last executing test programs: 6m33.495164048s ago: executing program 32 (id=1812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 6m33.424870581s ago: executing program 33 (id=1807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 6m3.84799572s ago: executing program 34 (id=1902): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0xffffffffffffff4a, 0x0}}], 0x1, 0x4) unshare(0x60000600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/214, 0xd6}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f00000005c0)=""/34, 0x22}], 0xa}, 0x5}], 0x3, 0x2100, 0x0) 5m55.818331057s ago: executing program 4 (id=2013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 5m55.428573903s ago: executing program 2 (id=2016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/37, 0x25}, {0x0}, {&(0x7f0000000a00)=""/95, 0x5f}], 0x3}, 0x4ce0}], 0x1, 0x20, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5m54.818975289s ago: executing program 2 (id=2019): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x8801}}], 0x1, 0x20044024) close_range(r1, 0xffffffffffffffff, 0x0) 5m54.516607492s ago: executing program 5 (id=2021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) setpriority(0x2, 0x0, 0xd2f4) 5m54.381120758s ago: executing program 2 (id=2022): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5m54.178290627s ago: executing program 4 (id=2023): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 5m54.10208779s ago: executing program 5 (id=2024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x4ce0}], 0x1, 0x20, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5m54.089593781s ago: executing program 2 (id=2025): setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)) r7 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000b80)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7fffffff, &(0x7f0000000700)=""/107) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r7, &(0x7f0000000180)={0x20000005}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, 0x0, 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r8, 0x8c477000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m52.971403289s ago: executing program 5 (id=2026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setresuid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r2, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) 5m52.95792961s ago: executing program 2 (id=2027): ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 5m52.752884689s ago: executing program 4 (id=2028): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000a00)=""/95, 0x5f}], 0x2}, 0x4ce0}], 0x1, 0x20, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5m52.645356473s ago: executing program 5 (id=2029): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}}, 0x0) 5m52.409990494s ago: executing program 5 (id=2030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="436558a7fac00c4adcec9fd99bd75a9641520a30626ecbf42f195e59cb51a6254bae5d60266b"], 0x118) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m52.297098848s ago: executing program 4 (id=2031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000a00)=""/95, 0x5f}], 0x3}, 0x4ce0}], 0x1, 0x20, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5m52.001249181s ago: executing program 2 (id=2033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0xffffffffffffff4a, 0x0}}], 0x1, 0x4) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x2100, 0x0) 5m51.861551607s ago: executing program 5 (id=2035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0xffffffffffffff4a, 0x0}}], 0x1, 0x4) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/214, 0xd6}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000180)=""/63, 0x3f}, {0x0}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f00000005c0)=""/34, 0x22}], 0xa}, 0x5}], 0x3, 0x2100, 0x0) 5m51.78197158s ago: executing program 4 (id=2036): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0x90, 0x0, "01d78771b90bd8a3b4914783c58777003d5b"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 5m50.528690455s ago: executing program 4 (id=2041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0xffffffffffffff4a, 0x0}}], 0x1, 0x4) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/214, 0xd6}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f00000005c0)=""/34, 0x22}], 0x9}, 0x5}], 0x3, 0x2100, 0x0) 5m36.888223683s ago: executing program 35 (id=2033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0xffffffffffffff4a, 0x0}}], 0x1, 0x4) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x2100, 0x0) 5m36.703197021s ago: executing program 36 (id=2035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0xffffffffffffff4a, 0x0}}], 0x1, 0x4) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/214, 0xd6}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000180)=""/63, 0x3f}, {0x0}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f00000005c0)=""/34, 0x22}], 0xa}, 0x5}], 0x3, 0x2100, 0x0) 5m35.330194861s ago: executing program 37 (id=2041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0xffffffffffffff4a, 0x0}}], 0x1, 0x4) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/214, 0xd6}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f00000005c0)=""/34, 0x22}], 0x9}, 0x5}], 0x3, 0x2100, 0x0) 4m53.970116495s ago: executing program 3 (id=2183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) 4m47.816136121s ago: executing program 3 (id=2196): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4m47.538918072s ago: executing program 3 (id=2197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x89) 4m46.531624796s ago: executing program 3 (id=2200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) 4m40.016966347s ago: executing program 3 (id=2225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 4m39.586206576s ago: executing program 3 (id=2226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0x60000600) 4m24.42316562s ago: executing program 38 (id=2226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0x60000600) 3m34.780560352s ago: executing program 8 (id=2481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 3m32.072105869s ago: executing program 8 (id=2488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_setup(0x9bb1, &(0x7f0000000040)=0x0) io_submit(r4, 0x0, &(0x7f0000000480)) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) 3m24.081308664s ago: executing program 8 (id=2503): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, 0x0}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(0x0, 0x88, 0x40000000, 0x0, 0x0, 0x200) 3m22.948130702s ago: executing program 8 (id=2505): pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) unshare(0x22020600) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x0, 0x3}]) 3m7.589092795s ago: executing program 39 (id=2505): pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) unshare(0x22020600) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x0, 0x3}]) 2m29.307002617s ago: executing program 7 (id=2684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 2m17.553775244s ago: executing program 7 (id=2700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x147bfe28ad63f13, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m16.468271661s ago: executing program 7 (id=2701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x7c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x4, 0x6, 0x4c25, 0x8, 0x2, 0x1, 0x4da2, 0x3}}, {0xa, 0x2, [0x3, 0x0, 0x1]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000005780)='./file0\x00', 0x9400002f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x11}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 2m13.203524792s ago: executing program 7 (id=2703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe2$9p(0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m11.738017365s ago: executing program 7 (id=2706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) 2m11.601181901s ago: executing program 9 (id=2708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 2m10.91524324s ago: executing program 9 (id=2710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x147bfe28ad63f13, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m10.914331381s ago: executing program 7 (id=2711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 2m9.400018776s ago: executing program 9 (id=2713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r4, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) 2m6.556031349s ago: executing program 9 (id=2719): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) 2m3.73875439s ago: executing program 9 (id=2722): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x7c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x4, 0x6, 0x4c25, 0x8, 0x2, 0x1, 0x4da2, 0x3}}, {0xa, 0x2, [0x3, 0x0, 0x1]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000005780)='./file0\x00', 0x9400002f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x11}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 2m2.423169787s ago: executing program 9 (id=2723): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xd0e29cde0b9a4f94, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1m55.813549972s ago: executing program 40 (id=2711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1m46.685167186s ago: executing program 41 (id=2723): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xd0e29cde0b9a4f94, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 59.55001093s ago: executing program 0 (id=2798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmsg$SOCK_DESTROY(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000002440)=ANY=[], 0xc3ec}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 57.776994436s ago: executing program 0 (id=2801): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 57.300331877s ago: executing program 0 (id=2802): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x1, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="f1a2610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 54.397875412s ago: executing program 0 (id=2804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x7c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x4, 0x6, 0x4c25, 0x8, 0x2, 0x1, 0x4da2, 0x3}}, {0xa, 0x2, [0x3, 0x0, 0x1]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000005780)='./file0\x00', 0x9400002f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x11}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 50.381657056s ago: executing program 0 (id=2809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r4, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rthdr={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x1, 0x5, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x38}}, {{&(0x7f0000002e40)={0xa, 0x4e23, 0x1000, @empty, 0x5}, 0x1c, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=[@hopopts={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}}}], 0x20}}, {{&(0x7f00000032c0)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000003440)=[{0x0}], 0x1}}], 0x3, 0x14) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 48.904909479s ago: executing program 0 (id=2812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000001c0), 0x0, 0x0, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 33.775433182s ago: executing program 42 (id=2812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000001c0), 0x0, 0x0, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.409453783s ago: executing program 6 (id=2860): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xd0e29cde0b9a4f94, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 6.661043592s ago: executing program 1 (id=2863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 6.470274651s ago: executing program 1 (id=2864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4.914785078s ago: executing program 1 (id=2865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 4.902158798s ago: executing program 6 (id=2866): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x1, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="f1a2610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3.665982442s ago: executing program 6 (id=2867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 3.057658557s ago: executing program 6 (id=2868): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 3.045293588s ago: executing program 1 (id=2869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x147bfe28ad63f13, 0x4}) 1.971098504s ago: executing program 1 (id=2870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 609.289343ms ago: executing program 6 (id=2871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 400.949842ms ago: executing program 1 (id=2872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket(0x2, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 6 (id=2873): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xd0e29cde0b9a4f94, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 6][ C0] net_ratelimit: 2734 callbacks suppressed [ 558.443457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.461796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.474390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 558.486929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.499442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.511882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.524358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.536932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 558.549323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.561833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.354680][T11697] netlink: 'syz.7.2516': attribute type 4 has an invalid length. [ 559.426657][T11699] netlink: 'syz.7.2516': attribute type 4 has an invalid length. [ 564.350009][ C0] net_ratelimit: 3104 callbacks suppressed [ 564.350029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.357751][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.368241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 564.374233][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.386619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.405174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 