.536124][ T4863] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 33.554086][ T4869] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 33.936452][ T4872] ------------[ cut here ]------------ [ 33.936470][ T4872] kernel BUG at net/phonet/socket.c:213! [ 33.936523][ T4872] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 33.939709][ T4872] Modules linked in: [ 33.940351][ T4872] CPU: 0 UID: 0 PID: 4872 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT [ 33.941790][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 33.943507][ T4872] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 33.944786][ T4872] pc : pn_socket_autobind+0x184/0x188 [ 33.945693][ T4872] lr : pn_socket_autobind+0x184/0x188 [ 33.946626][ T4872] sp : ffff8000a9c577a0 [ 33.947332][ T4872] x29: ffff8000a9c577f0 x28: ffff0000c83d6040 x27: 0000000024000840 [ 33.948762][ T4872] x26: 0000000024000840 x25: 0000000000000000 x24: 1ffff0001538af89 [ 33.950189][ T4872] x23: dfff800000000000 x22: dfff800000000000 x21: ffff70001538aef4 [ 33.951612][ T4872] x20: 00000000ffffffea x19: 0000000000000000 x18: 0000000000000000 [ 33.952925][ T4872] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020009b40 [ 33.954329][ T4872] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 33.955692][ T4872] x11: ffff800080153d08 x10: 0000000000080000 x9 : 0000000000000229 [ 33.957059][ T4872] x8 : ffff80009d12e000 x7 : 0000000000000000 x6 : 0000000000000000 [ 33.958412][ T4872] x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff800085cb4848 [ 33.959732][ T4872] x2 : 0000000000000000 x1 : ffff0000c8c80000 x0 : 0000000000000001 [ 33.961089][ T4872] Call trace: [ 33.961651][ T4872] pn_socket_autobind+0x184/0x188 (P) [ 33.962554][ T4872] pn_socket_sendmsg+0x50/0xd4 [ 33.963368][ T4872] __sock_sendmsg+0xc8/0x138 [ 33.964167][ T4872] ____sys_sendmsg+0x418/0x70c [ 33.964949][ T4872] ___sys_sendmsg+0x198/0x224 [ 33.965694][ T4872] __sys_sendmsg+0x160/0x214 [ 33.966451][ T4872] __arm64_sys_sendmsg+0x80/0x94 [ 33.967260][ T4872] invoke_syscall+0x98/0x244 [ 33.968051][ T4872] el0_svc_common+0xe8/0x23c [ 33.968860][ T4872] do_el0_svc+0x48/0x58 [ 33.969567][ T4872] el0_svc+0x60/0x25c [ 33.970229][ T4872] el0t_64_sync_handler+0x48/0x148 [ 33.971124][ T4872] el0t_64_sync+0x198/0x19c [ 33.971909][ T4872] Code: aa1303e0 96bab47b 17ffffdd 96a62791 (d4210000) [ 33.973114][ T4872] ---[ end trace 0000000000000000 ]--- [ 34.238568][ T4872] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 34.239632][ T4872] SMP: stopping secondary CPUs [ 34.240365][ T4872] Kernel Offset: disabled [ 34.241012][ T4872] CPU features: 0x08000000,003c0008,27020501,5427fea7 [ 34.242124][ T4872] Memory Limit: none [ 34.477732][ T4872] Rebooting in 86400 seconds..