last executing test programs: 1m27.676167922s ago: executing program 4 (id=268): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") r0 = syz_open_dev$mouse(0x0, 0x0, 0xd04c0) futex_waitv(&(0x7f0000002740)=[{0xdc61, &(0x7f0000000340)=0x4, 0x82}, {0x4, &(0x7f0000000900)=0x5, 0x82}, {0x0, &(0x7f0000000940)=0xb90, 0x82}, {0x7, &(0x7f0000000980)=0x3, 0x82}, {0xca06, &(0x7f00000009c0)=0x6, 0x82}, {0x6, &(0x7f0000000a00)=0x8}, {0x3, &(0x7f0000000a40)=0x2, 0x82}, {0x8, &(0x7f0000000a80)=0x2, 0x2}, {0xf86, &(0x7f0000000ac0)=0x1, 0x2}, {0x8, &(0x7f0000000b00)=0x3d0, 0x2}, {0x100, &(0x7f0000000b40), 0x2}, {0x2d5, &(0x7f0000000b80)=0x40, 0x82}, {0x4, &(0x7f0000000bc0)=0x6, 0x2}, {0x3, &(0x7f0000000c00)=0x9c0, 0x82}, {0x8, &(0x7f0000000c40)=0x6, 0x82}, {0x3, &(0x7f0000000c80)=0x2, 0x2}, {0xb2, &(0x7f0000000cc0)=0x3, 0x82}, {0x9, &(0x7f0000000d00)=0x7, 0x82}, {0x5be, &(0x7f0000000d40)=0x200, 0x82}, {0x6, &(0x7f0000000d80)=0x3, 0x82}, {0x5, &(0x7f0000000dc0)=0x6, 0x82}, {0x6, &(0x7f0000000e00)=0x3, 0x2}, {0x7f, &(0x7f0000000e40)=0xffffffffffffffff, 0x2}, {0x6, &(0x7f0000000e80)=0x2, 0x82}, {0x3, &(0x7f0000001400)=0x400, 0x82}, {0x6, &(0x7f0000000f00)=0x8, 0x82}, {0x5, &(0x7f0000000f40)=0x8000, 0x2}, {0x5, &(0x7f0000000f80)=0x34a28679}, {0x0, &(0x7f0000000fc0)=0x5, 0x82}, {0x0, &(0x7f0000001000), 0x82}, {0xffffffffffffffff, &(0x7f0000001040)=0x10001, 0x82}, {0x8, &(0x7f0000001080)=0x8, 0x82}, {0x3, &(0x7f00000010c0)=0x1b6, 0x82}, {0x4, &(0x7f0000001100)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000001140)=0x4, 0x82}, {0x4, &(0x7f0000001180)=0x5, 0x82}, {0x0, &(0x7f00000011c0)=0x4, 0x2}, {0x6, &(0x7f0000001200)=0x7, 0x82}, {0x2, &(0x7f0000001240)=0x9, 0x2}, {0x4, &(0x7f0000001280)=0x401, 0x82}, {0x5, &(0x7f00000012c0)=0xfffffffeffffffff, 0x2}, {0xee, &(0x7f0000001300)=0x5c8, 0x184}, {0x3, &(0x7f0000001340)=0xff, 0x2}, {0x3ff, &(0x7f0000001380)=0x8e}, {0x3, &(0x7f00000013c0)=0x9, 0x2}, {0x7fffffffffffffff, &(0x7f00000032c0)=0x7f, 0x2}, {0x5, &(0x7f0000001440)=0xf4d, 0x82}, {0x0, &(0x7f0000001480)=0x1ff, 0x82}, {0x0, &(0x7f00000014c0)=0x2, 0x2}, {0x3, &(0x7f0000001500), 0x2}, {0x4, &(0x7f0000001540)=0x8, 0x2}, {0x900, &(0x7f0000001580), 0x2}, {0xd9, &(0x7f00000015c0)=0x80, 0x82}, {0x80000000, &(0x7f0000001600)=0xfffffffffffffdc3, 0x82}, {0x1, &(0x7f0000001640)=0xb, 0x82}, {0x0, &(0x7f0000001680)=0x2, 0x82}, {0x12, &(0x7f00000016c0)=0xb, 0x82}, {0x6, &(0x7f0000001700)=0x800, 0x2}, {0x4, &(0x7f0000001740)=0x80000000, 0x2}, {0xd, &(0x7f0000001780)=0x4, 0x82}, {0x7f, &(0x7f00000017c0)=0x2, 0x2}, {0xa, &(0x7f0000001800)}, {0x1ff, &(0x7f0000001840)=0x8, 0x82}, {0x8000000000000000, &(0x7f0000001880)=0x6, 0x82}, {0x1, &(0x7f00000018c0)=0x1, 0x2}, {0x816, &(0x7f0000001f80)=0x1, 0x2}, {0x4, &(0x7f00000019c0)=0xb4f, 0x2}, {0xc524, &(0x7f0000001a00)=0x2722230a, 0x2}, {0xfffffffffffffffe, &(0x7f0000001a40)=0x8001, 0x2}, {0x10001, &(0x7f0000001a80)=0x7, 0x82}, {0x1, &(0x7f0000001ac0)=0x4, 0x82}, {0x100, &(0x7f0000001b00)=0x3, 0x2}, {0x2500000, &(0x7f0000001b40)=0x2, 0x82}, {0xc4, &(0x7f0000001b80)=0x401, 0x2}, {0x5, &(0x7f0000001bc0)=0x6, 0x2}, {0x362d4402, &(0x7f0000001c00)=0x6, 0x2}, {0xc0000000000000, &(0x7f0000001c40)=0x2, 0x82}, {0xbf42, 0x0, 0x2}, {0x6, &(0x7f0000001d00)=0x81, 0x2}, {0xaad, &(0x7f0000001d40)=0x8, 0x2}, {0x5, &(0x7f0000001d80)=0xe, 0x2}, {0x0, &(0x7f0000001dc0)=0xac01, 0x82}, {0x2, &(0x7f0000001e00)=0x4, 0x2}, {0x100, &(0x7f0000001e40)=0xff}, {0x8001, &(0x7f0000001e80)=0x2, 0x2}, {0x0, &(0x7f0000001ec0)=0x3, 0x82}, {0xb0, &(0x7f0000001f00)=0xbc, 0x2}, {0xffffffffffffff7f, 0x0, 0x2}, {0x8f72, &(0x7f0000002080)=0x7fff, 0x2}, {0x2, &(0x7f0000002100), 0x2}, {0x2, 0x0, 0x2}, {0x0, &(0x7f0000002180)=0x1, 0x2}, {0x6, &(0x7f00000021c0)=0x2, 0x2}, {0xa3, 0x0, 0x82}, {0x10000, &(0x7f0000002380)=0xb47, 0x2}, {0x3, &(0x7f0000002400)=0x6, 0x82}, {0xfffffffffffffff7, 0x0, 0x82}, {0x0, &(0x7f0000002480)=0x2, 0x82}, {0x2, &(0x7f00000024c0)=0x8, 0x82}, {0x9, &(0x7f0000002500)=0x7, 0x82}, {0x0, &(0x7f0000002540)=0xe, 0x82}, {0x4, &(0x7f0000002580)=0x6, 0x2}, {0x6, &(0x7f00000025c0)=0x10000, 0x2}, {0x3, 0x0, 0x82}, {0x6, &(0x7f00000026c0)=0x9e, 0x2}, {0x6, &(0x7f0000002700)=0x8d3, 0x82}], 0x6a, 0x0, &(0x7f00000020c0)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x9, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x40040080) 1m27.441530421s ago: executing program 4 (id=273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = eventfd(0x0) read$eventfd(r4, &(0x7f0000000240), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x96c08c88760bb19e, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r8, @ANYBLOB="040000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1m26.705058719s ago: executing program 0 (id=287): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/116, 0x74, 0x4) fsopen(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x3, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000}, 0x50) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001bc0)={{r0}, 0x0, 0x10, @unused=[0x4800000000000, 0x5, 0xffffffffffffff80, 0x9], @devid}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) 1m26.57131131s ago: executing program 0 (id=289): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x24, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4"}}) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) 1m26.543973382s ago: executing program 4 (id=290): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = semget(0x1, 0x4, 0x39c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) name_to_handle_at(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@reiserfs_3={0xc, 0x3, {0x10000, 0x5, 0xbd1}}, &(0x7f0000000300), 0x400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 1m26.482234157s ago: executing program 0 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00', @ANYRES16=r3, @ANYBLOB="a183000000000000000005"], 0x78}}, 0x0) 1m26.449867669s ago: executing program 0 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 1m26.428077111s ago: executing program 0 (id=296): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x28, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4e4fc12d7"}}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0xc, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m26.057713531s ago: executing program 1 (id=304): syz_emit_ethernet(0x66, &(0x7f00000007c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 1m25.766972073s ago: executing program 1 (id=306): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m25.731698476s ago: executing program 1 (id=307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 1m25.717767418s ago: executing program 1 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = eventfd(0x0) read$eventfd(r4, &(0x7f0000000240), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x96c08c88760bb19e, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="040000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1m25.611551196s ago: executing program 4 (id=311): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = semget(0x1, 0x4, 0x39c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) name_to_handle_at(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@reiserfs_3={0xc, 0x3, {0x10000, 0x5, 0xbd1}}, &(0x7f0000000300), 0x400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 1m25.461889378s ago: executing program 4 (id=314): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x1c, r4, 0x1100, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@delneigh={0x44, 0x1a, 0x1, 0x470bd2d, 0x800, {0xa, 0x0, 0x0, 0x0, 0x1, 0xe8, 0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x2}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x44}}, 0x71d0b8801b5f1c98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d0748020000007ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x25, 0x17, @void}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r6, 0x1}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x20, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x3a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x44}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xffc, &(0x7f0000000740)=""/4092, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xd, 0x4, 0xc8b}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x1, r0, r0, r0, r0, r0], &(0x7f00000003c0)=[{0x0, 0x3, 0x6, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='siox_set_data\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r9, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r9, &(0x7f0000000200), 0x4) 1m24.718948037s ago: executing program 4 (id=316): socket$nl_netfilter(0x10, 0x3, 0xc) semget(0x1, 0x4, 0x39c) r0 = socket$kcm(0x10, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1m23.92804664s ago: executing program 1 (id=317): syz_emit_ethernet(0x66, &(0x7f00000007c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 1m21.840261415s ago: executing program 1 (id=322): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = semget(0x1, 0x4, 0x39c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) name_to_handle_at(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@reiserfs_3={0xc, 0x3, {0x10000, 0x5, 0xbd1}}, &(0x7f0000000300), 0x400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 1m21.266769601s ago: executing program 0 (id=324): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = semget(0x1, 0x4, 0x39c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) name_to_handle_at(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@reiserfs_3={0xc, 0x3, {0x10000, 0x5, 0xbd1}}, &(0x7f0000000300), 0x400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 1m17.49030583s ago: executing program 3 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 1m10.477660037s ago: executing program 3 (id=329): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x2a, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4e4fc12d7a545"}}) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) 1m8.349285506s ago: executing program 32 (id=316): socket$nl_netfilter(0x10, 0x3, 0xc) semget(0x1, 0x4, 0x39c) r0 = socket$kcm(0x10, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1m5.787583919s ago: executing program 3 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x1f, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d"}}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1m4.906391919s ago: executing program 33 (id=324): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = semget(0x1, 0x4, 0x39c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) name_to_handle_at(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@reiserfs_3={0xc, 0x3, {0x10000, 0x5, 0xbd1}}, &(0x7f0000000300), 0x400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 1m4.333906805s ago: executing program 34 (id=322): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = semget(0x1, 0x4, 0x39c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) name_to_handle_at(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@reiserfs_3={0xc, 0x3, {0x10000, 0x5, 0xbd1}}, &(0x7f0000000300), 0x400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 57.317515532s ago: executing program 3 (id=335): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x29, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4e4fc12d7a5"}}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0xc, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 52.540917591s ago: executing program 3 (id=338): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) open(0x0, 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00'}, 0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='security.selinux\x00') 51.368308674s ago: executing program 3 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) 41.116169937s ago: executing program 2 (id=343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0xffffffffffffff87) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x3, 0x4) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0xc900}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c00)=@delchain={0x538, 0x65, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x1}, {0xa, 0xfff2}, {0xfff2, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @filter_kind_options=@f_u32={{0x8}, {0x4ec, 0x2, [@TCA_U32_SEL={0x384, 0x5, {0x10, 0xf, 0xa9, 0x7, 0xd080, 0x7f, 0x5622, 0x7, [{0x9, 0x6, 0x8, 0x8}, {0x1ff, 0x200, 0x2, 0x7}, {0x3, 0x3, 0x5, 0x2}, {0x5, 0x8, 0x6, 0x3}, {0x3, 0x0, 0x6, 0x7}, {0x3, 0x0, 0xb, 0x1}, {0x4, 0x8, 0x6, 0x800}, {0x5d5, 0x9, 0xfff, 0x5}, {0xbea, 0xfffffff8, 0xf, 0x2}, {0x3, 0x73, 0xffffffff, 0x2}, {0x9, 0x7f, 0x6, 0x2}, {0x4, 0x4, 0x2, 0xa4}, {0x5, 0x0, 0x1, 0xffff981b}, {0xf, 0x7, 0x8, 0x5}, {0xe, 0x5, 0x8000, 0x5}, {0x1b, 0x7, 0x3, 0x5}, {0x396e, 0xaf, 0xfff, 0x1}, {0xc0e, 0x9, 0xe, 0x5}, {0x1, 0x5, 0xc, 0xfffffff7}, {0xfffff8ba, 0x0, 0x28, 0x2}, {0x10001, 0x1ff, 0x7}, {0x9, 0xc, 0x8, 0x5470}, {0xfffffffd, 0xfff, 0x0, 0x20}, {0xffffffb8, 0xffff, 0x1, 0xffffff8c}, {0x7, 0x9, 0x2, 0x5}, {0x1ff, 0xe, 0x8, 0x80}, {0x6, 0x4, 0x1ff, 0xa7e}, {0x563c, 0x6, 0x1, 0x1}, {0x8, 0xffff, 0x6, 0x1ff}, {0x2, 0xc, 0x6, 0x8001}, {0x2, 0x0, 0x6, 0x7}, {0x2c9b, 0x1, 0x3, 0x3ff}, {0x1, 0x80000000, 0x8, 0xa}, {0x7264, 0xff, 0x9, 0x10}, {0xffffffff, 0x8000, 