564.418172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 564.430587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.442950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.455375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.467761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 564.480324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.108631][T11788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.115988][T11788] IPv6: NLM_F_CREATE should be set when creating new route [ 569.374044][ C0] net_ratelimit: 2448 callbacks suppressed [ 569.374064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 569.392509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.405037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.417562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 569.430058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.442596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 569.455126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 569.467635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.480054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.492490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.923418][ T5445] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.036228][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 574.046535][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 574.073237][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 574.118752][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 574.130566][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 574.138250][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 574.220505][T11846] lo speed is unknown, defaulting to 1000 [ 574.450386][ C0] net_ratelimit: 2533 callbacks suppressed [ 574.450406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 574.468713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.481242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 574.493781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 574.506795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.519681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.532014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.544691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 574.557200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.569769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.348403][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 577.019791][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'. [ 577.048340][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'. [ 577.962371][T11890] loop7: detected capacity change from 0 to 512 [ 578.037874][T11846] chnl_net:caif_netlink_parms(): no params data found [ 578.186249][T11895] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2568'. [ 578.360090][T11895] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2568'. [ 578.439561][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 578.987097][T11846] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.999806][T11846] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.014897][T11846] device bridge_slave_0 entered promiscuous mode [ 579.060979][T11911] netlink: 'syz.0.2573': attribute type 4 has an invalid length. [ 579.170064][T11890] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 579.179298][T11846] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.179309][T11890] ext4 filesystem being mounted at /136/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.198996][T11846] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.224638][T11846] device bridge_slave_1 entered promiscuous mode [ 579.424370][T11846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.446848][T11846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.455994][ C0] net_ratelimit: 3308 callbacks suppressed [ 579.456014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.456300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.486443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 579.498957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.513527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 579.526789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 579.539219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.551760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.564179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.577015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 579.704234][T11846] team0: Port device team_slave_0 added [ 579.779280][ T9766] EXT4-fs (loop7): unmounting filesystem. [ 579.808426][T11846] team0: Port device team_slave_1 added [ 579.940317][T11846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.066977][T11846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.274332][T11846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.315827][T11846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.358895][T11846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.558145][T11846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.677264][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 580.989292][T11846] device hsr_slave_0 entered promiscuous mode [ 581.058897][T11846] device hsr_slave_1 entered promiscuous mode [ 581.104450][T11846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.130678][T11846] Cannot create hsr debugfs directory [ 582.717987][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 584.608663][ C0] net_ratelimit: 2607 callbacks suppressed [ 584.608682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.627319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.639903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 584.652597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.664990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.677403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 584.690053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.702498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 584.715020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 584.727565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.250053][T12000] netlink: 'syz.0.2596': attribute type 4 has an invalid length. [ 587.352279][T12000] netlink: 'syz.0.2596': attribute type 4 has an invalid length. [ 589.655891][ C0] net_ratelimit: 2194 callbacks suppressed [ 589.655909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.674456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.687157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.699688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 589.712126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.724573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.737007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.749369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.762062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 589.774586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.408548][T12061] netlink: 'syz.0.2607': attribute type 4 has an invalid length. [ 590.503471][T12064] netlink: 'syz.0.2607': attribute type 4 has an invalid length. [ 590.843659][ T5445] tipc: Left network mode [ 590.963222][ T5445] tipc: Left network mode [ 591.024498][T12087] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2610'. [ 591.323327][ T5445] tipc: Left network mode [ 591.529242][ T5445] tipc: Left network mode [ 593.778281][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 593.882089][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 593.943689][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 593.978536][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 594.024783][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 594.089426][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 594.204633][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 594.293793][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 594.368829][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 594.418579][T12131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 594.445471][T12131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 594.530304][T12131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 594.664011][ C0] net_ratelimit: 3651 callbacks suppressed [ 594.664032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.683099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.695602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 594.707975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.720442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.733176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.734926][T12131] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 594.745562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.765613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 594.778043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.790624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.273774][T12170] loop9: detected capacity change from 0 to 256 [ 596.275607][T12174] __nla_validate_parse: 66 callbacks suppressed [ 596.275624][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 596.361254][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 596.402007][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 596.468466][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 596.516616][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 596.567933][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 596.597833][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 596.674133][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 596.705438][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 596.740628][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 596.825803][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 596.897787][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 596.916027][T12174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 597.109167][T12170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 597.158357][T12170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 597.190849][T12170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 598.584775][T12200] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 599.947125][ C0] net_ratelimit: 3433 callbacks suppressed [ 599.947142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.965795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.978245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.990777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.994579][T12215] loop0: detected capacity change from 0 to 256 [ 600.003330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 600.021619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.034019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.046495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.058983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.071564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 600.184563][T12217] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 600.654781][T12225] 9pnet_fd: Insufficient options for proto=fd [ 600.921920][T12229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 601.019323][T12229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 601.093513][T12229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 601.293836][T12229] __nla_validate_parse: 197 callbacks suppressed [ 601.293857][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 601.383495][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 601.427754][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 601.453712][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 601.503687][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 601.537007][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 601.587760][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 601.636225][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 601.703675][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 601.753706][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 602.750829][T12242] loop7: detected capacity change from 0 to 4096 [ 603.112593][T12246] loop9: detected capacity change from 0 to 256 [ 603.513513][T12253] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 603.578150][T12253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 603.598554][T12253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 603.617423][T12242] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 604.760114][ T9766] EXT4-fs (loop7): unmounting filesystem. [ 604.953510][ C0] net_ratelimit: 3841 callbacks suppressed [ 604.953532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.972213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.984794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.997387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 605.010029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.022492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.034895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.076276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.089212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 605.101691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.175278][T12270] loop1: detected capacity change from 0 to 256 [ 605.364852][T12275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 605.430552][T12275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.478467][T12275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.580941][T12274] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 605.622494][T12274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.693261][T12274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.759647][T12274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 605.806794][T12280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 605.935912][T12280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.944231][T12280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 606.207287][T12284] loop1: detected capacity change from 0 to 256 [ 606.392539][T12287] netlink: 'syz.0.2667': attribute