last executing test programs: 1.947794441s ago: executing program 2 (id=3): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c000240000000000000000109000300737904fff50000000900010073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mmap(&(0x7f00002a9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) accept$packet(r5, 0x0, 0x0) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000454000/0x2000)=nil, &(0x7f0000ff9000/0x5000)=nil, 0x2000, 0x1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.805882312s ago: executing program 3 (id=4): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b0000002f49000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r2}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2b, &(0x7f0000000040)="f38eba98aa81a5f3f628f20db624c8d76ff8150023b0b267b8bc44f60933e935bef3d31cf7c3ec65af4a03c50576034b910d521d84bf6d47d82f86654d8fca65e716914e55eb3213c91a3719b4a927d1f8e8ee7835e227053deab01f137e2c06194a8f130ee4a0c340cd7c39a198996ceef9774bdca86eb84e74c0c055cb314c5e30397cdfc9e0788defa8d12d8afa0b61b632ae9af39935699969fa73139eca96dd8fd382de816c8188", 0xaa) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000980)={0x1, @pix={0x8, 0x5, 0x47524247, 0x1, 0xc8, 0xa45, 0x2, 0x3, 0x0, 0x3, 0x2, 0x7}}) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000000)={r8, 0x0, 0x1, 0x0, 0x3}) ioctl$TUNSETOFFLOAD(r0, 0x8008743f, 0xf0ff1f00000000) 1.699079648s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) io_setup(0x5, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x28f}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r5, 0x5, 0x2002) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000040)=""/33, 0x21, 0x0, &(0x7f0000000380)=""/169, 0xa9}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xd, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb29c25598f129f79ac43c0236f8ed3e57b5b5311df5de3fa5a3381d9ba9b33ab9a883f5a0bc3aa63564122e8fd14e40f4a58cccc4b517d25396690af868e80a5720d270277076102928fa964333d6f3da8f780adb4073b0231f85ad7bea35cc982c5aa5d2c4c4112aa90dd03fe8a8b6c0fd7acb7bc8a0fda03f9b3002753ca180712c3a9734ebcb5bb98204be35fdcc2f37906fdd1246bf562621f52b423bb2c5d41c7c51564658e42dc239aa90cd724d59718ac736c425b82a66a35ce5e2020f51bf9ac50e4d2f0ca3eb58e292179497ff23777fa215cefc186f8e48fb4488654904377cef89d07b0b4ed65c9cf3dc6d4d3f7"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r7, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076844268cb8be14f0884703", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') 747.978677ms ago: executing program 2 (id=6): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x7fffffffffffffff, 0xffffffffffffffff, 0x2}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x8, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0, 0x4}, {0xa, 0x0, 0x7, @mcast1}, r3, 0x800}}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r3}}, 0x1953324e61a417de) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r3, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}}}, 0xa0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x3, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x8, 0x3, 0x9, 0x1, 0x3, 0x4, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x808003, 0x200, 0x1080, 0x3, 0x2, 0x2950bfaf, 0xfff, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x208004, &(0x7f0000000000)=ANY=[], 0x1, 0x290, &(0x7f0000000400)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101"], 0x20}}, 0x2000c004) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r8, 0x560a, &(0x7f00000000c0)={0x0, 0x0, 0x9001}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 554.556289ms ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000300)={0x8, r5, r3}) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r9, @ANYBLOB="010501007f00000100000000000000000000000086dd000067657cd7fb3192e7b034a00f8ef7e73f9360e36f632c18aeb3c48504db82b29b04a0ff78a375ec94453f80ed25989544e465c29227ebd9ea66496ab4dfd85cdee4cdf915d1"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8c4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) r12 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r12, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r12, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) 549.721703ms ago: executing program 3 (id=7): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xd, 0xf, 0x4, 0xffff, 0x2, 0x3, 0x10007f, 0x20000026, 0x4d, 0x6, 0x3, 0xb, 0x2, 0x100, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffffa8, 0x7, 0x3, 0x9, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x201, 0x3e, 0x10000, 0x6, 0x6, 0x9, 0x5, 0x4, 0x8, 0xe, 0x80, 0x1, 0xd, 0x6, 0x8, 0x4, 0x1, 0x2], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e4, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x7fff, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x3ff, 0xffff, 0x46, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x6, 0x103], [0x3, 0xa, 0x4, 0x5, 0xffffffff, 0x100, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x1ff, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x6000, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9, 0x7, 0xa9, 0x5, 0x3, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0xff, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xfffffff7, 0x2, 0x5, 0x1, 0xfffff800, 0x7, 0xe0a7, 0x6, 0x96, 0x381f, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0x6, 0x10080, 0x3, 0x80, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x6101, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) accept(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00], 'wlan0\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r4 = socket(0xa, 0x800, 0xff) setsockopt$inet6_int(r4, 0x29, 0x38, &(0x7f0000000400)=0x83, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) r5 = mq_open(&(0x7f00000001c0)='nfs_export=on', 