0x6, 0x2}, {0xc170, 0xffff23d7, 0x6, 0x9}, {0x2, 0xa9, 0x6, 0x5}, {0x7ff, 0x8, 0x650, 0xb9}, {0xffffffff, 0x9, 0x5, 0x6}, {0x2, 0x1, 0x1, 0xa8b1}, {0x9, 0x9, 0xa9, 0x2}, {0x8, 0x5, 0x5, 0x5}, {0x7, 0x5, 0x5}, {0x7f, 0x2, 0x7, 0xb7}, {0x23ef6975, 0x6e1, 0x0, 0x8}, {0x8000, 0x9, 0x81, 0x884a}, {0x1, 0x0, 0xb789, 0x5734c98e}, {0x6, 0xf, 0x6, 0x338}, {0x6, 0x2, 0x120, 0x7}, {0x0, 0xb79, 0x100, 0x7d70}, {0xd, 0xf, 0x4, 0x2}, {0x2, 0x8, 0x5, 0xb}, {0x400, 0x6, 0x3, 0x4}, {0x9, 0x3ff, 0x10, 0x2df}, {0x10001, 0x2, 0x6, 0x8}]}}, @TCA_U32_SEL={0x164, 0x5, {0x10, 0x80, 0x6, 0x6, 0xfff, 0xc3, 0x80, 0x8, [{0x25, 0x4, 0x7fff, 0x6}, {0x8c3, 0xaadd, 0x1, 0x4}, {0xeb, 0x5, 0x7, 0x12}, {0x6faf, 0x100, 0x8, 0x9}, {0x5a, 0x80000000, 0xd60, 0x1}, {0x9, 0xff, 0x1, 0xf}, {0x42, 0x6318, 0x96b, 0xffff}, {0x1000, 0x7, 0x8, 0x3}, {0x9, 0xd1, 0x2, 0x6}, {0x2c40742, 0x7, 0xc, 0x2be0}, {0x7, 0x6, 0x3, 0x6}, {0xf, 0x3, 0x5, 0x1}, {0x8, 0x9, 0x6}, {0x4, 0x37, 0x3367ed46, 0x4}, {0xe798, 0x4, 0xc26, 0x7}, {0xa, 0x3, 0x81, 0xd3f}, {0x4, 0x2, 0x66, 0x6}, {0x5, 0x2, 0x3, 0x4}, {0x8001, 0x80000001, 0x9, 0xfffffffd}, {0x7, 0x80000000, 0x3, 0x7f}, {0x3, 0x0, 0x6, 0x986}]}}]}}]}, 0x538}}, 0x40080) 36.572393798s ago: executing program 2 (id=344): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = syz_open_dev$mouse(0x0, 0x0, 0xd04c0) futex_waitv(&(0x7f0000002740)=[{0xdc61, &(0x7f0000000340)=0x4, 0x82}, {0x4, &(0x7f0000000900)=0x5, 0x82}, {0x0, &(0x7f0000000940)=0xb90, 0x82}, {0x7, &(0x7f0000000980)=0x3, 0x82}, {0xca06, &(0x7f00000009c0)=0x6, 0x82}, {0x6, &(0x7f0000000a00)=0x8}, {0x3, &(0x7f0000000a40)=0x2, 0x82}, {0x8, &(0x7f0000000a80)=0x2, 0x2}, {0xf86, &(0x7f0000000ac0)=0x1, 0x2}, {0x8, &(0x7f0000000b00)=0x3d0, 0x2}, {0x100, &(0x7f0000000b40), 0x2}, {0x2d5, &(0x7f0000000b80)=0x40, 0x82}, {0x4, &(0x7f0000000bc0)=0x6, 0x2}, {0x3, &(0x7f0000000c00)=0x9c0, 0x82}, {0x8, &(0x7f0000000c40)=0x6, 0x82}, {0x3, &(0x7f0000000c80)=0x2, 0x2}, {0xb2, &(0x7f0000000cc0)=0x3, 0x82}, {0x9, &(0x7f0000000d00)=0x7, 0x82}, {0x5be, &(0x7f0000000d40)=0x200, 0x82}, {0x6, &(0x7f0000000d80)=0x3, 0x82}, {0x5, &(0x7f0000000dc0)=0x6, 0x82}, {0x6, &(0x7f0000000e00)=0x3, 0x2}, {0x7f, &(0x7f0000000e40)=0xffffffffffffffff, 0x2}, {0x6, &(0x7f0000000e80)=0x2, 0x82}, {0x3, &(0x7f0000001400)=0x400, 0x82}, {0x6, &(0x7f0000000f00)=0x8, 0x82}, {0x5, &(0x7f0000000f40)=0x8000, 0x2}, {0x5, &(0x7f0000000f80)=0x34a28679}, {0x0, &(0x7f0000000fc0)=0x5, 0x82}, {0x0, &(0x7f0000001000), 0x82}, {0xffffffffffffffff, &(0x7f0000001040)=0x10001, 0x82}, {0x8, &(0x7f0000001080)=0x8, 0x82}, {0x3, &(0x7f00000010c0)=0x1b6, 0x82}, {0x4, &(0x7f0000001100)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000001140)=0x4, 0x82}, {0x4, &(0x7f0000001180)=0x5, 0x82}, {0x0, &(0x7f00000011c0)=0x4, 0x2}, {0x6, &(0x7f0000001200)=0x7, 0x82}, {0x2, &(0x7f0000001240)=0x9, 0x2}, {0x4, &(0x7f0000001280)=0x401, 0x82}, {0x5, &(0x7f00000012c0)=0xfffffffeffffffff, 0x2}, {0xee, &(0x7f0000001300)=0x5c8, 0x184}, {0x3, &(0x7f0000001340)=0xff, 0x2}, {0x3ff, &(0x7f0000001380)=0x8e}, {0x3, &(0x7f00000013c0)=0x9, 0x2}, {0x7fffffffffffffff, &(0x7f00000032c0)=0x7f, 0x2}, {0x5, &(0x7f0000001440)=0xf4d, 0x82}, {0x0, &(0x7f0000001480)=0x1ff, 0x82}, {0x0, &(0x7f00000014c0)=0x2, 0x2}, {0x3, &(0x7f0000001500), 0x2}, {0x4, &(0x7f0000001540)=0x8, 0x2}, {0x900, &(0x7f0000001580), 0x2}, {0xd9, &(0x7f00000015c0)=0x80, 0x82}, {0x80000000, &(0x7f0000001600)=0xfffffffffffffdc3, 0x82}, {0x1, &(0x7f0000001640)=0xb, 0x82}, {0x0, &(0x7f0000001680)=0x2, 0x82}, {0x12, &(0x7f00000016c0)=0xb, 0x82}, {0x6, &(0x7f0000001700)=0x800, 0x2}, {0x4, &(0x7f0000001740)=0x80000000, 0x2}, {0xd, &(0x7f0000001780)=0x4, 0x82}, {0x7f, &(0x7f00000017c0)=0x2, 0x2}, {0xa, &(0x7f0000001800)}, {0x1ff, &(0x7f0000001840)=0x8, 0x82}, {0x8000000000000000, &(0x7f0000001880)=0x6, 0x82}, {0x1, &(0x7f00000018c0)=0x1, 0x2}, {0x816, &(0x7f0000001f80)=0x1, 0x2}, {0x8, &(0x7f0000001940)=0x8000000000000001, 0x2}, {0xa8f099a, &(0x7f0000001980)=0x3ff, 0x82}, {0x4, &(0x7f00000019c0)=0xb4f, 0x2}, {0xfffffffffffffffe, &(0x7f0000001a40)=0x8001, 0x2}, {0x10001, &(0x7f0000001a80)=0x7, 0x82}, {0x1, &(0x7f0000001ac0)=0x4, 0x82}, {0x100, &(0x7f0000001b00)=0x3, 0x2}, {0x2500000, &(0x7f0000001b40)=0x2, 0x82}, {0xc4, &(0x7f0000001b80)=0x401, 0x2}, {0x5, &(0x7f0000001bc0)=0x6, 0x2}, {0x362d4402, &(0x7f0000001c00)=0x6, 0x2}, {0xc0000000000000, &(0x7f0000001c40)=0x2, 0x82}, {0xbf42, 0x0, 0x2}, {0x6, &(0x7f0000001d00)=0x81, 0x2}, {0xaad, &(0x7f0000001d40)=0x8, 0x2}, {0x5, &(0x7f0000001d80)=0xe, 0x2}, {0x0, &(0x7f0000001dc0)=0xac01, 0x82}, {0x2, &(0x7f0000001e00)=0x4, 0x2}, {0x100, &(0x7f0000001e40)=0xff}, {0x8001, &(0x7f0000001e80)=0x2, 0x2}, {0x0, &(0x7f0000001ec0)=0x3, 0x82}, {0xb0, &(0x7f0000001f00)=0xbc, 0x2}, {0xffffffffffffff7f, 0x0, 0x2}, {0x8f72, &(0x7f0000002080)=0x7fff, 0x2}, {0x2, &(0x7f0000002100), 0x2}, {0x2, 0x0, 0x2}, {0x0, &(0x7f0000002180)=0x1, 0x2}, {0x6, &(0x7f00000021c0)=0x2, 0x2}, {0xa3, 0x0, 0x82}, {0x10000, &(0x7f0000002380)=0xb47, 0x2}, {0x3, &(0x7f0000002400)=0x6, 0x82}, {0xfffffffffffffff7, 0x0, 0x82}, {0x0, &(0x7f0000002480)=0x2, 0x82}, {0x2, &(0x7f00000024c0)=0x8, 0x82}, {0x9, &(0x7f0000002500)=0x7, 0x82}, {0x0, &(0x7f0000002540)=0xe, 0x82}, {0x4, &(0x7f0000002580)=0x6, 0x2}, {0x6, &(0x7f00000025c0)=0x10000, 0x2}, {0x3, 0x0, 0x82}, {0x6, &(0x7f00000026c0)=0x9e, 0x2}, {0x6, &(0x7f0000002700)=0x8d3, 0x82}], 0x6b, 0x0, &(0x7f00000020c0)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x9, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x40040080) 35.312372518s ago: executing program 35 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) 31.356013952s ago: executing program 2 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 30.234384981s ago: executing program 2 (id=347): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x29, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4e4fc12d7a5"}}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0xc, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 19.2816588s ago: executing program 2 (id=348): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x1c, r4, 0x1100, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@delneigh={0x44, 0x1a, 0x1, 0x470bd2d, 0x800, {0xa, 0x0, 0x0, 0x0, 0x1, 0xe8, 0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x2}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x44}}, 0x71d0b8801b5f1c98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d0748020000007ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x25, 0x17, @void}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r6, 0x1}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x21, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x3a}, @generic={0x3, 0x8, 0x5, 0x4, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x44}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xd, 0x4, 0xc8b}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x1, r0, r0, r0, r0, r0], &(0x7f00000003c0)=[{0x0, 0x3, 0x6, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='siox_set_data\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r9, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r9, &(0x7f0000000200), 0x4) 15.545237137s ago: executing program 2 (id=349): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = semget(0x1, 0x4, 0x39c) r1 = socket$kcm(0x10, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 0s ago: executing program 36 (id=349): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = semget(0x1, 0x4, 0x39c) r1 = socket$kcm(0x10, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) kernel console output (not intermixed with test programs): journal. Quota mode: none. [ 34.797619][ T3549] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.871723][ T3549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 34.889018][ T3563] @: renamed from vlan0 (while UP) [ 34.964552][ T3549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23'. [ 34.972377][ T3567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 35.011134][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.071209][ T3572] loop7: detected capacity change from 0 to 7 [ 35.141549][ T3582] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 35.145374][ T3582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.224947][ T3585] !: renamed from dummy0 (while UP) [ 35.251553][ T3580] @: renamed from vlan0 (while UP) [ 35.421307][ T3594] loop7: detected capacity change from 0 to 7 [ 35.638094][ T3600] loop7: detected capacity change from 0 to 7 [ 35.681885][ T3485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.743140][ T3606] @: renamed from vlan0 (while UP) [ 36.010893][ T3485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.023599][ T3616] syz.4.45 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.052452][ T3582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.121841][ T56] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.141385][ T56] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.162517][ T3582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.193373][ T56] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.207085][ T56] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.221347][ T3582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.314289][ T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.331728][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.353703][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.371001][ T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.471108][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49'. [ 36.507670][ T3641] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 36.763898][ T3655] bridge0: port 3(veth1_to_hsr) entered blocking state [ 36.771217][ T3655] bridge0: port 3(veth1_to_hsr) entered disabled state [ 36.808500][ T3655] veth1_to_hsr: entered allmulticast mode [ 36.814722][ T3660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 36.824508][ T3655] veth1_to_hsr: entered promiscuous mode [ 36.830465][ T3655] bridge0: port 3(veth1_to_hsr) entered blocking state [ 36.837534][ T3655] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 36.847190][ T3659] netlink: 'syz.0.55': attribute type 10 has an invalid length. [ 36.883998][ T3660] bridge0: port 3(veth1_to_hsr) entered disabled state [ 36.897602][ T3660] veth1_to_hsr (unregistering): left allmulticast mode [ 36.904619][ T3660] veth1_to_hsr (unregistering): left promiscuous mode [ 36.911910][ T3660] bridge0: port 3(veth1_to_hsr) entered disabled state [ 36.934520][ T3660] hsr_slave_1 (unregistering): left promiscuous mode [ 36.955658][ T3655] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 37.012299][ T3667] loop2: detected capacity change from 0 to 512 [ 37.026447][ T3667] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.079088][ T3667] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 37.097563][ T3667] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.114466][ T3667] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.58: corrupted inode contents [ 37.140288][ T3667] EXT4-fs (loop2): Remounting filesystem read-only [ 37.154906][ T3667] EXT4-fs (loop2): 1 truncate cleaned up [ 37.161258][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 37.171968][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 37.190026][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 37.216061][ T3667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.271535][ T3671] bridge0: port 3(veth1_to_hsr) entered blocking state [ 37.278686][ T3671] bridge0: port 3(veth1_to_hsr) entered disabled state [ 37.285857][ T3671] veth1_to_hsr: entered allmulticast mode [ 37.292627][ T3671] veth1_to_hsr: entered promiscuous mode [ 37.298786][ T3671] bridge0: port 3(veth1_to_hsr) entered blocking state [ 37.305761][ T3671] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 37.315023][ T3671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 37.326071][ T3671] bridge0: port 3(veth1_to_hsr) entered disabled state [ 37.336327][ T3671] veth1_to_hsr (unregistering): left allmulticast mode [ 37.343382][ T3671] veth1_to_hsr (unregistering): left promiscuous mode [ 37.350344][ T3671] bridge0: port 3(veth1_to_hsr) entered disabled state [ 37.364037][ T3671] hsr_slave_1 (unregistering): left promiscuous mode [ 37.373093][ T3667] tipc: Started in network mode [ 37.378571][ T3667] tipc: Node identity ac14140f, cluster identity 4711 [ 37.388618][ T3667] tipc: New replicast peer: 255.255.255.83 [ 37.394558][ T3667] tipc: Enabled bearer , priority 10 [ 37.400764][ T3672] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 37.433918][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.697102][ T3681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 37.721512][ T3679] loop7: detected capacity change from 0 to 7 [ 37.999187][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 37.999202][ T29] audit: type=1326 audit(1755432845.420:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 38.032272][ T29] audit: type=1326 audit(1755432845.450:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 38.055549][ T29] audit: type=1326 audit(1755432845.450:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 38.070300][ T3690] netlink: 