type 4 has an invalid length. [ 606.449564][T12287] netlink: 'syz.0.2667': attribute type 5 has an invalid length. [ 606.498819][T12287] __nla_validate_parse: 310 callbacks suppressed [ 606.498840][T12287] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2667'. [ 606.651260][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 606.724330][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 606.789389][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 606.836044][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 606.875310][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 606.937145][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 607.087123][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 607.104097][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 607.162554][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 607.231097][T12291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.275368][T12291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.282997][T12291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 607.495997][T12306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.542280][T12306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.570724][T12306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.364291][T12320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 608.417950][T12320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.457282][T12320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.545814][T12322] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 610.035324][ C0] net_ratelimit: 4827 callbacks suppressed [ 610.035346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.053833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 610.066395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.078992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.091456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.104148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.116651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 610.129138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.141602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.154013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.604751][T12352] __nla_validate_parse: 217 callbacks suppressed [ 611.604783][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 611.652870][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 611.718178][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 611.750708][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 611.765858][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 611.803270][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 611.853737][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 611.917045][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 611.950525][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 611.983782][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 612.034833][T12352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 612.075332][T12352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 612.082981][T12352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.751279][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 614.798086][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.831572][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.052338][ C0] net_ratelimit: 3941 callbacks suppressed [ 615.052357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 615.071160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.083634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.096012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.108729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.121300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 615.133726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.146229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.158643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.171078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.838037][T12407] __nla_validate_parse: 144 callbacks suppressed [ 618.838056][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2696'. [ 620.053310][ C0] net_ratelimit: 3986 callbacks suppressed [ 620.053330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.071805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.084469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.096825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.109255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 620.121594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.133870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.146208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.158584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.257000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 621.425008][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 622.839900][T12455] loop7: detected capacity change from 0 to 256 [ 624.462706][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.469132][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.065929][ C0] net_ratelimit: 7124 callbacks suppressed [ 625.065952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 625.084192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.096764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.109433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.121907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.134435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 625.147116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.159485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.172081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.184453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.340849][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 625.363386][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 625.372784][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 625.441179][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 625.473991][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 625.474016][T12462] loop0: detected capacity change from 0 to 256 [ 625.484436][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 625.534138][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 625.544071][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 625.559882][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 625.625044][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 625.648320][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 625.698349][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.733952][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 625.781887][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.303055][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 626.357912][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 626.366488][T12463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.564097][T12470] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 629.522871][T12492] lo speed is unknown, defaulting to 1000 [ 629.927366][T12504] loop1: detected capacity change from 0 to 4096 [ 630.081125][ C0] net_ratelimit: 5203 callbacks suppressed [ 630.081146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.099792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.111366][T11846] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 630.112194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 630.130897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.143335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.155918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.168379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.180910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 630.193463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.205806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.228056][T11846] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 630.290597][T11846] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 630.412035][T11846] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 630.489210][T12507] lo speed is unknown, defaulting to 1000 [ 630.633306][T12504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 631.001512][T11846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.029895][T11846] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.090648][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 631.099797][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 631.194851][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 631.208352][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 631.253879][T12348] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.261122][T12348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.284623][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 631.315744][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 631.370045][T12348] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.377304][T12348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.400090][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 631.428144][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 631.523459][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 631.619065][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 631.705078][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 631.766499][T12348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 631.917323][T11991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 631.936762][T11991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 631.998967][T11991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.023907][T11991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.094043][T11991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.144189][T11991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.153266][T10807] EXT4-fs (loop1): unmounting filesystem. [ 633.058983][T12549] lo speed is unknown, defaulting to 1000 [ 633.564248][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.606872][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.616429][ T4267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.624658][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.633712][ T4267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 633.663370][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.976850][T12558] loop0: detected capacity change from 0 to 256 [ 634.197877][T12554] lo speed is unknown, defaulting to 1000 [ 634.374323][T12561] __nla_validate_parse: 146 callbacks suppressed [ 634.374345][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 634.443548][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 634.467232][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 634.497999][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 634.543641][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 634.581605][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 634.612923][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 634.661389][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 634.691050][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 634.741637][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 634.784812][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 634.846430][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 634.923454][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 635.083277][ C0] net_ratelimit: 5873 callbacks suppressed [ 635.083296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.101709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.114199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.126637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.139122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 635.151461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.163784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.176273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.188788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.201472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 635.697451][T12567] loop9: detected capacity change from 0 to 256 [ 635.777308][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 636.166112][T12567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 636.241452][T12567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 636.303498][T12567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 637.040717][T12554] chnl_net:caif_netlink_parms(): no params data found [ 637.279446][T12580] lo speed is unknown, defaulting to 1000 [ 637.286378][T12554] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.343222][T12554] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.380153][T12554] device bridge_slave_0 entered promiscuous mode [ 637.425338][T12554] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.454915][T12554] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.505742][T12554] device bridge_slave_1 entered promiscuous mode [ 637.619988][T12554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.650708][T12554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.781003][T12554] team0: Port device team_slave_0 added [ 637.826479][T12554] team0: Port device team_slave_1 added [ 637.860118][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 637.971935][T12554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.051940][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.165316][T12554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.213357][T12554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.220383][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.303923][T12554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.474846][T12554] device hsr_slave_0 entered promiscuous mode [ 638.530707][T12554] device hsr_slave_1 entered promiscuous mode [ 638.571999][T12554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.579721][T12554] Cannot create hsr debugfs directory [ 639.904538][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 640.093306][ C0] net_ratelimit: 6813 callbacks suppressed [ 