last executing test programs: 8m38.6140703s ago: executing program 3 (id=111): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 8m38.295232988s ago: executing program 3 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f00000003c0)=ANY=[], 0x5, 0x301, &(0x7f0000000080)="$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") write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 8m38.21302333s ago: executing program 2 (id=115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xfdb, 0x4) sendto$inet(r0, &(0x7f00000002c0)="ab", 0xfffffffffffffdd8, 0x4008825, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x5, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) 8m38.024534454s ago: executing program 3 (id=116): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c) 8m37.960971816s ago: executing program 2 (id=118): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=@udp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) 8m37.80639923s ago: executing program 1 (id=119): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f00000002c0), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 8m37.735332291s ago: executing program 2 (id=121): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18, 0xaaaa}, @uexit={0x0, 0x18, 0xbbbb}], 0x30}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000100)=0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xbbbb) 8m37.690631963s ago: executing program 1 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000719000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r1, 0x4095, 0x7721, 0x16, 0x0, 0x0) 8m37.566628735s ago: executing program 0 (id=123): mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 8m37.559920426s ago: executing program 1 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x20, 0x1000) r2 = fcntl$dupfd(r0, 0x406, r0) fanotify_mark(r1, 0x1, 0x40000019, r2, 0x0) r3 = syz_io_uring_setup(0x91a, &(0x7f0000000540)={0x0, 0x40c3b1, 0x800, 0x1, 0x80082, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r8, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r3}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 8m37.454678448s ago: executing program 0 (id=125): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) listen(r2, 0x1) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080}, 0x10080) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 8m37.386302059s ago: executing program 2 (id=126): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m37.385968059s ago: executing program 1 (id=127): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mkdir(0x0, 0x1f4) mount(0x0, &(0x7f0000000300)='./config\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x3, 0x7c, &(0x7f0000000840)="d3773b8bc34b9c4996a06a6a3d8b2ff630132ac0e12a8109ee50b079871794ee40d4eb11f6c178843c928819151362f45f4290802b713cf1ca90abcccdb82022ebc0594422b98fc96b100a1c52033dbccd3b0ed63ed7a4181a806b0b5bb42ba46d5c1dcaf645f4dc270668a52b2dde6d46d7321bc0ac5cf08b805e6f") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) 8m37.229416693s ago: executing program 0 (id=128): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) unshare(0x4020400) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x803, 0x5, 0x7fffffff, 0x3, 0x1, 0x6, 0x6, 0x2, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) close_range(r1, 0xffffffffffffffff, 0x0) 8m37.088082707s ago: executing program 0 (id=129): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 8m37.040867228s ago: executing program 3 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x58, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 8m34.657612045s ago: executing program 3 (id=131): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) 8m34.648714556s ago: executing program 1 (id=132): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x3c7}) 8m34.570705498s ago: executing program 2 (id=133): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/134, 0xbd}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 8m33.979751413s ago: executing program 0 (id=134): r0 = gettid() r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r0) r4 = getpid() tkill(r4, 0x13) 8m23.535990285s ago: executing program 0 (id=135): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 8m23.33972876s ago: executing program 3 (id=136): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 8m23.297994081s ago: executing program 1 (id=137): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00280e11ec00"}) 8m22.544360229s ago: executing program 2 (id=138): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setresgid(0xee00, 0xee01, 0x0) getpid() r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 8m8.543721658s ago: executing program 32 (id=135): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 8m7.442526855s ago: executing program 33 (id=137): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00280e11ec00"}) 8m7.342732557s ago: executing program 34 (id=138): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setresgid(0xee00, 0xee01, 0x0) getpid() r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 8m7.157379782s ago: executing program 35 (id=136): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 5m31.078511241s ago: executing program 7 (id=142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x9, 0x78, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x1b}, 0x80, &(0x7f0000000f80)=[{&(0x7f00000004c0)='J', 0x1}], 0x1}, 0x20000015) 5m30.363169618s ago: executing program 7 (id=143): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400008000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x16, 0xc49, &(0x7f0000001cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000040)=ANY=[], 0x41, 0x150f, &(0x7f0000003140)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x4c, r4, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @random="5e015f724f2d", {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040041}, 0x8800) 5m28.695518739s ago: executing program 7 (id=144): setns(0xc9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0x2}, 0x32) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30000000000000000000000012e0531f7ad3f42c20e32eb771db8200a8a19e6053163f3d"], 0x38}}, 0x0) 5m13.568337426s ago: executing program 36 (id=144): setns(0xc9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0x2}, 0x32) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30000000000000000000000012e0531f7ad3f42c20e32eb771db8200a8a19e6053163f3d"], 0x38}}, 0x0) 55.527295681s ago: executing program 5 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 54.313691991s ago: executing program 5 (id=530): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x40080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x884) 52.566618963s ago: executing program 5 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000810) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 48.511117892s ago: executing program 5 (id=547): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) 37.171255057s ago: executing program 5 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x30, 0x0) mq_notify(r5, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000940)=""/251, 0xfb}], 0x1) pread64(r3, &(0x7f0000002840)=""/4096, 0x1000, 0x4) 36.546969202s ago: executing program 5 (id=566): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) unshare(0x2c020400) poll(&(0x7f0000000140)=[{r2, 0x8}, {r1, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) 19.576450604s ago: executing program 37 (id=566): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) unshare(0x2c020400) poll(&(0x7f0000000140)=[{r2, 0x8}, {r1, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) 11.728379625s ago: executing program 4 (id=594): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000440)=0x8000a, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 11.624132047s ago: executing program 8 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.228436101s ago: executing program 8 (id=598): syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 8.820004495s ago: executing program 6 (id=599): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40, 0x4000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x20ab5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x40000) 8.569279382s ago: executing program 4 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007c3999dbf00fedbdf251f7c00000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) socketpair$unix(0x1, 0x2, 0x0, 0x0) 7.578076085s ago: executing program 6 (id=601): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x800ffd, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x4102, 0xfff9, 0x1002, 0x0, 0x7, 0x0, 0x0, 0x8, 0xf}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x2004402, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 6.807452474s ago: executing program 8 (id=602): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 6.384692444s ago: executing program 4 (id=603): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) memfd_create(0x0, 0xa) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) io_setup(0x482, 0x0) io_submit(0x0, 0x0, &(0x7f0000001300)) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x40012161) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) shmget(0x1, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) 5.809026258s ago: executing program 6 (id=604): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0xb3bd3000) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = userfaultfd(0x80001) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 5.438426457s ago: executing program 4 (id=605): socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) close_range(r0, r0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500090000000000050008000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 5.095699046s ago: executing program 8 (id=606): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="400d12"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x23, 0x8, 0x7fffffffeffe) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x2, 0x4e24, 0x0, 0x0, 0x80, 0x80, 0x2f}, {0x948, 0x0, 0x800, 0xbd4, 0x2a, 0x401, 0x4, 0x7}, {0x7, 0x2, 0x7, 0x6}, 0x0, 0x6e6bb0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x33}, 0x2, @in6=@mcast1, 0x3503, 0x3, 0x2, 0x8, 0x7, 0x7fffffff, 0x8}}, 0xe8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r2}, 0xc) syz_usb_ep_write(r0, 0x81, 0xcc, &(0x7f0000000040)="b9425b44651dd20000963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fcea00080000000000004cd9f5d3969890522c7715531d459db3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84fffdec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b44800448a") 3.660589421s ago: executing program 4 (id=607): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffff2) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.755814013s ago: executing program 6 (id=608): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 2.744858593s ago: executing program 4 (id=609): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r1, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0xc, 0x7ff, 0x808, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x1, 0x5, 0x3, 0xa}, 0x50) 2.263534795s ago: executing program 6 (id=610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(r0, 0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000280)={0x10000014}) 1.747285247s ago: executing program 8 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000002840)={'syz', 0x2}, &(0x7f00000011c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eacab940ab5c96cb5d81dac1ad2243d878ddea08b78f666b96206bafe0ab1bd5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4dec1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb751d21b2", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r4, r4, r3}, &(0x7f0000001780)=""/4097, 0x1001, 0x0) 206.927665ms ago: executing program 6 (id=612): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) tgkill(r0, r0, 0x5) ptrace$peeksig(0x4209, r0, 0x0, &(0x7f0000000fc0)) fsopen(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x442, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) waitid(0x2, r1, 0x0, 0x4, 0x0) 0s ago: executing program 8 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f00000007c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='dummy_udc.0\n', 0xc) syz_usb_connect$midi(0x3, 0x3c, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a, 0x1, 0x1, 0x79, 0x0, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xff, 0x40}], [{{0x9, 0x5, 0x4, 0x3, 0x8, 0x1, 0x8, 0x8, {0x9, 0x25, 0x1, 0x5, "d9d0a607ff"}}}]}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x5, 0xb1, 0x10, 0x40, 0x3}, 0x0, 0x0}) kernel console output (not intermixed with test programs): (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 