'syz.2.68': attribute type 3 has an invalid length. [ 38.079395][ T29] audit: type=1326 audit(1755432845.450:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 38.127852][ T29] audit: type=1326 audit(1755432845.450:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 38.151492][ T29] audit: type=1326 audit(1755432845.450:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 38.175148][ T29] audit: type=1326 audit(1755432845.450:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 38.198930][ T29] audit: type=1326 audit(1755432845.450:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 38.213669][ T2956] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 38.222185][ T29] audit: type=1326 audit(1755432845.450:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 38.253085][ T29] audit: type=1326 audit(1755432845.450:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 38.259842][ T2956] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 38.407584][ T2956] tipc: Node number set to 2886997007 [ 38.450233][ T3699] bridge0: port 3(veth1) entered blocking state [ 38.456583][ T3699] bridge0: port 3(veth1) entered disabled state [ 38.473809][ T3699] veth1: entered allmulticast mode [ 38.484474][ T3699] veth1: entered promiscuous mode [ 38.503493][ T3699] bridge0: port 3(veth1) entered blocking state [ 38.509898][ T3699] bridge0: port 3(veth1) entered forwarding state [ 38.518425][ T3705] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 38.538220][ T3707] loop4: detected capacity change from 0 to 256 [ 38.547623][ T3699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.565957][ T3707] FAT-fs (loop4): Directory bread(block 64) failed [ 38.573583][ T3707] FAT-fs (loop4): Directory bread(block 65) failed [ 38.581519][ T3707] FAT-fs (loop4): Directory bread(block 66) failed [ 38.588436][ T3707] FAT-fs (loop4): Directory bread(block 67) failed [ 38.595035][ T3707] FAT-fs (loop4): Directory bread(block 68) failed [ 38.603508][ T3707] FAT-fs (loop4): Directory bread(block 69) failed [ 38.611072][ T3707] FAT-fs (loop4): Directory bread(block 70) failed [ 38.621202][ T3699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.633454][ T3707] FAT-fs (loop4): Directory bread(block 71) failed [ 38.641070][ T3707] FAT-fs (loop4): Directory bread(block 72) failed [ 38.648671][ T3707] FAT-fs (loop4): Directory bread(block 73) failed [ 38.684208][ T3699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.712306][ T2956] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 38.722973][ T37] kworker/u8:2: attempt to access beyond end of device [ 38.722973][ T37] loop4: rw=1, sector=1224, nr_sectors = 72 limit=256 [ 38.765405][ T3699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.820808][ T56] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.834104][ T56] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.849765][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.862736][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.891244][ T2956] hid_parser_main: 5 callbacks suppressed [ 38.891277][ T2956] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 38.904822][ T2956] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 38.912464][ T2956] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 38.921982][ T2956] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 38.963712][ T3721] !: renamed from dummy0 (while UP) [ 38.999272][ T3723] __nla_validate_parse: 1 callbacks suppressed [ 38.999293][ T3723] netlink: 76 bytes leftover after parsing attributes in process `syz.2.77'. [ 39.071984][ T3729] netlink: 'syz.4.79': attribute type 10 has an invalid length. [ 39.083876][ T3727] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2522422480/2522422482 [ 39.094165][ T3727] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2522422480/2522422482 [ 39.103517][ T3727] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2522422480/2522422482 [ 39.911786][ T2956] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 39.919372][ T2956] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 39.927010][ T2956] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 39.938538][ T2956] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 40.047638][ T3749] bridge0: port 4(veth0_to_team) entered blocking state [ 40.054869][ T3749] bridge0: port 4(veth0_to_team) entered disabled state [ 40.077237][ T3749] veth0_to_team: entered allmulticast mode [ 40.083997][ T3749] veth0_to_team: entered promiscuous mode [ 40.107332][ T3749] bridge0: port 4(veth0_to_team) entered blocking state [ 40.114387][ T3749] bridge0: port 4(veth0_to_team) entered forwarding state [ 40.142412][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 40.160271][ T3749] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 40.172454][ T3749] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.229858][ T3749] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.279436][ T3749] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.339670][ T3749] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.576118][ T3756] !: renamed from dummy0 (while UP) [ 40.603680][ T3762] netlink: 76 bytes leftover after parsing attributes in process `syz.3.90'. [ 41.019386][ T3778] netlink: 96 bytes leftover after parsing attributes in process `syz.2.97'. [ 41.074722][ T3783] netlink: 'syz.2.98': attribute type 3 has an invalid length. [ 41.106905][ T3388] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 41.115018][ T3388] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 41.122591][ T3388] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 41.136491][ T3388] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 41.154229][ T36] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 41.163976][ T36] hid-generic 0003:0004:0000.0009: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 41.224666][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 41.266278][ T3792] !: renamed from dummy0 (while UP) [ 41.324022][ T3799] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 41.338470][ T3799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.402306][ T3799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.446806][ T3803] netlink: 100 bytes leftover after parsing attributes in process `syz.4.106'. [ 41.461042][ T3799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.467963][ T3790] 9pnet_fd: Insufficient options for proto=fd [ 41.519943][ T3799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.545403][ T36] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 41.614997][ T1460] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.625442][ T56] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.634025][ T56] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.647144][ T56] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.710616][ T10] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 41.786004][ T3826] netlink: 'syz.3.115': attribute type 39 has an invalid length. [ 42.027996][ T3835] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.092608][ T3835] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.150008][ T3835] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.200733][ T3835] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.232768][ T3845] loop7: detected capacity change from 0 to 7 [ 42.247578][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.262211][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.321963][ T3849] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 42.329824][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.350162][ T1460] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.404898][ T3852] @: renamed from vlan0 (while UP) [ 42.467365][ T3849] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.518995][ T3849] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.545875][ T1460] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.596358][ T1460] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.618758][ T1460] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.631986][ T3849] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.647236][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.688779][ T3849] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.710854][ T3868] netlink: 'syz.0.129': attribute type 39 has an invalid length. [ 42.942143][ T3886] loop7: detected capacity change from 0 to 7 [ 42.997738][ T3890] bridge0: port 3(veth0_to_team) entered blocking state [ 43.004795][ T3890] bridge0: port 3(veth0_to_team) entered disabled state [ 43.089583][ T3890] veth0_to_team: entered allmulticast mode [ 43.101409][ T3890] veth0_to_team: entered promiscuous mode [ 43.107794][ T3890] bridge0: port 3(veth0_to_team) entered blocking state [ 43.114899][ T3890] bridge0: port 3(veth0_to_team) entered forwarding state [ 43.140122][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 43.153587][ T3895] netlink: 96 bytes leftover after parsing attributes in process `syz.1.138'. [ 43.176445][ T3890] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 43.193492][ T3890] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.273235][ T29] kauditd_printk_skb: 610 callbacks suppressed [ 43.273254][ T29] audit: type=1400 audit(1755432850.690:1159): avc: denied { create } for pid=3902 comm="syz.1.141" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.301968][ T3890] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.335970][ T29] audit: type=1400 audit(1755432850.740:1160): avc: denied { create } for pid=3902 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.355978][ T29] audit: type=1400 audit(1755432850.740:1161): avc: denied { bind } for pid=3902 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.375835][ T29] audit: type=1400 audit(1755432850.740:1162): avc: denied { listen } for pid=3902 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.395781][ T29] audit: type=1400 audit(1755432850.750:1163): avc: denied { unlink } for pid=3302 comm="syz-executor" name="file0" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.421133][ T3890] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.518969][ T3890] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.565679][ T1460] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.592366][ T1460] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.668874][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.677320][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.848899][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 43.951695][ T3927] netlink: 96 bytes leftover after parsing attributes in process `syz.1.150'. [ 44.064408][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 44.085737][ T3936] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 44.105210][ T3936] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.178643][ T3936] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.238760][ T3936] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.298479][ T3936] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.806623][ T3953] netlink: 'syz.1.159': attribute type 39 has an invalid length. [ 44.836220][ T3955] loop2: detected capacity change from 0 to 512 [ 44.868498][ T3955] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.876688][ T3955] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.911505][ T3955] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.160: corrupted inode contents [ 44.924157][ T3955] EXT4-fs (loop2): Remounting filesystem read-only [ 44.924243][ T3955] EXT4-fs (loop2): 1 truncate cleaned up [ 44.924591][ T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.924623][ T51] Quota error (device loop2): write_blk: dquota write failed [ 44.924639][ T51] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 44.924655][ T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.924675][ T51] Quota error (device loop2): write_blk: dquota write failed [ 44.924691][ T51] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 44.924711][ T51] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 44.924764][ T51] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 44.939279][ T3955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.953260][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.030324][ T3963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'. [ 45.100581][ T3968] netlink: 96 bytes leftover after parsing attributes in process `syz.2.164'. [ 45.126942][ T3970] loop2: detected capacity change from 0 to 256 [ 45.134319][ T3970] FAT-fs (loop2): Directory bread(block 64) failed [ 45.134343][ T3970] FAT-fs (loop2): Directory bread(block 65) failed [ 45.134437][ T3970] FAT-fs (loop2): Directory bread(block 66) failed [ 45.134456][ T3970] FAT-fs (loop2): Directory bread(block 67) failed [ 45.134485][ T3970] FAT-fs (loop2): Directory bread(block 68) failed [ 45.134507][ T3970] FAT-fs (loop2): Directory bread(block 69) failed [ 45.134536][ T3970] FAT-fs (loop2): Directory bread(block 70) failed [ 45.134558][ T3970] FAT-fs (loop2): Directory bread(block 71) failed [ 45.134648][ T3970] FAT-fs (loop2): Directory bread(block 72) failed [ 45.134665][ T3970] FAT-fs (loop2): Directory bread(block 73) failed [ 45.162229][ T37] kworker/u8:2: attempt to access beyond end of device [ 45.162229][ T37] loop2: rw=1, sector=1224, nr_sectors = 8 limit=256 [ 45.187253][ T3972] netlink: 'syz.2.166': attribute type 10 has an invalid length. [ 46.322930][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.343969][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.363625][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.377151][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.421787][ T3983] loop7: detected capacity change from 0 to 7 [ 46.719424][ T3995] netlink: 'syz.4.173': attribute type 39 has an invalid length. [ 46.736403][ T3997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 46.815040][ T4001] loop0: detected capacity change from 0 to 128 [ 46.876991][ T4001] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.911184][ T4001] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.962437][ T4001] hub 9-0:1.0: USB hub found [ 46.979500][ T4001] hub 9-0:1.0: 8 ports detected [ 47.030926][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.138100][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.152934][ T3375] hid_parser_main: 8 callbacks suppressed [ 47.152955][ T3375] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 47.166318][ T3375] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 47.174030][ T3375] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 47.177352][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.211686][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.217625][ T3375] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 47.236210][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.619408][ T4039] loop3: detected capacity change from 0 to 128 [ 47.628463][ T4039] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.668050][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 47.695719][ T4047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 47.700773][ T4039] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.710132][ T4041] bridge0: port 3(veth1_to_batadv) entered blocking state [ 47.722319][ T4041] bridge0: port 3(veth1_to_batadv) entered disabled state [ 47.738250][ T4039] hub 9-0:1.0: USB hub found [ 47.744232][ T4039] hub 9-0:1.0: 8 ports detected [ 47.752160][ T4041] veth1_to_batadv: entered allmulticast mode [ 47.760135][ T4041] veth1_to_batadv: entered promiscuous mode [ 47.766386][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 47.776761][ T4041] bridge0: port 3(veth1_to_batadv) entered blocking state [ 47.784028][ T4041] bridge0: port 3(veth1_to_batadv) entered forwarding state [ 47.815678][ T4041] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 47.843934][ T4053] loop2: detected capacity change from 0 to 512 [ 47.861332][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.878882][ T4041] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.899516][ T4053] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.907867][ T4053] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.924684][ T4053] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.193: corrupted inode contents [ 47.928436][ T4059] loop7: detected capacity change from 0 to 7 [ 47.943579][ T4053] EXT4-fs (loop2): Remounting filesystem read-only [ 47.950623][ T4053] EXT4-fs (loop2): 1 truncate cleaned up [ 47.956460][ T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.967084][ T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.977860][ T51] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.988620][ T4053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.042333][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.065935][ T4041] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.139972][ T4041] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.175728][ T3375] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0 [ 48.183415][ T3375] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0 [ 48.191309][ T3375] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0 [ 48.199881][ T3375] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 48.210325][ T4041] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.269267][ T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.278912][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 48.278929][ T29] audit: type=1326 audit(1755432855.700:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 48.286492][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.317088][ T29] audit: type=1326 audit(1755432855.730:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 48.333952][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.340859][ T29] audit: type=1326 audit(1755432855.750:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 48.372788][ T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.381111][ T29] audit: type=1326 audit(1755432855.790:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 48.405297][ T29] audit: type=1326 audit(1755432855.830:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 48.439478][ T29] audit: type=1326 audit(1755432855.860:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 48.463476][ T29] audit: type=1326 audit(1755432855.890:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 48.490465][ T29] audit: type=1326 audit(1755432855.910:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 48.514658][ T29] audit: type=1326 audit(1755432855.940:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 48.543634][ T29] audit: type=1326 audit(1755432855.960:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 48.731026][ T4090] loop0: detected capacity change from 0 to 128 [ 48.759765][ T4090] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.830066][ T4094] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 48.871757][ T4098] loop1: detected capacity change from 0 to 512 [ 48.887435][ T4090] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.912774][ T4098] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 48.928513][ T4098] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.947575][ T4098] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.207: corrupted inode contents [ 48.974096][ T4098] EXT4-fs (loop1): Remounting filesystem read-only [ 48.986174][ T3409] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 48.993762][ T3409] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 49.001253][ T3409] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 49.016659][ T4098] EXT4-fs (loop1): 1 truncate cleaned up [ 49.022642][ T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.033309][ T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.045103][ T4090] hub 9-0:1.0: USB hub found [ 49.055199][ T4090] hub 9-0:1.0: 8 ports detected [ 49.062404][ T3409] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 49.077549][ T51] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 49.092644][ T4098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.109898][ T4098] tipc: Started in network mode [ 49.114912][ T4098] tipc: Node identity ac14140f, cluster identity 4711 [ 49.125950][ T4098] tipc: New replicast peer: 255.255.255.83 [ 49.132212][ T4098] tipc: Enabled bearer , priority 10 [ 49.143233][ T4108] bridge0: port 3(veth1_to_batadv) entered blocking state [ 49.150472][ T4108] bridge0: port 3(veth1_to_batadv) entered disabled state [ 49.160018][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.172644][ T4108] veth1_to_batadv: entered allmulticast mode [ 49.179544][ T4108] veth1_to_batadv: entered promiscuous mode [ 49.185796][ T4108] bridge0: port 3(veth1_to_batadv) entered blocking state [ 49.193087][ T4108] bridge0: port 3(veth1_to_batadv) entered forwarding state [ 49.193799][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.212306][ T4108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 49.287212][ T4108] hsr_slave_1 (unregistering): left promiscuous mode [ 49.309051][ T4120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 49.314420][ T4115] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 49.326744][ T4121] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.422683][ T4121] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.471627][ T4121] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.508566][ T4131] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 49.555465][ T4121] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.643265][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.665577][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.688956][ T3388] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 49.700237][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.702240][ T3388] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 49.718306][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.719535][ T4141] loop2: detected capacity change from 0 to 512 [ 49.738060][ T4141] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 49.746154][ T4141] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.754605][ T4141] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.222: corrupted inode contents [ 49.766882][ T4141] EXT4-fs (loop2): Remounting filesystem read-only [ 49.775239][ T4141] EXT4-fs (loop2): 1 truncate cleaned up [ 49.781202][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.791823][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.803017][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 49.814636][ T4141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.833811][ T4141] tipc: Enabling of bearer rejected, already enabled [ 49.854996][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.096535][ T4160] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 50.229790][ T4172] loop1: detected capacity change from 0 to 512 [ 50.247726][ T4044] tipc: Node number set to 2886997007 [ 50.260969][ T4169] bridge0: port 4(veth0_to_batadv) entered blocking state [ 50.264384][ T4172] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 50.268418][ T4169] bridge0: port 4(veth0_to_batadv) entered disabled state [ 50.278423][ T4172] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.302240][ T4172] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.234: corrupted inode contents [ 50.313216][ T4169] veth0_to_batadv: entered allmulticast mode [ 50.314527][ T4176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 50.329865][ T4169] veth0_to_batadv: entered promiscuous mode [ 50.343332][ T4172] EXT4-fs (loop1): Remounting filesystem read-only [ 50.353970][ T4172] EXT4-fs (loop1): 1 truncate cleaned up [ 50.362468][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.373693][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.415354][ T4169] bridge0: port 4(veth0_to_batadv) entered blocking state [ 50.422973][ T4169] bridge0: port 4(veth0_to_batadv) entered forwarding state [ 50.431653][ T4177] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 50.451048][ T4177] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.457279][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.477951][ T4172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.501558][ T4172] tipc: Enabling of bearer rejected, already enabled [ 50.540651][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.587951][ T4190] netlink: 'syz.1.240': attribute type 3 has an invalid length. [ 50.596807][ T4177] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.661093][ T4177] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.701226][ T3388] hid-generic 0003:0004:0000.0010: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 50.711970][ T4177] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.772347][ T4197] netlink: 76 bytes leftover after parsing attributes in process `syz.4.243'. [ 50.803590][ T56] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.824074][ T56] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.836553][ T4203] loop1: detected capacity change from 0 to 256 [ 50.840696][ T56] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.852395][ T4206] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 50.871820][ T4203] FAT-fs (loop1): Directory bread(block 64) failed [ 50.874406][ T56] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.891391][ T4203] FAT-fs (loop1): Directory bread(block 65) failed [ 50.898800][ T4203] FAT-fs (loop1): Directory bread(block 66) failed [ 50.905913][ T4203] FAT-fs (loop1): Directory bread(block 67) failed [ 50.914005][ T4203] FAT-fs (loop1): Directory bread(block 68) failed [ 50.921097][ T4203] FAT-fs (loop1): Directory bread(block 69) failed [ 50.929174][ T4203] FAT-fs (loop1): Directory bread(block 70) failed [ 50.951041][ T4203] FAT-fs (loop1): Directory bread(block 71) failed [ 50.957835][ T4203] FAT-fs (loop1): Directory bread(block 72) failed [ 50.964539][ T4203] FAT-fs (loop1): Directory bread(block 73) failed [ 51.003138][ T1460] kworker/u8:6: attempt to access beyond end of device [ 51.003138][ T1460] loop1: rw=1, sector=1224, nr_sectors = 8 limit=256 [ 51.043016][ T4216] loop1: detected capacity change from 0 to 512 [ 51.061727][ T4216] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 51.072939][ T1035] hid-generic 0003:0004:0000.0011: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 51.087406][ T4216] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.104195][ T4216] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.249: corrupted inode contents [ 51.117472][ T4216] EXT4-fs (loop1): Remounting filesystem read-only [ 51.124287][ T4216] EXT4-fs (loop1): 1 truncate cleaned up [ 51.130470][ T56] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.141226][ T56] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.153392][ T56] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 51.166064][ T4216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.196337][ T4216] tipc: Enabling of bearer rejected, already enabled [ 51.264749][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.288527][ T2956] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 51.320835][ T4238] loop0: detected capacity change from 0 to 256 [ 51.367650][ T4240] bridge0: port 4(veth0_to_batadv) entered blocking state [ 51.374949][ T4240] bridge0: port 4(veth0_to_batadv) entered disabled state [ 51.383419][ T4238] FAT-fs (loop0): Directory bread(block 64) failed [ 51.390344][ T4238] FAT-fs (loop0): Directory bread(block 65) failed [ 51.394347][ T4240] veth0_to_batadv: entered allmulticast mode [ 51.401348][ T4238] FAT-fs (loop0): Directory bread(block 66) failed [ 51.426634][ T4238] FAT-fs (loop0): Directory bread(block 67) failed [ 51.428188][ T4240] veth0_to_batadv: entered promiscuous mode [ 51.439572][ T4238] FAT-fs (loop0): Directory bread(block 68) failed [ 51.447610][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 51.462213][ T4238] FAT-fs (loop0): Directory bread(block 69) failed [ 51.467158][ T4240] bridge0: port 4(veth0_to_batadv) entered blocking state [ 51.475907][ T4240] bridge0: port 4(veth0_to_batadv) entered forwarding state [ 51.481319][ T4238] FAT-fs (loop0): Directory bread(block 70) failed [ 51.490075][ T4242] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 51.501038][ T4238] FAT-fs (loop0): Directory bread(block 71) failed [ 51.521774][ T4240] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 51.562783][ T4240] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.577221][ T4238] FAT-fs (loop0): Directory bread(block 72) failed [ 51.584053][ T4238] FAT-fs (loop0): Directory bread(block 73) failed [ 51.612675][ T4240] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.632595][ T4268] loop4: detected capacity change from 0 to 512 [ 51.677930][ T4268] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.688906][ T4268] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.696443][ T4240] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.701774][ T4268] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.268: corrupted inode contents [ 51.731623][ T4268] EXT4-fs (loop4): Remounting filesystem read-only [ 51.738431][ T4268] EXT4-fs (loop4): 1 truncate cleaned up [ 51.744630][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.755431][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.767829][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 51.779764][ T4268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.799098][ T4268] tipc: Started in network mode [ 51.804041][ T4268] tipc: Node identity ac14140f, cluster identity 4711 [ 51.811061][ T4268] tipc: New replicast peer: 255.255.255.83 [ 51.816950][ T4268] tipc: Enabled bearer , priority 10 [ 51.829793][ T4240] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.846413][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.899532][ T4288] bridge0: port 5(veth1_to_bridge) entered blocking state [ 51.906743][ T4288] bridge0: port 5(veth1_to_bridge) entered disabled state [ 51.923224][ T4288] veth1_to_bridge: entered allmulticast mode [ 51.930687][ T4288] veth1_to_bridge: entered promiscuous mode [ 51.932717][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 51.936797][ T4288] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 51.958492][ T4288] bridge0: port 5(veth1_to_bridge) entered blocking state [ 51.965757][ T4288] bridge0: port 5(veth1_to_bridge) entered forwarding state [ 51.973519][ T4290] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 51.993021][ T4296] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 52.024644][ T4288] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.063494][ T4304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 52.090463][ T4288] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.149034][ T4288] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.189052][ T4288] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.244166][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.266064][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.277954][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.297339][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.329445][ T4314] loop7: detected capacity change from 0 to 7 [ 52.331965][ T4316] loop3: detected capacity change from 0 to 512 [ 52.348682][ T4316] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 52.356832][ T4316] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.365303][ T4316] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.284: corrupted inode contents [ 52.378591][ T4316] EXT4-fs (loop3): Remounting filesystem read-only [ 52.385262][ T4316] EXT4-fs (loop3): 1 truncate cleaned up [ 52.391404][ T2767] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.402048][ T2767] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.402862][ T2767] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 52.403592][ T4316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.418141][ T4316] tipc: Started in network mode [ 52.418169][ T4316] tipc: Node identity ac14140f, cluster identity 4711 [ 52.418257][ T4316] tipc: New replicast peer: 255.255.255.83 [ 52.418312][ T4316] tipc: Enabled bearer , priority 10 [ 52.431579][ T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.435103][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.440420][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.466070][ T2767] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.537589][ T2767] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.646424][ T3375] hid_parser_main: 11 callbacks suppressed [ 52.646447][ T3375] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 52.660012][ T3375] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 52.667548][ T3375] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 52.694457][ T3375] hid-generic 0003:0004:0000.0013: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 52.743396][ T4335] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 52.752295][ T4340] netlink: 'syz.4.290': attribute type 39 has an invalid length. [ 52.874903][ T4352] bridge0: port 6(veth0_to_batadv) entered blocking state [ 52.882350][ T4352] bridge0: port 6(veth0_to_batadv) entered disabled state [ 52.884374][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 52.889956][ T4352] veth0_to_batadv: entered allmulticast mode [ 52.905051][ T4360] loop2: detected capacity change from 0 to 512 [ 52.906872][ T4352] veth0_to_batadv: entered promiscuous mode [ 52.917777][ T4352] bridge0: port 6(veth0_to_batadv) entered blocking state [ 52.925000][ T4352] bridge0: port 6(veth0_to_batadv) entered forwarding state [ 52.926162][ T4361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 52.941383][ T36] tipc: Node number set to 2886997007 [ 52.967919][ T4366] !: renamed from dummy0 (while UP) [ 52.973744][ T4360] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 52.987344][ T4360] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.994889][ T4352] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.008564][ T4360] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.298: corrupted inode contents [ 53.021059][ T4360] EXT4-fs (loop2): Remounting filesystem read-only [ 53.028398][ T4360] EXT4-fs (loop2): 1 truncate cleaned up [ 53.029355][ T4352] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.034650][ T56] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.054567][ T56] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.065229][ T56] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 53.076104][ T4360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.120884][ T2956] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 53.128487][ T2956] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 53.136028][ T2956] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 53.146563][ T2956] hid-generic 0003:0004:0000.0014: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 53.171948][ T4352] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.184594][ T4358] syz.2.298 (4358) used greatest stack depth: 10952 bytes left [ 53.194174][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.244341][ T4352] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.539782][ T36] tipc: Node number set to 2886997007 [ 53.638321][ T4397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 53.648930][ T4396] netlink: 'syz.4.311': attribute type 39 has an invalid length. [ 53.780018][ T4406] loop3: detected capacity change from 0 to 512 [ 53.822480][ T29] kauditd_printk_skb: 906 callbacks suppressed [ 53.822549][ T29] audit: type=1326 audit(1755432861.240:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824157ebe9 code=0x7ffc0000 [ 53.861008][ T2956] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 53.868530][ T2956] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 53.875952][ T2956] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 53.883974][ T29] audit: type=1326 audit(1755432861.270:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f824157ebe9 code=0x7ffc0000 [ 53.907571][ T29] audit: type=1326 audit(1755432861.270:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824157ebe9 code=0x7ffc0000 [ 53.931217][ T29] audit: type=1326 audit(1755432861.270:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f824157ebe9 code=0x7ffc0000 [ 53.955136][ T29] audit: type=1326 audit(1755432861.270:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824157ebe9 code=0x7ffc0000 [ 53.978674][ T29] audit: type=1326 audit(1755432861.270:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f824157ebe9 code=0x7ffc0000 [ 54.002272][ T29] audit: type=1326 audit(1755432861.270:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824157ebe9 code=0x7ffc0000 [ 54.025701][ T29] audit: type=1326 audit(1755432861.270:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f824157ebe9 code=0x7ffc0000 [ 54.049064][ T29] audit: type=1326 audit(1755432861.270:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824157ebe9 code=0x7ffc0000 [ 54.072472][ T29] audit: type=1326 audit(1755432861.270:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f824157ebe9 code=0x7ffc0000 [ 54.097393][ T2956] hid-generic 0003:0004:0000.0015: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 54.120386][ T4406] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 54.128613][ T4406] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.136682][ T4406] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.313: corrupted inode contents [ 54.149996][ T4406] EXT4-fs (loop3): Remounting filesystem read-only [ 54.156793][ T4406] EXT4-fs (loop3): 1 truncate cleaned up [ 54.162671][ T56] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.173289][ T56] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.234472][ T56] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 54.467639][ T4406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.047232][ T4417] tbf_change: 2 callbacks suppressed [ 55.047249][ T4417] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 55.868485][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.939468][ T56] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.972934][ T1460] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.457844][ T1460] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.466184][ T1460] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.958872][ T4439] netlink: 'syz.1.322': attribute type 39 has an invalid length. [ 58.378127][ T4446] netlink: 'syz.0.324': attribute type 39 has an invalid length. [ 59.229170][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 59.229190][ T29] audit: type=1326 audit(1755432866.570:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebd61ebe9 code=0x7ffc0000 [ 59.260045][ T29] audit: type=1326 audit(1755432866.590:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdebd61ebe9 code=0x7ffc0000 [ 59.447751][ T29] audit: type=1326 audit(1755432866.760:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebd61ebe9 code=0x7ffc0000 [ 59.472517][ T29] audit: type=1326 audit(1755432866.780:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebd61ebe9 code=0x7ffc0000 [ 59.740775][ T29] audit: type=1326 audit(1755432867.080:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebd61ebe9 code=0x7ffc0000 [ 60.279287][ T29] audit: type=1326 audit(1755432867.210:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdebd61ebe9 code=0x7ffc0000 [ 60.307397][ T29] audit: type=1326 audit(1755432867.210:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebd61ebe9 code=0x7ffc0000 [ 60.331979][ T29] audit: type=1326 