last executing test programs: 1m43.73117527s ago: executing program 4 (id=1687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_usb_connect(0x2, 0x3d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}]}], {0x14}}, 0x68}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00'], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 1m42.731067137s ago: executing program 4 (id=1693): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) chdir(0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46250e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec15e7e8664d7bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45e4ff75c5d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a1031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f75", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00'], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 1m40.177121156s ago: executing program 4 (id=1703): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30"], 0xec}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) close(r0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000) ioprio_get$uid(0x3, 0xee01) 1m38.90890158s ago: executing program 4 (id=1707): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x802, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x29a8}, @IFLA_TXQLEN={0x8}, @IFLA_PROP_LIST={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x8000) connect$inet(r2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x2c, @broadcast, 0x4e23, 0x1, 'nq\x00', 0x0, 0x6, 0x5d}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 1m37.713026139s ago: executing program 4 (id=1712): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m37.328025809s ago: executing program 4 (id=1713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31"], 0x140}}, 0x0) 1m34.258030716s ago: executing program 3 (id=1727): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd03"], 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x0) 1m30.491321304s ago: executing program 3 (id=1738): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30"], 0xec}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) close(r0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000) ioprio_get$uid(0x3, 0xee01) 1m29.643536709s ago: executing program 3 (id=1741): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x802, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x29a8}, @IFLA_TXQLEN={0x8}, @IFLA_PROP_LIST={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x8000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x2c, @broadcast, 0x4e23, 0x1, 'nq\x00', 0x0, 0x6, 0x5d}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 1m28.163836193s ago: executing program 3 (id=1747): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1m27.660604706s ago: executing program 3 (id=1749): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m27.629283045s ago: executing program 3 (id=1750): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7b27, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) 1m22.160699777s ago: executing program 32 (id=1713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31"], 0x140}}, 0x0) 1m13.434204428s ago: executing program 0 (id=1785): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x802, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x29a8}, @IFLA_TXQLEN={0x8}, @IFLA_PROP_LIST={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x8000) connect$inet(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x2c, @broadcast, 0x4e23, 0x1, 'nq\x00', 0x0, 0x6, 0x5d}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 1m12.494171465s ago: executing program 0 (id=1788): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021768238324ee0d5b18eabeda10c06e6143315"], 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0xfffffc00}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) 1m12.430687513s ago: executing program 33 (id=1750): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7b27, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) 1m11.241048396s ago: executing program 0 (id=1791): openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) dup2(r0, r0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0700022008"], 0xa) 1m10.777612208s ago: executing program 0 (id=1793): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x8, 0x9, 0x41a99bbc, 0x25}, 0x0, 0x8, &(0x7f00000008c0)={{0xdb, 0x3, 0x7f}, &(0x7f0000000400)={{0x9, 0x7fffffff, 0x240000, 0xd9c1}, &(0x7f00000003c0)={{0x1c0, 0x1, 0x3, 0x3}}}}, 0x7f, 0x0, 0x2c}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r1, 0x40204706, 0x20000000) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={0x0, 0x9, 0x0, [0x6, 0x1000000000000, 0xfffffffffffffffd, 0x6, 0x1ff], [0x8000, 0xf, 0x2, 0x8, 0x3, 0x72, 0x9, 0xe7f, 0xfffffffffffffffb, 0x6, 0x8, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x4, 0x1, 0x8, 0x0, 0x7, 0x3, 0x1000, 0x7, 0x1, 0x6, 0x3, 0x5, 0x3, 0x2, 0x5, 0x1, 0x2, 0x4b4e, 0x5, 0x4, 0x7, 0x8, 0x6, 0x6, 0x3, 0x400, 0x5, 0x3, 0x9, 0x71eb, 0x8, 0x1, 0x0, 0xdab, 0xe, 0xdb68, 0x7, 0xd, 0x7fffffff, 0x9, 0x9, 0x5, 0xfffffffffffffff9, 0x7ff, 0x2, 0x1, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0xffff, 0x8, 0x7fffffffffffffff, 0x5, 0xffffffffffffff00, 0x9, 0x9, 0x6, 0x595, 0x800, 0x7, 0x70e, 0x0, 0x6, 0x7, 0x3, 0x7, 0x61, 0x9, 0x8, 0x7, 0x8, 0x3b, 0x2, 0xb, 0x40, 0x6, 0xfffffffffffffff6, 0x7, 0x3, 0x0, 0x35d, 0x9, 0x8, 0x1d66, 0xb, 0x7, 0x1, 0x8, 0x1, 0x7, 0x1d2, 0xffffffff, 0x4, 0x9, 0x6, 0x2, 0x10001, 0x2, 0x3, 0x0, 0x0, 0x1, 0x4, 0xce7a, 0x685c]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32], 0x34}}, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1e0}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) 1m10.151920057s ago: executing program 0 (id=1796): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m8.625898975s ago: executing program 0 (id=1800): openat$dir(0xffffffffffffff9c, 0x0, 0xbfbd6160f1bb88c4, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_elf64(r3, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x20, 0xc, 0x4007fff, 0x3, 0x3e, 0x200, 0x10000294, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x6, 0x31b3}, [{0x3, 0xf9b, 0x7e, 0x400d, 0x4, 0x400000007, 0x100000001, 0x2}]}, 0x78) close(r3) write$P9_RXATTRCREATE(r3, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x92f053e39d5788a3) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x7) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xd00, 0x1) 1m0.875495621s ago: executing program 2 (id=1819): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(&(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) listen(r6, 0x6d72a7c9) getdents(r5, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) 58.994954723s ago: executing program 2 (id=1822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write$ppp(0xffffffffffffffff, &(0x7f0000000500)="e6f58b13ccf81f0fbf83483231b7e110d865f0d1d25d705d11117ca0799dc15cac7079505bf730a9cf409a75a73b6d25a5af0f19e5be185f8f5559e37d22e1128d9f65e73de3164cc3356162f75e8eb0a4efa051dcf9be5d556aad57e42d163c8718eb0bdd5612d5518fc1ef0cbfaa54ce85e15c6f032be89347a53adf9cedb392dec3e69781041c147f4371b64affee09ac227d5b00259917e918", 0x9b) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x4042090) socket$igmp6(0xa, 0x3, 0x2) shutdown(r3, 0x2) 56.459296361s ago: executing program 2 (id=1829): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 55.478098432s ago: executing program 2 (id=1831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 55.39356035s ago: executing program 2 (id=1833): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 54.575272318s ago: executing program 2 (id=1835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_elf64(r3, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x20, 0xc, 0x4007fff, 0x3, 0x3e, 0x200, 0x10000294, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x6, 0x31b3}, [{0x3, 0xf9b, 0x7e, 0x400d, 0x4, 0x400000007, 0x100000001, 0x2}]}, 0x78) close(r3) write$P9_RXATTRCREATE(r3, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x92f053e39d5788a3) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x7) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xd00, 0x1) 53.186142856s ago: executing program 34 (id=1800): openat$dir(0xffffffffffffff9c, 0x0, 0xbfbd6160f1bb88c4, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_elf64(r3, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x20, 0xc, 0x4007fff, 0x3, 0x3e, 0x200, 0x10000294, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x6, 0x31b3}, [{0x3, 0xf9b, 0x7e, 0x400d, 0x4, 0x400000007, 0x100000001, 0x2}]}, 0x78) close(r3) write$P9_RXATTRCREATE(r3, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x92f053e39d5788a3) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x7) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xd00, 0x1) 38.244764889s ago: executing program 35 (id=1835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_elf64(r3, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x20, 0xc, 0x4007fff, 0x3, 0x3e, 0x200, 0x10000294, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x6, 0x31b3}, [{0x3, 0xf9b, 0x7e, 0x400d, 0x4, 0x400000007, 0x100000001, 0x2}]}, 0x78) close(r3) write$P9_RXATTRCREATE(r3, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x92f053e39d5788a3) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x7) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xd00, 0x1) 23.083681723s ago: executing program 1 (id=1905): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000200)=ANY=[], 0x10002) 22.261786208s ago: executing program 1 (id=1909): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_dccp(0x2, 0x6, 0x0) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c050000", @ANYRES16, @ANYBLOB="0500000000000000000001000000b00408805000008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050005000000200004000a004e"], 0x51c}}, 0x0) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040701700ff000000000001090224000100000000090400560203000b00092100000001220500090581"], 0x0) 20.355617371s ago: executing program 1 (id=1912): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x8, 0x9, 0x41a99bbc, 0x25}, 0x0, 0x8, &(0x7f00000008c0)={{0xdb, 0x3, 0x7f}, &(0x7f0000000400)={{0x9, 0x7fffffff, 0x240000, 0xd9c1}, &(0x7f00000003c0)={{0x1c0, 0x1, 0x3, 0x3}}}}, 0x7f, 0x0, 0x2c}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r1, 0x40204706, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32], 0x34}}, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1e0}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 20.23158381s ago: executing program 6 (id=1913): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x8, 0x9, 0x41a99bbc, 0x25}, 0x0, 0x8, &(0x7f00000008c0)={{0xdb, 0x3, 0x7f}, &(0x7f0000000400)={{0x9, 0x7fffffff, 0x240000, 0xd9c1}, &(0x7f00000003c0)={{0x1c0, 0x1, 0x3, 0x3}}}}, 0x7f, 0x0, 0x2c}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r1, 0x40204706, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32], 0x34}}, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1e0}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 18.632163213s ago: executing program 8 (id=1872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$sequencer(r3, &(0x7f0000000240)=[@e={0xff, 0xb, 0x0, 0x1, @generic=0x4, 0x6, 0x9a, 0xf4}, @s={0x5, @generic=0xf, 0x1f}, @l={0x92, 0xf, 0xe0, 0xd, 0x95, 0x8, 0x3ff}], 0x14) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 18.513498574s ago: executing program 1 (id=1918): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7b27, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x9b090b, 0x2b, '\x00', @value=0x4}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) 17.778569089s ago: executing program 7 (id=1919): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xf}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x11, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x1, 0x7, 0x6, 0xf, 0x1}, {0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}], 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17.745205429s ago: executing program 8 (id=1920): openat$dir(0xffffffffffffff9c, 0x0, 0xbfbd6160f1bb88c4, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_elf64(r3, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x20, 0xc, 0x4007fff, 0x3, 0x3e, 0x200, 0x10000294, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x6, 0x31b3}, [{0x3, 0xf9b, 0x7e, 0x400d, 0x4, 0x400000007, 0x100000001, 0x2}]}, 0x78) close(r3) write$P9_RXATTRCREATE(r3, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x92f053e39d5788a3) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x7) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xd00, 0x1) 17.72669576s ago: executing program 6 (id=1921): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021768238324ee0d5b18eabeda10c06e6143315"], 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0xfffffc00}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) 17.156613567s ago: executing program 1 (id=1922): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 16.555159329s ago: executing program 6 (id=1924): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000180)) sendto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30"], 0xec}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) close(r0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000) 16.462783487s ago: executing program 1 (id=1925): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x8, 0x9, 0x41a99bbc, 0x25}, 0x0, 0x8, &(0x7f00000008c0)={{0xdb, 0x3, 0x7f}, &(0x7f0000000400)={{0x9, 0x7fffffff, 0x240000, 0xd9c1}, &(0x7f00000003c0)={{0x1c0, 0x1, 0x3, 0x3}}}}, 0x7f, 0x0, 0x2c}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r1, 0x40204706, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32], 0x34}}, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1e0}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 16.388135399s ago: executing program 8 (id=1926): iopl(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unlinkat(0xffffffffffffff9c, 0x0, 0x0) clock_adjtime(0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x4b, 0x0}}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TIOCGICOUNT(r3, 0x5409, 0x0) 16.368352561s ago: executing program 5 (id=1927): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x8, 0x9, 0x41a99bbc, 0x25}, 0x0, 0x8, &(0x7f00000008c0)={{0xdb, 0x3, 0x7f}, &(0x7f0000000400)={{0x9, 0x7fffffff, 0x240000, 0xd9c1}, &(0x7f00000003c0)={{0x1c0, 0x1, 0x3, 0x3}}}}, 0x7f, 0x0, 