379.389532][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.479686][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.489480][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.498051][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.506438][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.514226][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 379.522014][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.681353][ T7346] wlan0 speed is unknown, defaulting to 1000 [ 380.404099][ T7346] chnl_net:caif_netlink_parms(): no params data found [ 380.556854][ T7368] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 380.900393][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 380.930450][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.966347][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.011104][ T7346] bridge_slave_0: entered allmulticast mode [ 381.024364][ T7346] bridge_slave_0: entered promiscuous mode [ 381.046322][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.063431][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.073398][ T7346] bridge_slave_1: entered allmulticast mode [ 381.102089][ T7346] bridge_slave_1: entered promiscuous mode [ 381.179489][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.606395][ T51] Bluetooth: hci1: command tx timeout [ 382.465223][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.990671][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.6.235'. [ 383.024407][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.6.235'. [ 383.201019][ T7346] team0: Port device team_slave_0 added [ 383.262734][ T7346] team0: Port device team_slave_1 added [ 383.609582][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.625772][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.689376][ T5787] Bluetooth: hci1: command tx timeout [ 383.730102][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.185306][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.208496][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.268877][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.276573][ C0] net_ratelimit: 3880 callbacks suppressed [ 384.276588][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 384.297139][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.309089][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.329331][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 384.341182][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.352943][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.364494][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 384.376335][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.387914][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 384.399573][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.971188][ T7346] hsr_slave_0: entered promiscuous mode [ 385.042348][ T7346] hsr_slave_1: entered promiscuous mode [ 385.126265][ T7346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.133877][ T7346] Cannot create hsr debugfs directory [ 385.766608][ T5788] Bluetooth: hci1: command tx timeout [ 386.185822][ T5788] Bluetooth: hci5: command 0x0406 tx timeout [ 386.192949][ T5788] Bluetooth: hci6: command 0x0406 tx timeout [ 387.847491][ T51] Bluetooth: hci1: command tx timeout [ 389.286201][ C0] net_ratelimit: 4541 callbacks suppressed [ 389.286214][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.303622][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 389.315110][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.326612][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 389.338065][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.351762][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 389.363232][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 389.375083][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 389.386936][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.398447][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.023076][ T7440] bond_slave_0: entered promiscuous mode [ 392.029191][ T7440] bond_slave_1: entered promiscuous mode [ 392.091064][ T7440] bond_slave_0: left promiscuous mode [ 392.096591][ T7440] bond_slave_1: left promiscuous mode [ 392.134768][ T7440] bond1: (slave vlan2): making interface the new active one [ 392.160976][ T7440] bond_slave_0: entered promiscuous mode [ 392.166780][ T7440] bond_slave_1: entered promiscuous mode [ 392.193877][ T7440] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 392.851236][ T7455] loop4: detected capacity change from 0 to 128 [ 394.298247][ C0] net_ratelimit: 4875 callbacks suppressed [ 394.298261][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 394.315902][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 394.328456][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 394.341063][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.352848][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.364397][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 394.376300][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.387953][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.407648][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 394.419271][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 394.636567][ T7306] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 394.756184][ T7477] netlink: 104 bytes leftover after parsing attributes in process `syz.4.248'. [ 394.924095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 394.990108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 395.012731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 398.276325][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.248'. [ 399.306439][ C0] net_ratelimit: 4479 callbacks suppressed [ 399.306459][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 399.323924][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.335726][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.347515][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 399.359327][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.371118][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 399.382953][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.398430][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 399.410234][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 399.422994][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 400.735444][ T7346] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 400.938190][ T7346] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 400.970548][ T7346] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 401.012213][ T7346] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 401.827468][ T7516] syz.6.252 uses obsolete (PF_INET,SOCK_PACKET) [ 401.852894][ T7516] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 401.852894][ T7516] The task syz.6.252 (7516) triggered the difference, watch for misbehavior. [ 403.235248][ T7499] syzkaller0: entered promiscuous mode [ 403.263763][ T7499] syzkaller0: entered allmulticast mode [ 404.316915][ C0] net_ratelimit: 4127 callbacks suppressed [ 404.316935][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 404.335274][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.347117][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.358918][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 404.370715][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.382500][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.399322][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 404.411135][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 404.422889][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.434741][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.510945][ T7541] trusted_key: encrypted_key: insufficient parameters specified [ 406.756382][ T3433] hsr_slave_0: left promiscuous mode [ 407.228132][ T7548] loop4: detected capacity change from 0 to 1764 [ 409.326744][ C0] net_ratelimit: 4715 callbacks suppressed [ 409.326764][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 409.344299][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 409.356647][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 409.368801][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.380370][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.391819][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 409.403442][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.415234][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.431596][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 409.443171][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 409.615256][ T3433] hsr_slave_1: left promiscuous mode [ 409.748841][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.839508][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.878293][ T3433] bridge_slave_1: left allmulticast mode [ 409.904050][ T3433] bridge_slave_1: left promiscuous mode [ 409.952229][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.034317][ T3433] bridge_slave_0: left allmulticast mode [ 410.063935][ T3433] bridge_slave_0: left promiscuous mode [ 410.083847][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.336442][ C0] net_ratelimit: 6131 callbacks suppressed [ 414.336462][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.354069][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 414.365779][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.377301][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 414.389060][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.402249][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 414.413931][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 414.425749][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 414.437641][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.449450][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.378074][ T3433] team0 (unregistering): Port device team_slave_1 removed [ 415.502559][ T3433] team0 (unregistering): Port device team_slave_0 removed [ 415.609263][ T3433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.729629][ T3433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.465816][ T3433] bond0 (unregistering): Released all slaves [ 417.118831][ T7558] netlink: 52 bytes leftover after parsing attributes in process `syz.6.269'. [ 417.148588][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.155955][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.205306][ T7559] netlink: 76 bytes leftover after parsing attributes in process `syz.6.269'. [ 417.230126][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.237375][ T7559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.244863][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.252052][ T7559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.351045][ T7566] tipc: Cannot configure node identity twice [ 417.423021][ T7559] netlink: 52 bytes leftover after parsing attributes in process `syz.6.269'. [ 417.503497][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.510799][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.735900][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.638000][ T7582] loop6: detected capacity change from 0 to 256 [ 419.346474][ C0] net_ratelimit: 4609 callbacks suppressed [ 419.346492][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 419.364811][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.376597][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.388409][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 419.400211][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.411972][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.428153][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 419.439651][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 419.451230][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.462859][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.969088][ T7570] bond1 (unregistering): Released all slaves [ 420.267429][ T7346] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.340872][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.348075][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.492708][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.499959][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.356157][ C0] net_ratelimit: 4561 callbacks suppressed [ 424.356172][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 424.373532][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.385033][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.396504][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 424.407959][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.419444][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 424.430972][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.446497][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 424.458005][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 