audit(1755432867.210:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebd61ebe9 code=0x7ffc0000 [ 60.356640][ T29] audit: type=1326 audit(1755432867.230:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdebd61ebe9 code=0x7ffc0000 [ 60.381078][ T29] audit: type=1326 audit(1755432867.230:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebd61ebe9 code=0x7ffc0000 [ 61.159802][ T4044] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 61.168385][ T4044] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 61.175903][ T4044] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 61.367241][ T4044] hid-generic 0003:0004:0000.0016: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 62.488646][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.501620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.515010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.528397][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.541999][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.555377][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.568793][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.582548][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.595923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.609461][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 67.498302][ C0] net_ratelimit: 7095 callbacks suppressed [ 67.498324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 67.516537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.528860][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.541646][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 67.555203][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 67.567455][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.579829][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.592561][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 67.605843][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 67.618055][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 69.087712][ T4462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 70.008441][ T4469] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 72.507669][ C0] net_ratelimit: 7445 callbacks suppressed [ 72.507690][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 72.526807][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 72.539004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.551286][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.564077][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 72.577441][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 72.589718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.602094][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.615005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 72.628647][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 74.067826][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 74.067851][ T29] audit: type=1400 audit(1755432881.260:2522): avc: denied { mounton } for pid=4473 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.517180][ C0] net_ratelimit: 7196 callbacks suppressed [ 77.517202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.535371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.548342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.561905][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 77.574183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.586449][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.599339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.612737][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 77.612975][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.613307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.527177][ C0] net_ratelimit: 7608 callbacks suppressed [ 82.527197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.546441][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 82.558659][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.571216][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.584526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.597921][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 82.610183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.622730][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.635884][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.649635][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 84.147174][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 85.837276][ T4517] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 87.537962][ C0] net_ratelimit: 7383 callbacks suppressed [ 87.537984][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 87.556147][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.568374][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.581524][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 87.595343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 87.607824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.620076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.633020][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 87.646516][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 87.658824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.678942][ T29] audit: type=1326 audit(1755432894.900:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 87.704898][ T29] audit: type=1326 audit(1755432894.900:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 87.730899][ T29] audit: type=1326 audit(1755432894.900:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 88.270056][ T29] audit: type=1326 audit(1755432895.350:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 88.296172][ T29] audit: type=1326 audit(1755432895.350:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 88.322277][ T29] audit: type=1326 audit(1755432895.510:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 88.754077][ T29] audit: type=1326 audit(1755432895.810:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 88.779883][ T29] audit: type=1326 audit(1755432895.810:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 88.798406][ T4044] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 88.805739][ T29] audit: type=1326 audit(1755432896.010:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 88.813125][ T4044] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 88.813221][ T4044] hid-generic 0003:0004:0000.0017: unknown main item tag 0x0 [ 88.859833][ T29] audit: type=1326 audit(1755432896.010:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 88.978992][ T4044] hid-generic 0003:0004:0000.0017: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 89.890439][ T4541] loop2: detected capacity change from 0 to 256 [ 90.151654][ T4473] chnl_net:caif_netlink_parms(): no params data found [ 91.088470][ T4541] FAT-fs (loop2): Directory bread(block 64) failed [ 91.147712][ T4541] FAT-fs (loop2): Directory bread(block 65) failed [ 91.187110][ T4541] FAT-fs (loop2): Directory bread(block 66) failed [ 91.487793][ T4541] FAT-fs (loop2): Directory bread(block 67) failed [ 91.494457][ T4541] FAT-fs (loop2): Directory bread(block 68) failed [ 91.678201][ T4541] FAT-fs (loop2): Directory bread(block 69) failed [ 91.751889][ T4541] FAT-fs (loop2): Directory bread(block 70) failed [ 91.797682][ T4541] FAT-fs (loop2): Directory bread(block 71) failed [ 91.804306][ T4541] FAT-fs (loop2): Directory bread(block 72) failed [ 91.901196][ T4541] FAT-fs (loop2): Directory bread(block 73) failed [ 92.547908][ C0] net_ratelimit: 6858 callbacks suppressed [ 92.547930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 92.566571][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.578975][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.592329][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 92.605660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 92.617957][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.630286][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.643452][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 92.657144][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 92.669465][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.735878][ T4541] syz.2.341: attempt to access beyond end of device [ 92.735878][ T4541] loop2: rw=2051, sector=1256, nr_sectors = 64 limit=256 [ 92.877184][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 92.877245][ T29] audit: type=1326 audit(1755432900.290:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 92.909119][ T29] audit: type=1326 audit(1755432900.290:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 92.933861][ T29] audit: type=1326 audit(1755432900.290:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 92.958518][ T29] audit: type=1326 audit(1755432900.290:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 92.983188][ T29] audit: type=1326 audit(1755432900.290:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 93.007657][ T29] audit: type=1326 audit(1755432900.290:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 93.357190][ T29] audit: type=1326 audit(1755432900.470:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 93.382071][ T29] audit: type=1326 audit(1755432900.470:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 93.407325][ T29] audit: type=1326 audit(1755432900.470:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 93.431852][ T29] audit: type=1326 audit(1755432900.470:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 95.227759][ T56] kworker/u8:4: attempt to access beyond end of device [ 95.227759][ T56] loop2: rw=1, sector=1224, nr_sectors = 8 limit=256 [ 96.678785][ T4499] chnl_net:caif_netlink_parms(): no params data found [ 97.557798][ C0] net_ratelimit: 6826 callbacks suppressed [ 97.557817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.576133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.588543][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 97.600765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 97.613351][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 97.625759][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.638044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.651995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 97.665706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.678117][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.117946][ T4554] netlink: 96 bytes leftover after parsing attributes in process `syz.2.343'. [ 102.567563][ C0] net_ratelimit: 7893 callbacks suppressed [ 102.567583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.587122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.599481][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.611801][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 102.624326][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.636923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 102.649333][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.661692][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.675728][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.689304][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.025072][ T4559] loop2: detected capacity change from 0 to 512 [ 106.508988][ T4559] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 107.577772][ C0] net_ratelimit: 8022 callbacks suppressed [ 107.577793][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.597325][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.609640][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.621890][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 107.634188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.646747][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 107.658916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.671176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.685185][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.698693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.019921][ T4573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 112.587407][ C0] net_ratelimit: 7878 callbacks suppressed [ 112.587428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.606789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.619121][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.631470][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 112.643751][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.656363][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 112.668937][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.681275][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.695162][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.708876][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.367669][ T4485] chnl_net:caif_netlink_parms(): no params data found [ 117.597175][ C0] net_ratelimit: 7914 callbacks suppressed [ 117.597195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.615582][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 