0x2c}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r1, 0x40204706, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1e0}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) 15.643737615s ago: executing program 7 (id=1928): openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc040564a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x101}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 15.628179244s ago: executing program 6 (id=1929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='bcache_alloc\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) userfaultfd(0x80001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='leases_conflict\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 15.360378423s ago: executing program 5 (id=1930): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 14.5826802s ago: executing program 7 (id=1931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$sequencer(r3, &(0x7f0000000240)=[@e={0xff, 0xb, 0x0, 0x1, @generic=0x4, 0x6, 0x9a, 0xf4}, @s={0x5, @generic=0xf, 0x1f}, @l={0x92, 0xf, 0xe0, 0xd, 0x95, 0x8, 0x3ff}], 0x14) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 14.579551224s ago: executing program 5 (id=1932): iopl(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unlinkat(0xffffffffffffff9c, 0x0, 0x0) clock_adjtime(0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31"], 0x140}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x4b, 0x0}}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r3, 0x5409, 0x0) 14.562496943s ago: executing program 8 (id=1933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)=r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x4044044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r7, &(0x7f00004d4000/0x2000)=nil, 0x5000) mremap(&(0x7f00004a4000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) preadv(r5, 0x0, 0x0, 0xc, 0x3fb) r8 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 13.942393217s ago: executing program 6 (id=1934): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 13.749723335s ago: executing program 5 (id=1935): openat$dir(0xffffffffffffff9c, 0x0, 0xbfbd6160f1bb88c4, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_elf64(r2, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x20, 0xc, 0x4007fff, 0x3, 0x3e, 0x200, 0x10000294, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x6, 0x31b3}, [{0x3, 0xf9b, 0x7e, 0x400d, 0x4, 0x400000007, 0x100000001, 0x2}]}, 0x78) close(r2) write$P9_RXATTRCREATE(r2, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x92f053e39d5788a3) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x7) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xd00, 0x1) 12.70875891s ago: executing program 8 (id=1936): openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc040564a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) 12.665658542s ago: executing program 7 (id=1937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = io_uring_setup(0x4eb8, &(0x7f0000000280)={0x0, 0x222, 0x4000, 0x0, 0x15c}) syz_io_uring_setup(0x5d76, &(0x7f0000000300)={0x0, 0x63d0, 0x4000, 0x0, 0x36b, 0x0, r3}, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000040)="b23b7f1c22c201f13b5e12d95059f8228b7389cbf3bb740cb8bb772e05fa394c27", 0x21) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) socket(0x840000000002, 0x3, 0x100) 11.600501442s ago: executing program 6 (id=1938): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x8, 0x9, 0x41a99bbc, 0x25}, 0x0, 0x8, &(0x7f00000008c0)={{0xdb, 0x3, 0x7f}, &(0x7f0000000400)={{0x9, 0x7fffffff, 0x240000, 0xd9c1}, &(0x7f00000003c0)={{0x1c0, 0x1, 0x3, 0x3}}}}, 0x7f, 0x0, 0x2c}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r1, 0x40204706, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32], 0x34}}, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1e0}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 11.593377058s ago: executing program 5 (id=1939): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {0x1}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 11.214269763s ago: executing program 7 (id=1940): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_dccp(0x2, 0x6, 0x0) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c050000", @ANYRES16, @ANYBLOB="0500000000000000000001000000b00408805000008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050005000000200004000a004e"], 0x51c}}, 0x0) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040701700ff000000000001090224000100000000090400560203000b00092100000001220500090581"], 0x0) 11.136768691s ago: executing program 8 (id=1941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) syz_open_dev$video4linux(0x0, 0x5, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x86783, 0x0) 6.882327534s ago: executing program 5 (id=1942): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000403f5f201d0650c16fce0102030109021b0001000010050904330001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000080)=ANY=[@ANYBLOB="a200004ef3b125948ef66b0ee0b3d41b1b", @ANYRES8=r0]) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) 0s ago: executing program 7 (id=1943): openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc040564a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x56, 0x0, 0x0, @broadcast}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x101}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) kernel console output (not intermixed with test programs): : invalid protocol: 44 255.255.255.255:20003 [ 519.864138][T12364] Dev loop2: unable to read RDB block 7 [ 520.456761][T12364] loop2: AHDI p1 p4 [ 520.480707][T12364] loop2: partition table partially beyond EOD, truncated [ 520.496252][T12364] loop2: p1 size 10 extends beyond EOD, truncated [ 520.510703][ T5193] Dev loop2: unable to read RDB block 7 [ 520.616475][ T5193] loop2: AHDI p1 p4 [ 520.627745][ T5193] loop2: partition table partially beyond EOD, truncated [ 520.671150][ T5193] loop2: p1 size 10 extends beyond EOD, truncated [ 521.949135][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 522.196719][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 523.618057][T12401] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 525.922967][ T29] audit: type=1400 audit(1737591459.584:318): avc: denied { accept } for pid=12430 comm="syz.4.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 528.083790][T12428] Bluetooth: hci4: command 0x0406 tx timeout [ 528.159694][T12452] syz.1.1175 (12452): drop_caches: 2 [ 530.147087][T12447] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 531.104487][T12489] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 531.780228][T12481] overlayfs: overlapping lowerdir path [ 534.168304][T12521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1190'. [ 537.014799][T12538] syz.4.1196 (12538): drop_caches: 2 [ 537.657938][T12555] Process accounting resumed [ 538.058494][T12559] Process accounting resumed [ 538.244156][T12563] syz.4.1211 (12563): drop_caches: 2 [ 539.105472][T12582] overlayfs: overlapping lowerdir path [ 541.836165][T12603] overlayfs: overlapping lowerdir path [ 541.984932][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1210'. [ 543.005654][T12644] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 543.217026][T12643] syz.2.1213 (12643): drop_caches: 2 [ 543.787196][T12647] syz.0.1219 (12647): drop_caches: 2 [ 545.972745][T12684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'. [ 546.769302][T12668] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 547.667584][T12698] syz.2.1227 (12698): drop_caches: 2 [ 551.686021][T12733] syz.1.1233 (12733): drop_caches: 2 [ 551.833974][T12734] syz.3.1232 (12734): drop_caches: 2 [ 551.864898][T12750] syz.4.1236 (12750): drop_caches: 2 [ 552.124760][T12754] overlayfs: overlapping lowerdir path [ 552.222566][T12749] syz.1.1238 (12749): drop_caches: 2 [ 552.565889][T12766] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 554.183469][T12760] overlayfs: overlapping lowerdir path [ 555.413275][T12789] overlayfs: overlapping lowerdir path [ 555.534416][T12784] syz.0.1243 (12784): drop_caches: 2 [ 555.863298][T12792] overlayfs: overlapping lowerdir path [ 557.730899][T12813] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 558.184504][T12816] syz.4.1254 (12816): drop_caches: 2 [ 559.396431][T12823] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 559.948465][T12828] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 561.977729][T12849] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 562.719740][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.730661][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.932686][T12862] syz.2.1267 (12862): drop_caches: 2 [ 563.398375][T12867] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 566.208936][T12890] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 566.497733][T12895] syz.0.1285 (12895): drop_caches: 2 [ 567.444558][T12907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1278'. [ 568.747615][T12927] syz.3.1282 (12927): drop_caches: 2 [ 569.304570][T12933] syz.0.1283 (12933): drop_caches: 2 [ 570.774798][T12951] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 571.420932][T12956] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 571.705534][T12955] syz.0.1298 (12955): drop_caches: 2 [ 573.253081][T12979] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 574.080140][T12988] syz.4.1297 (12988): drop_caches: 2 [ 574.667889][T12983] overlayfs: overlapping lowerdir path [ 575.291113][T12996] overlayfs: overlapping lowerdir path [ 577.634396][T13036] syz.0.1306 (13036): drop_caches: 2 [ 578.039779][T13037] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 578.393674][T13042] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 578.648776][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 579.829530][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 580.935195][T13065] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 581.280899][T13071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.370091][T13082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.664749][T13084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.264064][T13139] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1320'. [ 588.043399][T13150] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 589.199000][T13165] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 590.022156][T13175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.709104][T13176] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 590.946230][T13167] syz.3.1336 (13167): drop_caches: 2 [ 593.177254][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 595.048031][T13224] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 597.122791][T13244] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1349'. [ 597.517618][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 602.300683][ T5866] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 602.461687][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.489061][ T5866] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 602.491668][T13323] binder: BINDER_SET_CONTEXT_MGR already set [ 602.513216][T13323] binder: 13322:13323 ioctl 4018620d 20000100 returned -16 [ 602.528223][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 602.551141][ T5866] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 602.568444][ T5866] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 602.577859][ T5866] usb 5-1: Manufacturer: syz [ 602.602482][ T5866] usb 5-1: config 0 descriptor?? [ 602.623509][T13323] binder: BINDER_SET_CONTEXT_MGR already set [ 602.640803][T13323] binder: 13322:13323 ioctl 4018620d 200002c0 returned -16 [ 602.645341][ T5866] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 604.126591][T13346] overlayfs: overlapping lowerdir path [ 604.251137][T13352] syz.3.1367 (13352): drop_caches: 2 [ 604.379177][T13356] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1369'. [ 604.674973][ T5866] usb 5-1: USB disconnect, device number 9 [ 605.501360][T13373] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1371'. [ 605.738388][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 605.966840][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.528849][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 606.545311][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 606.562584][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 606.598372][ T25] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 606.628918][ T25] usb 4-1: Manufacturer: syz [ 606.650578][ T25] usb 4-1: config 0 descriptor?? [ 606.692006][ T25] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 607.133813][T13394] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1375'. [ 608.272039][ T25] usb 4-1: USB disconnect, device number 7 [ 608.374907][T13414] fuse: Invalid rootmode [ 608.828679][T13421] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 611.666790][T13470] overlayfs: overlapping lowerdir path [ 617.740145][T13538] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1400'. [ 618.890369][T13556] overlayfs: overlapping lowerdir path [ 618.919530][ T5924] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 619.149914][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.159804][T13565] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 619.435423][ T5924] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 619.469613][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 620.125179][ T5924] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 620.169068][ T5924] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 620.223143][ T5924] usb 5-1: Manufacturer: syz [ 620.262498][ T5924] usb 5-1: config 0 descriptor?? [ 620.290606][ T5924] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 621.548718][T13602] overlayfs: overlapping lowerdir path [ 622.000308][T13593] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 622.025765][ T5866] usb 5-1: USB disconnect, device number 10 [ 623.196719][T13625] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1416'. [ 624.112589][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.122618][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.170736][T13620] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 624.554402][T13645] binder: BINDER_SET_CONTEXT_MGR already set [ 624.693627][T13645] binder: 13638:13645 ioctl 4018620d 20000100 returned -16 [ 625.129481][T13640] binder: BINDER_SET_CONTEXT_MGR already set [ 625.275099][T13640] binder: 13638:13640 ioctl 