last executing test programs: 10m9.334015868s ago: executing program 1 (id=662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) 10m9.251637352s ago: executing program 1 (id=663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) 10m9.251424971s ago: executing program 0 (id=664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x5) 10m9.234490552s ago: executing program 1 (id=666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10m9.111671948s ago: executing program 1 (id=670): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0xa1165a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 10m8.911530846s ago: executing program 0 (id=674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) 10m8.074390812s ago: executing program 0 (id=676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x8800) 10m7.911479019s ago: executing program 1 (id=680): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 10m7.819659973s ago: executing program 0 (id=681): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x120c40a, &(0x7f0000000a00)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@errors_remount}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@test_dummy_encryption}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 10m7.315817315s ago: executing program 1 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d80)={'syz1\x00', {0x8, 0x1010, 0x3, 0x342e}, 0x22, [0x5, 0x3, 0x40000, 0x7fffffff, 0x1, 0x8, 0xc, 0x6680, 0xd833, 0xd4c, 0xc7ce, 0x2, 0x20a, 0x3656, 0x0, 0x6, 0x80000, 0x923aa1e0, 0xa4, 0x4, 0x10001, 0x8, 0x5, 0x7, 0x31, 0x1, 0x3, 0x4ac7, 0x4, 0x9, 0x7, 0x80, 0x31, 0x6, 0x10001, 0x1, 0x3, 0x2, 0x4, 0x0, 0x2, 0x2, 0x9, 0x2, 0x9, 0x4, 0x5, 0x1c, 0x2, 0x2da, 0x3, 0xa76b5e3, 0x1ff, 0x2, 0x8, 0xd, 0x401, 0x8, 0x3, 0x6, 0x9, 0x1, 0x2, 0x3], [0xb, 0x4, 0x100, 0x9, 0x1, 0x8, 0x9, 0xf1, 0x1, 0x9, 0x0, 0x18, 0x1, 0x5, 0x9c8, 0x1, 0x6, 0x1, 0x7, 0xb, 0xfffffffd, 0x2, 0x5, 0x2, 0x7, 0x800, 0x10000, 0xe92b, 0x58a0, 0x3, 0x40, 0x7, 0x8, 0x4, 0x9, 0x6, 0xda, 0x0, 0x9da, 0x2, 0x4, 0xc, 0x8, 0x40, 0x2634, 0x1, 0x6, 0x7e, 0x4, 0x2, 0x3fe, 0x3, 0x8, 0x0, 0x1, 0x5, 0x0, 0x7, 0x101, 0x100, 0x401, 0x9, 0x539a, 0xfffff800], [0x9, 0x5, 0x0, 0xfffffffa, 0x1, 0x4, 0x2, 0xf, 0x1, 0x8, 0x41, 0x4, 0x2, 0x62, 0x3, 0x9, 0x1, 0x5, 0x0, 0x5846, 0x4, 0x6d30fadb, 0x4, 0xa1, 0xac0, 0x547, 0x2, 0x10, 0x9, 0x5, 0x0, 0xb4, 0x6, 0x0, 0x0, 0x7fff, 0x1000, 0x0, 0xfffffbff, 0x8001, 0x3, 0x7, 0x38, 0x1, 0x5, 0x8, 0x4, 0x8, 0x9, 0x101, 0x4, 0x5, 0xf1, 0xfffff96d, 0x2, 0x1, 0xf839, 0x4, 0x24000000, 0x6, 0x4a35, 0x3, 0x6, 0x5], [0x0, 0x6, 0xfffffff9, 0x7, 0x3, 0x6, 0x6, 0x5, 0x5, 0x0, 0x0, 0x2, 0x4, 0x2, 0x1000, 0x4, 0x1, 0xffff, 0x8528, 0xe062, 0x0, 0xffffffff, 0xd7, 0x5, 0x473, 0x4a91, 0x7, 0xfff00000, 0x8, 0xfffffff9, 0x8, 0x0, 0x0, 0xc, 0x3, 0x6, 0x6, 0x3, 0x7, 0x9, 0x7ff, 0xfffffffe, 0x1, 0x81, 0x4, 0x6, 0x3, 0xfffff49a, 0x2, 0x5, 0x101, 0x0, 0x1, 0x9, 0x81, 0x7, 0x39b, 0x68, 0x3c, 0x8000, 0x2, 0x0, 0x11c, 0x1]}, 0x45c) 10m6.529556688s ago: executing program 32 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d80)={'syz1\x00', {0x8, 0x1010, 0x3, 0x342e}, 0x22, [0x5, 0x3, 0x40000, 0x7fffffff, 0x1, 0x8, 0xc, 0x6680, 0xd833, 0xd4c, 0xc7ce, 0x2, 0x20a, 0x3656, 0x0, 0x6, 0x80000, 0x923aa1e0, 0xa4, 0x4, 0x10001, 0x8, 0x5, 0x7, 0x31, 0x1, 0x3, 0x4ac7, 0x4, 0x9, 0x7, 0x80, 0x31, 0x6, 0x10001, 0x1, 0x3, 0x2, 0x4, 0x0, 0x2, 0x2, 0x9, 0x2, 0x9, 0x4, 0x5, 0x1c, 0x2, 0x2da, 0x3, 0xa76b5e3, 0x1ff, 0x2, 0x8, 0xd, 0x401, 0x8, 0x3, 0x6, 0x9, 0x1, 0x2, 0x3], [0xb, 0x4, 0x100, 0x9, 0x1, 0x8, 0x9, 0xf1, 0x1, 0x9, 0x0, 0x18, 0x1, 0x5, 0x9c8, 0x1, 0x6, 0x1, 0x7, 0xb, 0xfffffffd, 0x2, 0x5, 0x2, 0x7, 0x800, 0x10000, 0xe92b, 0x58a0, 0x3, 0x40, 0x7, 0x8, 0x4, 0x9, 0x6, 0xda, 0x0, 0x9da, 0x2, 0x4, 0xc, 0x8, 0x40, 0x2634, 0x1, 0x6, 0x7e, 0x4, 0x2, 0x3fe, 0x3, 0x8, 0x0, 0x1, 0x5, 0x0, 0x7, 0x101, 0x100, 0x401, 0x9, 0x539a, 0xfffff800], [0x9, 0x5, 0x0, 0xfffffffa, 0x1, 0x4, 0x2, 0xf, 0x1, 0x8, 0x41, 0x4, 0x2, 0x62, 0x3, 0x9, 0x1, 0x5, 0x0, 0x5846, 0x4, 0x6d30fadb, 0x4, 0xa1, 0xac0, 0x547, 0x2, 0x10, 0x9, 0x5, 0x0, 0xb4, 0x6, 0x0, 0x0, 0x7fff, 0x1000, 0x0, 0xfffffbff, 0x8001, 0x3, 0x7, 0x38, 0x1, 0x5, 0x8, 0x4, 0x8, 0x9, 0x101, 0x4, 0x5, 0xf1, 0xfffff96d, 0x2, 0x1, 0xf839, 0x4, 0x24000000, 0x6, 0x4a35, 0x3, 0x6, 0x5], [0x0, 0x6, 0xfffffff9, 0x7, 0x3, 0x6, 0x6, 0x5, 0x5, 0x0, 0x0, 0x2, 0x4, 0x2, 0x1000, 0x4, 0x1, 0xffff, 0x8528, 0xe062, 0x0, 0xffffffff, 0xd7, 0x5, 0x473, 0x4a91, 0x7, 0xfff00000, 0x8, 0xfffffff9, 0x8, 0x0, 0x0, 0xc, 0x3, 0x6, 0x6, 0x3, 0x7, 0x9, 0x7ff, 0xfffffffe, 0x1, 0x81, 0x4, 0x6, 0x3, 0xfffff49a, 0x2, 0x5, 0x101, 0x0, 0x1, 0x9, 0x81, 0x7, 0x39b, 0x68, 0x3c, 0x8000, 0x2, 0x0, 0x11c, 0x1]}, 0x45c) 10m6.362834456s ago: executing program 0 (id=693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x80108907, 0x0) 10m4.691672158s ago: executing program 0 (id=707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 10m4.526166835s ago: executing program 33 (id=707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7m29.795399028s ago: executing program 3 (id=4629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000100)=0xfffffffc, 0x4) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10020) 7m29.668436213s ago: executing program 3 (id=4633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x4fa3e3ad9948be0d, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 7m29.445171233s ago: executing program 3 (id=4636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 7m29.317060528s ago: executing program 3 (id=4637): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x2810489, &(0x7f00000008c0)={[{@anchor={'anchor', 0x3d, 0x10000}}, {@adinicb}, {@unhide}, {@umask={'umask', 0x3d, 0x80}}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0xb42b}}, {@shortad}, {@uid_forget}, {@shortad}, {@uid_ignore}, {@umask={'umask', 0x3d, 0x7}}, {@uid}, {@gid}, {@dmode={'dmode', 0x3d, 0x9}}, {@fileset={'fileset', 0x3d, 0x3}}]}, 0x9, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG") mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 7m28.744512833s ago: executing program 3 (id=4643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) 7m27.939705077s ago: executing program 3 (id=4658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000100)="91", 0x1}], 0x3) 7m27.689110779s ago: executing program 34 (id=4658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000100)="91", 0x1}], 0x3) 3m8.036279932s ago: executing program 7 (id=10827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 3m5.862713366s ago: executing program 7 (id=10866): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd07"], 0xffe) 3m5.613790597s ago: executing program 7 (id=10871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmmsg(r4, &(0x7f0000000140)=[{{&(0x7f0000000240)=@xdp={0x2c, 0x8, r5, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="5902", 0x2}], 0x1}}], 0x1, 0x240400c5) 3m5.471411353s ago: executing program 7 (id=10874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r3, &(0x7f0000000740)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x20008040) recvmmsg(r3, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000009ac0)=""/4103, 0x1007}], 0x1, &(0x7f0000000380)=""/61, 0x3d}, 0x7}], 0x1, 0x40, 0x0) 3m5.247718662s ago: executing program 7 (id=10876): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setpgid(0x0, r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 3m4.891283507s ago: executing program 7 (id=10882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000040)={@multicast2, @local}) 2m49.681316912s ago: executing program 35 (id=10882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000040)={@multicast2, @local}) 15.420902867s ago: executing program 8 (id=13134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 13.795867318s ago: executing program 2 (id=13151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x3ffffba, 0x4) syz_read_part_table(0x5df, &(0x7f0000000000)="$eJzs0r1rZFUUAPDz3ny8bLHMstjZLGywkPWDsdBiB5SQHaZxw7J+IJYiTqHCgsUWY8JmbTf4DxiiESRNsBNMkUIykRBhUg0pZcDadIPFkzdvxi9MlxgDv19x595z7z33zMwJLrXk08+mszyL6nS6f9rplahE7c9l9Y2txTudG0uv3bsfUYt+Eau9VeYthisRkZVHv42YKz7vZuVuJ2sONg4WTrauHd486s/XZyl30uKVSFYiGrVJht1/FFyk/i0vnc1vwOW13drLVh8/aD952OoO273RS+8/t/j02uJHn7/85e3lN9Pbb6eTY/VI31s9p/cb5fvV7nBuGsxn/TluvjoN3Ur+fq9yHsXwn/vj/1+OiHZvtP7Uo+NH49ef+eaTF25dP/7hnauT5gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/2629xurjB+0nD1vd4dw0OM4Lkea1qETExxGxk842K2f8/pXprNUdtnuj+cErX/+U3/31i6vP1/qD3eb+ZO/FH//tbpKcaSlcgL/2X7XdG60XbTZOIupJXD/OS8uRZxHfze58MBnrF1k2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/tnanc2MpvXc/Iol3I2IhvbZZxPOs3E8mY71c/BIRRbwa0cmag42DhZOtOLx51J//aml6fieNWImID3/ebEQ8+30+MUtUvZgvyal+DwAA//8BXo5z") 11.190309809s ago: executing program 8 (id=13189): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 11.145704321s ago: executing program 2 (id=13192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x7, &(0x7f0000000000)={0x202b, 0x0, 0x4}) 8.985586084s ago: executing program 8 (id=13202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) tkill(r4, 0x12) waitid(0x1, r4, 0x0, 0x8, &(0x7f0000000240)) 8.706256916s ago: executing program 8 (id=13204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f00080000000000000013"], 0x24}}, 0x0) 8.633412889s ago: executing program 8 (id=13206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') 8.523161114s ago: executing program 8 (id=13208): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x5, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1", 0x27}], 0x1}, 0x4) 7.460566739s ago: executing program 2 (id=13217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_setup(0x9bb1, &(0x7f0000000040)=0x0) io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, r3, 0x0, 0x0, 0x7, 0x0, 0x2, r4}, 0x0) 7.302796616s ago: executing program 4 (id=13220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) 7.281672887s ago: executing program 5 (id=13221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000003c40)="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", 0x3bd}], 0x1}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.125905343s ago: executing program 4 (id=13222): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 7.125628424s ago: executing program 5 (id=13223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) 7.125390083s ago: executing program 2 (id=13224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) 7.065281546s ago: executing program 4 (id=13225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) 7.041356057s ago: executing program 5 (id=13226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) 6.972251121s ago: executing program 4 (id=13228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) keyctl$session_to_parent(0x12) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x11, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 6.901133473s ago: executing program 5 (id=13229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0x9, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x7, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xbe9d, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0x4000be, 0x4002, 0x3, 0x7ff, 0x12b, 0x5, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x75, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.865825835s ago: executing program 2 (id=13231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x4000019b1, 0x0, 0x0, 0xe1, 0x0, 0x9, 0xffffffffbfffffff, 0x0, 0xfffffffffffffff9, 0x10000e5, 0x0, 0x200, 0x400000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfde, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x6, 0x253}) 6.775165889s ago: executing program 4 (id=13232): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) setresuid(0x0, 0xee00, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.774822429s ago: executing program 2 (id=13233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x62}, 0x14) 6.365625887s ago: executing program 5 (id=13234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, 0x0, &(0x7f0000000040)=0x6b) 5.725331024s ago: executing program 4 (id=13238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 4.603872772s ago: executing program 5 (id=13239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r4, 0x0, 0x0) 465.51361ms ago: executing program 6 (id=13242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rthdr={{0x18, 0x29, 0x39, {0xc6e0325f2e912bc6, 0x0, 0x1, 0x3}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hoplimit={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x1, '\x00', [@generic={0x10, 0x6, "e5f2e0a8c7b9"}]}}}], 0x80}}], 0x1, 0x20008014) sendmmsg$inet6(r4, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 318.859996ms ago: executing program 6 (id=13243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) 289.302357ms ago: executing program 6 (id=13244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f000000a1c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe0, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x81) 201.544421ms ago: executing program 6 (id=13245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 78.977196ms ago: executing program 6 (id=13246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) 0s ago: executing program 6 (id=13247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00"], 0xd8}}, 0x0) kernel console output (not intermixed with test programs): til 2038-01-19 (0x7fffffff) [ 481.586551][T26909] overlayfs: unrecognized mount option "verity=require:/" or missing value [ 481.606517][T26910] netlink: 'syz.2.9930': attribute type 10 has an invalid length. [ 481.680355][T26910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9930'. [ 481.856330][T26924] kvm: pic: non byte write [ 481.929897][T26924] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 483.226029][T27010] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9977'. [ 483.289350][T27010] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9977'. [ 483.325581][T27010] netlink: 'syz.2.9977': attribute type 5 has an invalid length. [ 483.349201][T27010] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9977'. [ 483.487740][T27026] loop4: detected capacity change from 0 to 512 [ 483.566869][T27026] EXT4-fs (loop4): Ignoring removed bh option [ 483.594798][ T26] audit: type=1326 audit(2000000816.564:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27033 comm="syz.6.9987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f360a6dd749 code=0x0 [ 483.631579][T27026] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 483.773772][T27026] ext4 filesystem being mounted at /2042/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 483.829653][T27044] loop2: detected capacity change from 0 to 512 [ 483.889014][T27044] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 483.932361][T27044] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 