117.627903][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.640221][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.654202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.667696][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.680309][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.692678][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 117.704974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.717560][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 119.571649][ T4574] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 120.377591][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 120.377612][ T29] audit: type=1326 audit(1755432927.770:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 120.410093][ T29] audit: type=1326 audit(1755432927.770:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 120.436413][ T29] audit: type=1326 audit(1755432927.770:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 120.890020][ T29] audit: type=1326 audit(1755432927.950:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 120.916287][ T29] audit: type=1326 audit(1755432927.950:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 120.942867][ T29] audit: type=1326 audit(1755432927.950:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 120.969236][ T29] audit: type=1326 audit(1755432927.950:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 120.995485][ T29] audit: type=1326 audit(1755432927.950:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 121.021907][ T29] audit: type=1326 audit(1755432927.950:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 121.048180][ T29] audit: type=1326 audit(1755432927.950:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2e6bebe9 code=0x7ffc0000 [ 122.608554][ C0] net_ratelimit: 7435 callbacks suppressed [ 122.608593][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.626885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.639428][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 122.651684][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.664422][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 122.676638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.689075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.703195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.716850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.729127][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.047770][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.057081][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.118210][ T4473] bridge_slave_0: entered allmulticast mode [ 123.278931][ T4473] bridge_slave_0: entered promiscuous mode [ 124.348873][ T4589] netlink: 'syz.2.349': attribute type 39 has an invalid length. [ 127.617730][ C0] net_ratelimit: 7918 callbacks suppressed [ 127.617746][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.635845][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.648201][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 127.660425][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.673019][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 127.685283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.697830][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.711596][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.725012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.737321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.627238][ C0] net_ratelimit: 7898 callbacks suppressed [ 132.627259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 132.645417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.657619][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.671459][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.685007][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.697325][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.709617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 132.721891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.734464][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 132.746854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.367426][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.376724][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.488569][ T4473] bridge_slave_1: entered allmulticast mode [ 133.637393][ T4473] bridge_slave_1: entered promiscuous mode [ 137.637161][ C0] net_ratelimit: 8001 callbacks suppressed [ 137.637181][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 137.656595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.668942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.681200][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 137.693621][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 137.706289][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 137.718605][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.730821][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.744757][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 137.758530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.648233][ C0] net_ratelimit: 8062 callbacks suppressed [ 142.648250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 142.667626][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.679977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.692372][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 142.704817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 142.717470][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 142.729658][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.741878][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.755820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 142.769376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.419954][ T4485] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 145.437791][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.457104][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.796119][ T4499] bridge_slave_0: entered allmulticast mode [ 145.878409][ T4499] bridge_slave_0: entered promiscuous mode [ 147.657645][ C0] net_ratelimit: 7878 callbacks suppressed [ 147.657666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.677527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.689802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.702406][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 147.714739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.727318][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 147.739520][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.751898][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.765855][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.779389][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.668355][ C0] net_ratelimit: 7911 callbacks suppressed [ 152.668374][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.686614][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.698986][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 152.711226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.723946][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 152.736284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.748636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.762509][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.776052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.788372][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.677614][ C0] net_ratelimit: 7981 callbacks suppressed [ 157.677634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.697446][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.709691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.721927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 157.734136][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.746618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 157.758907][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.771146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.784956][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.798472][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.688018][ C0] net_ratelimit: 8027 callbacks suppressed [ 162.688036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.706217][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.718546][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 162.730782][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.743262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 162.755475][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.767700][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.780141][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 162.794718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.808124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.698572][ C0] net_ratelimit: 7162 callbacks suppressed [ 167.698591][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.717932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.730135][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.742425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 167.754651][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.767343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 167.779731][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.791993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.804197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.816588][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.708841][ C0] net_ratelimit: 8078 callbacks suppressed [ 172.708880][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.728750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.741009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.753885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 172.766116][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.778801][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 172.791093][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.803273][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.815458][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.827705][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.717708][ C0] net_ratelimit: 8127 callbacks suppressed [ 177.717726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.735770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.748115][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 177.760313][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.772821][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 177.785118][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.797381][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.809715][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.822171][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.834873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.718297][ T4485] syz-executor (4485) used greatest stack depth: 10776 bytes left [ 181.591962][ T12] bridge_slave_0: left allmulticast mode [ 181.602848][ T12] bridge_slave_0: left promiscuous mode [ 181.617169][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.727869][ C0] net_ratelimit: 8090 callbacks suppressed [ 182.727896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.746029][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.758268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 182.770474][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.783042][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 182.795263][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.807486][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.819646][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.831883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.845365][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.738579][ C0] net_ratelimit: 8101 callbacks suppressed [ 187.738596][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.758226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.770575][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.782858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 187.795193][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.807939][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 187.820256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.832555][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.845054][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.857401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.747902][ C0] net_ratelimit: 8163 callbacks suppressed [ 192.747936][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.766193][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.778475][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 192.790691][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.803299][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 192.815513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.827718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.839861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.852117][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.864895][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.757204][ C0] net_ratelimit: 7957 callbacks suppressed [ 