4018620d 200002c0 returned -16 [ 625.419683][T13658] binder: 13653:13658 ioctl c0306201 20000680 returned -14 [ 625.950967][ T973] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 626.149493][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 626.177494][T13675] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1425'. [ 626.249229][ T973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.550477][ T973] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 626.736609][ T973] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 626.757084][ T973] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 626.776419][ T973] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 626.797183][ T973] usb 3-1: Manufacturer: syz [ 626.817529][ T973] usb 3-1: config 0 descriptor?? [ 626.829876][ T973] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 627.214433][T13693] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 628.462760][T13706] vivid-007: disconnect [ 628.787549][T13700] vivid-007: reconnect [ 629.856422][ T973] usb 3-1: USB disconnect, device number 6 [ 630.083169][T13718] binder: BINDER_SET_CONTEXT_MGR already set [ 630.139559][T13718] binder: 13717:13718 ioctl 4018620d 20000100 returned -16 [ 630.521878][T13718] binder: BINDER_SET_CONTEXT_MGR already set [ 630.638896][T13718] binder: 13717:13718 ioctl 4018620d 200002c0 returned -16 [ 632.391946][T13741] binder: BINDER_SET_CONTEXT_MGR already set [ 632.475344][T13741] binder: 13738:13741 ioctl 4018620d 20000100 returned -16 [ 632.475391][T13745] siw: device registration error -23 [ 632.751265][T13741] binder: BINDER_SET_CONTEXT_MGR already set [ 632.759456][T13741] binder: 13738:13741 ioctl 4018620d 200002c0 returned -16 [ 634.029393][ T5924] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 634.196496][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.231420][ T5924] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 634.348115][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 634.423141][ T5924] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 634.477966][ T5924] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 634.520845][ T5924] usb 4-1: Manufacturer: syz [ 634.543415][ T5924] usb 4-1: config 0 descriptor?? [ 634.576260][ T5924] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 634.761535][T13794] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1445'. [ 636.866903][ T5866] usb 4-1: USB disconnect, device number 8 [ 640.793139][T13825] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 640.936918][T13843] vivid-007: disconnect [ 641.286832][T13848] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1457'. [ 641.556328][T13841] vivid-007: reconnect [ 642.031265][T13855] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 642.401011][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 642.889016][T13871] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 642.930426][ T973] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 643.263351][ T973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.353520][ T973] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 643.622215][ T973] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 643.653939][ T973] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 643.763627][ T973] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 643.795632][ T973] usb 4-1: Manufacturer: syz [ 644.454694][T13893] siw: device registration error -23 [ 644.579672][ T973] usb 4-1: config 0 descriptor?? [ 645.125018][ T973] usb 4-1: can't set config #0, error -71 [ 645.131975][ T973] usb 4-1: USB disconnect, device number 9 [ 645.367213][T13903] siw: device registration error -23 [ 645.672054][T13905] siw: device registration error -23 [ 646.506432][T13914] overlayfs: missing 'lowerdir' [ 647.316792][T13931] syz.1.1479 (13931): drop_caches: 2 [ 648.436619][T13958] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 649.416971][T13967] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 649.896454][T13974] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 650.197244][T13978] overlayfs: missing 'lowerdir' [ 650.199487][ T973] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 650.363549][ T973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.386220][ T973] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 650.652747][ T973] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 650.670348][ T973] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 651.266310][ T973] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 651.274535][ T973] usb 3-1: Manufacturer: syz [ 651.370246][ T973] usb 3-1: config 0 descriptor?? [ 651.386618][ T973] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 653.320012][ T973] usb 3-1: USB disconnect, device number 7 [ 656.405794][T14059] fuse: Unknown parameter 'group_id00000000000000000000' [ 657.279527][ T973] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 658.021209][ T973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.191485][ T973] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 658.212903][T14079] overlay: Unknown parameter '/' [ 658.248643][ T973] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 658.264332][ T973] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 658.273805][ T973] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 658.282584][ T973] usb 5-1: Manufacturer: syz [ 658.292067][ T973] usb 5-1: config 0 descriptor?? [ 658.300750][ T973] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 659.142852][T14092] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1510'. [ 659.166427][T14098] loop2: detected capacity change from 0 to 7 [ 659.182870][T14098] Dev loop2: unable to read RDB block 7 [ 659.188768][T14098] loop2: AHDI p1 p4 [ 659.195210][T14098] loop2: partition table partially beyond EOD, truncated [ 659.204190][T14098] loop2: p1 size 10 extends beyond EOD, truncated [ 660.417798][ T973] usb 5-1: USB disconnect, device number 11 [ 660.899672][T14118] loop2: detected capacity change from 0 to 7 [ 661.404527][T14118] Dev loop2: unable to read RDB block 7 [ 661.422959][T14118] loop2: AHDI p1 p4 [ 661.427108][T14118] loop2: partition table partially beyond EOD, truncated [ 661.437089][T14118] loop2: p1 size 10 extends beyond EOD, truncated [ 661.478426][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 662.090161][T14134] binder: 14128:14134 ioctl c0306201 20000680 returned -14 [ 663.703272][T14159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1528'. [ 664.607369][ T5924] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 665.837246][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 665.858166][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.881973][ T5924] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 665.963612][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 665.986855][ T5924] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 666.010218][ T5924] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 666.021675][ T5924] usb 3-1: Manufacturer: syz [ 666.056626][ T5924] usb 3-1: config 0 descriptor?? [ 666.117153][ T5924] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 667.792657][ T5924] usb 3-1: USB disconnect, device number 8 [ 669.461077][T14206] binder: BINDER_SET_CONTEXT_MGR already set [ 669.499545][T14206] binder: 14205:14206 ioctl 4018620d 200002c0 returned -16 [ 671.656778][T12428] Bluetooth: hci4: command 0x0406 tx timeout [ 674.709460][ T5924] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 675.446632][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.609476][ T5924] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 675.801821][T14276] syz.3.1560 (14276): drop_caches: 2 [ 675.832899][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 675.904736][T14284] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1562'. [ 675.908981][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 676.852174][ T5924] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 676.871609][ T5924] usb 2-1: Manufacturer: syz [ 676.882870][ T5924] usb 2-1: config 0 descriptor?? [ 676.935990][ T5924] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 677.130117][ T5870] usb 2-1: USB disconnect, device number 9 [ 679.036973][T14345] siw: device registration error -23 [ 679.849660][ T5924] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 680.426374][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.523854][ T5924] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 680.567174][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 680.609252][ T5924] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 680.652707][ T5924] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 680.673863][ T5924] usb 3-1: Manufacturer: syz [ 680.701346][T14386] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1574'. [ 680.748568][ T5924] usb 3-1: config 0 descriptor?? [ 680.797453][ T5924] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 682.334762][ T5924] usb 3-1: USB disconnect, device number 9 [ 683.221644][T14421] autofs: Bad value for 'fd' [ 683.239867][T14419] loop2: detected capacity change from 0 to 7 [ 683.283132][T14419] Dev loop2: unable to read RDB block 7 [ 683.311903][T14419] loop2: AHDI p1 p4 [ 683.319119][T14419] loop2: partition table partially beyond EOD, truncated [ 683.390330][T14419] loop2: p1 size 10 extends beyond EOD, truncated [ 683.392579][T14425] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1583'. [ 683.716750][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 683.765453][T14429] autofs: Bad value for 'fd' [ 684.979275][T14441] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 684.991579][T14441] ip6erspan0: entered promiscuous mode [ 684.997111][T14441] ip6erspan0: entered allmulticast mode [ 685.630776][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.639377][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.007546][T14452] syz.2.1591: attempt to access beyond end of device [ 686.007546][T14452] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 686.048468][T14452] hpfs: hpfs_map_sector(): read error [ 686.374671][ T973] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 686.790508][ T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.809788][ T973] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 686.872514][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 686.949108][ T973] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 686.994021][ T973] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 687.045900][ T973] usb 1-1: Manufacturer: syz [ 687.115317][ T973] usb 1-1: config 0 descriptor?? [ 687.152975][ T973] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 687.338055][T14470] siw: device registration error -23 [ 687.630132][T14465] syz.2.1595 (14465): drop_caches: 2 [ 688.778299][T14486] binder: BINDER_SET_CONTEXT_MGR already set [ 688.799439][T14486] binder: 14485:14486 ioctl 4018620d 20000100 returned -16 [ 688.819142][T14486] binder: BINDER_SET_CONTEXT_MGR already set [ 688.828995][T14486] binder: 14485:14486 ioctl 4018620d 200002c0 returned -16 [ 689.152522][ T5924] usb 1-1: USB disconnect, device number 5 [ 690.859876][T14508] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1605'. [ 691.727808][T14507] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 692.168984][T14522] loop2: detected capacity change from 0 to 7 [ 692.227052][T14522] Dev loop2: unable to read RDB block 7 [ 692.242945][T14522] loop2: AHDI p1 p4 [ 692.255585][T14522] loop2: partition table partially beyond EOD, truncated [ 692.274593][T14522] loop2: p1 size 10 extends beyond EOD, truncated [ 692.636769][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 693.030827][ T973] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 693.667796][ T973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.698372][T14536] syz.0.1615 (14536): drop_caches: 2 [ 693.741367][ T973] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 693.786048][ T973] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 693.820324][ T973] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 693.845791][ T973] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 693.863286][ T973] usb 5-1: Manufacturer: syz [ 693.996641][ T973] usb 5-1: config 0 descriptor?? [ 694.173857][ T973] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 694.566786][T14558] Process accounting resumed [ 695.800557][T14559] Process accounting resumed [ 695.814436][ T973] usb 5-1: USB disconnect, device number 12 [ 696.456572][T14577] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 697.311059][T14588] syz.1.1627 (14588): drop_caches: 2 [ 697.341210][T14589] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 697.850254][T14598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 698.228878][T14602] Process accounting resumed [ 698.670593][ T29] audit: type=1400 audit(1737591632.374:319): avc: denied { ioctl } for pid=14606 comm="syz.0.1632" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 699.139477][T14453] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 699.303545][T14453] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.325812][T14453] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 699.563159][T14453] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 699.591889][T14453] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 699.609523][T14453] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 699.761309][T14453] usb 3-1: Manufacturer: syz [ 700.109874][T14453] usb 3-1: config 0 descriptor?? [ 700.135556][T14623] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 700.311964][T14453] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 702.243252][ T25] usb 3-1: USB disconnect, device number 10 [ 702.874794][T14664] Process accounting resumed [ 704.180130][T14674] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 704.519559][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 704.785524][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.827988][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 704.969997][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 705.086784][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 705.144747][ T25] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 705.189728][ T25] usb 1-1: Manufacturer: syz [ 705.262791][ T25] usb 1-1: config 0 descriptor?? [ 705.279458][T14691] Process accounting resumed [ 705.283754][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 