424.469852][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 425.430705][ T7616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.325829][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.712585][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.5.286'. [ 428.274943][ T7647] veth0_to_bond: entered promiscuous mode [ 428.295700][ T7647] veth0_to_bond: entered allmulticast mode [ 429.261448][ T7346] veth0_vlan: entered promiscuous mode [ 429.325911][ T7346] veth1_vlan: entered promiscuous mode [ 429.367396][ C0] net_ratelimit: 3820 callbacks suppressed [ 429.367411][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 429.384957][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 429.396670][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.408413][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.420162][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 429.431895][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.443646][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 429.455384][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.470354][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 429.482104][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 429.921619][ T7669] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 429.983402][ T7669] team0 (unregistering): Port device team_slave_0 removed [ 430.384664][ T7669] team0 (unregistering): Failed to send options change via netlink (err -105) [ 430.498595][ T7669] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 430.746884][ T7669] team0 (unregistering): Port device team_slave_1 removed [ 430.896292][ T7683] netlink: 'syz.5.292': attribute type 4 has an invalid length. [ 431.264079][ T7346] veth0_macvtap: entered promiscuous mode [ 431.319832][ T7346] veth1_macvtap: entered promiscuous mode [ 431.419742][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.490383][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.526230][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.615716][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.692764][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.863915][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.378094][ C0] net_ratelimit: 5547 callbacks suppressed [ 434.378108][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 434.395507][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 434.407056][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.418616][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.430131][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 434.441686][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.453293][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 434.464836][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.478742][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 434.490270][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 436.557366][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.766067][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.837698][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.943348][ T7712] wlan0 speed is unknown, defaulting to 1000 [ 439.313221][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.329411][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.337697][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.345653][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.355480][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 439.373470][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.386282][ C0] net_ratelimit: 5365 callbacks suppressed [ 439.386299][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.416970][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 439.428852][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 439.441505][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 439.454131][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.466017][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.477958][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 439.489849][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.501766][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.519628][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 439.653527][ T7721] wlan0 speed is unknown, defaulting to 1000 [ 440.253380][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.259879][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.317117][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 440.489744][ T7736] bond2: entered promiscuous mode [ 440.559342][ T7736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.957960][ T7747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.057891][ T7747] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 441.141825][ T7747] bond2: (slave sit1): Error -95 calling set_mac_address [ 441.288428][ T28] audit: type=1326 audit(1786401743.528:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 441.435856][ T28] audit: type=1326 audit(1786401743.538:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 441.470643][ T5787] Bluetooth: hci0: command tx timeout [ 441.674213][ T28] audit: type=1326 audit(1786401743.538:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 442.002309][ T7761] tipc: Failed to remove unknown binding: 66,0,0/0:1726626106/1726626108 [ 442.079200][ T7761] tipc: Failed to remove unknown binding: 66,0,0/0:1726626106/1726626107 [ 442.099576][ T28] audit: type=1326 audit(1786401743.538:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 442.558059][ T7761] tipc: Failed to remove unknown binding: 66,0,0/0:1726626106/1726626108 [ 442.579482][ T7761] tipc: Failed to remove unknown binding: 66,0,0/0:1726626106/1726626107 [ 442.606143][ T28] audit: type=1326 audit(1786401743.538:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 442.711535][ T28] audit: type=1326 audit(1786401743.558:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 442.840616][ T28] audit: type=1326 audit(1786401743.558:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 442.943613][ T28] audit: type=1326 audit(1786401743.588:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 443.151630][ T28] audit: type=1326 audit(1786401743.588:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 443.526600][ T5787] Bluetooth: hci0: command tx timeout [ 444.398030][ C0] net_ratelimit: 5262 callbacks suppressed [ 444.398044][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 444.415643][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 444.427493][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 444.439216][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.450712][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.462147][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 444.473583][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.485091][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.498794][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 444.510251][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 446.356140][ T5787] Bluetooth: hci0: command tx timeout [ 447.508858][ T28] audit: type=1326 audit(1786401743.588:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 447.676650][ T7779] capability: warning: `syz.6.313' uses 32-bit capabilities (legacy support in use) [ 447.706139][ T28] audit: type=1326 audit(1786401743.588:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 447.876344][ T28] audit: type=1326 audit(1786401743.588:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 448.059432][ T28] audit: type=1326 audit(1786401743.588:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 448.256052][ T28] audit: type=1326 audit(1786401743.588:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 448.392176][ T28] audit: type=1326 audit(1786401743.588:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 448.418559][ T51] Bluetooth: hci0: command tx timeout [ 448.542558][ T28] audit: type=1326 audit(1786401743.588:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 448.689551][ T28] audit: type=1326 audit(1786401743.588:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 448.841105][ T28] audit: type=1326 audit(1786401743.608:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 448.974541][ T28] audit: type=1326 audit(1786401743.608:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.6.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 449.406362][ C0] net_ratelimit: 6664 callbacks suppressed [ 449.406382][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.423986][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 449.435805][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.447609][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 449.466115][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.481796][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 449.493620][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 449.506081][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 449.518520][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.530315][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.374631][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.318'. [ 450.903919][ T7721] chnl_net:caif_netlink_parms(): no params data found [ 451.489550][ T7821] loop6: detected capacity change from 0 to 128 [ 451.507144][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.514300][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.604020][ T7721] bridge_slave_0: entered allmulticast mode [ 451.653957][ T7721] bridge_slave_0: entered promiscuous mode [ 451.694648][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.776390][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.783675][ T7721] bridge_slave_1: entered allmulticast mode [ 451.867289][ T7721] bridge_slave_1: entered promiscuous mode [ 451.902343][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.322'. [ 452.111397][ T7721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.219078][ T7721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.499020][ T7721] team0: Port device team_slave_0 added [ 452.559957][ T7721] team0: Port device team_slave_1 added [ 452.762032][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.806030][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.922517][ T7721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.216726][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.262461][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.398511][ T7721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.417826][ C0] net_ratelimit: 4218 callbacks suppressed [ 454.417846][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 454.435617][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 454.447497][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.460783][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.472672][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 454.484488][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.496321][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 454.508124][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.523498][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 454.535292][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 454.710233][ T51] Bluetooth: hci6: unexpected event for opcode 0x2010 [ 455.684474][ T7721] hsr_slave_0: entered promiscuous mode [ 455.743691][ T7721] hsr_slave_1: entered promiscuous mode [ 455.816243][ T7721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.823854][ T7721] Cannot create hsr debugfs directory [ 455.858010][ T7866] Bluetooth: MGMT ver 1.22 [ 458.572695][ T5819] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 458.647801][ T5819] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 458.862736][ T7926] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 458.872208][ T7926] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 458.959138][ T5817] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 459.158035][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 459.226913][ T7912] ceph: No mds server is up or the cluster is laggy [ 459.238026][ T6420] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 459.270691][ T7913] ceph: No mds server is up or the cluster is laggy [ 459.314104][ T7910] ceph: No mds server is up or the cluster is laggy [ 459.429319][ C0] net_ratelimit: 4175 callbacks suppressed [ 459.429336][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 459.446914][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 459.459230][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 459.464693][ T7721] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 459.471512][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.477972][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.489176][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.497123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.508521][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 