197.757221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.776554][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.788927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.801304][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 197.813534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.826117][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 197.838537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.850733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.862944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.875335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.768368][ C0] net_ratelimit: 8138 callbacks suppressed [ 202.768386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.787883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.800258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.812517][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 202.824800][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.837409][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 202.849669][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.862109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.874557][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.886815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.048191][ T12] bond0 (unregistering): Released all slaves [ 207.776990][ C0] net_ratelimit: 8131 callbacks suppressed [ 207.777010][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 207.795301][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.807526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.819842][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.832069][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.844883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.857290][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 207.871928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.885437][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.897884][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.787081][ C0] net_ratelimit: 8143 callbacks suppressed [ 212.787102][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.805396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 212.820016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.833554][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.845753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.858258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 212.870580][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.883076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 212.895407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.907575][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.797054][ C0] net_ratelimit: 8148 callbacks suppressed [ 217.797076][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.815248][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.828287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.840595][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 217.855282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.868939][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.881336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.893654][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 217.905864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.918393][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 222.806983][ C0] net_ratelimit: 8237 callbacks suppressed [ 222.807004][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 222.827786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.841174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.853400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.865707][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 222.877929][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.890631][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 222.902871][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.915026][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.927212][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.817437][ C0] net_ratelimit: 8164 callbacks suppressed [ 227.817458][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.835540][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.847838][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 227.860139][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.872693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 227.884944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.897407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.909809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.922359][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.935510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.827308][ C0] net_ratelimit: 8142 callbacks suppressed [ 232.827327][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 232.845612][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.857891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.870057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.882603][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.895601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.908088][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 232.922988][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.936520][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.948839][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.837258][ C0] net_ratelimit: 8122 callbacks suppressed [ 237.837277][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.855408][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.867778][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 237.880102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.892634][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 237.904825][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.917085][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.929283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.941521][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.954358][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.848228][ C0] net_ratelimit: 8161 callbacks suppressed [ 242.848248][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.867717][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.880153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.892435][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 242.904686][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.917258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 242.929495][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.941701][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.953888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.966118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.490123][ T3305] syz-executor (3305) used greatest stack depth: 10592 bytes left [ 247.857216][ C0] net_ratelimit: 8236 callbacks suppressed [ 247.857235][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.875597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 247.888257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.901103][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 247.913600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.925774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.937953][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.950192][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.962981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.975409][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 252.867434][ C0] net_ratelimit: 8269 callbacks suppressed [ 252.867466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.885756][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.898103][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 252.910288][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.922775][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 252.935047][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.947210][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.959391][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.971661][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.984381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.877106][ C0] net_ratelimit: 8141 callbacks suppressed [ 257.877132][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.895738][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 257.907980][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.920246][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.932470][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.944822][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.957725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.970163][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 257.984838][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.998652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.807071][ C0] ================================================================== [ 259.815416][ C0] BUG: KCSAN: data-race in br_fdb_update / br_fdb_update [ 259.822565][ C0] [ 259.824933][ C0] read to 0xffff888118ca0ac0 of 8 bytes by interrupt on cpu 1: [ 259.832497][ C0] br_fdb_update+0x106/0x460 [ 259.837129][ C0] br_handle_frame_finish+0x31a/0xf50 [ 259.842547][ C0] br_handle_frame+0x5d1/0x9e0 [ 259.847349][ C0] __netif_receive_skb_core+0xad3/0x23b0 [ 259.853111][ C0] __netif_receive_skb+0x59/0x270 [ 259.858169][ C0] process_backlog+0x229/0x420 [ 259.863236][ C0] __napi_poll+0x66/0x310 [ 259.867630][ C0] net_rx_action+0x391/0x830 [ 259.872272][ C0] handle_softirqs+0xba/0x290 [ 259.876977][ C0] do_softirq+0x5d/0x90 [ 259.881162][ C0] __local_bh_enable_ip+0x70/0x80 [ 259.886311][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 259.891496][ C0] wg_packet_encrypt_worker+0xb44/0xb80 [ 259.897168][ C0] process_scheduled_works+0x4cb/0x9d0 [ 259.900061][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 259.900077][ T29] audit: type=1400 audit(1755433067.320:2595): avc: denied { write } for pid=3287 comm="syz-executor" path="pipe:[2384]" dev="pipefs" ino=2384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 259.902662][ C0] worker_thread+0x582/0x770 [ 259.937028][ C0] kthread+0x489/0x510 [ 259.941382][ C0] ret_from_fork+0xda/0x150 [ 259.945914][ C0] ret_from_fork_asm+0x1a/0x30 [ 259.950708][ C0] [ 259.953063][ C0] write to 0xffff888118ca0ac0 of 8 bytes by interrupt on cpu 0: [ 259.960705][ C0] br_fdb_update+0x13e/0x460 [ 259.965331][ C0] br_handle_frame_finish+0x31a/0xf50 [ 259.970722][ C0] br_handle_frame+0x5d1/0x9e0 [ 259.975520][ C0] __netif_receive_skb_core+0xad3/0x23b0 [ 259.981278][ C0] __netif_receive_skb+0x59/0x270 [ 259.986418][ C0] process_backlog+0x229/0x420 [ 259.991299][ C0] __napi_poll+0x66/0x310 [ 259.995804][ C0] net_rx_action+0x391/0x830 [ 260.000429][ C0] handle_softirqs+0xba/0x290 [ 260.005220][ C0] do_softirq+0x5d/0x90 [ 260.009480][ C0] __local_bh_enable_ip+0x70/0x80 [ 260.014537][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 260.019510][ C0] batadv_tt_purge+0x2cd/0x610 [ 260.024284][ C0] process_scheduled_works+0x4cb/0x9d0 [ 260.029766][ C0] worker_thread+0x582/0x770 [ 260.034428][ C0] kthread+0x489/0x510 [ 260.038512][ C0] ret_from_fork+0xda/0x150 [ 260.043032][ C0] ret_from_fork_asm+0x1a/0x30 [ 260.047829][ C0] [ 260.050211][ C0] value changed: 0x00000000fffff013 -> 0x00000000fffff014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 260.057330][ C0] [ 260.059677][ C0] Reported by Kernel Concurrency Sanitizer on: [ 260.066086][ C0] CPU: 0 UID: 0 PID: 1460 Comm: kworker/u8:6 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 260.078950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.089149][ C0] Workqueue: bat_events batadv_tt_purge [ 260.094922][ C0] ================================================================== [ 262.887307][ C0] net_ratelimit: 7688 callbacks suppressed [ 262.887328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.905964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 262.920650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.934241][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.946443][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.958891][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 262.971254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.983867][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 262.996172][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.008369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.898579][ C0] net_ratelimit: 8176 callbacks suppressed [ 267.898599][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.917982][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.930229][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.942561][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 267.954748][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.967321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:bb:f1:d5:bb:a7, vlan:0) [ 267.979866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.992096][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 268.004308][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.016702][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)