640.093328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.111767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 640.124418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.136755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.149278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.161623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.174098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 640.186578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.199160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.211522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.837665][T12604] loop1: detected capacity change from 0 to 256 [ 641.099613][T12610] __nla_validate_parse: 144 callbacks suppressed [ 641.099642][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 641.163839][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 641.210472][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 641.254116][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 641.319762][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 641.359438][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 641.398202][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 641.423675][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 641.555459][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 641.636598][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 641.669215][T12610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 641.714101][T12610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.724228][T12613] loop0: detected capacity change from 0 to 4096 [ 641.740762][T12610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 642.013239][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 642.322633][T12613] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 643.353221][T10102] EXT4-fs (loop0): unmounting filesystem. [ 643.720130][T12631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 643.762462][T12631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 643.785518][T12631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 644.409225][T12637] hugetlbfs: syz.0.2729 (12637): Using mlock ulimits for SHM_HUGETLB is obsolete [ 644.660274][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 644.673366][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 644.713771][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 644.743050][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 644.764200][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 644.774128][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 644.908364][T12651] loop0: detected capacity change from 0 to 256 [ 645.003369][T12643] lo speed is unknown, defaulting to 1000 [ 645.103159][ C0] net_ratelimit: 6131 callbacks suppressed [ 645.103181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 645.121528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.134071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.146569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.159035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.171450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 645.183990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.196494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.208982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.250814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.381949][T12654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 645.451573][T12654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 645.485880][T12654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 646.138239][T12661] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 646.482641][T12643] chnl_net:caif_netlink_parms(): no params data found [ 646.696016][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.744564][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.764398][T12643] device bridge_slave_0 entered promiscuous mode [ 646.792701][T12643] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.833251][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.854379][T12643] device bridge_slave_1 entered promiscuous mode [ 646.878627][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 646.982388][T12643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.041421][T12643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.172003][T12643] team0: Port device team_slave_0 added [ 647.202497][T12643] team0: Port device team_slave_1 added [ 647.343882][T12643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.350903][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.449860][T12643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.475151][T12643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.482163][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.605346][T12643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.721116][T12672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 647.793217][T12672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 647.801290][T12672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.866877][T12672] device bridge_slave_0 left promiscuous mode [ 647.907405][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.001564][T12672] device bridge_slave_1 left promiscuous mode [ 648.038196][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.110392][T12672] bond0: (slave bond_slave_0): Releasing backup interface [ 648.172853][T12672] bond0: (slave bond_slave_1): Releasing backup interface [ 648.379951][T12672] team0: Port device team_slave_0 removed [ 648.477441][T12672] team0: Port device team_slave_1 removed [ 648.500806][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.535468][T12672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.569790][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.588082][T12672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.830774][T12674] __nla_validate_parse: 222 callbacks suppressed [ 648.830824][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2734'. [ 648.942793][T12643] device hsr_slave_0 entered promiscuous mode [ 648.978693][T12643] device hsr_slave_1 entered promiscuous mode [ 649.018118][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 649.090922][T12643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.143766][T12643] Cannot create hsr debugfs directory [ 649.421655][T12677] lo speed is unknown, defaulting to 1000 [ 650.543700][ C0] net_ratelimit: 6753 callbacks suppressed [ 650.543720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.562328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.574787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.587304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 650.599821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.612342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.624789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.637231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.649747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 650.662313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.803162][T12687] netlink: 'syz.1.2737': attribute type 4 has an invalid length. [ 650.875376][T12687] netlink: 'syz.1.2737': attribute type 5 has an invalid length. [ 650.927529][T12687] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2737'. [ 651.111600][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 651.456700][T12691] lo speed is unknown, defaulting to 1000 [ 653.527844][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 654.555053][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 654.573526][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 654.582227][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 654.639859][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 654.681863][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 654.714569][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 654.793195][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 654.856448][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 654.904940][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 654.936475][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 654.957330][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 655.009098][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 655.041278][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 655.072343][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 655.124049][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 655.153332][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 655.175221][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 655.216931][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.263956][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.564665][T12708] lo speed is unknown, defaulting to 1000 [ 655.572065][ C0] net_ratelimit: 4852 callbacks suppressed [ 655.572081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.590616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.603870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.616632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 655.629222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.641684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.654019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.666497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.678940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.691421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.840509][T12713] loop0: detected capacity change from 0 to 256 [ 656.733793][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 656.743757][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.751413][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.777602][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 656.821051][T12721] device bridge_slave_0 left promiscuous mode [ 656.878906][T12721] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.937229][T12721] device bridge_slave_1 left promiscuous mode [ 656.979451][T12721] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.052115][T12721] bond0: (slave bond_slave_0): Releasing backup interface [ 657.098270][T12721] bond0: (slave bond_slave_1): Releasing backup interface [ 657.250269][T12721] team0: Port device team_slave_0 removed [ 657.329999][T12721] team0: Port device team_slave_1 removed [ 657.342210][T12721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.381176][T12721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.404651][T12721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.412215][T12721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.513415][T12723] netlink: 'syz.1.2743': attribute type 10 has an invalid length. [ 657.559767][T12723] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 657.688837][T12725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 657.714461][T12725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 657.732816][T12725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 658.048037][T12735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 658.062313][T12735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 658.121863][T12735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 658.465457][T12735] bond0: (slave wlan1): Releasing backup interface [ 659.649865][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 659.792437][T12741] netlink: 'syz.1.2744': attribute type 10 has an invalid length. [ 659.876493][T12741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.918442][T12741] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 659.983325][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 660.200422][T12748] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 660.354614][T12554] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 660.476631][T12554] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 660.509777][T12554] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 660.583186][T12554] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 660.613918][ C0] net_ratelimit: 3609 callbacks suppressed [ 660.613939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.632639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.645226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.657671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 660.670299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.682685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.695027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.707370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.719794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 660.732209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.902872][T12708] chnl_net:caif_netlink_parms(): no params data found [ 661.207170][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.217330][T12708] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.427790][T12708] device bridge_slave_0 entered promiscuous mode [ 661.955974][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 662.086937][T12554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.171381][T12554] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.305201][T12554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 662.343139][T12554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.054968][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 664.973358][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.980551][T12708] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.994943][T12708] device bridge_slave_1 entered promiscuous mode [ 665.029238][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 665.054218][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 665.062518][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 665.077957][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 665.108546][T12017] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.115814][T12017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.166761][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 665.192044][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 