0x40, 0x51, &(0x7f0000000200)={0xfff, 0xffff, 0x5, 0xffffffff7fffffff}) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x180) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./bus\x00', 0x1000090, 0x0, 0x1, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = getuid() mount$fuse(0x0, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000100), 0x1, &(0x7f0000000300)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x100000001}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}], [{@obj_user={'obj_user', 0x3d, '@-\'$'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000804, &(0x7f0000000100), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") 549.42321ms ago: executing program 4 (id=5): clock_adjtime(0xffffffd3, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x183802, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x200}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newae={0x64, 0x1e, 0x301, 0x70bd2a, 0x24dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d6, 0x2, 0x2b}, @in=@private=0xa010100, 0x3, 0x3500}, [@lifetime_val={0x24, 0x9, {0x5, 0x100000000, 0x8, 0x8000000000000000}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) 0s ago: executing program 0 (id=8): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x3b0, 0x3a8, 0x3a8, 0x3b0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x73, 0x0, 0x2}, 0x0, 0xd0, 0xf0, 0x700, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x5], 0x40, 0x5, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x7, 0x6e9a, 0x101, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x10, 0x2, 0x3, 0x50, @loopback, @mcast2, 0x7, 0x40, 0x0, 0x7fffffff}}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_create(0x8, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xa00, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x81}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000ba00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.221' (ED25519) to the list of known hosts. [ 29.233547][ T4656] cgroup: Unknown subsys name 'net' [ 29.314734][ T4656] cgroup: Unknown subsys name 'cpuset' [ 29.316920][ T4656] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.486157][ T4656] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.508267][ T4671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.509955][ T4671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.510485][ T4671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.513639][ T4674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.514095][ T4676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.514303][ T4676] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.515408][ T4674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.515560][ T4676] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.516931][ T4676] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.518716][ T4676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.519399][ T4674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.521202][ T4674] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.521269][ T4674] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.521761][ T4674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.523967][ T4679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.525584][ T4679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.525873][ T4679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.526207][ T4679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.527492][ T4679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.529872][ T4679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.551380][ T4676] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.552224][ T4676] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.552422][ T4676] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.552771][ T4676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.553032][ T4676] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.859986][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.860393][ T4672] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.860469][ T4672] bridge_slave_0: entered allmulticast mode [ 30.860964][ T4672] bridge_slave_0: entered promiscuous mode [ 30.865239][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.865267][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.865334][ T4672] bridge_slave_1: entered allmulticast mode [ 30.865941][ T4672] bridge_slave_1: entered promiscuous mode [ 30.904964][ T4672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.907862][ T4672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.950279][ T4672] team0: Port device team_slave_0 added [ 30.951674][ T4672] team0: Port device team_slave_1 added [ 30.963752][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.963830][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.963895][ T4669] bridge_slave_0: entered allmulticast mode [ 30.964354][ T4669] bridge_slave_0: entered promiscuous mode [ 30.970163][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.971426][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.972214][ T4672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.973241][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.973250][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.973266][ T4672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.973489][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.973540][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.973595][ T4669] bridge_slave_1: entered allmulticast mode [ 30.974246][ T4669] bridge_slave_1: entered promiscuous mode [ 31.009126][ T4669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.019027][ T4669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.039914][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.040000][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.040058][ T4678] bridge_slave_0: entered allmulticast mode [ 31.040473][ T4678] bridge_slave_0: entered promiscuous mode [ 31.041361][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.041380][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.041465][ T4678] bridge_slave_1: entered allmulticast mode [ 31.041890][ T4678] bridge_slave_1: entered promiscuous mode [ 31.048821][ T4672] hsr_slave_0: entered promiscuous mode [ 31.049187][ T4672] hsr_slave_1: entered promiscuous mode [ 31.050218][ T4669] team0: Port device team_slave_0 added [ 31.051038][ T4669] team0: Port device team_slave_1 added [ 31.068408][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.069830][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.074510][ T4669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.078611][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.079790][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.082313][ T4669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.087084][ T4678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.091163][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.091264][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.091319][ T4668] bridge_slave_0: entered allmulticast mode [ 31.091743][ T4668] bridge_slave_0: entered promiscuous mode [ 31.101332][ T4678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.108740][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.108818][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.108883][ T4668] bridge_slave_1: entered allmulticast mode [ 31.109311][ T4668] bridge_slave_1: entered promiscuous mode [ 31.125826][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.127304][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.127399][ T4682] bridge_slave_0: entered allmulticast mode [ 31.127880][ T4682] bridge_slave_0: entered promiscuous mode [ 31.138863][ T4678] team0: Port device team_slave_0 added [ 31.140133][ T4678] team0: Port device team_slave_1 added [ 31.144225][ T4668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.145942][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.146022][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.146089][ T4682] bridge_slave_1: entered allmulticast mode [ 31.146513][ T4682] bridge_slave_1: entered promiscuous mode [ 31.151619][ T4669] hsr_slave_0: entered promiscuous mode [ 31.151955][ T4669] hsr_slave_1: entered promiscuous mode [ 31.152350][ T4669] debugfs: 'hsr0' already exists in 'hsr' [ 31.152389][ T4669] Cannot create hsr debugfs directory [ 31.162619][ T4668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.171570][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.171596][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.171630][ T4678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.172637][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.172646][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.172660][ T4678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.185188][ T4682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.191468][ T4682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.197130][ T4668] team0: Port device team_slave_0 added [ 31.198223][ T4668] team0: Port device team_slave_1 added [ 31.229502][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.230970][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.231001][ T4668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.231815][ T4682] team0: Port device team_slave_0 added [ 31.232014][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.232092][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.232112][ T4668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.232825][ T4682] team0: Port device team_slave_1 added [ 31.260482][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.260507][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.260520][ T4682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.261558][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.261567][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.261578][ T4682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.266451][ T4678] hsr_slave_0: entered promiscuous mode [ 31.267066][ T4678] hsr_slave_1: entered promiscuous mode [ 31.267284][ T4678] debugfs: 'hsr0' already exists in 'hsr' [ 31.267295][ T4678] Cannot create hsr debugfs directory [ 31.287821][ T4668] hsr_slave_0: entered promiscuous mode [ 31.289542][ T4668] hsr_slave_1: entered promiscuous mode [ 31.290745][ T4668] debugfs: 'hsr0' already exists in 'hsr' [ 31.291739][ T4668] Cannot create hsr debugfs directory [ 31.321818][ T4682] hsr_slave_0: entered promiscuous mode [ 31.322612][ T4682] hsr_slave_1: entered promiscuous mode [ 31.322839][ T4682] debugfs: 'hsr0' already exists in 'hsr' [ 31.322850][ T4682] Cannot create hsr debugfs directory [ 31.371622][ T4669] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.375320][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.376943][ T4669] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.379188][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.389612][ T4669] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.391651][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.392009][ T4669] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.393764][ T4669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.432851][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.432914][ T4669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.433136][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.433171][ T4669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.434770][ T4672] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.437113][ T4672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.438200][ T4672] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.439416][ T4672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.443470][ T4672] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.445902][ T4672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.446775][ T4672] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.448267][ T4672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.470289][ T4682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.473778][ T4682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.475488][ T4682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.478108][ T4682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.480352][ T4682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.482753][ T4682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.484316][ T4682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.486305][ T4682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.491382][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.491422][ T4672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.491499][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.491528][ T4672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.512954][ T4668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.517397][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.518938][ T4668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.521004][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.524509][ T4668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.526614][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.528462][ T4668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.530525][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.535345][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.535387][ T4682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.535472][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.535507][ T4682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.561555][ T4672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.575205][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.575253][ T4668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.575330][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.575359][ T4668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.577789][ T4678] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.580284][ T4678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.584914][ T4672] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.586432][ T4678] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.588612][ T4678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.590135][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.591845][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.595119][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.596517][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.599463][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.600808][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.603062][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.604482][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.610217][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.610276][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.612886][ T4682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.615072][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.615481][ T4678] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.617133][ T4678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.617779][ T4678] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.619729][ T4678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.636238][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.636288][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.642851][ T4682] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.650318][ T4669] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.665035][ T1903] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.665086][ T1903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.665719][ T1903] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.665746][ T1903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.678382][ T1903] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.678432][ T1903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.678757][ T1903] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.678775][ T1903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.710682][ T4682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.716618][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.749707][ T4668] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.751607][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.751650][ T1347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.758157][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.758199][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.786536][ T4678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.790815][ T4678] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.804317][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.804365][ T1347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.804918][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.804939][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.815369][ T4678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.817215][ T4678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.934694][ T4672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.937766][ T4682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.968772][ T4672] veth0_vlan: entered promiscuous mode [ 31.987558][ T4672] veth1_vlan: entered