706.754792][T14713] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 707.400978][ T25] usb 1-1: USB disconnect, device number 6 [ 707.522016][T14719] Process accounting resumed [ 708.456313][T14728] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1669'. [ 708.950588][T14737] binder: BINDER_SET_CONTEXT_MGR already set [ 708.956811][T14737] binder: 14735:14737 ioctl 4018620d 200002c0 returned -16 [ 709.781915][T14749] Process accounting resumed [ 710.410336][T14755] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 711.053502][T14761] siw: device registration error -23 [ 711.326555][ T973] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 711.815230][ T973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.817932][T14766] loop2: detected capacity change from 0 to 7 [ 711.829451][ T973] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 711.835661][T14766] Dev loop2: unable to read RDB block 7 [ 711.848506][T14766] loop2: unable to read partition table [ 711.857627][T14766] loop2: partition table beyond EOD, truncated [ 711.865030][T14766] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 711.869383][ T973] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 711.941413][ T973] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 711.970942][ T973] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 712.306230][ T973] usb 3-1: Manufacturer: syz [ 712.332881][ T973] usb 3-1: config 0 descriptor?? [ 712.363882][ T973] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 712.561905][T14773] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 712.720629][T14775] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1685'. [ 712.743470][ T25] usb 3-1: USB disconnect, device number 11 [ 713.963271][T14799] loop2: detected capacity change from 0 to 7 [ 713.975464][T14799] Dev loop2: unable to read RDB block 7 [ 713.982014][T14799] loop2: unable to read partition table [ 713.994518][T14799] loop2: partition table beyond EOD, truncated [ 714.575660][T14799] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 714.582186][T14804] Process accounting resumed [ 714.936678][ T5193] Dev loop2: unable to read RDB block 7 [ 714.949664][ T5193] loop2: unable to read partition table [ 714.967765][ T5193] loop2: partition table beyond EOD, truncated [ 715.915717][T14815] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1698'. [ 715.926466][T14806] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 716.084647][T14819] siw: device registration error -23 [ 716.531096][T14822] Process accounting resumed [ 716.773511][T14826] loop2: detected capacity change from 0 to 7 [ 716.796403][T14826] Dev loop2: unable to read RDB block 7 [ 716.813691][T14826] loop2: AHDI p1 p4 [ 716.817630][T14826] loop2: partition table partially beyond EOD, truncated [ 716.840045][T14826] loop2: p1 size 10 extends beyond EOD, truncated [ 717.181519][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 717.309546][ T973] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 717.632724][ T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.643893][ T973] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 718.249415][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 718.289044][ T973] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 718.327003][ T973] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 718.528389][ T973] usb 1-1: Manufacturer: syz [ 718.596621][ T973] usb 1-1: config 0 descriptor?? [ 718.614248][ T973] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 718.629807][T14838] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 718.848689][ T29] audit: type=1400 audit(1737591652.554:320): avc: denied { mount } for pid=14851 comm="syz.4.1712" name="/" dev="autofs" ino=42783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 718.883975][ T29] audit: type=1400 audit(1737591652.554:321): avc: denied { mounton } for pid=14851 comm="syz.4.1712" path="/336/file1/file0" dev="autofs" ino=42784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 718.887149][T14854] loop2: detected capacity change from 0 to 7 [ 719.071878][T14854] Dev loop2: unable to read RDB block 7 [ 719.078428][T14854] loop2: AHDI p1 p4 [ 719.202030][ T29] audit: type=1400 audit(1737591652.914:322): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 719.239385][T14854] loop2: partition table partially beyond EOD, truncated [ 719.258101][T14854] loop2: p1 size 10 extends beyond EOD, truncated [ 719.538592][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 719.633151][ T29] audit: type=1400 audit(1737591653.344:323): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.713755][T14860] loop2: detected capacity change from 0 to 7 [ 719.730144][ T6325] Dev loop2: unable to read RDB block 7 [ 719.735749][ T6325] loop2: AHDI p1 p4 [ 719.744366][ T6325] loop2: partition table partially beyond EOD, truncated [ 719.763293][ T6325] loop2: p1 size 10 extends beyond EOD, truncated [ 719.796279][T14860] Dev loop2: unable to read RDB block 7 [ 719.807684][T14860] loop2: AHDI p1 p4 [ 719.812127][T14860] loop2: partition table partially beyond EOD, truncated [ 719.824017][T14860] loop2: p1 size 10 extends beyond EOD, truncated [ 720.172337][ T25] usb 1-1: USB disconnect, device number 7 [ 720.312743][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 720.717985][T14873] Process accounting resumed [ 720.911591][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 720.919556][ T29] audit: type=1400 audit(1737591654.624:324): avc: denied { search } for pid=14863 comm="syz.3.1715" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 720.986261][ T29] audit: type=1400 audit(1737591654.664:325): avc: denied { mounton } for pid=14863 comm="syz.3.1715" path="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 721.008551][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.049277][T14871] syz.1.1716 (14871): drop_caches: 2 [ 722.360423][T14899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 722.589607][ T5924] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 723.233916][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.254671][ T5924] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 723.272410][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 723.302339][ T5924] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 723.311568][ T5924] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 723.324915][ T5924] usb 4-1: Manufacturer: syz [ 723.344263][ T5924] usb 4-1: config 0 descriptor?? [ 723.357159][ T5924] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 723.606647][T14916] loop2: detected capacity change from 0 to 7 [ 723.613520][T14916] Dev loop2: unable to read RDB block 7 [ 723.619195][T14916] loop2: AHDI p1 p4 [ 723.623728][T14916] loop2: partition table partially beyond EOD, truncated [ 723.634438][T14916] loop2: p1 size 10 extends beyond EOD, truncated [ 725.227972][T14927] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 726.013421][ T5924] usb 4-1: USB disconnect, device number 10 [ 726.069701][T14939] loop2: detected capacity change from 0 to 7 [ 726.077036][T14939] Dev loop2: unable to read RDB block 7 [ 726.084003][T14939] loop2: AHDI p1 p4 [ 726.088440][T14939] loop2: partition table partially beyond EOD, truncated [ 726.096200][T14939] loop2: p1 size 10 extends beyond EOD, truncated [ 726.786201][T14945] overlayfs: overlapping lowerdir path [ 728.328156][T14951] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 728.423296][ T29] audit: type=1400 audit(1737591662.124:326): avc: denied { setopt } for pid=14964 comm="syz.2.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 728.442868][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.860354][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 730.045277][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.195804][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 730.220457][T14988] loop2: detected capacity change from 0 to 7 [ 730.221171][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 730.239539][T14988] Dev loop2: unable to read RDB block 7 [ 730.239564][T14988] loop2: AHDI p1 p4 [ 730.239583][T14988] loop2: partition table partially beyond EOD, truncated [ 730.239712][T14988] loop2: p1 size 10 extends beyond EOD, [ 730.246181][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 730.253640][T14988] truncated [ 730.299529][ T25] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 730.321757][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 730.323519][ T25] usb 1-1: Manufacturer: syz [ 730.338081][ T25] usb 1-1: config 0 descriptor?? [ 730.360634][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 730.362185][T14988] syz.1.1753: attempt to access beyond end of device [ 730.362185][T14988] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 730.425841][T14988] hpfs: hpfs_map_sector(): read error [ 731.140391][T14997] Process accounting resumed [ 731.413275][T15000] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 731.655437][T15002] loop2: detected capacity change from 0 to 7 [ 731.663966][ T25] usb 1-1: USB disconnect, device number 8 [ 731.677917][T15002] Dev loop2: unable to read RDB block 7 [ 731.684528][T15002] loop2: AHDI p1 p4 [ 731.688614][T15002] loop2: partition table partially beyond EOD, truncated [ 731.700662][T15002] loop2: p1 size 10 extends beyond EOD, truncated [ 732.906359][T15018] Process accounting resumed [ 734.761903][T15037] loop2: detected capacity change from 0 to 7 [ 734.790987][T15037] Dev loop2: unable to read RDB block 7 [ 734.796581][T15037] loop2: AHDI p1 p4 [ 734.834493][T15038] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 734.853754][T15037] loop2: partition table partially beyond EOD, truncated [ 734.865243][T15037] loop2: p1 size 10 extends beyond EOD, truncated [ 734.947079][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 735.040198][T15037] syz.2.1767: attempt to access beyond end of device [ 735.040198][T15037] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 735.056859][T15037] hpfs: hpfs_map_sector(): read error [ 735.311631][T14243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 735.322936][T14243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 735.331961][T14243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 735.342244][T14243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 735.350671][T14243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 735.358541][T14243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 735.373016][ T29] audit: type=1400 audit(1737591669.084:327): avc: denied { mounton } for pid=15043 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 735.389698][T15043] wg1 speed is unknown, defaulting to 1000 [ 735.644799][T15043] chnl_net:caif_netlink_parms(): no params data found [ 735.769172][ T973] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 735.788815][T15043] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.827256][T15043] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.838698][T15043] bridge_slave_0: entered allmulticast mode [ 735.849918][T15043] bridge_slave_0: entered promiscuous mode [ 735.859243][T15043] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.866965][T15043] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.874485][T15043] bridge_slave_1: entered allmulticast mode [ 735.882597][T15043] bridge_slave_1: entered promiscuous mode [ 735.908438][T15043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.919074][T15043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.930743][ T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.947358][ T973] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 735.960375][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 735.977621][T15043] team0: Port device team_slave_0 added [ 735.985069][T15043] team0: Port device team_slave_1 added [ 735.991040][ T29] audit: type=1400 audit(1737591669.704:328): avc: denied { write } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.998631][ T973] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 736.039335][ T29] audit: type=1400 audit(1737591669.704:329): avc: denied { remove_name } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.061535][ T973] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 736.082535][T15043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.089926][T15043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.094251][ T29] audit: type=1400 audit(1737591669.704:330): avc: denied { add_name } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.115837][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.116037][ T973] usb 1-1: Manufacturer: syz [ 736.157198][T15043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.177605][T15043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.195740][T15043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.242537][ T973] usb 1-1: config 0 descriptor?? [ 736.249908][T15043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.261934][ T973] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 736.314602][T15043] hsr_slave_0: entered promiscuous mode [ 736.680639][T15043] hsr_slave_1: entered promiscuous mode [ 736.687645][T15043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.697195][T15043] Cannot create hsr debugfs directory [ 737.056075][T15061] loop2: detected capacity change from 0 to 7 [ 737.064101][T15061] Dev loop2: unable to read RDB block 7 [ 737.069981][T15061] loop2: AHDI p1 p4 [ 737.074021][T15061] loop2: partition table partially beyond EOD, truncated [ 737.085691][T15061] loop2: p1 size 10 extends beyond EOD, truncated [ 737.440348][T14243] Bluetooth: hci3: command tx timeout [ 737.563709][T15064] loop2: detected capacity change from 0 to 7 [ 737.575478][T15064] Dev loop2: unable to read RDB block 7 [ 737.582723][T15064] loop2: unable to read partition table [ 737.588643][T15064] loop2: partition table beyond EOD, truncated [ 737.594939][T15043] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 737.602035][T15064] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 737.606693][T15043] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 737.951432][T15069] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 738.032922][T15043] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 738.043188][T15043] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 738.188008][T15043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.205124][T15043] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.234650][T15043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 