483.974057][T27044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002] [ 484.007997][T27044] System zones: 1-12 [ 484.019495][T27044] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9990: inode #1: comm syz.2.9990: iget: illegal inode # [ 484.071756][T27044] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9990: error while reading EA inode 1 err=-117 [ 484.097639][T27044] EXT4-fs (loop2): 1 orphan inode deleted [ 484.148083][T27044] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,usrjquota=,usrjquota=,journal_dev=0x0000000000000dcd,resgid=0x0000000000000000,minixdf,debug,grpquota,nombcache,minixdf,nomblk_io_submit,nomblk_io_submit,i_version,,errors=continue. Quota mode: writeback. [ 484.182202][T27058] loop6: detected capacity change from 0 to 128 [ 484.768483][T27094] 9pnet_virtio: no channels available for device syz [ 485.665942][T27141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10036'. [ 485.679083][T23669] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 485.726860][T27143] ip6tnl0: Caught tx_queue_len zero misconfig [ 485.773233][T27147] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10039'. [ 485.800859][T27147] tipc: Enabling of bearer rejected, failed to enable media [ 485.888464][T27152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10041'. [ 485.949447][T23669] usb 8-1: Using ep0 maxpacket: 8 [ 486.335272][T27179] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10054'. [ 486.460215][T23669] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 486.473791][T23669] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.499010][T23669] usb 8-1: Product: syz [ 486.504031][T23669] usb 8-1: Manufacturer: syz [ 486.509081][T23669] usb 8-1: SerialNumber: syz [ 486.515627][T23669] usb 8-1: config 0 descriptor?? [ 486.561169][T23669] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 486.964295][T27227] loop6: detected capacity change from 0 to 512 [ 487.145742][T27251] loop2: detected capacity change from 0 to 512 [ 487.263877][T27251] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 487.279402][T27251] EXT4-fs (loop2): inline encryption not supported [ 487.293926][T27251] EXT4-fs (loop2): Test dummy encryption mode enabled [ 487.331081][T27251] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 487.361634][T27251] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 487.423811][T27251] EXT4-fs (loop2): 1 truncate cleaned up [ 487.439157][T27251] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 487.767186][T27277] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10102'. [ 488.034551][T27288] netlink: 756 bytes leftover after parsing attributes in process `syz.5.10106'. [ 488.783303][T27334] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10128'. [ 489.119307][T23669] gspca_sonixj: reg_w1 err -71 [ 489.137404][T27353] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10137'. [ 489.179303][T23669] sonixj: probe of 8-1:0.0 failed with error -71 [ 489.205611][T23669] usb 8-1: USB disconnect, device number 7 [ 489.568782][T27384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10152'. [ 489.654750][T27390] netlink: 'syz.5.10155': attribute type 4 has an invalid length. [ 489.692906][T27390] netlink: 'syz.5.10155': attribute type 5 has an invalid length. [ 489.713228][T27390] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.10155'. [ 489.782067][T27396] binder: Bad value for 'stats' [ 490.880985][T27432] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10175'. [ 491.063626][T27445] netlink: 68 bytes leftover after parsing attributes in process `syz.7.10180'. [ 491.848881][T27491] netlink: 'syz.2.10201': attribute type 4 has an invalid length. [ 491.863190][T27491] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10201'. [ 491.942126][T27497] device veth0 entered promiscuous mode [ 491.960324][T27497] device veth0 left promiscuous mode [ 492.441847][T27528] loop2: detected capacity change from 0 to 512 [ 492.521317][T27528] EXT4-fs (loop2): Ignoring removed bh option [ 492.561873][T27528] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 492.583914][T27528] ext4 filesystem being mounted at /2000/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 493.189593][ T26] audit: type=1326 audit(2000000826.164:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27577 comm="syz.5.10242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58e58bd749 code=0x0 [ 494.743661][T27700] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10301'. [ 495.099492][T23669] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 495.304990][T27743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10318'. [ 495.379210][T23669] usb 5-1: Using ep0 maxpacket: 16 [ 495.416310][T27751] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10324'. [ 495.541464][T23669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.579431][T23669] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 495.588482][T23669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.636208][T23669] usb 5-1: config 0 descriptor?? [ 495.705079][T27773] loop6: detected capacity change from 0 to 1024 [ 495.781943][T27776] netlink: 68 bytes leftover after parsing attributes in process `syz.7.10336'. [ 495.870970][T27782] overlayfs: failed to resolve './bus': -2 [ 495.998027][T27795] netlink: 'syz.7.10345': attribute type 3 has an invalid length. [ 496.014394][T23669] usbhid 5-1:0.0: can't add hid device: -71 [ 496.028980][T23669] usbhid: probe of 5-1:0.0 failed with error -71 [ 496.057580][T23669] usb 5-1: USB disconnect, device number 14 [ 496.225628][T27809] overlayfs: failed to resolve './bus': -2 [ 496.366662][T27820] loop6: detected capacity change from 0 to 512 [ 496.403551][T27824] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10359'. [ 496.484019][T27824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10359'. [ 496.500181][ T26] audit: type=1326 audit(2000000829.474:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.4.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 496.559356][T27824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10359'. [ 496.649879][ T26] audit: type=1326 audit(2000000829.504:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.4.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 496.731280][T27840] overlayfs: failed to resolve './bus': -2 [ 496.769170][ T26] audit: type=1326 audit(2000000829.504:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.4.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 497.396913][ T26] audit: type=1326 audit(2000000829.504:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.4.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 497.426683][ T26] audit: type=1326 audit(2000000829.504:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.4.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 497.479155][ T26] audit: type=1326 audit(2000000829.514:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.4.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 497.602435][ T26] audit: type=1326 audit(2000000829.514:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.4.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 497.676972][ T26] audit: type=1326 audit(2000000829.514:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.4.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 497.753891][ T26] audit: type=1326 audit(2000000829.514:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27831 comm="syz.4.10364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 498.310760][T27892] netlink: 'syz.6.10390': attribute type 1 has an invalid length. [ 498.550073][T27908] x_tables: duplicate underflow at hook 1 [ 498.914979][T27933] loop2: detected capacity change from 0 to 512 [ 498.983773][T27933] EXT4-fs (loop2): Ignoring removed bh option [ 499.036879][T27933] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 499.054343][T27933] ext4 filesystem being mounted at /2046/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 500.435539][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 500.435552][ T26] audit: type=1326 audit(2000000833.404:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27994 comm="syz.7.10441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab4ec39749 code=0x0 [ 501.065896][T28043] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10462'. [ 501.178896][T28049] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10465'. [ 501.231369][T28049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10465'. [ 501.260713][T28049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10465'. [ 501.312437][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.318936][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.663332][T28079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10479'. [ 501.683998][T28079] device bridge_slave_1 left promiscuous mode [ 501.699304][T28079] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.729730][T28079] device bridge_slave_0 left promiscuous mode [ 501.735929][T28079] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.769536][T28085] netlink: 172 bytes leftover after parsing attributes in process `syz.4.10482'. [ 501.791352][T28085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10482'. [ 501.806824][T28085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10482'. [ 502.864034][T28109] overlayfs: missing 'lowerdir' [ 502.893588][T28114] loop7: detected capacity change from 0 to 512 [ 502.954479][T28114] EXT4-fs (loop7): Ignoring removed bh option [ 503.028289][T28114] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 503.069952][T28114] ext4 filesystem being mounted at /1113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 503.243513][T28138] loop6: detected capacity change from 0 to 1024 [ 503.339162][ T4247] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 503.579285][ T4247] usb 5-1: Using ep0 maxpacket: 32 [ 503.707960][ T4247] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 503.773706][T28178] netlink: 80 bytes leftover after parsing attributes in process `syz.7.10521'. [ 503.879299][ T4247] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 503.898798][ T4247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.918650][ T4247] usb 5-1: Product: syz [ 503.927621][ T4247] usb 5-1: Manufacturer: syz [ 503.936800][ T4247] usb 5-1: SerialNumber: syz [ 503.949811][ T4247] usb 5-1: config 0 descriptor?? [ 503.989555][T28128] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 504.139346][T28197] overlayfs: failed to clone upperpath [ 504.216350][ T4247] usb 5-1: USB disconnect, device number 15 [ 504.440633][T28128] input: syz0 as /devices/virtual/input/input25 [ 504.796797][T28241] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10550'. [ 504.844470][T28245] binder: 28243:28245 ioctl c0306201 0 returned -14 [ 505.978442][T28279] loop2: detected capacity change from 0 to 512 [ 506.085986][T28279] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.10567: inode has both inline data and extents flags [ 506.148854][T28279] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.10567: couldn't read orphan inode 15 (err -117) [ 506.167444][T28279] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 506.709124][ T4247] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 507.079334][ T4247] usb 5-1: config 0 has no interfaces? [ 507.095140][ T4247] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 507.118170][ T4247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.145382][ T4247] usb 5-1: config 0 descriptor?? [ 507.222083][T28360] netlink: 'syz.6.10604': attribute type 16 has an invalid length. [ 507.235700][T28360] __nla_validate_parse: 1 callbacks suppressed [ 507.235713][T28360] netlink: 64130 bytes leftover after parsing attributes in process `syz.6.10604'. [ 507.406914][ T4247] usb 5-1: USB disconnect, device number 16 [ 509.512973][T28469] netlink: 108 bytes leftover after parsing attributes in process `syz.6.10655'. [ 509.954592][T28487] ptrace attach of "./syz-executor exec"[28491] was attempted by "./syz-executor exec"[28487] [ 511.425262][ T26] audit: type=1326 audit(2000000844.394:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28537 comm="syz.4.10689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7fc00000 [ 511.558558][ T26] audit: type=1326 audit(2000000844.394:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28537 comm="syz.4.10689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7fc00000 [ 511.692711][ T26] audit: type=1326 audit(2000000844.394:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28537 comm="syz.4.10689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7fc00000 [ 512.234057][T28585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10710'. [ 512.564806][T28600] 9pnet_virtio: no channels available for device syz [ 512.669718][T28603] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10719'. [ 512.983315][T28616] loop4: detected capacity change from 0 to 1024 [ 513.082432][T28616] EXT4-fs (loop4): Ignoring removed bh option [ 513.169866][T28616] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000006a66,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 513.609145][T23670] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 513.703373][T28650] ptrace attach of "./syz-executor exec"[28651] was attempted by "./syz-executor exec"[28650] [ 513.859140][T23670] usb 7-1: Using ep0 maxpacket: 32 [ 514.003571][T23670] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 514.203378][T23670] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 514.216852][T23670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.232582][T23670] usb 7-1: Product: syz [ 514.239356][T23670] usb 7-1: Manufacturer: syz [ 514.246243][T23670] usb 7-1: SerialNumber: syz [ 514.251371][T28676] ptrace attach of "./syz-executor exec"[28677] was attempted by "./syz-executor exec"[28676] [ 514.262310][T23670] usb 7-1: config 0 descriptor?? [ 514.299536][T28631] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 514.577368][T23670] usb 7-1: USB disconnect, device number 12 [ 514.768728][T28701] ptrace attach of "./syz-executor exec"[28702] was attempted by "./syz-executor exec"[28701] [ 514.792398][T28631] input: syz0 as /devices/virtual/input/input26 [ 515.359462][T28737] trusted_key: encrypted_key: master key parameter is missing [ 516.253290][T28795] netlink: 'syz.2.10807': attribute type 2 has an invalid length. [ 516.279205][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10807'. [ 517.083801][T28847] futex_wake_op: syz.4.10830 tries to shift op by 144; fix this program [ 517.476225][T28869] ptrace attach of "./syz-executor exec"[28873] was attempted by "./syz-executor exec"[28869] [ 517.495587][T28872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10843'. [ 518.264646][T28902] loop6: detected capacity change from 0 to 512 [ 519.461743][T28938] loop2: detected capacity change from 0 to 2048 [ 519.661016][T28938] Alternate GPT is invalid, using primary GPT. [ 519.683192][T28938] loop2: p1 p2 p3 [ 520.032470][ T5217] udevd[5217]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 520.037889][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 520.045195][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 520.496272][T28979] loop6: detected capacity change from 0 to 2048 [ 520.604618][T28979] Alternate GPT is invalid, using primary GPT. [ 520.621116][T28979] loop6: p1 p2 p3 [ 520.884755][ T5217] udevd[5217]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 520.914126][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 520.926318][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 520.980360][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 521.029236][ T5217] udevd[5217]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 521.042217][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 521.093497][T29000] ptrace attach of "./syz-executor exec"[29003] was attempted by "./syz-executor exec"[29000] [ 521.258195][T29009] ptrace attach of "./syz-executor exec"[29010] was attempted by "./syz-executor exec"[29009] [ 521.919926][T29031] netlink: 'syz.2.10910': attribute type 16 has an invalid length. [ 521.969055][T29031] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.10910'. [ 522.034449][T29028] loop4: detected capacity change from 0 to 2048 [ 522.105700][T29033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10911'. [ 522.130131][ T5217] Alternate GPT is invalid, using primary GPT. [ 522.136364][ T5217] loop4: p1 p2 p3 [ 522.211762][T29028] Alternate GPT is invalid, using primary GPT. [ 522.219262][T29028] loop4: p1 p2 p3 [ 522.621649][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 522.758730][ T26] audit: type=1326 audit(2000000855.724:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29044 comm="syz.4.