459.528280][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.540114][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.599594][ T5779] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 459.663563][ T7721] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 459.717625][ T7721] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 461.047349][ T5819] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 461.773328][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 462.091056][ T5779] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 462.131146][ T7721] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 462.408296][ T5779] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 462.766927][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 462.798917][ T5818] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 462.917697][ T5779] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 463.409566][ T5818] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 464.039184][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.106850][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.6.345'. [ 464.437719][ C0] net_ratelimit: 4406 callbacks suppressed [ 464.437740][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 464.455329][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 464.467108][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.479384][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.491143][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 464.502886][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.514686][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 464.526484][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.541655][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 464.546433][ T7977] loop6: detected capacity change from 0 to 256 [ 464.553383][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 464.746206][ T7979] loop4: detected capacity change from 0 to 1024 [ 464.797435][ T7982] netlink: 'syz.6.346': attribute type 4 has an invalid length. [ 464.862088][ T7982] netlink: 'syz.6.346': attribute type 5 has an invalid length. [ 464.924231][ T7982] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.346'. [ 465.031351][ T7721] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.089008][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.408340][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.415517][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.763820][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.771049][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.189982][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 466.426872][ T7996] netlink: 'syz.5.351': attribute type 4 has an invalid length. [ 466.692429][ T8003] netlink: 'syz.5.351': attribute type 4 has an invalid length. [ 466.997228][ T7153] hsr_slave_0: left promiscuous mode [ 467.114793][ T7153] hsr_slave_1: left promiscuous mode [ 467.196375][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.203844][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.581494][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.613238][ T8006] loop4: detected capacity change from 0 to 8192 [ 467.652743][ T7153] bridge_slave_1: left allmulticast mode [ 467.697534][ T7153] bridge_slave_1: left promiscuous mode [ 467.703357][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.996875][ T7153] bridge_slave_0: left allmulticast mode [ 468.027714][ T7153] bridge_slave_0: left promiscuous mode [ 468.054723][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.275065][ T8006] loop4: p1[EZD] p3 p4 [ 468.467050][ T8020] xt_nat: multiple ranges no longer supported [ 468.556469][ T8006] loop4: partition table partially beyond EOD, truncated [ 468.696821][ T8006] loop4: p3 start 150994944 is beyond EOD, truncated [ 468.856742][ T5142] loop4: p1[EZD] p3 p4 [ 468.889160][ T5142] loop4: partition table partially beyond EOD, truncated [ 469.004277][ T5142] loop4: p3 start 150994944 is beyond EOD, truncated [ 469.309698][ T7153] veth1_macvtap: left promiscuous mode [ 469.363669][ T7153] veth0_macvtap: left promiscuous mode [ 469.404770][ T7153] veth1_vlan: left promiscuous mode [ 469.447552][ C0] net_ratelimit: 4009 callbacks suppressed [ 469.447574][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 469.460542][ T7153] veth0_vlan: left promiscuous mode [ 469.465149][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 469.482156][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 469.494549][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.506373][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.518254][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 469.530082][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.541886][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.558573][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 469.570381][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 472.125799][ T7784] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 472.322811][ T7789] udevd[7789]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 472.343417][ T7784] udevd[7784]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 472.739909][ T3433] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 473.755239][ T8060] CIFS mount error: No usable UNC path provided in device string! [ 473.755239][ T8060] [ 473.787150][ T8060] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 473.905940][ T7153] team0 (unregistering): Port device team_slave_1 removed [ 474.094330][ T7153] team0 (unregistering): Port device team_slave_0 removed [ 474.279817][ T7153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.395423][ T7153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.459125][ C0] net_ratelimit: 3898 callbacks suppressed [ 474.459146][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 474.476688][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 474.489071][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 474.501422][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.513220][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.525052][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 474.536534][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.548291][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.562292][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 474.573978][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 477.677321][ T7153] bond0 (unregistering): Released all slaves [ 478.261154][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.362'. [ 479.466529][ C0] net_ratelimit: 5877 callbacks suppressed [ 479.466548][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 479.484153][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.495928][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.507644][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.519343][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.531050][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.542796][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.554499][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.569774][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 479.581636][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 482.593942][ T8095] loop6: detected capacity change from 0 to 1024 [ 482.699388][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.044708][ T8095] overlayfs: unescaped trailing colons in lowerdir mount option. [ 483.134668][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 483.134763][ T28] audit: type=1804 audit(1786401785.368:23): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.371" name="/newroot/73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=2 res=1 errno=0 [ 483.239432][ T8100] hfsplus: bad catalog file entry [ 483.920786][ T62] hfsplus: b-tree write err: -5, ino 3 [ 483.946169][ T62] hfsplus: bad catalog file entry [ 484.413047][ T28] audit: type=1326 audit(1786401786.658:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.6.374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 484.476874][ C0] net_ratelimit: 4390 callbacks suppressed [ 484.476892][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 484.495088][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.506805][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.518539][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 484.530328][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.542077][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.558148][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 484.570041][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 484.581784][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.593540][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.605219][ T28] audit: type=1326 audit(1786401786.658:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.6.374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 484.829291][ T28] audit: type=1326 audit(1786401786.658:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.6.374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 485.042704][ T28] audit: type=1326 audit(1786401786.658:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.6.374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 485.145772][ T7721] veth0_vlan: entered promiscuous mode [ 485.214261][ T7721] veth1_vlan: entered promiscuous mode [ 485.251321][ T28] audit: type=1326 audit(1786401786.658:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.6.374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 485.430550][ T28] audit: type=1326 audit(1786401786.698:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.6.374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 485.459181][ T7721] veth0_macvtap: entered promiscuous mode [ 485.544926][ T7721] veth1_macvtap: entered promiscuous mode [ 485.653372][ T28] audit: type=1326 audit(1786401786.698:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.6.374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 485.733154][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.776479][ T5782] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 485.834478][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.869694][ T28] audit: type=1326 audit(1786401786.698:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.6.374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 485.935395][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.010432][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.030768][ T5782] usb 7-1: Using ep0 maxpacket: 16 [ 486.076001][ T5782] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 486.105569][ T28] audit: type=1326 audit(1786401786.698:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.6.374" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 486.136087][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.156125][ T5782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.196157][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.206576][ T5782] usb 7-1: Product: syz [ 486.210764][ T5782] usb 7-1: Manufacturer: syz [ 486.215366][ T5782] usb 7-1: SerialNumber: syz [ 486.260864][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.302212][ T5782] r8152-cfgselector 7-1: config 0 descriptor?? [ 486.337550][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.457043][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.534014][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.646495][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.719717][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.804084][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.103647][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.150333][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.211705][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.647470][ T5782] r8152-cfgselector 7-1: Unknown version 0x0000 [ 487.661438][ T5782] r8152-cfgselector 7-1: USB disconnect, device number 3 [ 487.756192][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.824139][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.984162][ T7721] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.021421][ T7721] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.061075][ T7721] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.103184][ T7721] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.714504][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.803424][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.926245][ T8160] syzkaller0: entered promiscuous mode [ 489.006139][ T8160] syzkaller0: entered allmulticast mode [ 489.436921][ T8074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.475226][ T8074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.486131][ C0] net_ratelimit: 4959 callbacks suppressed [ 489.486147][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.506865][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 489.518592][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 489.530827][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 489.543100][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.554800][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.566583][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 489.578297][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.590027][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.608297][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 490.727276][ T8181] netlink: 'syz.5.387': attribute type 1 has an invalid length. [ 491.089403][ T8185] veth3: entered allmulticast mode [ 491.146445][ T8185] bond1: (slave veth3): Enslaving as an active interface with a down link [ 494.506940][ C0] net_ratelimit: 3981 callbacks suppressed [ 494.506958][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 494.524675][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 494.537227][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 494.549744][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.561653][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.573481][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 494.585319][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.597202][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.614668][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 494.626548][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 498.041383][ T8255] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 499.333399][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.409'. [ 499.505683][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.410'. [ 499.517330][ C0] net_ratelimit: 4719 callbacks suppressed [ 499.517347][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.534979][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.546796][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 499.558624][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.570407][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.587772][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 499.599561][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 499.611359][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.623206][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.635082][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 499.687725][ T8278] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.696876][ T8278] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.705596][ T8278] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.714412][ T8278] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.900557][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.409'. [ 500.049166][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 500.227496][ T8292] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.236441][ T8292] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.245155][ T8292] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.254241][ T8292] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.476055][ T5782] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 500.565415][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 500.828387][ T5782] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 500.864473][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.928370][ T5782] usb 5-1: Product: syz [ 500.946493][ T5782] usb 5-1: Manufacturer: syz [ 500.951142][ T5782] usb 5-1: SerialNumber: syz [ 501.592589][ T5782] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 501.676582][ T5782] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 501.696146][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.702499][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.781434][ T5782] lan78xx: probe of 5-1:1.0 failed with error -71 [ 501.928924][ T5782] usb 5-1: USB disconnect, device number 3 [ 502.459185][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.416'. [ 503.913192][ T8346] Cannot find add_set index 0 as target [ 504.526067][ C0] net_ratelimit: 3974 callbacks suppressed [ 504.526083][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 504.543790][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.555668][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 504.567495][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.583779][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 504.595487][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 504.608032][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 504.620617][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.632477][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.644287][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 505.236866][ T8359] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 505.749064][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.425'. [ 505.816898][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.8.425'. [ 505.890317][ T8362] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.899371][ T8362] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.908167][ T8362] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.916938][ T8362] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.239296][ T8364] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.263260][ T8369] futex_wake_op: syz.6.428 tries to shift op by 144; fix this program [ 506.293881][ T8364] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.210706][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'. [ 509.536229][ C0] net_ratelimit: 5001 callbacks suppressed [ 509.536247][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 509.553603][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.565070][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.576506][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 509.587966][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.599380][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 509.611042][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.624365][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 509.635829][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 509.647593][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 514.547166][ C0] net_ratelimit: 8682 callbacks suppressed [ 514.547179][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 514.564486][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 514.576019][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.587489][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.598928][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 514.610357][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.621776][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 514.633249][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.646521][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 514.657929][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 519.556169][ C0] net_ratelimit: 7721 callbacks suppressed [ 519.556189][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.580070][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 519.591987][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 519.603899][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.615762][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.630003][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 519.642036][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.654053][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 519.666052][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.683170][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 519.796455][ T8403] xt_HMARK: spi-set and port-set can't be combined [ 519.843956][ T8394] loop4: detected capacity change from 0 to 1024 [ 519.875649][ T8394] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 519.996311][ T8394] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 520.099835][ T8394] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 520.243609][ T8394] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #5: comm syz.4.437: unexpected bad inode w/o EXT4_IGET_BAD [ 520.336277][ T8394] EXT4-fs (loop4): no journal found [ 520.367116][ T8394] EXT4-fs (loop4): can't get journal size [ 520.445529][ T8394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 520.576546][ T8412] loop8: detected capacity change from 0 to 8 [ 521.049931][ T6752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.073057][ T8412] SQUASHFS error: lzo decompression failed, data probably corrupt [ 521.144394][ T8412] SQUASHFS error: Failed to read block 0x0: -5 [ 521.169060][ T8412] SQUASHFS error: lzo decompression failed, data probably corrupt [ 521.233366][ T8412] SQUASHFS error: Failed to read block 0x0: -5 [ 521.278928][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 521.278941][ T28] audit: type=1800 audit(1786401823.529:76): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.439" name="file2" dev="loop8" ino=3 res=0 errno=0 [ 522.565121][ T8436] netlink: 24 bytes leftover after parsing attributes in process `syz.8.444'. [ 522.585791][ T8436] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 523.721183][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.5.447'. [ 524.566507][ C0] net_ratelimit: 3305 callbacks suppressed [ 524.566541][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.586209][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.619499][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 524.633025][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 524.646529][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.660120][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.673820][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 524.687307][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.701005][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 524.715800][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.072378][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.452'. [ 528.626752][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.8.455'. [ 528.836780][ T8493] xfrm0: entered allmulticast mode [ 529.442579][ T5819] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 529.576121][ C0] net_ratelimit: 3684 callbacks suppressed [ 529.576139][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 529.593798][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.609603][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 529.621419][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 529.633886][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 529.646372][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.658225][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.670092][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 529.681888][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.693738][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.894785][ T5819] usb 9-1: config 0 has no interfaces? [ 529.904856][ T5819] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 529.943425][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.009528][ T5819] usb 9-1: config 0 descriptor?? [ 530.707286][ T5819] usb 9-1: USB disconnect, device number 2 [ 530.983037][ T8512] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 532.637274][ T8530] syz_tun: entered allmulticast mode [ 532.683171][ T8530] lo: entered allmulticast mode [ 532.718397][ T8532] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 533.928386][ T8534] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 533.967405][ T8529] syz_tun: left allmulticast mode [ 534.589869][ C0] net_ratelimit: 3150 callbacks suppressed [ 534.589886][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 534.607582][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 534.620076][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 534.632544][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.644343][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.656168][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 534.667991][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.679783][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.696717][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 534.708551][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 537.941813][ T28] audit: type=1326 audit(1786401840.189:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 538.034389][ T28] audit: type=1326 audit(1786401840.219:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 538.132520][ T28] audit: type=1326 audit(1786401840.219:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 538.315176][ T28] audit: type=1326 audit(1786401840.219:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 538.507003][ T28] audit: type=1326 audit(1786401840.219:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e0d9 code=0x7ffc0000 [ 538.869687][ T28] audit: type=1326 audit(1786401840.269:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcffcb5e90e code=0x7ffc0000 [ 539.012559][ T28] audit: type=1326 audit(1786401840.269:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcffcb5e90e code=0x7ffc0000 [ 539.424694][ T28] audit: type=1326 audit(1786401840.279:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcffcb5e90e code=0x7ffc0000 [ 539.598285][ C0] net_ratelimit: 3387 callbacks suppressed [ 539.598303][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 539.614255][ T28] audit: type=1326 audit(1786401840.279:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcffcb5e90e code=0x7ffc0000 [ 539.616014][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 539.651843][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 539.664440][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.676352][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.688237][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 539.700166][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.712033][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.736253][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 539.748214][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 539.756274][ T28] audit: type=1326 audit(1786401840.309:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.6.