738.245681][T15043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.295536][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.302692][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.367473][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.374643][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.409701][ T25] usb 1-1: USB disconnect, device number 9 [ 738.522627][ T29] audit: type=1400 audit(1737591672.094:331): avc: denied { sys_module } for pid=15043 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 739.500484][T14243] Bluetooth: hci3: command tx timeout [ 739.795938][T15043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.814013][T15091] loop2: detected capacity change from 0 to 7 [ 739.821635][T15091] Dev loop2: unable to read RDB block 7 [ 739.942686][T15091] loop2: AHDI p1 p4 [ 740.038652][T15091] loop2: partition table partially beyond EOD, truncated [ 740.073994][T15095] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 740.179513][T15091] loop2: p1 size 10 extends beyond EOD, truncated [ 740.237514][ T6325] udevd[6325]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 740.443629][T15103] Process accounting resumed [ 741.315191][T15043] veth0_vlan: entered promiscuous mode [ 741.324983][T15043] veth1_vlan: entered promiscuous mode [ 741.619084][T14243] Bluetooth: hci3: command tx timeout [ 742.323504][T15043] veth0_macvtap: entered promiscuous mode [ 742.332163][T15043] veth1_macvtap: entered promiscuous mode [ 742.347641][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.358176][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.851742][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.001775][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.039139][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.065970][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.087513][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.098036][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.108881][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.119364][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.130275][T15043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.143506][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.167506][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.191418][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.239554][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.306691][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.375519][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.506591][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.595009][T15126] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 743.646169][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.656310][T15043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.667364][T14243] Bluetooth: hci3: command tx timeout [ 743.673358][T15043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.689142][T15043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.709560][ T5870] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 743.878829][T15043] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.889873][T15043] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.898726][T15043] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.907749][T15043] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.980914][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.993708][ T5870] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 744.005407][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 744.023311][ T5870] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 744.038312][ T6459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.050961][ T5870] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 744.066691][ T6459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.074956][ T5870] usb 2-1: Manufacturer: syz [ 744.106105][ T5870] usb 2-1: config 0 descriptor?? [ 744.136304][ T5870] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 744.175334][ T7081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.204429][ T7081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.258630][ T29] audit: type=1400 audit(1737591677.964:332): avc: denied { mounton } for pid=15043 comm="syz-executor" path="/root/syzkaller.Ob9AM6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 744.454495][ T29] audit: type=1400 audit(1737591678.164:333): avc: denied { mount } for pid=15043 comm="syz-executor" name="/" dev="gadgetfs" ino=7048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 745.478221][T14243] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 745.568468][T15148] siw: device registration error -23 [ 745.596488][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 745.617227][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 745.628380][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 745.638220][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 745.647732][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 745.654910][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 745.759509][T15149] wg1 speed is unknown, defaulting to 1000 [ 746.169666][ T5870] usb 2-1: USB disconnect, device number 10 [ 746.559242][T15161] Process accounting resumed [ 746.823961][T15162] binder: BINDER_SET_CONTEXT_MGR already set [ 746.844935][T15162] binder: 15160:15162 ioctl 4018620d 200002c0 returned -16 [ 746.845790][T15149] chnl_net:caif_netlink_parms(): no params data found [ 746.948404][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.955074][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.741415][ T5831] Bluetooth: hci2: command tx timeout [ 747.919911][T15184] loop2: detected capacity change from 0 to 7 [ 747.927524][T15184] Dev loop2: unable to read RDB block 7 [ 747.933401][T15184] loop2: AHDI p1 p4 [ 747.937617][T15184] loop2: partition table partially beyond EOD, truncated [ 747.945755][T15184] loop2: p1 size 10 extends beyond EOD, truncated [ 748.246399][T15187] syz.2.1799: attempt to access beyond end of device [ 748.246399][T15187] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 748.350517][T15149] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.359969][T15187] hpfs: hpfs_map_sector(): read error [ 748.390599][T15149] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.397803][T15149] bridge_slave_0: entered allmulticast mode [ 748.433612][T15149] bridge_slave_0: entered promiscuous mode [ 748.454920][T15186] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 748.492644][T15149] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.513013][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.540988][T15149] bridge_slave_1: entered allmulticast mode [ 748.564513][T15149] bridge_slave_1: entered promiscuous mode [ 748.714276][T15149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.760322][T15149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.808606][T15149] team0: Port device team_slave_0 added [ 748.834927][T15149] team0: Port device team_slave_1 added [ 748.906706][T15149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.922481][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.934890][T14453] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 749.000981][T15149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.020622][T15149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.027711][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.055209][T15149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.083218][T15149] hsr_slave_0: entered promiscuous mode [ 749.089702][T15149] hsr_slave_1: entered promiscuous mode [ 749.098516][T15149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.116669][T15149] Cannot create hsr debugfs directory [ 749.133513][T14453] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.154100][T14453] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 749.165581][T14453] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 749.208983][T14453] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 749.220454][T14453] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 749.258347][T14453] usb 2-1: Manufacturer: syz [ 749.275708][T14453] usb 2-1: config 0 descriptor?? [ 749.298072][T14453] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 749.411452][T15149] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 749.433983][T15149] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 749.467539][T15149] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 749.501696][ T5831] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 749.511894][ T5831] Bluetooth: hci4: Injecting HCI hardware error event [ 749.512302][T15149] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 749.520478][ T5831] Bluetooth: hci4: hardware error 0x00 [ 749.625357][T15149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.669349][T15149] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.693164][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.700251][ T6464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.755527][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.762688][ T6464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.818512][T15149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 749.829858][T14243] Bluetooth: hci2: command tx timeout [ 749.840321][T15149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 751.609426][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 751.635498][ T973] usb 2-1: USB disconnect, device number 11 [ 751.661093][T15149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.688297][T15213] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 751.847871][T15227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 751.902083][ T5831] Bluetooth: hci2: command tx timeout [ 752.876106][T15235] binder: BINDER_SET_CONTEXT_MGR already set [ 752.898312][T15235] binder: 15234:15235 ioctl 4018620d 20000100 returned -16 [ 752.914744][T15235] binder: BINDER_SET_CONTEXT_MGR already set [ 752.925482][T15235] binder: 15234:15235 ioctl 4018620d 200002c0 returned -16 [ 753.979524][ T5831] Bluetooth: hci2: command tx timeout [ 754.242839][T15149] veth0_vlan: entered promiscuous mode [ 754.264134][T15149] veth1_vlan: entered promiscuous mode [ 754.547664][T15250] overlayfs: overlapping lowerdir path [ 754.606038][T15149] veth0_macvtap: entered promiscuous mode [ 754.635385][T15149] veth1_macvtap: entered promiscuous mode [ 754.677904][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.709422][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.729396][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.742260][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.766267][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.783845][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.794055][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.804592][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.814456][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.825058][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.876624][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.887998][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.922085][T15149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.946934][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.960040][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.971785][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.984228][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.994133][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.516394][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.526506][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.550081][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.568824][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.580780][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.661528][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.045398][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.085806][T15149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.252267][T15149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.267978][T15149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.625258][T15149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.648155][T15149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.844676][ T6459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.425723][ T6459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.500917][ T7123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.512526][ T7123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.958314][T15292] siw: device registration error -23 [ 761.329681][T15327] loop2: detected capacity change from 0 to 7 [ 761.337294][T15327] Dev loop2: unable to read RDB block 7 [ 761.343115][T15327] loop2: AHDI p1 p4 [ 761.347029][T15327] loop2: partition table partially beyond EOD, truncated [ 761.355460][T15327] loop2: p1 size 10 extends beyond EOD, truncated [ 761.884058][ T7127] Bluetooth: hci5: Frame reassembly failed (-84) [ 761.899205][ T7127] Bluetooth: hci5: Frame reassembly failed (-84) [ 761.975529][T15332] syz.5.1834: attempt to access beyond end of device [ 761.975529][T15332] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 762.000518][T15332] hpfs: hpfs_map_sector(): read error [ 762.585138][T15337] loop2: detected capacity change from 0 to 7 [ 762.605394][T15337] Dev loop2: unable to read RDB block 7 [ 762.611215][T15337] loop2: AHDI p1 p4 [ 762.615121][T15337] loop2: partition table partially beyond EOD, truncated [ 762.624477][T15337] loop2: p1 size 10 extends beyond EOD, truncated [ 762.721703][T15340] syz.5.1837: attempt to access beyond end of device [ 762.721703][T15340] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 762.735759][T15340] hpfs: hpfs_map_sector(): read error [ 764.055882][T14243] Bluetooth: hci5: command 0x1003 tx timeout [ 764.119474][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 765.416824][T14243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 765.443478][T14243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 765.455879][T14243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 765.463890][T14243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 765.471235][T14243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 765.478349][T14243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 765.690985][T15359] wg1 