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 522.812958][ T26] audit: type=1326 audit(2000000855.764:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29044 comm="syz.4.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 522.909516][ T26] audit: type=1326 audit(2000000855.764:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29044 comm="syz.4.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 522.954811][ T26] audit: type=1326 audit(2000000855.764:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29044 comm="syz.4.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 523.022771][ T26] audit: type=1326 audit(2000000855.764:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29044 comm="syz.4.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 523.094477][ T26] audit: type=1326 audit(2000000855.764:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29044 comm="syz.4.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 523.160770][ T26] audit: type=1326 audit(2000000855.764:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29044 comm="syz.4.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 523.259225][ T26] audit: type=1326 audit(2000000855.764:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29044 comm="syz.4.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 523.364724][ T26] audit: type=1326 audit(2000000855.764:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29044 comm="syz.4.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 523.418493][ T26] audit: type=1326 audit(2000000855.764:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29044 comm="syz.4.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 523.571574][T29076] bridge0: port 3(veth0_to_bridge) entered blocking state [ 523.609127][T29076] bridge0: port 3(veth0_to_bridge) entered disabled state [ 523.620305][T29076] device veth0_to_bridge entered promiscuous mode [ 523.644871][T29080] loop4: detected capacity change from 0 to 512 [ 523.648357][T29076] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 523.690754][T29076] bridge0: port 3(veth0_to_bridge) entered blocking state [ 523.697945][T29076] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 523.805833][T29080] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 523.822383][T29080] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 523.863934][T29080] EXT4-fs (loop4): orphan cleanup on readonly fs [ 523.875949][T29080] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 523.917569][T29080] EXT4-fs (loop4): Remounting filesystem read-only [ 523.978586][T29080] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.10932: Failed to acquire dquot type 0 [ 524.023036][T29094] ptrace attach of ""[29101] was attempted by "./syz-executor exec"[29094] [ 524.074096][T29080] EXT4-fs (loop4): Remounting filesystem read-only [ 524.095627][T29080] EXT4-fs (loop4): 1 truncate cleaned up [ 524.144442][T29080] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,grpjquota=./file0,errors=remount-ro,noinit_itable,stripe=0x00000000000000432. Quota mode: writeback. [ 524.946757][T29140] 9pnet_virtio: no channels available for device syz [ 525.441120][T29159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10967'. [ 525.457221][T29157] loop2: detected capacity change from 0 to 512 [ 525.550080][T29157] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 525.559145][T29157] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 525.603927][T29157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002] [ 525.626835][T29157] System zones: 1-12 [ 525.683532][T29157] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.10966: inode #1: comm syz.2.10966: iget: illegal inode # [ 525.709554][T29157] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.10966: error while reading EA inode 1 err=-117 [ 525.753106][T29157] EXT4-fs (loop2): 1 orphan inode deleted [ 525.758947][T29157] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,usrjquota=,usrjquota=,journal_dev=0x0000000000000dcd,resgid=0x0000000000000000,minixdf,debug,grpquota,nombcache,minixdf,nomblk_io_submit,nomblk_io_submit,i_version,,errors=continue. Quota mode: writeback. [ 526.378758][T29201] ptrace attach of ""[29204] was attempted by "./syz-executor exec"[29201] [ 527.153813][T29236] ptrace attach of ""[29238] was attempted by "./syz-executor exec"[29236] [ 528.268985][T29273] ptrace attach of "./syz-executor exec"[29274] was attempted by "./syz-executor exec"[29273] [ 528.759218][T29296] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11027'. [ 528.778499][T29296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11027'. [ 528.982949][T29310] loop6: detected capacity change from 0 to 512 [ 530.154660][T29360] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 530.182034][T29362] loop4: detected capacity change from 0 to 4096 [ 530.200245][T29360] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 530.234499][T29362] EXT4-fs (loop4): Test dummy encryption mode enabled [ 530.266442][T29362] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 530.275354][T29362] System zones: 0-5 [ 530.344474][T29362] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 530.851582][T29386] loop6: detected capacity change from 0 to 512 [ 531.236017][T29399] ptrace attach of "./syz-executor exec"[29407] was attempted by "./syz-executor exec"[29399] [ 532.218640][T29443] ptrace attach of "./syz-executor exec"[29444] was attempted by "./syz-executor exec"[29443] [ 532.742673][T29453] loop6: detected capacity change from 0 to 512 [ 532.770111][T29457] loop4: detected capacity change from 0 to 512 [ 532.878364][T29457] EXT4-fs (loop4): Ignoring removed bh option [ 532.986664][T29457] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 533.040210][T29457] ext4 filesystem being mounted at /2258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.472718][T29479] xt_TCPMSS: Only works on TCP SYN packets [ 534.040961][T29488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11105'. [ 534.099625][T29488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11105'. [ 534.117210][T29488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11105'. [ 534.162347][T29488] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.171122][T29488] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.180029][T29488] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.188755][T29488] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.223592][T29488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11105'. [ 534.261664][T29492] loop2: detected capacity change from 0 to 512 [ 534.264548][T29488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11105'. [ 534.279883][T29488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11105'. [ 534.289434][T29494] device batadv_slave_1 entered promiscuous mode [ 534.298250][T29489] device batadv_slave_1 left promiscuous mode [ 534.361306][T29492] EXT4-fs (loop2): Ignoring removed bh option [ 534.447486][T29492] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 534.472182][T29492] ext4 filesystem being mounted at /2212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 534.607634][T29506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11113'. [ 534.844066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 534.845141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 534.868694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 534.881095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 534.893446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 534.905834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 534.918199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 534.930596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 534.942906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 534.955374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 536.745295][ T4274] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.929290][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11133'. [ 536.964229][T29555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11133'. [ 537.038477][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11133'. [ 537.304770][ T4274] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.490709][T29549] chnl_net:caif_netlink_parms(): no params data found [ 537.876780][T29549] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.885990][T29549] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.907017][T29549] device bridge_slave_0 entered promiscuous mode [ 537.946094][T29549] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.989076][T29549] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.997062][T29549] device bridge_slave_1 entered promiscuous mode [ 538.065578][ T4274] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.150151][T29593] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.158870][T29593] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.167613][T29593] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.176341][T29593] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.233678][T29549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.271083][T29549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.371101][T29549] team0: Port device team_slave_0 added [ 538.397480][T29549] team0: Port device team_slave_1 added [ 538.407468][T29602] x_tables: unsorted underflow at hook 1 [ 538.432779][T29604] fuse: Bad value for 'fd' [ 538.470739][T29549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.477711][T29549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.563522][T29549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.590668][T29549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.597705][T29549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.687169][T29549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.753568][ T4247] Bluetooth: hci4: command 0x0409 tx timeout [ 538.773159][T29549] device hsr_slave_0 entered promiscuous mode [ 538.781441][T29612] overlayfs: unrecognized mount option "verity=on" or missing value [ 538.804722][T29549] device hsr_slave_1 entered promiscuous mode [ 538.815105][T29549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.840257][T29549] Cannot create hsr debugfs directory [ 539.494345][ T4274] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.849190][ C1] net_ratelimit: 4886 callbacks suppressed [ 539.849205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 539.869744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 539.882049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 539.894717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 539.907037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 539.919412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 539.931762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 539.944208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 539.956523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 539.968894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 540.275547][T29650] __nla_validate_parse: 10 callbacks suppressed [ 540.275562][T29650] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11175'. [ 540.319302][T29650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11175'. [ 540.342499][T29650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11175'. [ 540.387964][T29650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11175'. [ 540.622128][T29669] netlink: 'syz.2.11184': attribute type 4 has an invalid length. [ 540.833457][ T4247] Bluetooth: hci4: command 0x041b tx timeout [ 541.122528][T29549] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 541.156963][T29549] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 541.166695][T29549] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 541.194890][T29549] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 541.224024][T23670] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 541.418333][T29549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.465835][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.486432][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.529565][T29549] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.550467][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.572689][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.594553][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.601705][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.628613][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.665057][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.682641][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.704853][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.712023][ T5866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.749626][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 