promiscuous mode [ 31.997495][ T4672] veth0_macvtap: entered promiscuous mode [ 32.008018][ T4669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.010642][ T4672] veth1_macvtap: entered promiscuous mode [ 32.025079][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.026174][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.029625][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.044561][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.044635][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.044723][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.057710][ T4678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.068514][ T4669] veth0_vlan: entered promiscuous mode [ 32.075607][ T4668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.077498][ T4669] veth1_vlan: entered promiscuous mode [ 32.109458][ T4678] veth0_vlan: entered promiscuous mode [ 32.120069][ T4669] veth0_macvtap: entered promiscuous mode [ 32.121193][ T4669] veth1_macvtap: entered promiscuous mode [ 32.136361][ T4678] veth1_vlan: entered promiscuous mode [ 32.146314][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.149271][ T4668] veth0_vlan: entered promiscuous mode [ 32.156540][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.156567][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.167137][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.173701][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.173748][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.173773][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.173794][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.179562][ T4678] veth0_macvtap: entered promiscuous mode [ 32.181021][ T4682] veth0_vlan: entered promiscuous mode [ 32.184699][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.184724][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.189109][ T4668] veth1_vlan: entered promiscuous mode [ 32.190003][ T4678] veth1_macvtap: entered promiscuous mode [ 32.199772][ T4682] veth1_vlan: entered promiscuous mode [ 32.209630][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.225381][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.227774][ T4668] veth0_macvtap: entered promiscuous mode [ 32.229394][ T4668] veth1_macvtap: entered promiscuous mode [ 32.231291][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231410][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231435][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231457][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.250109][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.253035][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.259025][ T4672] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.267096][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.267127][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.269217][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.269254][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.269284][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.269302][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.279627][ T4682] veth0_macvtap: entered promiscuous mode [ 32.294752][ T4682] veth1_macvtap: entered promiscuous mode [ 32.309724][ T4847] loop2: detected capacity change from 0 to 128 [ 32.310791][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.310803][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.319767][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.355943][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.359428][ T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.359485][ T15] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.359515][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.359538][ T15] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.359618][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.359629][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.401080][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.401120][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.418380][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.418413][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.440230][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.440255][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.460850][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.460883][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.902660][ T4679] Bluetooth: hci3: connection err: -111 [ 32.902739][ T4679] Bluetooth: hci2: command tx timeout [ 32.902887][ T4679] Bluetooth: hci4: command tx timeout [ 32.902955][ T4679] Bluetooth: hci1: command tx timeout [ 32.903019][ T4679] Bluetooth: hci0: command tx timeout [ 32.903080][ T4679] Bluetooth: hci3: command tx timeout [ 33.531628][ T1903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.531666][ T1903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.705013][ T4863] loop2: detected capacity change from 0 to 512 [ 33.710094][ T4863] vfat: Unknown parameter '' [ 33.844898][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.845203][ T4866] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.845668][ T4866] bridge0: entered allmulticast mode [ 33.851018][ T4866] bridge_slave_1: left allmulticast mode [ 33.851047][ T4866] bridge_slave_1: left promiscuous mode [ 33.851162][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.874606][ T4866] bridge_slave_0: left allmulticast mode [ 33.874625][ T4866] bridge_slave_0: left promiscuous mode [ 33.874698][ T4866] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.238512][ T4874] netlink: 'syz.3.7': attribute type 2 has an invalid length. [ 34.267268][ T4878] loop0: detected capacity change from 0 to 1024 [ 34.293604][ T4878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.297622][ T4868] overlayfs: missing 'lowerdir' [ 34.305746][ T4868] loop3: detected capacity change from 0 to 512 [ 34.350776][ T4868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.383680][ C1] [ 34.384111][ C1] ================================ [ 34.384888][ C1] WARNING: inconsistent lock state [ 34.385676][ C1] syzkaller #0 Not tainted [ 34.386355][ C1] -------------------------------- [ 34.387280][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 34.388463][ C1] syz.3.7/4867 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 34.389493][ C1] ffff0000f50e9be8 (slock-AF_PHONET/1){+.?.