665.200863][T12017] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.208333][T12017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.253797][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 665.291297][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 665.312386][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 665.349415][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 665.370141][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 665.381217][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 665.384344][T12801] loop1: detected capacity change from 0 to 4096 [ 665.413673][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 665.466350][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 665.475753][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 665.501943][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 665.545242][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 665.594916][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 665.623423][ C0] net_ratelimit: 3332 callbacks suppressed [ 665.623444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.653672][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 665.683608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.696156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 665.708663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.721123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.733517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.745920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.758292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.770824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.783386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 665.960054][T12801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 666.702563][T10807] EXT4-fs (loop1): unmounting filesystem. [ 666.867521][T12797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 666.909068][T12797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.943895][T12797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 667.051773][T12799] netlink: 'syz.0.2753': attribute type 10 has an invalid length. [ 667.160020][T12799] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 667.332734][T12807] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 667.378085][T12708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.401767][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 667.442948][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.475326][T12708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.532406][T12554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.722346][T12708] team0: Port device team_slave_0 added [ 667.734817][T12812] loop0: detected capacity change from 0 to 256 [ 667.771265][T12708] team0: Port device team_slave_1 added [ 667.888273][T12708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.929172][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.074074][T12708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.369246][T12708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.403601][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.633142][T12708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.953206][T12812] __nla_validate_parse: 150 callbacks suppressed [ 669.953228][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 670.033744][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 671.160111][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 671.183808][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 671.227908][ C0] net_ratelimit: 4353 callbacks suppressed [ 671.227929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.246931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.259568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 671.272013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.284428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.296956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.309504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.312714][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 671.321928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 671.342786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.355413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.423763][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 671.450657][T12838] loop1: detected capacity change from 0 to 256 [ 671.481737][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 671.543063][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 671.583799][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 671.625276][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 671.679820][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 671.736049][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.778997][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 672.072649][T12708] device hsr_slave_0 entered promiscuous mode [ 672.137792][T12708] device hsr_slave_1 entered promiscuous mode [ 672.165797][T12708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.183152][T12708] Cannot create hsr debugfs directory [ 672.290929][T12842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 672.340369][T12842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 672.383963][T12842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 672.588913][T12845] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 672.659657][T12845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 672.685248][T12845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 672.787111][T12845] bond0: (slave wlan1): Releasing backup interface [ 672.873411][T12846] netlink: 'syz.0.2759': attribute type 10 has an invalid length. [ 673.037038][T12846] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 673.180616][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 673.199615][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 673.312779][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.332302][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.408427][T12554] device veth0_vlan entered promiscuous mode [ 673.449384][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.495365][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.649480][T12554] device veth1_vlan entered promiscuous mode [ 673.994525][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.014222][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.058736][T12554] device veth0_macvtap entered promiscuous mode [ 674.108641][T12554] device veth1_macvtap entered promiscuous mode [ 674.145808][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.187554][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.211527][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.244554][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.348659][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.413132][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.638059][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.911152][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.124393][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.153146][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.193238][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.240128][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.251141][ C0] net_ratelimit: 3192 callbacks suppressed [ 676.251158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.269822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.282289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.294825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.307464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 676.320570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.333206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.345696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.358235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.370785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 676.444055][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.455054][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.472467][T12554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.634532][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 677.815150][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 677.844092][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 677.902318][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 681.255941][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.283130][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.293043][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.304416][ C0] net_ratelimit: 1275 callbacks suppressed [ 681.304433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.322625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.335150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.347641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 681.360209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.372817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.385264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.397688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.410458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 681.422849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.483130][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.493040][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.523123][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.533043][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.563127][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.585917][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.612657][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.624848][T12554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.642482][T12554] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.651348][T12554] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.660475][T12554] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.669472][T12554] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.754272][T12895] __nla_validate_parse: 144 callbacks suppressed [ 681.754295][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 681.801766][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 681.857600][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 681.887135][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 681.928083][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 681.967107][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 681.999619][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 682.055074][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 682.103727][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 682.153266][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 682.196520][T12895] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 682.233320][T12895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 682.282961][T12895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 682.356462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 682.390193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 682.654814][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.663278][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.743010][T12902] loop1: detected capacity change from 0 to 256 [ 682.895413][T12017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 683.105902][T12017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.147456][T12017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.320892][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 683.719262][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 683.783705][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 683.854155][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.919062][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.925538][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.836988][T12936] __nla_validate_parse: 144 callbacks suppressed [ 686.837008][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 686.938686][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 687.019579][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 687.076531][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 687.105922][ C0] net_ratelimit: 3243 callbacks suppressed [ 687.105940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.124493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.137026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 687.143264][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 687.149542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.170584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.182945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.195264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.207820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 687.220229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.232763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.233705][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 687.333193][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 687.342643][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 687.498811][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 687.508611][T12943] loop0: detected capacity change from 0 to 256 [ 687.629530][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 687.732677][T12936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 687.839074][T12936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 687.913252][T12936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 688.070861][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 688.216249][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 688.263703][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 690.268917][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 690.442035][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.476530][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 691.097734][T12981] loop6: detected capacity change from 0 to 256 [ 691.594068][T12981] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 691.604249][T12981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 