541.785760][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 541.804578][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 541.822905][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 541.868267][T23670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.879212][T23670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.899733][T23670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.923651][T23670] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.933199][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 541.945174][T23670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.981460][T23670] usb 3-1: config 0 descriptor?? [ 542.004086][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.026309][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.070717][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.087098][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.126037][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.152165][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.187007][T29549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.528133][T23670] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 542.553490][T23670] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 542.799506][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 542.806950][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 542.853726][T29549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.940803][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 542.991094][ C1] plantronics 0003:047F:FFFF.000E: hid_field_extract() called with n (132) > 32! (ksoftirqd/1) [ 543.037443][T29771] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11213'. [ 543.497042][T29798] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11221'. [ 543.585087][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 543.649775][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 543.722140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 543.735442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 543.762604][T29549] device veth0_vlan entered promiscuous mode [ 543.799699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 543.814706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 543.871807][T29549] device veth1_vlan entered promiscuous mode [ 543.938209][T29813] loop6: detected capacity change from 0 to 128 [ 543.962397][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 543.982724][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 544.010866][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 544.012661][T23665] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 544.050880][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.081220][T29549] device veth0_macvtap entered promiscuous mode [ 544.103820][T29549] device veth1_macvtap entered promiscuous mode [ 544.131394][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.155586][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.178411][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.205752][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.226754][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.277146][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.320536][T29549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.355805][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 544.367578][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 544.394594][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 544.424562][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 544.452302][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.477638][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.496011][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.507652][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.523823][T29549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.555686][T29549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.572790][T29549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.625267][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 544.642848][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 544.656648][T29549] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.668654][T29549] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.683439][T29549] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.692256][T29549] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.802474][T23665] usb 3-1: device descriptor read/64, error -71 [ 544.859198][ C1] net_ratelimit: 7252 callbacks suppressed [ 544.859212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 544.877369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 544.889706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 544.896093][ T5866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.902018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 544.922081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 544.934497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 544.946806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 544.956817][ T5866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.959228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 544.978333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 544.990701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 545.012539][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 545.051245][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.069504][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 545.083812][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.129307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 545.333958][T29860] xt_TCPMSS: Only works on TCP SYN packets [ 545.488845][T23665] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 545.566194][T23665] usb 3-1: device reset changed ep0 maxpacket size! [ 545.619089][T23670] usb 3-1: USB disconnect, device number 25 [ 545.885495][T29868] netlink: 'syz.4.11241': attribute type 4 has an invalid length. [ 545.956820][T23670] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 546.385808][T23670] usb 3-1: Using ep0 maxpacket: 8 [ 546.811772][T29920] xt_TCPMSS: Only works on TCP SYN packets [ 547.698900][T23670] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 547.715874][T23670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.751113][T23670] usb 3-1: Product: syz [ 547.762060][T23670] usb 3-1: config 0 descriptor?? [ 547.828355][T23670] usb 3-1: can't set config #0, error -71 [ 547.867853][T23670] usb 3-1: USB disconnect, device number 26 [ 548.182512][T29971] xt_TCPMSS: Only works on TCP SYN packets [ 548.328009][T29964] loop2: detected capacity change from 0 to 2048 [ 548.971228][T29982] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11283'. [ 549.022587][T29979] device sit0 entered promiscuous mode [ 549.032001][T29979] netlink: 'syz.8.11281': attribute type 1 has an invalid length. [ 549.101586][T29979] netlink: 1 bytes leftover after parsing attributes in process `syz.8.11281'. [ 549.351891][T30008] netlink: 268 bytes leftover after parsing attributes in process `syz.6.11293'. [ 549.535353][T30018] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11297'. [ 549.869266][ C1] net_ratelimit: 5313 callbacks suppressed [ 549.869280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.887484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.899848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.912150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.924674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.937023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.949382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.961676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.974088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.986400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 550.016484][T30051] netlink: 108 bytes leftover after parsing attributes in process `syz.8.11308'. [ 550.990011][T30107] netlink: 388 bytes leftover after parsing attributes in process `syz.8.11333'. [ 551.723691][T30115] fuse: Unknown parameter 'r' [ 552.037378][T30158] ptrace attach of "./syz-executor exec"[30160] was attempted by "./syz-executor exec"[30158] [ 552.083917][T30164] netlink: 'syz.2.11353': attribute type 13 has an invalid length. [ 552.149361][T30164] netlink: 'syz.2.11353': attribute type 17 has an invalid length. [ 552.249295][T30164] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 552.465914][T30164] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 552.931808][T30201] ptrace attach of "./syz-executor exec"[30202] was attempted by "./syz-executor exec"[30201] [ 553.049161][T30205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11375'. [ 554.345927][T30254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11396'. [ 554.909759][ C0] net_ratelimit: 9645 callbacks suppressed [ 554.909775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 554.925124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 554.927989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 554.939898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 554.951849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 554.963866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 554.975712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 554.987806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 554.999757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 555.011651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 556.164599][T30308] netlink: 'syz.5.11410': attribute type 11 has an invalid length. [ 556.262681][T30308] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.11410'. [ 556.345060][T30313] tipc: Started in network mode [ 556.370181][T30313] tipc: Node identity 7a015686a6cb, cluster identity 4711 [ 556.377424][T30313] tipc: Enabled bearer , priority 0 [ 556.500934][T30319] device syzkaller0 entered promiscuous mode [ 556.574284][T30313] tipc: Resetting bearer [ 556.588720][T30326] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11417'. [ 556.639613][T30312] tipc: Resetting bearer [ 556.679653][T30312] tipc: Disabling bearer [ 558.418012][T30390] overlayfs: failed to clone upperpath [ 558.844896][T30405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11448'. [ 558.879070][T30405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11448'. [ 558.912782][T30405] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11448'. [ 558.957068][T30409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11448'. [ 558.991631][T30405] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11448'. [ 559.034514][T30409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11448'. [ 559.057207][T30409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11448'. [ 559.167975][T30416] loop4: detected capacity change from 0 to 1024 [ 559.757673][T30439] overlayfs: missing 'lowerdir' [ 559.919243][ C0] net_ratelimit: 10602 callbacks suppressed [ 559.919260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 559.935843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 559.937531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 559.949765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 559.961622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 559.973694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 559.985459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 559.997422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 560.011313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 560.021376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 560.843267][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 560.843279][ T26] audit: type=1326 audit(2000000893.814:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30475 comm="syz.2.11469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b8de6749 code=0x7fc00000 [ 560.911825][T30483] loop6: detected capacity change from 0 to 128 [ 562.760813][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.767149][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.939468][T30551] ipt_CLUSTERIP: Please specify destination IP [ 564.929298][ C0] net_ratelimit: 15984 callbacks suppressed [ 564.929317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 564.939716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 564.947543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 564.959493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 564.971399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 564.983428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 564.995269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 565.007167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 565.019144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 565.031164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 565.441545][T30606] loop2: detected capacity change from 0 to 2048 [ 566.423183][T30629] __nla_validate_parse: 1 callbacks suppressed [ 566.423198][T30629] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11510'. [ 566.489052][T30629] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11510'. [ 566.569160][T30629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.617339][T30629] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11510'. [ 566.660220][T30629] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11510'. [ 566.770404][T30629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 567.235929][T30644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11517'. [ 568.742149][T30667] overlayfs: failed to clone upperpath [ 569.691713][T30684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11532'. [ 569.729531][T30684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11532'. [ 569.804345][T30684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 569.820055][T30684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11532'. [ 569.907881][T30684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11532'. [ 569.958413][ C1] net_ratelimit: 15507 callbacks suppressed [ 569.958427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 569.959204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 569.964980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 569.976579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 569.988417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 570.000460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 570.012538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 570.024289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 570.036246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 570.048371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 570.138689][T30684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.026721][T30732] fuseblk: Bad value for 'fd' [ 571.047580][T30733] netlink: 'syz.5.11548': attribute