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcffcb5e90e code=0x7ffc0000 [ 540.266238][ T8619] tipc: Failed to remove unknown binding: 66,0,0/0:1426501922/1426501924 [ 540.326511][ T8619] tipc: Failed to remove unknown binding: 66,0,0/0:1426501922/1426501923 [ 540.380987][ T8619] tipc: Failed to remove unknown binding: 66,0,0/0:1426501922/1426501924 [ 540.405628][ T8619] tipc: Failed to remove unknown binding: 66,0,0/0:1426501922/1426501923 [ 543.837219][ T8634] loop8: detected capacity change from 0 to 128 [ 544.605997][ C0] net_ratelimit: 4535 callbacks suppressed [ 544.606016][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.623611][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 544.635375][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.652169][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 544.663920][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 544.676272][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 544.688664][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.700435][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.712234][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 544.723997][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.673534][ T8667] loop4: detected capacity change from 0 to 256 [ 545.721701][ T8667] exfat: Deprecated parameter 'utf8' [ 545.906657][ T8667] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d) [ 546.403439][ T8671] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 546.776045][ T5779] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 546.990462][ T5779] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 40698, setting to 64 [ 547.065261][ T5779] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 547.105207][ T5779] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 547.141602][ T5779] usb 5-1: Product: syz [ 547.166115][ T5779] usb 5-1: Manufacturer: syz [ 547.192257][ T8667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 547.249331][ T5779] hub 5-1:4.0: USB hub found [ 548.132081][ T5779] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 548.245745][ T5779] usb 5-1: USB disconnect, device number 4 [ 548.758755][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.497'. [ 548.785578][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.497'. [ 548.795690][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.497'. [ 548.824443][ T8714] loop4: detected capacity change from 0 to 128 [ 548.910347][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.497'. [ 548.919335][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.497'. [ 548.973807][ T8714] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 549.018878][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.497'. [ 549.027916][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.497'. [ 549.470654][ T8718] sysv_free_block: trying to free block not in datazone [ 549.533995][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.497'. [ 549.544906][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.497'. [ 549.618445][ C0] net_ratelimit: 4295 callbacks suppressed [ 549.618463][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 549.622811][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.497'. [ 549.624814][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 549.656198][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.667995][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.679784][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 549.691585][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.703390][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 549.715159][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.730444][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 549.742757][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 549.755021][ T8720] netlink: 'syz.8.499': attribute type 11 has an invalid length. [ 550.062530][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.070280][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.759755][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.836427][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.582837][ T8710] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.592618][ T8710] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.601818][ T8710] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.610925][ T8710] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.999593][ T6752] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 553.228962][ T8722] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 553.251129][ T8722] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 553.287053][ T8731] loop4: detected capacity change from 0 to 256 [ 554.626362][ C0] net_ratelimit: 4601 callbacks suppressed [ 554.626379][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.644009][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.660445][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 554.672183][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 554.683945][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.695680][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.707479][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 554.719256][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.731018][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 554.742767][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.999325][ T8760] netlink: 'syz.6.509': attribute type 11 has an invalid length. [ 555.196275][ T5817] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 555.398196][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.466886][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.567865][ T5817] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.651908][ T5817] usb 9-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 555.722952][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.796867][ T5817] usb 9-1: config 0 descriptor?? [ 556.307142][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.355417][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.414577][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.449147][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.476074][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.516462][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.548568][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.606069][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.666271][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.731676][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.789172][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.844430][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.883740][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.940277][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 556.992848][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.043472][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.102337][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.174313][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.228522][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.235756][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.307858][ T8787] __nla_validate_parse: 140 callbacks suppressed [ 557.307902][ T8787] netlink: 14 bytes leftover after parsing attributes in process `syz.5.514'. [ 557.357261][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.364456][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.473142][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.534091][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.593414][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.804186][ T5817] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 557.821841][ T5817] logitech 0003:046D:C623.0001: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.8-1/input0 [ 557.847633][ T5817] usb 9-1: USB disconnect, device number 3 [ 559.635999][ C0] net_ratelimit: 4795 callbacks suppressed [ 559.636018][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.653307][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.664715][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 559.676306][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.687729][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.701461][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 559.713036][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 559.724493][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.735899][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.747340][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 560.363973][ T8803] syzkaller0: entered promiscuous mode [ 560.448252][ T8797] fido_id[8797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 560.486239][ T8803] syzkaller0: entered allmulticast mode [ 563.134081][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.152045][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.722224][ T6503] IPVS: starting estimator thread 0... [ 563.856328][ T8820] IPVS: using max 19 ests per chain, 45600 per kthread [ 564.648626][ C0] net_ratelimit: 7077 callbacks suppressed [ 564.648646][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 564.666284][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 564.678263][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.690063][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.701861][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 564.713610][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.725390][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 564.737173][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.750668][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 564.762172][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 565.217477][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 568.561100][ T8809] netlink: 'syz.8.519': attribute type 1 has an invalid length. [ 568.580313][ T8809] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 568.814197][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.521'. [ 568.838592][ T8819] netlink: 17 bytes leftover after parsing attributes in process `syz.5.521'. [ 568.852165][ T8819] tipc: Invalid UDP bearer configuration [ 568.852224][ T8819] tipc: Enabling of bearer rejected, failed to enable media [ 569.659862][ C0] net_ratelimit: 5252 callbacks suppressed [ 569.659883][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 569.677519][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 569.689913][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 569.702446][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.714188][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.725985][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 569.737734][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.749406][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.766051][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 569.777838][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 570.332183][ T8868] ISOFS: Unable to identify CD-ROM format. [ 570.499122][ T8874] loop4: detected capacity change from 0 to 8 [ 571.431339][ T8894] netlink: 'syz.5.530': attribute type 1 has an invalid length. [ 571.671449][ T8894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.735159][ T8899] macvlan2: entered promiscuous mode [ 571.781457][ T8899] macvlan2: entered allmulticast mode [ 571.809912][ T8899] bond2: entered promiscuous mode [ 572.041490][ T8908] loop4: detected capacity change from 0 to 512 [ 572.059757][ T8899] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 572.165184][ T8899] bond2: left promiscuous mode [ 572.254592][ T8908] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.533: Unrecognised inode hash code 255 [ 572.346017][ T8908] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.533: Corrupt directory, running e2fsck is recommended [ 572.536695][ T8908] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 572.590519][ T8908] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.533: corrupted in-inode xattr: invalid ea_ino [ 572.702552][ T8908] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.533: couldn't read orphan inode 15 (err -117) [ 572.864587][ T8908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.090531][ T8908] tipc: Cannot configure node identity twice [ 573.769365][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.536'. [ 573.960772][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.536'. [ 574.084089][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.536'. [ 574.126309][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.536'. [ 574.202876][ T6752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.249742][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 574.249757][ T28] audit: type=1800 audit(1786401876.479:136): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.538" name="/" dev="fuse" ino=1 res=0 errno=0 [ 574.666112][ C0] net_ratelimit: 3918 callbacks suppressed [ 574.666128][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.683697][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.700405][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 574.712176][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 574.723888][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.735593][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.747360][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 574.759103][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.766996][ T8941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.770721][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 574.973777][ T8947] netlink: 'syz.8.542': attribute type 1 has an invalid length. [ 575.423560][ T8949] bond1: (slave veth0_to_bond): making interface the new active one [ 575.573342][ T8953] dummy_hcd dummy_hcd.0: remove, state 4 [ 575.607865][ T8949] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 575.629645][ T8953] usb usb1: USB disconnect, device number 1 [ 575.855342][ T8963] netlink: 'syz.6.543': attribute type 2 has an invalid length. [ 576.031664][ T8947] macvlan2: entered promiscuous mode [ 576.059159][ T8953] dummy_hcd dummy_hcd.0: stopped [ 576.064185][ T8953] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 576.090120][ T8947] macvlan2: entered allmulticast mode [ 576.185797][ T8947] bond1: entered promiscuous mode [ 576.243467][ T8947] veth0_to_bond: entered promiscuous mode [ 576.416283][ T8947] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 576.438449][ T8947] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 576.488902][ T8947] bond1: left promiscuous mode [ 576.494830][ T8947] veth0_to_bond: left promiscuous mode [ 576.879643][ T5787] Bluetooth: hci4: unexpected event for opcode 0x080b [ 579.263939][ T9006] xt_CONNSECMARK: invalid mode: 0 [ 579.676089][ C0] net_ratelimit: 4091 callbacks suppressed [ 579.676106][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 579.693687][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 579.705459][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.717197][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.728945][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 579.740714][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.752468][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 579.764263][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.779492][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 579.791211][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 584.686319][ C0] net_ratelimit: 6828 callbacks suppressed [ 584.686332][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 584.703634][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 584.715076][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.726496][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.737928][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 584.749325][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.760755][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 584.772377][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.785640][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 584.797216][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 587.295945][ C1] sched: RT throttling activated [ 587.567746][ T9054] netlink: 'syz.4.561': attribute type 10 has an invalid length. [ 587.630916][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.638372][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.813891][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.821489][ T9054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.829151][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.836354][ T9054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.071876][ T9054] bridge0: entered promiscuous mode [ 588.130156][ T9054] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 588.519353][ T9064] xfrm0: left allmulticast mode [ 588.568089][ T9064] veth3: left allmulticast mode [ 589.226468][ T9075] loop6: detected capacity change from 0 to 256 [ 589.319113][ T9075] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 589.696095][ C0] net_ratelimit: 4250 callbacks suppressed [ 589.696107][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 589.713590][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 589.725048][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.736469][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.749647][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 589.761070][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.772484][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 589.783900][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.797401][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 589.808819][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 590.286884][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.567'. [ 594.708817][ C0] net_ratelimit: 8036 callbacks suppressed [ 594.708832][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 594.726472][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 594.738780][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 594.750651][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.762420][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.774132][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 594.785876][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.797651][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.817606][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 594.829555][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 595.910976][ T9093] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 596.265793][ T9093] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 599.716038][ C0] net_ratelimit: 5057 callbacks suppressed [ 599.716052][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.733448][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.749051][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 599.760575][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 599.772074][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.786047][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.797570][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 599.809032][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.820488][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 599.831950][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.498065][ T9117] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 602.504953][ T9117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 602.514571][ T9117] vhci_hcd vhci_hcd.0: Device attached [ 602.671647][ T9121] loop8: detected capacity change from 0 to 8192 [ 602.826264][ T5779] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 604.727027][ C0] net_ratelimit: 4777 callbacks suppressed [ 604.727041][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 604.744321][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 604.756145][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 604.767946][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.779453][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.790934][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 604.802403][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.813867][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.827627][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 604.847212][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 605.623558][ T9121] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 605.752393][ T9118] vhci_hcd: connection reset by peer [ 605.773912][ T8193] vhci_hcd: stop threads [ 605.834387][ T8193] vhci_hcd: release socket [ 605.902737][ T8193] vhci_hcd: disconnect device [ 606.372177][ T9126] loop8: detected capacity change from 0 to 512 [ 606.466391][ T9126] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 606.586100][ T9126] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 606.707176][ T9126] EXT4-fs error (device loop8): ext4_orphan_get:1430: comm syz.8.580: bad orphan inode 131083 [ 606.902894][ T9126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.513720][ T9137] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #2: block 13: comm syz.8.580: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 607.916381][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 607.928168][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 607.936599][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 607.948050][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 608.017401][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 608.041012][ T7721] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.114603][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 608.215105][ T9148] loop6: detected capacity change from 0 to 512 [ 608.267158][ T9148] EXT4-fs: quotafile must be on filesystem root [ 608.930373][ T9156] loop8: detected capacity change from 0 to 128 [ 609.405158][ T9145] wlan0 speed is unknown, defaulting to 1000 [ 609.460780][ T9164] bridge_slave_0: left allmulticast mode [ 609.513290][ T9164] bridge_slave_0: left promiscuous mode [ 609.526230][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.628838][ T9164] bridge_slave_1: left allmulticast mode [ 609.634539][ T9164] bridge_slave_1: left promiscuous mode [ 609.733581][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.736188][ C0] net_ratelimit: 4277 callbacks suppressed [ 609.736202][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.758198][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 609.769931][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.781661][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 609.793372][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.808816][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 609.820578][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 609.832915][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 609.845607][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.857366][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.942605][ T9164] bond1: (slave veth0_to_bond): Releasing active interface [ 610.015769][ T9164] bond0: (slave bond_slave_0): Releasing backup interface [ 610.124677][ T9164] bond0: (slave bond_slave_1): Releasing backup interface [ 610.292576][ T9164] team0: Port device team_slave_0 removed [ 610.398737][ T9164] team0: Port device team_slave_1 removed [ 610.405395][ T9164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.415159][ T51] Bluetooth: hci1: command tx timeout [ 610.470284][ T9164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.527397][ T9164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.557030][ T9164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.566650][ T5779] vhci_hcd: vhci_device speed not set [ 610.669432][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.586'. [ 610.725291][ T9168] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 611.030835][ T9171] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 612.486111][ T51] Bluetooth: hci1: command tx timeout [ 612.854819][ T28] audit: type=1800 