691.654547][T12981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 692.160507][ C0] net_ratelimit: 2980 callbacks suppressed [ 692.160525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 692.178911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.191220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.203605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.215949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.228446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 692.240933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.253352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.265790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.278227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.700424][ T41] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 693.170006][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 693.437435][ T9570] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 693.445480][ T41] usb 1-1: unable to get BOS descriptor or descriptor too short [ 693.524618][ T41] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 693.533423][ T41] usb 1-1: can't read configurations, error -71 [ 693.843059][ T9570] usb 7-1: Using ep0 maxpacket: 8 [ 694.093268][ T9570] usb 7-1: unable to get BOS descriptor or descriptor too short [ 694.235056][ T9570] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 694.242744][ T9570] usb 7-1: can't read configurations, error -71 [ 694.360464][T13008] overlayfs: failed to resolve './file1': -2 [ 695.007253][T13014] __nla_validate_parse: 287 callbacks suppressed [ 695.007276][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 695.113754][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 695.172371][T13020] loop1: detected capacity change from 0 to 256 [ 695.194366][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 695.213903][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 695.287705][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 695.330365][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 695.353743][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 695.432615][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 695.597974][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 695.648630][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 695.738870][T13014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 695.825121][T13014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 695.833386][T13014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 695.948809][T13018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 696.037069][T13018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 696.047754][T13018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 696.247082][T13024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 696.294332][T13024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 696.302223][T13024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 696.534166][T13033] loop6: detected capacity change from 0 to 256 [ 697.183787][ C0] net_ratelimit: 3715 callbacks suppressed [ 697.183804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 697.202197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.214780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.227301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.239612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.251974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.264383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.277001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 697.289317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.301623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.033132][T13038] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 698.100191][T13038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 698.123540][T13038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 701.460512][T13060] loop6: detected capacity change from 0 to 256 [ 701.648651][T13053] __nla_validate_parse: 289 callbacks suppressed [ 701.648673][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 701.683817][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 701.737173][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 701.794190][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 701.876479][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 701.943970][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 702.033461][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 702.112506][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 702.127304][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 702.330422][ C0] net_ratelimit: 2851 callbacks suppressed [ 702.330440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.349199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.361759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 702.374190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.386613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.398982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.411383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.423994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 702.436416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.448856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.543339][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 702.714362][T13053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 703.033359][T13053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 703.053262][T13053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 703.176307][T13060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 703.238615][T13060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 703.314886][T13060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 705.018796][T13081] loop0: detected capacity change from 0 to 256 [ 707.661263][ C0] net_ratelimit: 1434 callbacks suppressed [ 707.661281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.679690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.692162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.704628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 707.717192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.729955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.742514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.755020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.767682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.780276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.027514][T13101] loop1: detected capacity change from 0 to 256 [ 710.756676][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 710.887071][ T4267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 710.906172][ T4267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 710.935250][ T4267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 710.956979][ T4267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 710.970177][ T4267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 712.006129][T13118] __nla_validate_parse: 136 callbacks suppressed [ 712.006148][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 712.134272][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 712.286847][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 712.485050][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 712.683760][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 712.694048][ C0] net_ratelimit: 3641 callbacks suppressed [ 712.694064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 712.712516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.725099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.737448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.749841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.762294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.774678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.787364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 712.799704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.812105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.817058][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 712.877892][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 712.925330][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 712.972396][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 713.057679][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 713.184893][ T4267] Bluetooth: hci5: command 0x0409 tx timeout [ 713.641658][T13118] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 713.652162][T13118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.704629][T13118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 714.156199][T13114] lo speed is unknown, defaulting to 1000 [ 715.255415][T13143] loop6: detected capacity change from 0 to 256 [ 715.298053][ T4267] Bluetooth: hci5: command 0x041b tx timeout [ 715.576183][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 715.599850][ T4273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 715.622500][ T4273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 715.811871][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 715.823497][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 715.832168][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 716.230379][T13149] lo speed is unknown, defaulting to 1000 [ 716.617491][T13144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 716.682556][T13144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 716.700662][T13144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 717.365331][ T4273] Bluetooth: hci5: command 0x040f tx timeout [ 717.558055][T13114] chnl_net:caif_netlink_parms(): no params data found [ 717.609194][T13166] loop6: detected capacity change from 0 to 256 [ 717.703179][ C0] net_ratelimit: 3832 callbacks suppressed [ 717.703200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.721512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.733820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.746261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.758838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.771277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 717.783698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.796257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.826800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.839468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.904525][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 717.986212][T13169] __nla_validate_parse: 136 callbacks suppressed [ 717.986233][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 718.035143][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 718.104003][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 718.157973][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 718.208026][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 718.243731][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 718.276348][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 718.318459][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 718.373944][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 718.431831][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 718.466379][T13169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 718.525626][T13169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 718.578870][T13169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 719.125565][T13149] chnl_net:caif_netlink_parms(): no params data found [ 719.140735][T13114] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.158261][T13114] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.189629][T13114] device bridge_slave_0 entered promiscuous mode [ 719.392741][T13114] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.400358][T13114] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.409080][T13114] device bridge_slave_1 entered promiscuous mode [ 719.440937][ T4273] Bluetooth: hci5: command 0x0419 tx timeout [ 719.988124][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 720.393386][T13149] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.401644][T13149] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.493338][T13149] device bridge_slave_0 entered promiscuous mode [ 720.505878][T13114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.605936][T13114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.825763][T13114] team0: Port device team_slave_0 added [ 720.875733][T13149] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.883583][T13149] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.947828][T13149] device bridge_slave_1 entered promiscuous mode [ 721.528715][T13149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.630625][T13114] team0: Port device team_slave_1 added [ 721.712653][T13149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.840986][T13149] team0: Port device team_slave_0 added [ 721.889846][T13149] team0: Port device team_slave_1 added [ 722.085171][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 722.700855][T13114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.716291][ C0] net_ratelimit: 3673 callbacks suppressed [ 722.716312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.734662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.747085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.760022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.772490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.784948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.797465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 722.809950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.810963][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.822424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.860449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.009273][T13114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.888622][T13114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.895910][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.075229][T13114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.355635][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 