type 4 has an invalid length. [ 571.074175][T30733] netlink: 'syz.5.11548': attribute type 4 has an invalid length. [ 571.484023][T30749] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11562'. [ 573.008423][T30786] tipc: Enabled bearer , priority 0 [ 573.096718][T30785] tipc: Disabling bearer [ 574.224906][T30820] netlink: 80 bytes leftover after parsing attributes in process `syz.5.11577'. [ 574.718924][T30833] netlink: 'syz.6.11583': attribute type 4 has an invalid length. [ 574.959039][ C1] net_ratelimit: 13815 callbacks suppressed [ 574.959054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 574.972889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 574.977382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 574.989238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 575.001195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 575.013098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 575.025196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 575.037128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 575.049007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 575.060930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 578.481428][T30957] overlayfs: missing 'workdir' [ 578.737288][T23669] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 579.125441][T23669] usb 9-1: Using ep0 maxpacket: 16 [ 579.317532][T23669] usb 9-1: config 1 has an invalid interface number: 64 but max is 0 [ 579.353720][T23669] usb 9-1: config 1 has no interface number 0 [ 579.376247][T23669] usb 9-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 579.643945][T23669] usb 9-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 579.662258][T23669] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.680493][T23669] usb 9-1: Product: syz [ 579.684673][T23669] usb 9-1: Manufacturer: syz [ 579.699476][T23669] usb 9-1: SerialNumber: syz [ 579.969062][ C1] net_ratelimit: 18047 callbacks suppressed [ 579.969077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 579.969118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 579.975484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 579.987132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 579.999241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 580.012122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 580.030771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 580.035040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 580.046937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 580.058900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 580.167076][T23669] option 9-1:1.64: GSM modem (1-port) converter detected [ 580.213185][T23669] usb 9-1: USB disconnect, device number 2 [ 580.220659][T23669] option 9-1:1.64: device disconnected [ 582.160532][T31014] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 582.301707][T31014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 582.323410][T31016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11663'. [ 582.386833][T31023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11668'. [ 582.409054][T31023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11668'. [ 582.464676][T31023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 582.569434][T31023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11668'. [ 582.611893][T31023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11668'. [ 583.040027][T31023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.724080][ T26] audit: type=1326 audit(2000000917.695:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.8.11696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a631749 code=0x7ffc0000 [ 584.788315][ T26] audit: type=1326 audit(2000000917.715:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.8.11696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6c5a631749 code=0x7ffc0000 [ 584.940313][T31097] netlink: 368 bytes leftover after parsing attributes in process `syz.5.11701'. [ 584.975371][ T26] audit: type=1326 audit(2000000917.715:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31086 comm="syz.8.11696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a631749 code=0x7ffc0000 [ 584.984754][T31099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11702'. [ 585.009270][ C0] net_ratelimit: 11559 callbacks suppressed [ 585.009284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 585.018679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 585.027525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 585.039511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 585.051464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 585.063390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 585.075329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 585.087350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 585.099244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 585.111147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 585.407276][T31121] binder: Bad value for 'max' [ 586.034766][T31143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11723'. [ 586.057329][T31143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11723'. [ 586.148459][T31143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.165391][T31143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11723'. [ 586.238875][T31143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.081351][T31175] overlayfs: failed to clone upperpath [ 588.649907][T31227] __nla_validate_parse: 1 callbacks suppressed [ 588.649923][T31227] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11757'. [ 589.523475][T31265] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11775'. [ 589.540650][T31265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11775'. [ 589.597788][T31265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.743970][T31265] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11775'. [ 589.753100][T31265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11775'. [ 589.810520][T31265] 8021q: adding VLAN 0 to HW filter on device bond6 [ 590.026700][ C0] net_ratelimit: 18519 callbacks suppressed [ 590.026715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 590.045029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 590.049099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 590.057324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 590.069322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 590.081133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 590.093109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 590.105085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 590.116932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 590.128820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 590.874155][T31317] device geneve2 entered promiscuous mode [ 592.869581][T31385] 9pnet: Insufficient options for proto=fd [ 595.029110][ C0] net_ratelimit: 16437 callbacks suppressed [ 595.029125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 595.039650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 595.047395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 595.059279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 595.071157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 595.083175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 595.095131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 595.106902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 595.118804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 595.130803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 595.285277][T31458] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11864'. [ 595.312824][T31458] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11864'. [ 595.704427][T31473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11871'. [ 595.753071][T31473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11871'. [ 596.048306][T31484] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11876'. [ 596.110039][T31484] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11876'. [ 596.266703][T31488] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11879'. [ 596.321766][T31490] 9pnet: Insufficient options for proto=fd [ 596.807704][T31512] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11889'. [ 596.859730][T31512] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11889'. [ 596.949130][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11891'. [ 597.146955][T31524] 9pnet: Insufficient options for proto=fd [ 597.732923][T31546] loop2: detected capacity change from 0 to 256 [ 597.943063][T31552] netlink: 'syz.8.11909': attribute type 4 has an invalid length. [ 598.258261][T31546] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 598.303815][T31546] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 598.429307][T31546] attempt to access beyond end of device [ 598.429307][T31546] loop2: rw=524288, want=408, limit=256 [ 598.485136][T31546] attempt to access beyond end of device [ 598.485136][T31546] loop2: rw=524288, want=664, limit=256 [ 598.509288][T31546] attempt to access beyond end of device [ 598.509288][T31546] loop2: rw=0, want=288, limit=256 [ 598.581616][ T26] audit: type=1800 audit(2000000931.555:384): pid=31546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11906" name="file1" dev="loop2" ino=1048684 res=0 errno=0 [ 599.939800][T31601] device wg2 entered promiscuous mode [ 600.039050][ C0] net_ratelimit: 18112 callbacks suppressed [ 600.039066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 600.039237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 600.045401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 600.057337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 600.069197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 600.081383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 600.093278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 600.105147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 600.117066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 600.129127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 600.332350][T31611] __nla_validate_parse: 1 callbacks suppressed [ 600.332366][T31611] netlink: 92 bytes leftover after parsing attributes in process `syz.4.11938'. [ 601.178053][T31645] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11950'. [ 602.485113][ T4274] device hsr_slave_0 left promiscuous mode [ 602.516596][ T4274] device hsr_slave_1 left promiscuous mode [ 602.531660][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.539169][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.586749][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.609859][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.647857][ T4274] device veth1_macvtap left promiscuous mode [ 602.654057][ T4274] device veth0_macvtap left promiscuous mode [ 602.679795][ T4274] device veth1_vlan left promiscuous mode [ 602.694339][ T4274] device veth0_vlan left promiscuous mode [ 602.995809][ T4274] bond0 (unregistering): Released all slaves [ 605.049227][ C0] net_ratelimit: 20678 callbacks suppressed [ 605.049243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 605.067391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 605.076246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 605.079649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 605.091582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 605.103394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 605.115437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 605.127530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 605.139470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 605.151378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 605.574683][ T4274] team0 (unregistering): Port device team_slave_1 removed [ 605.643085][ T4274] team0 (unregistering): Port device team_slave_0 removed [ 605.830584][T31708] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11977'. [ 605.878087][T31708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11977'. [ 605.909711][T31708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11977'. [ 605.976635][T31679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11963'. [ 605.979632][T31708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11977'. [ 606.273510][T31722] device batadv_slave_1 entered promiscuous mode [ 606.362836][T31720] device batadv_slave_1 left promiscuous mode [ 606.888264][T31760] loop8: detected capacity change from 0 to 512 [ 606.971918][T31760] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 606.990491][T31760] EXT4-fs (loop8): inline encryption not supported [ 607.013310][T31760] EXT4-fs (loop8): Test dummy encryption mode enabled [ 607.033370][T31760] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 607.069194][T31766] overlayfs: failed to resolve './file1': -2 [ 607.075840][T31760] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 607.319101][T31760] EXT4-fs (loop8): 1 truncate cleaned up [ 607.324786][T31760] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 607.356298][T31776] netlink: 172 bytes leftover after parsing attributes in process `syz.2.12006'. [ 608.302010][T31822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12024'. [ 609.575509][T31866] trusted_key: encrypted_key: insufficient parameters specified [ 610.058981][ C0] net_ratelimit: 13461 callbacks suppressed [ 610.058998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 610.059031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 610.065218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 610.077273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 610.089334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 610.101243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 610.113005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 610.125103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 610.136970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 610.148875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 610.360071][T31901] fuse: Bad value for 'fd' [ 610.675287][T31909] 9pnet: Insufficient options for proto=fd [ 610.854989][T31918] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 610.907408][T31918] overlayfs: missing 'lowerdir' [ 611.398318][T31944] loop8: detected capacity change from 0 to 512 [ 613.932371][T31944] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 614.001164][T31944] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.245355][T32047] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 614.488813][T32059] netlink: 388 bytes leftover after parsing attributes in process `syz.2.12132'. [ 615.075649][ C0] net_ratelimit: 19203 callbacks suppressed [ 615.075665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 