audit(1786401915.099:137): pid=9191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.589" name="bus" dev="ramfs" ino=23736 res=0 errno=0 [ 613.660287][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.593'. [ 613.903298][ T9145] chnl_net:caif_netlink_parms(): no params data found [ 614.548853][ T9222] netlink: 'syz.6.596': attribute type 8 has an invalid length. [ 614.746791][ C0] net_ratelimit: 4266 callbacks suppressed [ 614.746811][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 614.768861][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 614.780900][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 614.792960][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.804972][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.816989][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 614.828993][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.840998][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 614.853012][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.870201][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 615.006364][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 615.015899][ T51] Bluetooth: hci1: command tx timeout [ 616.270551][ T9145] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.316133][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.353885][ T9145] bridge_slave_0: entered allmulticast mode [ 616.394314][ T9145] bridge_slave_0: entered promiscuous mode [ 616.456632][ T9145] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.480555][ T9145] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.521351][ T9145] bridge_slave_1: entered allmulticast mode [ 616.558168][ T9145] bridge_slave_1: entered promiscuous mode [ 617.073087][ T5787] Bluetooth: hci1: command tx timeout [ 618.688763][ T9145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.221035][ T9145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.507207][ T28] audit: type=1326 audit(1786401921.729:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.4.603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749459e0d9 code=0x7ffc0000 [ 619.680264][ T28] audit: type=1326 audit(1786401921.729:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.4.603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749459e0d9 code=0x7ffc0000 [ 619.759802][ C0] net_ratelimit: 3568 callbacks suppressed [ 619.759819][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 619.779222][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 619.791003][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 619.802827][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.814661][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.826551][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 619.838352][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.850188][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 619.861998][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.877438][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 619.913061][ T28] audit: type=1326 audit(1786401921.739:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.4.603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749459e0d9 code=0x7ffc0000 [ 619.950169][ T9145] team0: Port device team_slave_0 added [ 620.027857][ T9145] team0: Port device team_slave_1 added [ 620.116574][ T28] audit: type=1326 audit(1786401921.739:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.4.603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749459e0d9 code=0x7ffc0000 [ 620.268162][ T28] audit: type=1326 audit(1786401921.829:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.4.603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f749459e0d9 code=0x7ffc0000 [ 620.453830][ T28] audit: type=1326 audit(1786401921.829:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.4.603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749459e0d9 code=0x7ffc0000 [ 620.571002][ T9145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.642976][ T9145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.690069][ T28] audit: type=1326 audit(1786401921.829:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.4.603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749459e0d9 code=0x7ffc0000 [ 620.815241][ T9145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.832597][ T28] audit: type=1326 audit(1786401921.829:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.4.603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749459e0d9 code=0x7ffc0000 [ 620.937345][ T5819] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 620.997569][ T28] audit: type=1326 audit(1786401921.829:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.4.603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749459e0d9 code=0x7ffc0000 [ 621.117157][ T9145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.165588][ T28] audit: type=1326 audit(1786401921.829:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9261 comm="syz.4.603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f749459e0d9 code=0x7ffc0000 [ 621.196957][ T9145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.236076][ T5819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.291539][ T5819] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 621.352947][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.385976][ T9145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.416820][ T5819] usb 9-1: config 0 descriptor?? [ 621.971425][ T5819] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 622.074373][ T5819] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0002/input/input5 [ 622.146774][ T9145] hsr_slave_0: entered promiscuous mode [ 622.228496][ T9145] hsr_slave_1: entered promiscuous mode [ 622.307990][ T9145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.315632][ T9145] Cannot create hsr debugfs directory [ 622.587980][ T5819] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 622.755141][ T5819] usb 9-1: USB disconnect, device number 4 [ 623.079487][ T9285] fido_id[9285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 624.606967][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.613322][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.768313][ C0] net_ratelimit: 4253 callbacks suppressed [ 624.768332][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 624.785990][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 624.802951][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.814832][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.826633][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 624.838393][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.850176][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 624.861959][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.877772][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 624.889629][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 625.525504][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 625.525520][ T28] audit: type=1326 audit(1786401927.769:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.6.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcffcb9e0d9 code=0x0 [ 625.801724][ T9312] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 625.813648][ T9312] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 625.822091][ T9312] CPU: 1 PID: 9312 Comm: syz.8.613 Not tainted syzkaller #0 [ 625.829392][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.839463][ T9312] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 625.845556][ T9312] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f d3 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 06 d3 23 fb 41 be 78 12 00 00 4d [ 625.865237][ T9312] RSP: 0018:ffffc900039377e0 EFLAGS: 00010246 [ 625.871382][ T9312] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 625.879367][ T9312] RDX: ffff88802b41bc00 RSI: 0000000000000003 RDI: 0000000000000005 [ 625.887346][ T9312] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 625.895330][ T9312] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 625.903316][ T9312] R13: ffff888047008530 R14: ffff8881433b9280 R15: 0000000000000000 [ 625.911304][ T9312] FS: 00007f54f51eb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 625.920253][ T9312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.926846][ T9312] CR2: 0000001b2e71cff8 CR3: 000000004dfb1000 CR4: 00000000003506e0 [ 625.934842][ T9312] Call Trace: [ 625.938205][ T9312] [ 625.941228][ T9312] ? dummy_wakeup+0x270/0x270 [ 625.946017][ T9312] usb_gadget_set_selfpowered+0x6e/0x230 [ 625.951675][ T9312] composite_dev_prepare+0x2fa/0x320 [ 625.956983][ T9312] configfs_composite_bind+0xa1/0x13f0 [ 625.962463][ T9312] ? kernfs_put+0x309/0x360 [ 625.967030][ T9312] ? webusb_landingPage_store+0x1c0/0x1c0 [ 625.972770][ T9312] gadget_bind_driver+0x2b3/0x770 [ 625.977815][ T9312] ? gadget_match_driver+0x130/0x130 [ 625.983112][ T9312] really_probe+0x247/0xae0 [ 625.987657][ T9312] ? pm_runtime_barrier+0x14b/0x1c0 [ 625.992874][ T9312] __driver_probe_device+0x1f5/0x390 [ 625.998179][ T9312] driver_probe_device+0x4f/0x420 [ 626.003230][ T9312] __driver_attach+0x444/0x6d0 [ 626.008020][ T9312] bus_for_each_dev+0x235/0x2b0 [ 626.012894][ T9312] ? driver_attach+0x50/0x50 [ 626.017501][ T9312] ? bus_remove_file+0x140/0x140 [ 626.022458][ T9312] ? do_raw_spin_unlock+0x121/0x230 [ 626.027708][ T9312] bus_add_driver+0x340/0x630 [ 626.032413][ T9312] driver_register+0x23a/0x310 [ 626.037188][ T9312] usb_gadget_register_driver_owner+0xf9/0x270 [ 626.043359][ T9312] gadget_dev_desc_UDC_store+0x1c7/0x2e0 [ 626.049008][ T9312] configfs_write_iter+0x312/0x400 [ 626.054134][ T9312] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 626.059695][ T9312] vfs_write+0x474/0x9a0 [ 626.063993][ T9312] ? file_end_write+0x250/0x250 [ 626.068861][ T9312] ? __fget_files+0x3fc/0x460 [ 626.073579][ T9312] ? __fdget_pos+0x2a3/0x330 [ 626.078183][ T9312] ? ksys_write+0x74/0x260 [ 626.082616][ T9312] ksys_write+0x151/0x260 [ 626.086961][ T9312] ? __ia32_sys_read+0x90/0x90 [ 626.091753][ T9312] ? lockdep_hardirqs_on+0x98/0x150 [ 626.096993][ T9312] do_syscall_64+0x55/0xb0 [ 626.101425][ T9312] ? clear_bhb_loop+0x40/0x90 [ 626.106202][ T9312] ? clear_bhb_loop+0x40/0x90 [ 626.110892][ T9312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.116797][ T9312] RIP: 0033:0x7f54f439e0d9 [ 626.121232][ T9312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.140853][ T9312] RSP: 002b:00007f54f51eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 626.149281][ T9312] RAX: ffffffffffffffda RBX: 00007f54f4625fa0 RCX: 00007f54f439e0d9 [ 626.157260][ T9312] RDX: 000000000000000c RSI: 0000200000000600 RDI: 0000000000000004 [ 626.165240][ T9312] RBP: 00007f54f4435024 R08: 0000000000000000 R09: 0000000000000000 [ 626.173220][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.181203][ T9312] R13: 00007f54f4626038 R14: 00007f54f4625fa0 R15: 00007fffa4692f48 [ 626.189216][ T9312] [ 626.192256][ T9312] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 627.196149][ T3502] hsr_slave_0: left promiscuous mode [ 627.273804][ T3502] hsr_slave_1: left promiscuous mode [ 627.325691][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.358866][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.385032][ T3502] bridge_slave_1: left allmulticast mode [ 627.407979][ T3502] bridge_slave_1: left promiscuous mode [ 627.416126][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.483062][ T9312] ---[ end trace 0000000000000000 ]--- [ 627.493947][ T9312] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 627.516184][ T9312] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f d3 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 06 d3 23 fb 41 be 78 12 00 00 4d [ 627.537405][ T3502] bridge_slave_0: left allmulticast mode [ 627.543068][ T3502] bridge_slave_0: left promiscuous mode [ 627.571012][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.599405][ T9312] RSP: 0018:ffffc900039377e0 EFLAGS: 00010246 [ 627.605574][ T9312] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 627.638613][ T9312] RDX: ffff88802b41bc00 RSI: 0000000000000003 RDI: 0000000000000005 [ 627.658557][ T9312] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 627.679772][ T9312] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 627.697069][ T5819] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 627.729137][ T9312] R13: ffff888047008530 R14: ffff8881433b9280 R15: 0000000000000000 [ 627.746348][ T9312] FS: 00007f54f51eb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 627.755354][ T9312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 627.785941][ T9312] CR2: 00007ffc03c5c2e0 CR3: 000000004dfb1000 CR4: 00000000003506e0 [ 627.794085][ T9312] Kernel panic - not syncing: Fatal exception [ 627.800399][ T9312] Kernel Offset: disabled [ 627.804717][ T9312] Rebooting in 86400 seconds..