725.175003][T13149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.182214][T13149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.235902][T13231] overlayfs: failed to resolve './file0': -2 [ 725.254481][T13149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.387280][T13149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.396014][T13149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.537620][T13149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.850791][T13114] device hsr_slave_0 entered promiscuous mode [ 725.873865][T13114] device hsr_slave_1 entered promiscuous mode [ 726.678704][T13114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.698738][T13114] Cannot create hsr debugfs directory [ 727.594677][ T4267] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 727.653944][ T4267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 727.679291][ T4267] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 727.733512][ T4267] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 727.768637][ T4267] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 727.775390][ C0] net_ratelimit: 2645 callbacks suppressed [ 727.775409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.793837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.806444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.818920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 727.831285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.843651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.856021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.868351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.880852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 727.893395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.916466][ T4267] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 728.204505][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 728.222149][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 728.275890][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 728.297610][T13246] device bridge_slave_0 left promiscuous mode [ 728.304277][T13246] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.352851][T13246] device bridge_slave_1 left promiscuous mode [ 728.359268][T13246] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.402100][T13246] bond0: (slave bond_slave_0): Releasing backup interface [ 728.458799][T13246] bond0: (slave bond_slave_1): Releasing backup interface [ 728.566845][T13246] team0: Port device team_slave_0 removed [ 728.606356][T13246] team0: Port device team_slave_1 removed [ 728.613240][T13246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.620962][T13246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.678610][T13246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.686329][T13246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.284468][T13262] Bluetooth: MGMT ver 1.22 [ 729.808832][T13248] lo speed is unknown, defaulting to 1000 [ 729.838404][T13149] device hsr_slave_0 entered promiscuous mode [ 729.854726][T13149] device hsr_slave_1 entered promiscuous mode [ 729.895534][T13149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.905656][T13149] Cannot create hsr debugfs directory [ 730.014463][ T4273] Bluetooth: hci6: command 0x0409 tx timeout [ 732.333125][ T4273] Bluetooth: hci6: command 0x041b tx timeout [ 732.494133][T13248] chnl_net:caif_netlink_parms(): no params data found [ 732.773229][ C0] net_ratelimit: 3083 callbacks suppressed [ 732.773249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.791537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.804003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.816429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.829075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.841528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.854042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 732.866624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.878943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.891400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.027636][T13248] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.093246][T13248] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.123370][T13248] device bridge_slave_0 entered promiscuous mode [ 733.435446][T13248] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.451316][T13248] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.536020][T13248] device bridge_slave_1 entered promiscuous mode [ 734.081937][T13248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.134629][T13248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.386943][ T4273] Bluetooth: hci6: command 0x040f tx timeout [ 734.401181][T13248] team0: Port device team_slave_0 added [ 734.489906][T13248] team0: Port device team_slave_1 added [ 734.683826][T13248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.453184][T13248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.711172][T13248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.774473][T13248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.781499][T13248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.439809][T13248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.477392][ T4273] Bluetooth: hci6: command 0x0419 tx timeout [ 736.770854][T13248] device hsr_slave_0 entered promiscuous mode [ 736.843755][T13248] device hsr_slave_1 entered promiscuous mode [ 736.852670][T13248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.865424][T13248] Cannot create hsr debugfs directory [ 737.810039][ C0] net_ratelimit: 1434 callbacks suppressed [ 737.810057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.828554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.841118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 737.853723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.866139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.878518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.890890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.903580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 737.916478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.929032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.037877][T13329] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 738.071998][T13329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 738.103512][T13329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 738.342814][T13334] lo speed is unknown, defaulting to 1000 [ 739.022725][ T9570] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 739.444562][ T9570] usb 7-1: Using ep0 maxpacket: 8 [ 740.124483][ T9570] usb 7-1: unable to get BOS descriptor or descriptor too short [ 740.219792][ T9570] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 740.240138][ T9570] usb 7-1: can't read configurations, error -71 [ 741.202211][T13366] loop1: detected capacity change from 0 to 256 [ 741.312176][T13361] netlink: 'syz.1.2848': attribute type 27 has an invalid length. [ 741.735126][T13361] __nla_validate_parse: 62 callbacks suppressed [ 741.753667][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 741.933730][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 741.993731][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 742.112302][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 742.132327][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 742.182222][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 742.213708][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 742.275306][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 742.325929][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 742.413588][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 742.492012][T13361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 742.544192][T13361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 742.615292][T13361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 742.820476][ C0] net_ratelimit: 4529 callbacks suppressed [ 742.820498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.839271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.851936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.864303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.876694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 742.889185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.901666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.914079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.926394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.938805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.727496][T13390] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 743.754463][T13390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 743.801228][ T41] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 743.804549][T13390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 743.866921][T13390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 744.172972][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 744.459341][ T41] usb 2-1: unable to get BOS descriptor or descriptor too short [ 744.465773][T13400] overlayfs: failed to resolve './file0': -2 [ 744.567042][ T41] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 744.594666][ T41] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 744.648775][ T41] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 745.027226][ T41] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 745.063137][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.085000][ T41] usb 2-1: Product: syz [ 745.089258][ T41] usb 2-1: Manufacturer: syz [ 745.103114][ T41] usb 2-1: SerialNumber: syz [ 746.573001][ T41] cdc_ncm 2-1:1.0: bind() failure [ 746.620891][ T41] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 746.678241][ T41] cdc_ncm 2-1:1.1: bind() failure [ 746.907538][ T41] usb 2-1: USB disconnect, device number 6 [ 747.387579][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.394332][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.061503][ C0] net_ratelimit: 3834 callbacks suppressed [ 748.061523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 748.080053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.092866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.105324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.117776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.130270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.143266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.155795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 748.168167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.180499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.639469][T13435] overlayfs: failed to resolve './file1': -2 [ 750.516300][T13442] lo speed is unknown, defaulting to 1000 [ 752.663526][T13455] __nla_validate_parse: 66 callbacks suppressed [ 752.663550][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 753.063204][ C0] net_ratelimit: 1825 callbacks suppressed [ 753.063227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.081636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 753.094218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.106691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.119286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.131688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.144058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.156474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.169093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 753.181459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.931075][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2867'. [ 758.464405][ C0] net_ratelimit: 2983 callbacks suppressed [ 758.464426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.483117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.495538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.508024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 758.520898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.533274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.545762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.558177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.570808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:77:64:c3:30:97, vlan:0) [ 758.583387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.979928][T13501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 759.053409][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2871'. [ 759.085804][T13501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 759.173793][T13501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 759.271399][T13501] bond0: (slave wlan1): Releasing backup interface [ 759.352058][T13501] ------------[ cut here ]------------ [ 759.358208][T13501] WARNING: CPU: 1 PID: 13501 at kernel/kcov.c:869 kcov_remote_start+0x54d/0x7e0 [ 759.367312][T13501] Modules linked in: [ 759.371295][T13501] CPU: 1 PID: 13501 Comm: syz.1.2872 Not tainted syzkaller #0 [ 759.378805][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 759.389130][T13501] RIP: 0010:kcov_remote_start+0x54d/0x7e0 [ 759.394913][T13501] Code: ff ff 4c 89 ff be 03 00 00 00 e8 4e 3f 86 02 e9 f0 fa ff ff e8 04 ef 96 08 f7 c3 00 02 00 00 0f 84 df fa ff ff e9 5a fc ff ff <0f> 0b e8 8c 03 97 08 89 c0 48 c7 c7 30 b1 02 00 48 03 3c c5 80 49 [ 759.414667][T13501] RSP: 0018:ffffc90003de6310 EFLAGS: 00010002 [ 759.420795][T13501] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 759.428823][T13501] RDX: ffffffff90492630 RSI: ffffffff8a8c1700 RDI: ffffffff8adef760 [ 759.436834][T13501] RBP: ffffc90003de6570 R08: dffffc0000000000 R09: fffffbfff267032e [ 759.444848][T13501] R10: fffffbfff267032e R11: 1ffffffff267032d R12: ffff8880b8f2b130 [ 759.452948][T13501] R13: ffffffff8180de4b R14: ffff8880250f3b80 R15: 0000000000000000 [ 759.461056][T13501] FS: 00007fa17bb1c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 759.470122][T13501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.476775][T13501] CR2: 