615.076081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 615.081856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 615.093937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 615.105789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 615.117675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 615.129585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 615.141628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 615.153609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 615.165462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 615.277893][T32078] netlink: 92 bytes leftover after parsing attributes in process `syz.2.12142'. [ 616.351290][T23651] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 616.613413][T32132] 9pnet: Could not find request transport: f [ 616.726868][T23651] usb 7-1: Using ep0 maxpacket: 8 [ 617.208168][T23651] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 617.224122][T23651] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.246496][T23651] usb 7-1: Product: syz [ 617.251488][T23651] usb 7-1: Manufacturer: syz [ 617.275118][T23651] usb 7-1: SerialNumber: syz [ 617.281598][T23651] usb 7-1: config 0 descriptor?? [ 617.360335][T23651] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 618.650785][T23651] gspca_sonixj: reg_r err -110 [ 618.655997][T23651] sonixj: probe of 7-1:0.0 failed with error -110 [ 619.513641][T32233] xt_hashlimit: max too large, truncated to 1048576 [ 619.541832][T32233] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 620.079180][ C1] net_ratelimit: 15021 callbacks suppressed [ 620.079198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 620.097370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 620.104712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 620.109646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 620.121644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 620.133611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 620.145531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 620.157429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 620.169378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 620.181300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 620.367087][T20701] usb 7-1: USB disconnect, device number 13 [ 620.729535][T32260] loop2: detected capacity change from 0 to 1024 [ 621.377664][T32298] overlayfs: missing 'workdir' [ 621.601361][T32312] netlink: 'syz.5.12249': attribute type 11 has an invalid length. [ 622.413371][T32339] xt_hashlimit: max too large, truncated to 1048576 [ 622.447063][T32339] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 623.799063][T32400] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12292'. [ 624.195540][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.201886][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.250354][T32420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12301'. [ 624.720244][ T26] audit: type=1326 audit(2000000957.695:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32435 comm="syz.8.12308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a631749 code=0x0 [ 624.948746][T32446] device geneve2 entered promiscuous mode [ 625.089078][ C0] net_ratelimit: 18667 callbacks suppressed [ 625.089094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 625.107321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 625.108829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 625.119541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 625.131569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 625.143509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 625.155454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 625.167412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 625.179415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 625.191346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 625.482220][T32462] device wg2 entered promiscuous mode [ 626.032394][T32480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12328'. [ 626.083085][T32480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12328'. [ 626.102964][T32480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12328'. [ 626.162646][T32480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12328'. [ 626.671471][T32496] device wg2 entered promiscuous mode [ 626.924620][T32507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12340'. [ 626.963680][T32507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12340'. [ 627.185394][T32507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12340'. [ 627.216211][T32507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12340'. [ 628.338446][T32557] loop8: detected capacity change from 0 to 512 [ 630.098983][ C0] net_ratelimit: 21352 callbacks suppressed [ 630.099000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.099093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.105218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 630.117172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.129228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.141072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.153026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.165106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.177041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 630.188924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 631.361647][T32557] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 632.065133][T32652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12402'. [ 632.518096][T32664] netlink: 'syz.6.12409': attribute type 4 has an invalid length. [ 632.549946][T32664] netlink: 17 bytes leftover after parsing attributes in process `syz.6.12409'. [ 633.109183][T32688] loop6: detected capacity change from 0 to 128 [ 633.562116][T32703] loop8: detected capacity change from 0 to 512 [ 634.961240][T32708] fuse: Bad value for 'fd' [ 635.109152][ C1] net_ratelimit: 12523 callbacks suppressed [ 635.109170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 635.127497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 635.139861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 635.150287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 635.152046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 635.164062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 635.175938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 635.188329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 635.199775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 635.211704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 636.909791][T32732] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 636.936086][T32732] CIFS mount error: No usable UNC path provided in device string! [ 636.936086][T32732] [ 636.946480][T32732] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 637.772724][T32748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12448'. [ 639.164823][ T314] CIFS mount error: No usable UNC path provided in device string! [ 639.164823][ T314] [ 639.174955][ T314] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 639.370456][ T313] netlink: 388 bytes leftover after parsing attributes in process `syz.8.12457'. [ 640.119120][ C0] net_ratelimit: 12819 callbacks suppressed [ 640.119137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.128257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.137327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.149331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.161332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 640.173269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.185249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.197320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.209784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.221102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.780920][ T361] CIFS mount error: No usable UNC path provided in device string! [ 640.780920][ T361] [ 640.791027][ T361] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 641.458400][ T367] netlink: 388 bytes leftover after parsing attributes in process `syz.4.12479'. [ 642.588970][ T412] CIFS mount error: No usable UNC path provided in device string! [ 642.588970][ T412] [ 642.599074][ T412] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 645.129037][ C1] net_ratelimit: 9985 callbacks suppressed [ 645.129053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 645.147109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 645.148346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 645.159434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 645.171436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 645.183480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 645.195379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 645.207331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 645.219291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 645.231324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.312773][ T501] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12528'. [ 648.314941][ T509] CIFS mount error: No usable UNC path provided in device string! [ 648.314941][ T509] [ 648.325064][ T509] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 649.505743][ T535] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12542'. [ 650.139099][ C0] net_ratelimit: 10372 callbacks suppressed [ 650.139116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 650.157208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 650.169423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 650.176147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 650.181652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 650.193627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 650.205593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 650.217569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 650.230087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 650.241419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 650.336361][ T547] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 650.394124][ T547] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 650.560919][ T547] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 651.453741][ T26] audit: type=1326 audit(2000000984.425:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=594 comm="syz.5.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e58bd749 code=0x7ffc0000 [ 651.559816][ T26] audit: type=1326 audit(2000000984.425:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=594 comm="syz.5.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e58bd749 code=0x7ffc0000 [ 651.657629][ T26] audit: type=1326 audit(2000000984.455:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=594 comm="syz.5.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58e58bd749 code=0x7ffc0000 [ 651.784935][ T26] audit: type=1326 audit(2000000984.455:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=594 comm="syz.5.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e58bd749 code=0x7ffc0000 [ 651.912747][ T615] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 651.915227][ T26] audit: type=1326 audit(2000000984.455:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=594 comm="syz.5.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e58bd749 code=0x7ffc0000 [ 652.062315][ T26] audit: type=1326 audit(2000000984.455:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=594 comm="syz.5.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58e58bd749 code=0x7ffc0000 [ 652.191203][ T26] audit: type=1326 audit(2000000984.455:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=594 comm="syz.5.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e58bd749 code=0x7ffc0000 [ 652.329554][ T26] audit: type=1326 audit(2000000984.455:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=594 comm="syz.5.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e58bd749 code=0x7ffc0000 [ 652.445756][ T26] audit: type=1326 audit(2000000984.455:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=594 comm="syz.5.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58e58bd749 code=0x7ffc0000 [ 652.615150][ T26] audit: type=1326 audit(2000000984.455:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=594 comm="syz.5.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e58bd749 code=0x7ffc0000 [ 652.924647][ T642] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12589'. [ 654.430893][ T690] loop2: detected capacity change from 0 to 512 [ 654.646252][ T690] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 654.705791][ T690] ext4 filesystem being mounted at /2463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.872960][ T699] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12612'. [ 654.914712][ T699] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12612'. [ 655.052676][ T703] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12615'. [ 655.086541][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12615'. [ 655.149311][ C0] net_ratelimit: 14369 callbacks suppressed [ 655.149326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 655.154669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 655.155494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 655.167461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 655.180005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 655.191348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 655.203332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 655.215344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 655.227233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 655.239139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 655.284489][ T707] netlink: 152 bytes leftover after parsing attributes in process `syz.5.12617'. [ 657.771705][ T736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12629'. [ 658.477533][ T765] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.12642'. [ 658.741912][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 658.741927][ T26] audit: type=1326 audit(2000000991.715:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.6.12647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f360a6dd749 code=0x0 [ 660.183319][ C1] net_ratelimit: 9596 callbacks suppressed [ 660.183338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 660.201486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 660.213635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 660.225936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 660.238161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 660.250394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 660.262606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 660.274898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 660.287039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 660.299171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 661.919677][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12682'. [ 662.144640][ T869] tmpfs: Bad value for 'mpol' [ 662.292705][ T878] loop6: detected capacity change from 0 to 256 [ 662.319902][ T881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12692'. [ 663.866592][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 664.079494][ T26] audit: type=1326 audit(2000000997.045:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=924 comm="syz.4.