speed is unknown, defaulting to 1000 [ 766.261459][T15359] chnl_net:caif_netlink_parms(): no params data found [ 766.424685][T15359] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.448931][T15359] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.508743][T15359] bridge_slave_0: entered allmulticast mode [ 766.574961][T15359] bridge_slave_0: entered promiscuous mode [ 766.895913][T15359] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.934605][T15359] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.030247][T15359] bridge_slave_1: entered allmulticast mode [ 767.308390][T15359] bridge_slave_1: entered promiscuous mode [ 767.387070][T15359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.430068][T15359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.579916][ T5831] Bluetooth: hci4: command tx timeout [ 767.617917][T15359] team0: Port device team_slave_0 added [ 768.481479][T15359] team0: Port device team_slave_1 added [ 768.484582][T15392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=15392 comm=syz.6.1850 [ 768.909488][T15391] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 768.944007][T15398] fuse: Unknown parameter '0x0000000000000005' [ 768.985655][T15394] ip6erspan0: entered promiscuous mode [ 768.991544][T15394] ip6erspan0: entered allmulticast mode [ 769.034046][T15359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.064761][T15359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.090655][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.133813][T15359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.510152][T15359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.525793][T15359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.551740][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.109668][ T5831] Bluetooth: hci4: command tx timeout [ 770.129470][T15359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.677959][T15359] hsr_slave_0: entered promiscuous mode [ 770.732613][T15359] hsr_slave_1: entered promiscuous mode [ 770.739687][T15359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 770.762130][T15359] Cannot create hsr debugfs directory [ 772.095074][T15359] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 772.140163][ T5831] Bluetooth: hci4: command tx timeout [ 772.248988][T15424] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 772.275341][T15359] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 772.457385][T15359] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 772.513703][T15359] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 772.695473][T15359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.218066][T15359] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.232772][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.239881][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.261010][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.268099][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.219613][ T5831] Bluetooth: hci4: command tx timeout [ 774.361965][T15359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.520024][T15449] tmpfs: Unknown parameter '' [ 774.560551][T15449] Process accounting resumed [ 775.728829][T15467] loop2: detected capacity change from 0 to 7 [ 775.772613][T15467] Dev loop2: unable to read RDB block 7 [ 775.782641][T15467] loop2: AHDI p1 p4 [ 775.801265][T15467] loop2: partition table partially beyond EOD, truncated [ 775.808451][T15467] loop2: p1 size 10 extends beyond EOD, truncated [ 776.174576][T15470] syz.5.1867: attempt to access beyond end of device [ 776.174576][T15470] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 776.189075][T15359] veth0_vlan: entered promiscuous mode [ 776.195810][T15470] hpfs: hpfs_map_sector(): read error [ 776.234114][T15359] veth1_vlan: entered promiscuous mode [ 776.321089][T15359] veth0_macvtap: entered promiscuous mode [ 776.353640][T15359] veth1_macvtap: entered promiscuous mode [ 776.416728][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.442262][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.455167][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.466603][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.476728][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.489257][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.795973][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.808696][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.341212][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.543519][T15483] tmpfs: Bad value for 'mpol' [ 777.552665][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.575658][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.580147][T15483] Process accounting resumed [ 777.586301][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.602255][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.632491][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.289132][T15359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.341294][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.381632][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.413468][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.739874][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.759357][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.789646][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.812429][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.839351][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.859350][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.881340][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.905316][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.940497][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.997626][T15359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.272085][T15359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.300102][T15359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.345311][T15359] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.355867][T14243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 779.365451][T14243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 779.373482][T14243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 779.381587][T14243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 779.389600][T14243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 779.396652][T14243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 779.407582][T15359] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.416503][T15359] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.426130][T15359] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.569416][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.588266][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.091415][ T7123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.109318][ T7123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.144180][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 780.233312][T15495] wg1 speed is unknown, defaulting to 1000 [ 781.519512][T12428] Bluetooth: hci6: command tx timeout [ 782.031015][ T7116] Bluetooth: hci0: Frame reassembly failed (-84) [ 782.880731][T15495] chnl_net:caif_netlink_parms(): no params data found [ 783.650504][ T5831] Bluetooth: hci6: command tx timeout [ 784.089418][ T5831] Bluetooth: hci0: command 0x1003 tx timeout [ 784.096812][T12428] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 784.262156][T15495] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.285758][T15495] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.319656][T15495] bridge_slave_0: entered allmulticast mode [ 784.350294][T15495] bridge_slave_0: entered promiscuous mode [ 784.417174][T15495] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.608986][ T29] audit: type=1400 audit(1737591719.284:334): avc: denied { create } for pid=15543 comm="syz.6.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 785.823214][T12428] Bluetooth: hci6: command tx timeout [ 785.837863][T15495] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.932218][T15495] bridge_slave_1: entered allmulticast mode [ 786.150979][T15495] bridge_slave_1: entered promiscuous mode [ 787.463566][T15495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.491414][T15495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.518306][T15495] team0: Port device team_slave_0 added [ 787.525525][T15495] team0: Port device team_slave_1 added [ 787.582001][T15495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.589558][T15495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.594291][T15562] Process accounting resumed [ 787.625353][T15495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.680394][T15495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.687564][T15495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.714488][T15495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.949561][T12428] Bluetooth: hci6: command tx timeout [ 788.528686][T15495] hsr_slave_0: entered promiscuous mode [ 788.560405][T15495] hsr_slave_1: entered promiscuous mode [ 788.683262][T15495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.707158][T15495] Cannot create hsr debugfs directory [ 790.083922][T15586] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 791.111749][T15495] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 791.266282][ T5924] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 791.281366][T15495] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 791.302033][T15495] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 791.311098][T15495] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 791.434934][ T5924] usb 2-1: config 0 interface 0 altsetting 86 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.480910][ T5924] usb 2-1: config 0 interface 0 altsetting 86 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.588016][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 791.676611][ T5924] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 791.689410][T15495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.706234][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.722428][T15495] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.733300][ T5924] usb 2-1: config 0 descriptor?? [ 791.756716][ T5924] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 791.804280][T15495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 791.875020][T15495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 792.061232][T14453] usb 2-1: USB disconnect, device number 12 [ 792.071436][T15550] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.078521][T15550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.128460][T15550] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.135618][T15550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.381529][ T5831] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 793.352663][T15618] Process accounting resumed [ 793.360403][T15495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.385691][T15626] Process accounting resumed [ 793.541772][T15631] overlayfs: failed to resolve './file1': -2 [ 793.670487][T15634] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 794.732981][T15495] veth0_vlan: entered promiscuous mode [ 794.754838][T15495] veth1_vlan: entered promiscuous mode [ 794.816692][T15495] veth0_macvtap: entered promiscuous mode [ 794.830177][ T973] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 794.848136][T15495] veth1_macvtap: entered promiscuous mode [ 794.892402][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.930205][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.962915][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.986919][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.001262][ T973] usb 2-1: config 0 interface 0 altsetting 86 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.025484][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.032327][ T973] usb 2-1: config 0 interface 0 altsetting 86 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.208994][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.221522][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.259112][ T973] usb 2-1: config 0 interface 0 has no altsetting 0 [ 795.299657][ T973] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 795.333466][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.353025][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.381958][ T973] usb 2-1: config 0 descriptor?? [ 795.416739][ T973] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 795.439342][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 795.457130][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.468778][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.482428][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.517434][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.528472][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.547724][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.561571][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.576061][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.593770][T15495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.635986][ T973] usb 2-1: USB disconnect, device number 13 [ 795.636373][ T5924] usb 6-1: config 0 interface 0 altsetting 86 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.662087][ T5924] usb 6-1: config 0 interface 0 altsetting 86 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.694985][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.742109][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.752803][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 795.759927][ T5924] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 795.769078][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.782879][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.794728][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.809037][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.820282][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.830635][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.843357][ T5924] usb 6-1: config 0 descriptor?? [ 795.856460][ T5924] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 