}-{3:3}, at: __sk_receive_skb+0x1ac/0x8d4 [ 34.391248][ C1] {SOFTIRQ-ON-W} state was registered at: [ 34.392256][ C1] lock_acquire+0x140/0x368 [ 34.393037][ C1] _raw_spin_lock_nested+0x50/0x6c [ 34.393906][ C1] __sk_receive_skb+0x1ac/0x8d4 [ 34.394698][ C1] pep_do_rcv+0x208/0x684 [ 34.395454][ C1] __release_sock+0x178/0x2c0 [ 34.396257][ C1] release_sock+0x174/0x228 [ 34.397029][ C1] pep_sock_accept+0x804/0xc08 [ 34.397850][ C1] pn_socket_accept+0xc8/0x26c [ 34.398751][ C1] do_accept+0x304/0x42c [ 34.399528][ C1] __sys_accept4+0x11c/0x1f8 [ 34.400328][ C1] __arm64_sys_accept+0x80/0x98 [ 34.401140][ C1] invoke_syscall+0x98/0x244 [ 34.402059][ C1] el0_svc_common+0xe8/0x23c [ 34.402898][ C1] do_el0_svc+0x48/0x58 [ 34.403684][ C1] el0_svc+0x64/0x260 [ 34.404461][ C1] el0t_64_sync_handler+0x48/0x148 [ 34.405381][ C1] el0t_64_sync+0x198/0x19c [ 34.406120][ C1] irq event stamp: 3368 [ 34.406836][ C1] hardirqs last enabled at (3368): [] _raw_spin_unlock_irq+0x30/0x80 [ 34.408611][ C1] hardirqs last disabled at (3367): [] _raw_spin_lock_irq+0x28/0x70 [ 34.410321][ C1] softirqs last enabled at (3362): [] netif_rx+0xac/0xd4 [ 34.411832][ C1] softirqs last disabled at (3363): [] __do_softirq+0x14/0x20 [ 34.413439][ C1] [ 34.413439][ C1] other info that might help us debug this: [ 34.414817][ C1] Possible unsafe locking scenario: [ 34.414817][ C1] [ 34.416138][ C1] CPU0 [ 34.416689][ C1] ---- [ 34.417234][ C1] lock(slock-AF_PHONET/1); [ 34.417970][ C1] [ 34.418513][ C1] lock(slock-AF_PHONET/1); [ 34.419263][ C1] [ 34.419263][ C1] *** DEADLOCK *** [ 34.419263][ C1] [ 34.420570][ C1] 5 locks held by syz.3.7/4867: [ 34.421364][ C1] #0: ffff0000f0b15040 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4 [ 34.423232][ C1] #1: ffff0000f5014360 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x90/0x4a8 [ 34.424897][ C1] #2: ffff800088ad72a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x574/0x16f8 [ 34.426484][ C1] #3: ffff0000f5014968 (slock-AF_PHONET){+.-.}-{3:3}, at: __sk_receive_skb+0x1e0/0x8d4 [ 34.428162][ C1] #4: ffff0000f50149e0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x64c/0xa94 [ 34.429679][ C1] [ 34.429679][ C1] stack backtrace: [ 34.430624][ C1] CPU: 1 UID: 0 PID: 4867 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT [ 34.431961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 34.433549][ C1] Call trace: [ 34.434069][ C1] show_stack+0x2c/0x3c (C) [ 34.434798][ C1] __dump_stack+0x30/0x40 [ 34.435446][ C1] dump_stack_lvl+0xd8/0x12c [ 34.436133][ C1] dump_stack+0x1c/0x28 [ 34.436763][ C1] print_usage_bug+0x310/0x384 [ 34.437519][ C1] mark_lock_irq+0x4a0/0x4a8 [ 34.438335][ C1] mark_lock+0x144/0x1a4 [ 34.439039][ C1] __lock_acquire+0x6bc/0x2f44 [ 34.439834][ C1] lock_acquire+0x140/0x368 [ 34.440556][ C1] _raw_spin_lock_nested+0x50/0x6c [ 34.441360][ C1] __sk_receive_skb+0x1ac/0x8d4 [ 34.442152][ C1] pep_do_rcv+0x208/0x684 [ 34.442823][ C1] __sk_receive_skb+0x458/0x8d4 [ 34.443663][ C1] phonet_rcv+0x64c/0xa94 [ 34.444382][ C1] __netif_receive_skb_one_core+0xc4/0x10c [ 34.445370][ C1] __netif_receive_skb+0x34/0x128 [ 34.446320][ C1] process_backlog+0x610/0x16f8 [ 34.447105][ C1] __napi_poll+0xb0/0x324 [ 34.447820][ C1] net_rx_action+0x568/0xbcc [ 34.448660][ C1] handle_softirqs+0x2e4/0xd34 [ 34.449360][ C1] __do_softirq+0x14/0x20 [ 34.450126][ C1] ____do_softirq+0x14/0x20 [ 34.450916][ C1] call_on_irq_stack+0x30/0x48 [ 34.451694][ C1] do_softirq_own_stack+0x20/0x2c [ 34.452560][ C1] do_softirq+0x90/0xf8 [ 34.453253][ C1] __local_bh_enable_ip+0x240/0x35c [ 34.454151][ C1] netif_rx+0xb4/0xd4 [ 34.454833][ C1] pn_send+0x4e8/0x780 [ 34.455553][ C1] pn_skb_send+0x1dc/0x508 [ 34.456324][ C1] pipe_handler_request+0x128/0x234 [ 34.457189][ C1] pep_sock_close+0x124/0x4a8 [ 34.457960][ C1] pn_socket_release+0x9c/0xbc [ 34.458802][ C1] __sock_release+0xa0/0x1d4 [ 34.459618][ C1] sock_close+0x24/0x38 [ 34.460295][ C1] __fput+0x340/0x744 [ 34.460971][ C1] ____fput+0x20/0x30 [ 34.461638][ C1] task_work_run+0x1c4/0x254 [ 34.462416][ C1] exit_to_user_mode_loop+0x10c/0x17c [ 34.463317][ C1] el0_svc+0x18c/0x260 [ 34.464024][ C1] el0t_64_sync_handler+0x48/0x148 [ 34.464925][ C1] el0t_64_sync+0x198/0x19c [ 34.688679][ T4669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.962655][ T4676] Bluetooth: hci3: command tx timeout [ 34.962666][ T4679] Bluetooth: hci0: command tx timeout [ 34.962692][ T4679] Bluetooth: hci1: command tx timeout [ 34.962706][ T4679] Bluetooth: hci4: command tx timeout [ 34.962719][ T4679] Bluetooth: hci2: command tx timeout [ 35.128523][ T4678] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.042105][ T4670] Bluetooth: hci2: command tx timeout [ 37.042141][ T4670] Bluetooth: hci1: command tx timeout [ 37.042139][ T4679] Bluetooth: hci4: command tx timeout [ 37.042165][ T4670] Bluetooth: hci0: command tx timeout [ 37.042983][ T4676] Bluetooth: hci3: command tx timeout [ 39.122107][ T4671] Bluetooth: hci4: command tx timeout [ 39.122145][ T4671] Bluetooth: hci2: command tx timeout [ 39.122144][ T4670] Bluetooth: hci3: command tx timeout [ 39.122179][ T4679] Bluetooth: hci1: command tx timeout [ 39.122318][ T4676] Bluetooth: hci0: command tx timeout