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 664.138103][ T26] audit: type=1326 audit(2000000997.045:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=924 comm="syz.4.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7ffc0000 [ 664.664128][ T946] cgroup: Unknown subsys name 'fowner>00000000000000060929' [ 665.188973][ C1] net_ratelimit: 14689 callbacks suppressed [ 665.188992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 665.195163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 665.207276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 665.219192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 665.231149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 665.243003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 665.255001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 665.266840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 665.278872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 665.291212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 667.730828][ T981] loop8: detected capacity change from 0 to 128 [ 668.938957][ T26] audit: type=1326 audit(2000001001.905:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.8.12755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a631749 code=0x7ffc0000 [ 669.055050][ T26] audit: type=1326 audit(2000001001.905:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.8.12755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a631749 code=0x7ffc0000 [ 669.172576][ T26] audit: type=1326 audit(2000001001.905:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.8.12755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a631749 code=0x7ffc0000 [ 669.270725][ T1040] loop2: detected capacity change from 0 to 512 [ 669.285781][ T26] audit: type=1326 audit(2000001001.905:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.8.12755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c5a631749 code=0x7ffc0000 [ 669.381439][ T26] audit: type=1326 audit(2000001001.915:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.8.12755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a631749 code=0x7ffc0000 [ 669.478968][ T26] audit: type=1326 audit(2000001001.915:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.8.12755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6c5a631749 code=0x7ffc0000 [ 669.590271][ T26] audit: type=1326 audit(2000001001.915:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.8.12755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6c5a631749 code=0x7ffc0000 [ 670.198936][ C0] net_ratelimit: 11968 callbacks suppressed [ 670.198953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 670.203499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.205288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.217247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.229122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.241109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.252981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 670.264859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.276779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.288792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 671.304527][ T1040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 671.559032][ T1040] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.12760: invalid indirect mapped block 4294967295 (level 0) [ 671.647608][ T1147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12798'. [ 671.658826][ T1040] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.12760: invalid indirect mapped block 4294967295 (level 1) [ 671.787462][ T1040] EXT4-fs (loop2): 1 orphan inode deleted [ 671.793556][ T1040] EXT4-fs (loop2): 1 truncate cleaned up [ 671.802347][ T1040] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 672.079316][ T1170] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12805'. [ 673.093534][ T1228] 9pnet: Insufficient options for proto=fd [ 674.153291][ T26] audit: type=1326 audit(2000001007.125:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1241 comm="syz.4.12835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf1bdb749 code=0x7fc00000 [ 675.209002][ C0] net_ratelimit: 15270 callbacks suppressed [ 675.209019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 675.209249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.215283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.227302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.239853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.251182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.263152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 675.275174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.287156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.299049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.377023][ T1322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12869'. [ 679.560116][ T1530] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12960'. [ 679.888898][ T1549] netlink: 'syz.4.12967': attribute type 13 has an invalid length. [ 680.219065][ C0] net_ratelimit: 14857 callbacks suppressed [ 680.219080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.237233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.237284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.249421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 680.261364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.273315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.285276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.297798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.309147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.321128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 680.833380][ T1587] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12987'. [ 680.843738][ T1587] netlink: 59 bytes leftover after parsing attributes in process `syz.2.12987'. [ 680.856673][T23665] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 680.875508][ T1587] netlink: 59 bytes leftover after parsing attributes in process `syz.2.12987'. [ 681.376368][T23665] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.395538][T23665] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.426901][T23665] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 681.460055][T23665] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.505692][T23665] usb 7-1: config 0 descriptor?? [ 681.582751][ T1607] netlink: 'syz.5.12995': attribute type 17 has an invalid length. [ 681.830930][ T1616] 9p: Unknown uid 00000000004294967295 [ 681.864280][ T1619] overlayfs: failed to set xattr on upper [ 681.885646][ T1619] overlayfs: ...falling back to index=off,metacopy=off. [ 682.157678][ T1635] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13008'. [ 682.306582][T23665] usbhid 7-1:0.0: can't add hid device: -71 [ 682.312600][T23665] usbhid: probe of 7-1:0.0 failed with error -71 [ 682.396537][T23665] usb 7-1: USB disconnect, device number 14 [ 683.992011][ T1704] loop2: detected capacity change from 0 to 128 [ 685.086523][ T1739] fuse: Bad value for 'group_id' [ 685.229579][ C0] net_ratelimit: 13916 callbacks suppressed [ 685.229595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.238282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.247752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 685.259687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.271574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.283441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.295414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.307310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.319223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 685.331138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.365533][ T1749] futex_wake_op: syz.5.13061 tries to shift op by -1; fix this program [ 685.409813][ T1754] overlayfs: failed to set xattr on upper [ 685.435903][ T1754] overlayfs: ...falling back to index=off,metacopy=off. [ 685.654011][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.660356][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.089839][ T26] audit: type=1326 audit(2000001019.055:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1791 comm="syz.6.13082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360a6dd749 code=0x7ffc0000 [ 686.188956][ T26] audit: type=1326 audit(2000001019.105:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1791 comm="syz.6.13082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f360a6dd749 code=0x7ffc0000 [ 686.257629][ T26] audit: type=1326 audit(2000001019.105:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1791 comm="syz.6.13082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360a6dd749 code=0x7ffc0000 [ 686.358700][ T1804] overlayfs: missing 'lowerdir' [ 688.793008][ T1877] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13124'. [ 689.084690][ T1888] overlayfs: overlapping lowerdir path [ 689.319449][ T1897] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 690.244719][ C0] net_ratelimit: 18962 callbacks suppressed [ 690.244739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.255925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.262979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 690.275055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.286942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.298925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.310865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.322969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.334964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 690.346862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.432965][ T1927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13141'. [ 690.528738][ T1927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13141'. [ 690.741915][ T1927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13141'. [ 691.183449][ T1951] loop2: detected capacity change from 0 to 2048 [ 691.374780][ T1962] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13156'. [ 691.402277][ T1962] device ip6_vti0 entered promiscuous mode [ 691.996572][ T1986] overlayfs: failed to clone upperpath [ 692.220456][ T1993] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13171'. [ 693.515317][ T5217] loop2: p1 < > p4 < > [ 693.582263][ T1951] loop2: p1 < > p4 < > [ 693.611588][ T3561] loop2: p1 < > p4 < > [ 693.667654][ T2038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13191'. [ 694.069416][ T4226] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 694.577180][ T4226] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 694.590555][ T4226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.676063][ T4226] usb 7-1: config 0 descriptor?? [ 694.780797][ T4226] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 695.249109][ C1] net_ratelimit: 18986 callbacks suppressed [ 695.249127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.255592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.267334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.279342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.291334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.303343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:5e:78:d2:cd:77, vlan:1) [ 695.315306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.327227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.339236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.351755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.730630][ T2058] netlink: 'syz.4.13201': attribute type 4 has an invalid length. [ 696.346396][ T2074] device syzkaller0 entered promiscuous mode [ 696.947510][ T5217] udevd[5217]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 696.969748][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 697.081379][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 697.088367][ T5217] udevd[5217]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 697.167016][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 697.171085][ T5217] udevd[5217]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 697.300385][ T1915] usb 7-1: USB disconnect, device number 15 [ 697.807074][ T2114] @0Ù: renamed from bond_slave_1 [ 697.896779][ T2117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13228'. [ 700.298982][ C1] net_ratelimit: 19789 callbacks suppressed [ 700.299000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.317105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.329250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.341397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.353542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.365766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.377981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.390197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.402435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.414756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.319043][ C1] net_ratelimit: 18662 callbacks suppressed [ 705.319063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.339862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.352046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.364242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.376405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.388621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.400845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.413076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.425280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.437436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.339100][ C1] net_ratelimit: 21198 callbacks suppressed [ 710.339121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.357218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.369357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.381514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.393642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.405843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.418100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.430298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.442521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.454701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 