795.864569][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.915003][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.927964][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.938554][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.971075][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.997132][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.007917][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.033823][T15495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.081054][ T973] usb 6-1: USB disconnect, device number 2 [ 796.158045][T15495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.176926][T15495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.210470][T15495] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.219199][T15495] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.339853][T15495] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.387266][T15495] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.736467][T15672] overlayfs: overlapping lowerdir path [ 796.957294][T15550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.965653][T15550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.098891][T15550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.121023][T15550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.189482][ T5924] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 797.526516][ T5924] usb 6-1: config 0 interface 0 altsetting 86 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.550161][ T5924] usb 6-1: config 0 interface 0 altsetting 86 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.700884][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 797.707538][ T5924] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 797.716925][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.756541][ T5924] usb 6-1: config 0 descriptor?? [ 797.768549][ T5924] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 798.026493][T15129] usb 6-1: USB disconnect, device number 3 [ 800.026667][T15710] 9pnet_fd: Insufficient options for proto=fd [ 800.060925][T15702] overlayfs: overlapping lowerdir path [ 800.088990][T15714] loop2: detected capacity change from 0 to 7 [ 800.118897][T15714] Dev loop2: unable to read RDB block 7 [ 800.131898][T15714] loop2: AHDI p1 p4 [ 800.135830][T15714] loop2: partition table partially beyond EOD, truncated [ 800.151079][T15714] loop2: p1 size 10 extends beyond EOD, truncated [ 801.470397][ T29] audit: type=1400 audit(1737591735.174:335): avc: denied { setopt } for pid=15724 comm="syz.7.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 802.616389][T14453] IPVS: starting estimator thread 0... [ 802.628009][ T29] audit: type=1400 audit(1737591736.324:336): avc: denied { setopt } for pid=15737 comm="syz.8.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 802.850482][T15743] IPVS: using max 30 ests per chain, 72000 per kthread [ 804.839487][T15760] bridge0: port 3(veth0_to_bridge) entered blocking state [ 804.846747][T15760] bridge0: port 3(veth0_to_bridge) entered disabled state [ 804.855026][T15760] veth0_to_bridge: entered allmulticast mode [ 804.862215][T15760] veth0_to_bridge: entered promiscuous mode [ 804.868210][T15760] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.881127][T15760] bridge0: port 3(veth0_to_bridge) entered blocking state [ 804.889477][T15760] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 804.959422][ T29] audit: type=1400 audit(1737591737.934:337): avc: denied { append } for pid=15753 comm="syz.7.1937" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 804.982342][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.204576][T14453] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 806.462432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.474824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.487207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 806.499317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.511471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.523640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 806.535771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.547935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.560089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 806.572208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.168616][T14453] usb 8-1: config 0 interface 0 altsetting 86 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.185224][T14453] usb 8-1: config 0 interface 0 altsetting 86 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.437822][T14453] usb 8-1: config 0 interface 0 has no altsetting 0 [ 807.484605][T14453] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 807.684154][T14453] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.775119][T14453] usb 8-1: config 0 descriptor?? [ 807.788099][ T29] audit: type=1400 audit(1737591739.834:338): avc: denied { write } for pid=15769 comm="syz.5.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 808.843456][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.862617][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.228574][T14453] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 809.343049][T14453] usb 8-1: USB disconnect, device number 2 [ 810.957981][ C0] sched: DL replenish lagged too much [ 811.469381][ C1] net_ratelimit: 19525 callbacks suppressed [ 811.469401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.487497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.499607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.511761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 811.523953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.536122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.548263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.560418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 811.572642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.584814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 816.479371][ C1] net_ratelimit: 17788 callbacks suppressed [ 816.479390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.497489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 816.509701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.521890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 816.534026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.546215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 816.558424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.570607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 816.582752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.594923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 816.796408][ T29] audit: type=1400 audit(1737591739.834:339): avc: denied { nlmsg_write } for pid=15769 comm="syz.5.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 821.489340][ C1] net_ratelimit: 23492 callbacks suppressed [ 821.489364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.507556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 821.519673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.531807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 821.543991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.556151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 821.568282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.580438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 821.592643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.604792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 826.499318][ C1] net_ratelimit: 17433 callbacks suppressed [ 826.499337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.517393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.529589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.542294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 826.554402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.566558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 826.578772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 826.590925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 826.603026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.615157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.509307][ C1] net_ratelimit: 19721 callbacks suppressed [ 831.509325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 831.527342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.539528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 831.551722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 831.563993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 831.576091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.588234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.600429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.612575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 831.624684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.519364][ C1] net_ratelimit: 18998 callbacks suppressed [ 836.519385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 836.537447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.549595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 836.561800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 836.573962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 836.586081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.598234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.610435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.622600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 836.634720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.529375][ C1] net_ratelimit: 19377 callbacks suppressed [ 841.529394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 841.547475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 841.559574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.571727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.583923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.596081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 841.608184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.620331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 841.632528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 841.644704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 846.539483][ C1] net_ratelimit: 22825 callbacks suppressed [ 846.539502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.557622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.569783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 846.581887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.594021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 846.606210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 846.618378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 846.630471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.642626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.654822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.549305][ C1] net_ratelimit: 16284 callbacks suppressed [ 851.549323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 851.567343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.579508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.591706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.603865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 851.616063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.628307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 851.640493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 851.652740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 851.664865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.559448][ C1] net_ratelimit: 15623 callbacks suppressed [ 856.559467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 856.577609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 856.589923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.602078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.614280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.626461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 856.638617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 856.650793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.662944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 856.675110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 861.569398][ C1] net_ratelimit: 15644 callbacks suppressed [ 861.569416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 861.587486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.599648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 861.611813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 861.623934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.636070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.648266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 861.660425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 861.672531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.684672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.579345][ C1] net_ratelimit: 15634 callbacks suppressed [ 866.579364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.597438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.609638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.621820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 866.633961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 866.646120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.658344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 866.670505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 866.682633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.694774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.923699][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.941638][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.589319][ C1] net_ratelimit: 15853 callbacks suppressed [ 871.589339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.607376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.619532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.631730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.643907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.656051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 871.668230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.680380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 871.692528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.704626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.599308][ C1] net_ratelimit: 15602 callbacks suppressed [ 876.599327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.617360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.629499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.641699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.653873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.666012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 