00007f75e07156c0 CR3: 000000008b671000 CR4: 00000000003506e0 [ 759.485428][T13501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 759.493786][T13501] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 759.501911][T13501] Call Trace: [ 759.505221][T13501] [ 759.508255][T13501] ieee80211_rx_list+0x4c5/0x2d00 [ 759.513312][T13501] ? kasan_save_free_info+0x2d/0x50 [ 759.518530][T13501] ? ____kasan_slab_free+0x126/0x1e0 [ 759.523848][T13501] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 759.530022][T13501] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 759.536018][T13501] ? read_lock_is_recursive+0x10/0x10 [ 759.541409][T13501] ? __lock_acquire+0x7c50/0x7c50 [ 759.546622][T13501] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 759.553923][T13501] ? ieee80211_rx_napi+0xc8/0x3c0 [ 759.558956][T13501] ieee80211_rx_napi+0x1a6/0x3c0 [ 759.563920][T13501] ? ieee80211_rx_list+0x2d00/0x2d00 [ 759.569214][T13501] ? __local_bh_disable_ip+0xee/0x190 [ 759.574615][T13501] ? skb_dequeue+0x10a/0x140 [ 759.579228][T13501] ieee80211_handle_queued_frames+0x105/0x1b0 [ 759.585308][T13501] ? ieee80211_stop_device+0x12/0xa0 [ 759.590603][T13501] ieee80211_stop_device+0x27/0xa0 [ 759.595730][T13501] ieee80211_do_stop+0x16a4/0x1d70 [ 759.600873][T13501] ? __mutex_lock+0x19e/0xaf0 [ 759.605649][T13501] ? ieee80211_sdata_stop+0x80/0x80 [ 759.610883][T13501] ? mutex_lock_nested+0x10/0x10 [ 759.616015][T13501] ? __local_bh_enable_ip+0x12a/0x1b0 [ 759.621410][T13501] ? do_raw_spin_unlock+0x11d/0x230 [ 759.626631][T13501] ieee80211_stop+0x432/0x4a0 [ 759.631359][T13501] ? dev_deactivate_many+0x244/0xcb0 [ 759.636655][T13501] ? ieee80211_open+0x200/0x200 [ 759.641529][T13501] __dev_close_many+0x1bf/0x2a0 [ 759.646435][T13501] ? dev_close_many+0x400/0x400 [ 759.651331][T13501] ? mark_lock+0x94/0x320 [ 759.655716][T13501] dev_close_many+0x21f/0x400 [ 759.660427][T13501] ? __dev_open+0x420/0x420 [ 759.664952][T13501] ? __local_bh_enable_ip+0x12a/0x1b0 [ 759.670344][T13501] ? lockdep_hardirqs_on+0x94/0x140 [ 759.675735][T13501] dev_close+0x14c/0x200 [ 759.679988][T13501] ? __dev_close_many+0x2a0/0x2a0 [ 759.685052][T13501] ? bond_hw_addr_flush+0x25/0xa0 [ 759.690094][T13501] __bond_release_one+0xca4/0x1270 [ 759.695227][T13501] ? bond_release+0x20/0x20 [ 759.699751][T13501] ? netdev_features_change+0xc0/0xc0 [ 759.705137][T13501] ? is_bpf_text_address+0x22/0x2a0 [ 759.710354][T13501] ? mutex_is_locked+0xe/0x40 [ 759.715057][T13501] do_setlink+0xe3c/0x3c40 [ 759.719496][T13501] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 759.725658][T13501] ? stack_trace_save+0x98/0xe0 [ 759.730523][T13501] ? __stack_depot_save+0x35/0x460 [ 759.735918][T13501] ? __nla_validate_parse+0x1fd2/0x2990 [ 759.741472][T13501] ? netlink_rcv_skb+0x1de/0x420 [ 759.746424][T13501] ? netlink_unicast+0x74d/0x8d0 [ 759.751394][T13501] ? __nla_validate+0x50/0x50 [ 759.756104][T13501] ? validate_linkmsg+0x3db/0x4c0 [ 759.761139][T13501] rtnl_newlink+0x10a3/0x1ff0 [ 759.765831][T13501] ? rtnl_newlink+0xab1/0x1ff0 [ 759.770628][T13501] ? rtnl_setlink+0x450/0x450 [ 759.775323][T13501] ? trace_raw_output_contention_end+0xd0/0xd0 [ 759.781502][T13501] ? rcu_is_watching+0x11/0xa0 [ 759.786281][T13501] ? trace_contention_end+0x5f/0x170 [ 759.791577][T13501] ? __mutex_lock+0x19e/0xaf0 [ 759.796273][T13501] ? rcu_read_unlock+0x8c/0xa0 [ 759.801241][T13501] ? rtnl_setlink+0x450/0x450 [ 759.805960][T13501] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 759.811123][T13501] rtnetlink_rcv_msg+0x79b/0xed0 [ 759.816356][T13501] ? rtnetlink_bind+0x80/0x80 [ 759.821050][T13501] ? __local_bh_enable_ip+0x12a/0x1b0 [ 759.826442][T13501] ? lockdep_hardirqs_on+0x94/0x140 [ 759.831834][T13501] ? __local_bh_enable_ip+0x12a/0x1b0 [ 759.837221][T13501] ? _local_bh_enable+0xa0/0xa0 [ 759.842099][T13501] ? __dev_queue_xmit+0x26f/0x3760 [ 759.847312][T13501] ? __dev_queue_xmit+0x26f/0x3760 [ 759.852749][T13501] ? __dev_queue_xmit+0x15c9/0x3760 [ 759.857963][T13501] ? __dev_queue_xmit+0x26f/0x3760 [ 759.863088][T13501] ? netdev_core_pick_tx+0x340/0x340 [ 759.868382][T13501] ? ref_tracker_free+0x630/0x7c0 [ 759.873460][T13501] ? refcount_inc+0x70/0x70 [ 759.877994][T13501] ? __copy_skb_header+0x417/0x5a0 [ 759.883126][T13501] ? __skb_clone+0x480/0x790 [ 759.887736][T13501] netlink_rcv_skb+0x1de/0x420 [ 759.892523][T13501] ? rtnetlink_bind+0x80/0x80 [ 759.897215][T13501] ? netlink_ack+0x1100/0x1100 [ 759.901999][T13501] ? netlink_deliver_tap+0x2e/0x1b0 [ 759.907218][T13501] netlink_unicast+0x74d/0x8d0 [ 759.912005][T13501] netlink_sendmsg+0x89e/0xbc0 [ 759.916788][T13501] ? netlink_getsockopt+0x540/0x540 [ 759.922006][T13501] ? aa_sock_msg_perm+0x94/0x150 [ 759.927051][T13501] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 759.932405][T13501] ? security_socket_sendmsg+0x7c/0xa0 [ 759.937879][T13501] ? netlink_getsockopt+0x540/0x540 [ 759.943093][T13501] ____sys_sendmsg+0x59b/0x970 [ 759.947881][T13501] ? __sys_sendmsg_sock+0x30/0x30 [ 759.952914][T13501] ? __import_iovec+0x315/0x500 [ 759.957786][T13501] ? import_iovec+0x6f/0xa0 [ 759.962319][T13501] ___sys_sendmsg+0x21c/0x290 [ 759.967010][T13501] ? __sys_sendmsg+0x270/0x270 [ 759.971832][T13501] ? __fdget+0x17c/0x200 [ 759.976091][T13501] __se_sys_sendmsg+0x19e/0x270 [ 759.980951][T13501] ? __se_sys_futex+0x14a/0x440 [ 759.985827][T13501] ? __x64_sys_sendmsg+0x80/0x80 [ 759.990799][T13501] ? lockdep_hardirqs_on+0x94/0x140 [ 759.996022][T13501] do_syscall_64+0x4c/0xa0 [ 760.000482][T13501] ? clear_bhb_loop+0x60/0xb0 [ 760.005189][T13501] ? clear_bhb_loop+0x60/0xb0 [ 760.009904][T13501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.015812][T13501] RIP: 0033:0x7fa17ab8f749 [ 760.020325][T13501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.040120][T13501] RSP: 002b:00007fa17bb1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.048734][T13501] RAX: ffffffffffffffda RBX: 00007fa17ade5fa0 RCX: 00007fa17ab8f749 [ 760.056717][T13501] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 760.064733][T13501] RBP: 00007fa17ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 760.072713][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.080790][T13501] R13: 00007fa17ade6038 R14: 00007fa17ade5fa0 R15: 00007ffd010cac98 [ 760.088824][T13501] [ 760.091852][T13501] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 760.099167][T13501] CPU: 1 PID: 13501 Comm: syz.1.2872 Not tainted syzkaller #0 [ 760.106724][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 760.116883][T13501] Call Trace: [ 760.120193][T13501] [ 760.123132][T13501] dump_stack_lvl+0x168/0x22e [ 760.128029][T13501] ? memcpy+0x3c/0x60 [ 760.132045][T13501] ? show_regs_print_info+0x12/0x12 [ 760.137523][T13501] ? load_image+0x3b0/0x3b0 [ 760.142080][T13501] panic+0x2c9/0x710 [ 760.146078][T13501] ? bpf_jit_dump+0xd0/0xd0 [ 760.150703][T13501] __warn+0x2f8/0x4f0 [ 760.154800][T13501] ? kcov_remote_start+0x54d/0x7e0 [ 760.160443][T13501] ? kcov_remote_start+0x54d/0x7e0 [ 760.165564][T13501] report_bug+0x2ba/0x4f0 [ 760.169904][T13501] ? kcov_remote_start+0x54d/0x7e0 [ 760.175026][T13501] handle_bug+0x3a/0x70 [ 760.179193][T13501] exc_invalid_op+0x16/0x40 [ 760.183793][T13501] asm_exc_invalid_op+0x16/0x20 [ 760.188655][T13501] RIP: 0010:kcov_remote_start+0x54d/0x7e0 [ 760.194406][T13501] Code: ff ff 4c 89 ff be 03 00 00 00 e8 4e 3f 86 02 e9 f0 fa ff ff e8 04 ef 96 08 f7 c3 00 02 00 00 0f 84 df fa ff ff e9 5a fc ff ff <0f> 0b e8 8c 03 97 08 89 c0 48 c7 c7 30 b1 02 00 48 03 3c c5 80 49 [ 760.214137][T13501] RSP: 0018:ffffc90003de6310 EFLAGS: 00010002 [ 760.220227][T13501] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 760.228212][T13501] RDX: ffffffff90492630 RSI: ffffffff8a8c1700 RDI: ffffffff8adef760 [ 760.236274][T13501] RBP: ffffc90003de6570 R08: dffffc0000000000 R09: fffffbfff267032e [ 760.244339][T13501] R10: fffffbfff267032e R11: 1ffffffff267032d R12: ffff8880b8f2b130 [ 760.252326][T13501] R13: ffffffff8180de4b R14: ffff8880250f3b80 R15: 0000000000000000 [ 760.260415][T13501] ? kcov_remote_start+0x8b/0x7e0 [ 760.265502][T13501] ieee80211_rx_list+0x4c5/0x2d00 [ 760.270904][T13501] ? kasan_save_free_info+0x2d/0x50 [ 760.276138][T13501] ? ____kasan_slab_free+0x126/0x1e0 [ 760.281466][T13501] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 760.287639][T13501] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 760.293758][T13501] ? read_lock_is_recursive+0x10/0x10 [ 760.299191][T13501] ? __lock_acquire+0x7c50/0x7c50 [ 760.304444][T13501] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 760.310569][T13501] ? ieee80211_rx_napi+0xc8/0x3c0 [ 760.315742][T13501] ieee80211_rx_napi+0x1a6/0x3c0 [ 760.320907][T13501] ? ieee80211_rx_list+0x2d00/0x2d00 [ 760.326278][T13501] ? __local_bh_disable_ip+0xee/0x190 [ 760.331688][T13501] ? skb_dequeue+0x10a/0x140 [ 760.336298][T13501] ieee80211_handle_queued_frames+0x105/0x1b0 [ 760.342387][T13501] ? ieee80211_stop_device+0x12/0xa0 [ 760.347695][T13501] ieee80211_stop_device+0x27/0xa0 [ 760.352816][T13501] ieee80211_do_stop+0x16a4/0x1d70 [ 760.357955][T13501] ? __mutex_lock+0x19e/0xaf0 [ 760.362645][T13501] ? ieee80211_sdata_stop+0x80/0x80 [ 760.367864][T13501] ? mutex_lock_nested+0x10/0x10 [ 760.372815][T13501] ? __local_bh_enable_ip+0x12a/0x1b0 [ 760.378203][T13501] ? do_raw_spin_unlock+0x11d/0x230 [ 760.383419][T13501] ieee80211_stop+0x432/0x4a0 [ 760.388104][T13501] ? dev_deactivate_many+0x244/0xcb0 [ 760.393394][T13501] ? ieee80211_open+0x200/0x200 [ 760.398253][T13501] __dev_close_many+0x1bf/0x2a0 [ 760.403121][T13501] ? dev_close_many+0x400/0x400 [ 760.407992][T13501] ? mark_lock+0x94/0x320 [ 760.412423][T13501] dev_close_many+0x21f/0x400 [ 760.417114][T13501] ? __dev_open+0x420/0x420 [ 760.421625][T13501] ? __local_bh_enable_ip+0x12a/0x1b0 [ 760.427011][T13501] ? lockdep_hardirqs_on+0x94/0x140 [ 760.432231][T13501] dev_close+0x14c/0x200 [ 760.436495][T13501] ? __dev_close_many+0x2a0/0x2a0 [ 760.441618][T13501] ? bond_hw_addr_flush+0x25/0xa0 [ 760.446655][T13501] __bond_release_one+0xca4/0x1270 [ 760.451820][T13501] ? bond_release+0x20/0x20 [ 760.456365][T13501] ? netdev_features_change+0xc0/0xc0 [ 760.461748][T13501] ? is_bpf_text_address+0x22/0x2a0 [ 760.467153][T13501] ? mutex_is_locked+0xe/0x40 [ 760.471841][T13501] do_setlink+0xe3c/0x3c40 [ 760.476316][T13501] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 760.482500][T13501] ? stack_trace_save+0x98/0xe0 [ 760.487375][T13501] ? __stack_depot_save+0x35/0x460 [ 760.492541][T13501] ? __nla_validate_parse+0x1fd2/0x2990 [ 760.498100][T13501] ? netlink_rcv_skb+0x1de/0x420 [ 760.503137][T13501] ? netlink_unicast+0x74d/0x8d0 [ 760.508098][T13501] ? __nla_validate+0x50/0x50 [ 760.512811][T13501] ? validate_linkmsg+0x3db/0x4c0 [ 760.517849][T13501] rtnl_newlink+0x10a3/0x1ff0 [ 760.522558][T13501] ? rtnl_newlink+0xab1/0x1ff0 [ 760.527383][T13501] ? rtnl_setlink+0x450/0x450 [ 760.532095][T13501] ? trace_raw_output_contention_end+0xd0/0xd0 [ 760.538310][T13501] ? rcu_is_watching+0x11/0xa0 [ 760.543131][T13501] ? trace_contention_end+0x5f/0x170 [ 760.548454][T13501] ? __mutex_lock+0x19e/0xaf0 [ 760.553162][T13501] ? rcu_read_unlock+0x8c/0xa0 [ 760.557961][T13501] ? rtnl_setlink+0x450/0x450 [ 760.562720][T13501] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 760.567844][T13501] rtnetlink_rcv_msg+0x79b/0xed0 [ 760.572810][T13501] ? rtnetlink_bind+0x80/0x80 [ 760.577496][T13501] ? __local_bh_enable_ip+0x12a/0x1b0 [ 760.582881][T13501] ? lockdep_hardirqs_on+0x94/0x140 [ 760.588093][T13501] ? __local_bh_enable_ip+0x12a/0x1b0 [ 760.593480][T13501] ? _local_bh_enable+0xa0/0xa0 [ 760.598439][T13501] ? __dev_queue_xmit+0x26f/0x3760 [ 760.603704][T13501] ? __dev_queue_xmit+0x26f/0x3760 [ 760.608839][T13501] ? __dev_queue_xmit+0x15c9/0x3760 [ 760.614159][T13501] ? __dev_queue_xmit+0x26f/0x3760 [ 760.619282][T13501] ? netdev_core_pick_tx+0x340/0x340 [ 760.624573][T13501] ? ref_tracker_free+0x630/0x7c0 [ 760.629610][T13501] ? refcount_inc+0x70/0x70 [ 760.634210][T13501] ? __copy_skb_header+0x417/0x5a0 [ 760.639347][T13501] ? __skb_clone+0x480/0x790 [ 760.643960][T13501] netlink_rcv_skb+0x1de/0x420 [ 760.648861][T13501] ? rtnetlink_bind+0x80/0x80 [ 760.653581][T13501] ? netlink_ack+0x1100/0x1100 [ 760.658454][T13501] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.663763][T13501] netlink_unicast+0x74d/0x8d0 [ 760.668543][T13501] netlink_sendmsg+0x89e/0xbc0 [ 760.673330][T13501] ? netlink_getsockopt+0x540/0x540 [ 760.678538][T13501] ? aa_sock_msg_perm+0x94/0x150 [ 760.683491][T13501] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 760.688779][T13501] ? security_socket_sendmsg+0x7c/0xa0 [ 760.694254][T13501] ? netlink_getsockopt+0x540/0x540 [ 760.699462][T13501] ____sys_sendmsg+0x59b/0x970 [ 760.704307][T13501] ? __sys_sendmsg_sock+0x30/0x30 [ 760.709338][T13501] ? __import_iovec+0x315/0x500 [ 760.714222][T13501] ? import_iovec+0x6f/0xa0 [ 760.718742][T13501] ___sys_sendmsg+0x21c/0x290 [ 760.723433][T13501] ? __sys_sendmsg+0x270/0x270 [ 760.728241][T13501] ? __fdget+0x17c/0x200 [ 760.732503][T13501] __se_sys_sendmsg+0x19e/0x270 [ 760.737394][T13501] ? __se_sys_futex+0x14a/0x440 [ 760.742365][T13501] ? __x64_sys_sendmsg+0x80/0x80 [ 760.747348][T13501] ? lockdep_hardirqs_on+0x94/0x140 [ 760.752589][T13501] do_syscall_64+0x4c/0xa0 [ 760.757117][T13501] ? clear_bhb_loop+0x60/0xb0 [ 760.761851][T13501] ? clear_bhb_loop+0x60/0xb0 [ 760.766553][T13501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.772456][T13501] RIP: 0033:0x7fa17ab8f749 [ 760.776880][T13501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.796492][T13501] RSP: 002b:00007fa17bb1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.804917][T13501] RAX: ffffffffffffffda RBX: 00007fa17ade5fa0 RCX: 00007fa17ab8f749 [ 760.812992][T13501] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 760.820974][T13501] RBP: 00007fa17ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 760.829049][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.837046][T13501] R13: 00007fa17ade6038 R14: 00007fa17ade5fa0 R15: 00007ffd010cac98 [ 760.845061][T13501] [ 760.848333][T13501] Kernel Offset: disabled [ 760.852799][T13501] Rebooting in 86400 seconds..