803.058845][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 803.065821][ C1] rcu: 0-...!: (3 ticks this GP) idle=e95/1/0x4000000000000000 softirq=100009/100009 fqs=262 [ 803.077871][ C1] (detected by 1, t=10506 jiffies, g=110421, q=2472) [ 803.084648][ C1] Sending NMI from CPU 1 to CPUs 0: [ 803.089857][ C0] NMI backtrace for cpu 0 [ 803.089867][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 803.089881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 803.089891][ C0] RIP: 0010:do_raw_spin_lock+0xae/0x280 [ 803.089912][ C0] Code: 06 3d ad 4e ad de 0f 85 16 01 00 00 4c 8d 63 10 4d 89 e6 49 c1 ee 03 43 80 3c 3e 00 74 08 4c 89 e7 e8 36 e7 5e 00 49 8b 04 24 <65> 48 8b 0d ba 22 a5 7e 48 89 4c 24 10 48 39 c8 0f 84 03 01 00 00 [ 803.089925][ C0] RSP: 0018:ffffc90000007bc0 EFLAGS: 00000046 [ 803.089937][ C0] RAX: ffffffffffffffff RBX: ffff8880b902a240 RCX: 1ffff92000000f7c [ 803.089948][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffff8880b902a240 [ 803.089959][ C0] RBP: ffffc90000007c70 R08: dffffc0000000000 R09: fffffbfff1ff7c1a [ 803.089969][ C0] R10: fffffbfff1ff7c1a R11: 1ffffffff1ff7c19 R12: ffff8880b902a250 [ 803.089981][ C0] R13: 1ffff1101720546a R14: 1ffff1101720544a R15: dffffc0000000000 [ 803.089993][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 803.090005][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.090014][ C0] CR2: 00007f9cf1e002f8 CR3: 0000000022754000 CR4: 00000000003506f0 [ 803.090027][ C0] Call Trace: [ 803.090033][ C0] [ 803.090039][ C0] ? read_lock_is_recursive+0x10/0x10 [ 803.090058][ C0] ? __rwlock_init+0x140/0x140 [ 803.090075][ C0] _raw_spin_lock_irq+0xab/0xe0 [ 803.090090][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 803.090108][ C0] __hrtimer_run_queues+0x5ff/0xc40 [ 803.090128][ C0] ? taprio_free_sched_cb+0x190/0x190 [ 803.090149][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 803.090165][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 803.090183][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 803.090209][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 803.090226][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 803.090242][ C0] [ 803.090246][ C0] [ 803.090251][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 803.090266][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 803.090281][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 50 d3 f1 0b 48 89 de 5b e9 57 9e 43 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d a4 a3 8a 7e 65 8b 15 a5 a3 8a 7e 81 e2 00 [ 803.090293][ C0] RSP: 0018:ffffc90000d36f48 EFLAGS: 00000202 [ 803.090304][ C0] RAX: 0000000000000003 RBX: ffff88805fa56920 RCX: 0000000000000001 [ 803.090314][ C0] RDX: ffffffff88143ade RSI: ffffffff8d29a1a0 RDI: 0000000000000002 [ 803.090324][ C0] RBP: 0000000000000002 R08: ffff88813fea9dc0 R09: 0000000000000003 [ 803.090333][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: 0000000000000001 [ 803.090341][ C0] R13: ffff88805fa56918 R14: 0000000000000002 R15: ffffc90000d37000 [ 803.090355][ C0] ? nf_hook_slow+0xce/0x200 [ 803.090373][ C0] nf_hook_slow+0x1bc/0x200 [ 803.090388][ C0] ? br_dev_queue_push_xmit+0x820/0x820 [ 803.090404][ C0] NF_HOOK+0x1eb/0x370 [ 803.090420][ C0] ? br_forward_finish+0x80/0x80 [ 803.090435][ C0] ? br_dev_queue_push_xmit+0x820/0x820 [ 803.090449][ C0] ? br_switchdev_frame_uses_tx_fwd_offload+0x10/0x60 [ 803.090467][ C0] ? br_handle_vlan+0x43b/0x5e0 [ 803.090483][ C0] __br_forward+0x41f/0x600 [ 803.090495][ C0] ? br_dev_queue_push_xmit+0x820/0x820 [ 803.090512][ C0] ? should_deliver+0x2c0/0x2c0 [ 803.090526][ C0] ? br_flood+0x3a7/0x450 [ 803.090542][ C0] br_handle_frame_finish+0x1018/0x12c0 [ 803.090564][ C0] ? brport_get_ownership+0x80/0x80 [ 803.090577][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 803.090592][ C0] ? _local_bh_enable+0xa0/0xa0 [ 803.090609][ C0] ? ip6t_do_table+0x12f9/0x14b0 [ 803.090623][ C0] ? nf_hook_slow+0x168/0x200 [ 803.090638][ C0] ? brport_get_ownership+0x80/0x80 [ 803.090652][ C0] br_nf_hook_thresh+0x3b2/0x480 [ 803.090672][ C0] ? brnf_get_logical_dev+0x2c0/0x2c0 [ 803.090689][ C0] ? brport_get_ownership+0x80/0x80 [ 803.090709][ C0] br_nf_pre_routing_finish_ipv6+0x903/0xc80 [ 803.090724][ C0] ? brport_get_ownership+0x80/0x80 [ 803.090748][ C0] br_nf_pre_routing_ipv6+0x359/0x650 [ 803.090762][ C0] ? br_nf_check_hbh_len+0x590/0x590 [ 803.090777][ C0] ? br_nf_pre_routing_ipv6+0x650/0x650 [ 803.090794][ C0] ? br_nf_hook_thresh+0x480/0x480 [ 803.090810][ C0] br_handle_frame+0x89b/0x1180 [ 803.090830][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 803.090846][ C0] ? brport_get_ownership+0x80/0x80 [ 803.090860][ C0] ? kasan_quarantine_put+0xd4/0x220 [ 803.090880][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 803.090894][ C0] __netif_receive_skb_core+0xfb0/0x35d0 [ 803.090913][ C0] ? rcu_is_watching+0x11/0xa0 [ 803.090926][ C0] ? kmem_cache_free+0x14c/0x210 [ 803.090943][ C0] ? set_rps_cpu+0x670/0x670 [ 803.090962][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 803.090978][ C0] ? read_lock_is_recursive+0x10/0x10 [ 803.090996][ C0] ? lock_chain_count+0x20/0x20 [ 803.091013][ C0] __netif_receive_skb+0x74/0x290 [ 803.091032][ C0] process_backlog+0x364/0x780 [ 803.091054][ C0] ? rps_trigger_softirq+0x210/0x210 [ 803.091070][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 803.091088][ C0] ? lock_chain_count+0x20/0x20 [ 803.091103][ C0] ? net_tx_action+0x6ce/0x870 [ 803.091120][ C0] __napi_poll+0xc0/0x430 [ 803.091135][ C0] ? net_rx_action+0x2db/0x9c0 [ 803.091152][ C0] net_rx_action+0x4a8/0x9c0 [ 803.091171][ C0] ? net_tx_action+0x870/0x870 [ 803.091185][ C0] ? net_tx_action+0x800/0x870 [ 803.091201][ C0] ? detach_timer+0x2b0/0x2b0 [ 803.091215][ C0] ? process_backlog+0x780/0x780 [ 803.091237][ C0] handle_softirqs+0x328/0x820 [ 803.091251][ C0] ? run_ksoftirqd+0x98/0xf0 [ 803.091267][ C0] ? do_softirq+0x200/0x200 [ 803.091280][ C0] ? run_ksoftirqd+0x75/0xf0 [ 803.091293][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 803.091306][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 803.091321][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 803.091335][ C0] run_ksoftirqd+0x98/0xf0 [ 803.091348][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 803.091362][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 803.091380][ C0] ? smpboot_thread_fn+0x5bc/0x970 [ 803.091398][ C0] smpboot_thread_fn+0x4f6/0x970 [ 803.091418][ C0] kthread+0x436/0x520 [ 803.091431][ C0] ? cpu_report_death+0x180/0x180 [ 803.091446][ C0] ? kthread_blkcg+0xd0/0xd0 [ 803.091459][ C0] ret_from_fork+0x1f/0x30 [ 803.091479][ C0] [ 803.091852][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9149 jiffies! g110421 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 803.716405][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=34999 [ 803.724296][ C1] rcu: rcu_preempt kthread starved for 9150 jiffies! g110421 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 803.735679][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 803.745647][ C1] rcu: RCU grace-period kthread stack dump: [ 803.751534][ C1] task:rcu_preempt state:I stack:28064 pid: 15 ppid: 2 flags:0x00004000 [ 803.760843][ C1] Call Trace: [ 803.764130][ C1] [ 803.767071][ C1] __schedule+0x11bb/0x4390 [ 803.771594][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 803.776979][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 803.782970][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 803.788875][ C1] ? _raw_spin_unlock+0x40/0x40 [ 803.793740][ C1] ? rcu_is_watching+0x11/0xa0 [ 803.798510][ C1] ? release_firmware_map_entry+0x190/0x190 [ 803.804509][ C1] schedule+0x11b/0x1e0 [ 803.808783][ C1] schedule_timeout+0x15c/0x280 [ 803.813645][ C1] ? console_conditional_schedule+0x40/0x40 [ 803.819560][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 803.825463][ C1] ? update_process_times+0x200/0x200 [ 803.830855][ C1] ? prepare_to_swait_event+0x331/0x350 [ 803.836420][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 803.841286][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 803.847441][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 803.852210][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 803.857406][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 803.862604][ C1] rcu_gp_kthread+0x98/0x350 [ 803.867195][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 803.872305][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 803.878201][ C1] ? __kthread_parkme+0x157/0x1b0 [ 803.883240][ C1] kthread+0x436/0x520 [ 803.887320][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 803.892435][ C1] ? kthread_blkcg+0xd0/0xd0 [ 803.897025][ C1] ret_from_fork+0x1f/0x30 [ 803.901455][ C1] [ 803.904477][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 803.910799][ C1] NMI backtrace for cpu 1 [ 803.915120][ C1] CPU: 1 PID: 29549 Comm: syz-executor Not tainted syzkaller #0 [ 803.922753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 803.932802][ C1] Call Trace: [ 803.936084][ C1] [ 803.938932][ C1] dump_stack_lvl+0x168/0x230 [ 803.943620][ C1] ? show_regs_print_info+0x20/0x20 [ 803.948824][ C1] ? load_image+0x3b0/0x3b0 [ 803.953338][ C1] ? irq_work_queue+0xbf/0x140 [ 803.958109][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 803.963050][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 803.969201][ C1] ? _printk+0xcc/0x110 [ 803.973365][ C1] ? cpu_online+0x1d/0x30 [ 803.977703][ C1] ? load_image+0x3b0/0x3b0 [ 803.982216][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 803.988289][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 803.994275][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 804.000447][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 804.005912][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 804.010854][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 804.016150][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 804.021187][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 804.026391][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 804.031250][ C1] ? account_process_tick+0x227/0x3a0 [ 804.036628][ C1] update_process_times+0x193/0x200 [ 804.041830][ C1] tick_sched_timer+0x37d/0x560 [ 804.046692][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 804.051906][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 804.057462][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 804.062584][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 804.068656][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 804.073615][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 804.079608][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 804.085248][ C1] [ 804.088177][ C1] [ 804.091108][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 804.097092][ C1] RIP: 0010:smp_call_function_many_cond+0xb88/0xd70 [ 804.103686][ C1] Code: b6 44 05 00 84 c0 0f 85 9d 00 00 00 41 8b 1c 24 89 de 83 e6 01 31 ff e8 66 49 0b 00 83 e3 01 75 07 e8 fc 45 0b 00 eb 43 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 11 41 f7 [ 804.123290][ C1] RSP: 0018:ffffc9000450f4e0 EFLAGS: 00000293 [ 804.129362][ C1] RAX: ffffffff816c863b RBX: 0000000000000001 RCX: ffff88807df2bb80 [ 804.137337][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 804.145306][ C1] RBP: ffffc9000450f620 R08: dffffc0000000000 R09: fffffbfff183c000 [ 804.153283][ C1] R10: fffffbfff183c000 R11: 1ffffffff183bfff R12: ffff8880b9042848 [ 804.161259][ C1] R13: 1ffff11017208509 R14: ffff8880b913b3c0 R15: 0000000000000000 [ 804.169239][ C1] ? smp_call_function_many_cond+0xbab/0xd70 [ 804.175236][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 804.180613][ C1] ? smp_call_function_many+0x30/0x30 [ 804.185990][ C1] ? pgtable_pmd_page_dtor+0x1cb/0x280 [ 804.191453][ C1] ? tlb_remove_page+0xe/0x20 [ 804.196130][ C1] ? ___pmd_free_tlb+0x90/0x90 [ 804.200898][ C1] ? rcu_is_watching+0x11/0xa0 [ 804.205668][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 804.211040][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 804.216156][ C1] flush_tlb_mm_range+0x360/0x560 [ 804.221187][ C1] ? flush_tlb_multi+0x50/0x50 [ 804.225958][ C1] tlb_flush_mmu_tlbonly+0x1b1/0x3f0 [ 804.231251][ C1] tlb_finish_mmu+0xc5/0x2e0 [ 804.235850][ C1] exit_mmap+0x3a6/0x5f0 [ 804.240103][ C1] ? vm_brk+0x20/0x20 [ 804.244104][ C1] ? uprobe_clear_state+0x2f6/0x460 [ 804.249312][ C1] ? mm_update_next_owner+0x522/0x640 [ 804.254699][ C1] __mmput+0x115/0x3b0 [ 804.258778][ C1] exit_mm+0x567/0x6c0 [ 804.262850][ C1] ? xacct_add_tsk+0x4b0/0x4b0 [ 804.267626][ C1] ? do_exit+0x20a0/0x20a0 [ 804.272046][ C1] ? taskstats_exit+0x439/0xab0 [ 804.276904][ C1] ? tty_audit_exit+0x14e/0x1f0 [ 804.281764][ C1] do_exit+0x5a1/0x20a0 [ 804.285927][ C1] ? put_task_struct+0x80/0x80 [ 804.290693][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 804.296678][ C1] ? lock_chain_count+0x20/0x20 [ 804.301530][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 804.306558][ C1] do_group_exit+0x12e/0x300 [ 804.311153][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 804.316357][ C1] get_signal+0x6ca/0x12c0 [ 804.320787][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 804.326430][ C1] ? kernel_waitid+0x370/0x370 [ 804.331199][ C1] ? hrtimer_nanosleep+0x417/0x520 [ 804.336432][ C1] ? nanosleep_copyout+0x110/0x110 [ 804.341546][ C1] ? get_sigframe_size+0x10/0x10 [ 804.346484][ C1] ? __remove_hrtimer+0x3a0/0x3a0 [ 804.351519][ C1] ? __se_sys_clock_nanosleep+0x2e6/0x370 [ 804.357242][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 804.362707][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 804.367999][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 804.373592][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 804.379071][ C1] do_syscall_64+0x58/0xa0 [ 804.383500][ C1] ? clear_bhb_loop+0x30/0x80 [ 804.388174][ C1] ? clear_bhb_loop+0x30/0x80 [ 804.392857][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 804.398749][ C1] RIP: 0033:0x7f6c5a664005 [ 804.403165][ C1] Code: Unable to access opcode bytes at RIP 0x7f6c5a663fdb. [ 804.410525][ C1] RSP: 002b:00007ffd06a99d80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 804.418941][ C1] RAX: fffffffffffffdfc RBX: 000000000000031d RCX: 00007f6c5a664005 [ 804.426914][ C1] RDX: 00007ffd06a99dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 804.434889][ C1] RBP: 00007ffd06a99e2c R08: 0000000000000000 R09: 0000000000000000 [ 804.442866][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 804.450934][ C1] R13: 00000000000927c0 R14: 00000000000a9f4d R15: 00007ffd06a99e80 [ 804.458915][ C1]