876.678170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.690319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 876.702475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.714587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.609288][ C1] net_ratelimit: 15667 callbacks suppressed [ 881.609308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 881.627390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.639555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 881.651730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.663842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.675990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.688194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 881.700358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.712486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.724637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.619395][ C1] net_ratelimit: 15793 callbacks suppressed [ 886.619415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 886.637502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 886.649673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.661832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 886.674000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 886.686153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.698310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.710498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 886.722662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 886.734769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.629365][ C1] net_ratelimit: 15818 callbacks suppressed [ 891.629384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 891.648064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 891.660245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.672389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 891.684558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 891.696672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.708846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.721038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 891.733233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 891.745367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.639386][ C1] net_ratelimit: 15955 callbacks suppressed [ 896.639406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.657481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.669693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 896.681855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 896.693964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.706123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.718315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.730476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 896.742950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 896.755130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.649310][ C1] net_ratelimit: 21213 callbacks suppressed [ 901.649329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 901.667380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 901.679555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.691709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 901.703874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 901.715977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.728122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.740311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 901.752457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 901.764581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 906.659309][ C1] net_ratelimit: 15751 callbacks suppressed [ 906.659327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 906.677394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 906.689609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 906.701871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 906.713981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 906.726123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 906.738349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 906.750498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 906.762661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 906.774832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.669313][ C1] net_ratelimit: 15713 callbacks suppressed [ 911.669332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 911.687356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.699556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.711771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.723938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 911.736078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 911.748263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.760407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 911.772598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 911.784723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.679402][ C1] net_ratelimit: 15707 callbacks suppressed [ 916.679421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 916.697509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 916.709704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.721852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.734040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 916.746197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 916.758311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.770449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.782649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.794818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 921.689259][ C1] net_ratelimit: 15713 callbacks suppressed [ 921.689278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 921.707314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.719490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.731700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 921.743879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 921.755996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.768145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.780333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.792508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 921.804651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 926.699413][ C1] net_ratelimit: 15733 callbacks suppressed [ 926.699433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.717484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.729686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.741851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 926.753997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 926.766163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.778307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 926.790459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 926.802587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 926.814802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.709395][ C1] net_ratelimit: 15732 callbacks suppressed [ 931.709414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 931.727506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 931.739617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.751754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.763943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.776103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 931.788251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 931.800406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.812566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 931.824720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 934.171100][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.183250][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.719388][ C1] net_ratelimit: 16788 callbacks suppressed [ 936.719407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.737465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.749669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 936.761845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 936.773949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.786096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.798296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.810452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 936.822586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 936.834757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.729284][ C1] net_ratelimit: 15711 callbacks suppressed [ 941.729303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.747359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 941.759556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 941.771696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 941.783870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.796020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.808173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 941.820284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.832864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.845054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 941.929231][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 941.936203][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l [ 941.944427][ C0] rcu: (detected by 0, t=10502 jiffies, g=48061, q=527 ncpus=2) [ 941.952146][ C0] task:kthreadd state:R running task stack:26064 pid:2 tgid:2 ppid:0 flags:0x00004000 [ 941.964976][ C0] Call Trace: [ 941.968261][ C0] [ 941.971196][ C0] __schedule+0x1142/0x5b60 [ 941.975714][ C0] ? __pfx_mark_lock+0x10/0x10 [ 941.980477][ C0] ? __pfx_mark_lock+0x10/0x10 [ 941.985231][ C0] ? hlock_class+0x4e/0x130 [ 941.989738][ C0] ? __pfx___schedule+0x10/0x10 [ 941.994619][ C0] ? mark_held_locks+0x9f/0xe0 [ 941.999397][ C0] preempt_schedule_irq+0x51/0x90 [ 942.004448][ C0] irqentry_exit+0x36/0x90 [ 942.008869][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 942.014854][ C0] RIP: 0010:__unwind_start+0x455/0x7f0 [ 942.020322][ C0] Code: 89 44 24 08 85 d2 0f 84 a0 fe ff ff 4d 89 fd 48 c1 e8 03 48 bd 00 00 00 00 00 fc ff df 49 c1 ed 03 49 89 c4 49 01 ed 49 01 ec 2a 4c 89 f7 e8 d1 da ff ff 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 [ 942.039938][ C0] RSP: 0018:ffffc90000077560 EFLAGS: 00000286 [ 942.046008][ C0] RAX: 1ffff9200000eeb8 RBX: ffffc90000077640 RCX: ffffc90000078000 [ 942.053981][ C0] RDX: 0000000000000001 RSI: ffff888140aea440 RDI: ffffc90000077560 [ 942.061951][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 942.069920][ C0] R10: ffffc900000775b0 R11: 0000000000000001 R12: fffff5200000eeb8 [ 942.077890][ C0] R13: fffff5200000eeb7 R14: ffffc900000775b0 R15: ffffc900000775b8 [ 942.085874][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 942.092027][ C0] arch_stack_walk+0x74/0x100 [ 942.096737][ C0] ? __unwind_start+0x574/0x7f0 [ 942.101610][ C0] stack_trace_save+0x95/0xd0 [ 942.106292][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 942.111677][ C0] save_stack+0x162/0x1f0 [ 942.116012][ C0] ? __pfx_save_stack+0x10/0x10 [ 942.120865][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 942.126521][ C0] __reset_page_owner+0x8d/0x400 [ 942.131461][ C0] free_unref_page+0x661/0x1080 [ 942.136289][ C0] __put_partials+0x14c/0x170 [ 942.140956][ C0] qlist_free_all+0x4e/0x120 [ 942.145543][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 942.150979][ C0] __kasan_slab_alloc+0x69/0x90 [ 942.155817][ C0] __kmalloc_cache_noprof+0x243/0x410 [ 942.161177][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 942.166367][ C0] ? copy_process+0x1147/0x8d10 [ 942.171631][ C0] set_kthread_struct+0xcb/0x380 [ 942.176541][ C0] ? copy_process+0x1147/0x8d10 [ 942.181365][ C0] copy_process+0x342c/0x8d10 [ 942.186020][ C0] ? hlock_class+0x4e/0x130 [ 942.190509][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 942.195528][ C0] ? __pfx_copy_process+0x10/0x10 [ 942.200540][ C0] ? __pfx_mark_lock+0x10/0x10 [ 942.205289][ C0] ? find_held_lock+0x2d/0x110 [ 942.210041][ C0] ? finish_task_switch.isra.0+0x212/0xcc0 [ 942.215840][ C0] ? __pfx_lock_release+0x10/0x10 [ 942.220838][ C0] ? rcu_is_watching+0x12/0xc0 [ 942.225578][ C0] ? finish_task_switch.isra.0+0x160/0xcc0 [ 942.231363][ C0] kernel_clone+0xfd/0x960 [ 942.235767][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 942.240771][ C0] ? __pfx_kthread+0x10/0x10 [ 942.245334][ C0] kernel_thread+0xc0/0x100 [ 942.249811][ C0] ? __pfx_kernel_thread+0x10/0x10 [ 942.254899][ C0] ? __pfx_kthread+0x10/0x10 [ 942.259462][ C0] ? lock_acquire+0x2f/0xb0 [ 942.263937][ C0] ? kthreadd+0x382/0x7d0 [ 942.268241][ C0] kthreadd+0x4ef/0x7d0 [ 942.272373][ C0] ? __pfx_kthreadd+0x10/0x10 [ 942.277025][ C0] ret_from_fork+0x45/0x80 [ 942.281414][ C0] ? __pfx_kthreadd+0x10/0x10 [ 942.286062][ C0] ret_from_fork_asm+0x1a/0x30 [ 942.290806][ C0] [ 946.739391][ C1] net_ratelimit: 20454 callbacks suppressed [ 946.739414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.757472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 946.769628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.781774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 946.793945][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.806082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.818222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 946.830320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.842455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.854657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 951.749276][ C1] net_ratelimit: 18941 callbacks suppressed [ 951.749295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.767359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.779563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 951.791721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 951.803841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.815984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.828070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.840216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 951.852238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:b4:87:0f:93:85, vlan:0) [ 951.864375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)