last executing test programs: 10m31.077913689s ago: executing program 32 (id=450): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000034, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x3, 0x2, 0xffffffff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x44, 0x3, 0x2, "6040a3b794fd2e0000000b010000000000000000000800", 0x59555956}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r6, 0x40a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) getpid() syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) 6m46.708345387s ago: executing program 33 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x400000000008d}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000100)=0x4) r4 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x80000000, 0x0) ptrace(0x4207, r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180), 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x6}]}) socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f00000001c0)=0x2) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x8000800) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4ea4, @remote}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) 5m55.94776565s ago: executing program 1 (id=1154): setns(0xc9, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002"], 0x54}}, 0x200040c4) 5m55.847466512s ago: executing program 1 (id=1155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[]) 5m55.738242336s ago: executing program 1 (id=1157): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006840)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xc, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x874) 5m54.74288955s ago: executing program 1 (id=1161): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) 5m53.720787705s ago: executing program 1 (id=1168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendto$inet(r0, &(0x7f0000000300)="bc897f304c", 0x5, 0x810, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000012, 0x0) 5m51.336097764s ago: executing program 1 (id=1172): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffffffffff4) syz_fuse_handle_req(r4, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004300)="c1b0ad27d26172a2282808a63b3666a169a53df2d890fb5a415426c6ff9bb87f8efb6ea14cfe80e636e7de7e2b18b78f80a1e4c84f02ecfed07902492c1d761451483d0b9c75d1bce9e4a0d1f8a9bb1a22b951653bbce82561c6ac0fc2eaeb3fcd942b78b746455913dbea328ce1088f52d7cb35aefac657784f2cdd576c15bb8db65205430d6a1cd094d749955b73eacfddece7cb849c1554eebb88d05d597b840ebac50de06d2efcc88cb3bbdaf6388332964078936c035bd3e3f56e545ba683f4523df2d6034d5086890db8e3922638a6196fe0a1a026ef632f8c6c6ac3e66228e9c15abaa010f956968240f31f97ef8da03d671ad3d48e135c880c8e096e0f39cdaf38d0203a20362c985b38cefac182d22fb4b709c8c1b5dea4eb5e6dde7af7793b120ba2eadcb892c53de7ce0ab712ef33721121fcf841fa1d35f7a2e9ff1b054adf64e6e2261e015c9a0dd0b8d8fd363ae1bd8ffc28d41b681ece5c4568cf6adf2815b618e8308dbd1c2e664c178a4504e0a362291ac5dfa1115709d42fe8bfc92f109d60c12d43fc204a8f3458b199adab770d51eacae9eeaa4cd1569f05dde2f71e2819dc64c2c62441e4cf281acc54f88741ed1329343e0dbfb356ab7fd3732a93b2a15fac46ef120745cd49b7e65421595fd81fabaee29a28bab508c95fa74d8884c4edd6bdea3c71e8d230c8e666aeaadf6f4c67846ad43a3f458123508c77df0b13c25b3414220600e35dd2d44bbd78d7902f767dfcfb6001674106a6a952f3a47e78758893cae3bfff8d053842642c3f9eb512e12ef09313b2a823e1c31dd45b236824b057992101016204d48e1d3f7f42503b20f549371f92688624089b5460b724307b569f8570c5eba6c243702370f76c0ef78d59d5aef447852c9102618a9811f8440abac9e78a7613b00ecc1b0f6dd9c477701a975fe07c95bc35237d33f7368b9be2986566f310f16a189fe0438ae0887384b10f80b2635493839b3de154c8fe5bc020164e062d77b4826df0eb2af18c8a9e5b28c3d2849bbd29628c76306cf7f4433e0d128a93f5b12a2bea9ed9b3a85e8e4896ec6ce0ea8ef4471cd9db37d91b3f45cb72c2781864c820e4e267e6a650a3687eac83d7b010c621c1c52717b98335df8e87390e5a76874bf31993e1a801f4fe8dc9222877c693fc043d38f54b9422210f2a023f496149def0a9e936c4adbce6a290113b2fb40c5e3e79a0797cd37c2e1731e0143bb5d8bfa51c226d02d567b50c63ebbc64e1d44e120e4cb0fed4347528df660736b99ea3235e83da0c167a015cb3e7a57c5e9072b2fd358cdb20127deb4f37deb2d09ef2b2795ccb52f3bab0f5abcfc37bd0932e55f92cba6e468fb3175b983ca8597327fe67fc1aa89f6d1829ea7eeeec41e3920a51ac583489abe8eb5c1c841d4969a06fde61fa56e59f8f0f64b19071d8a84853047a3d766e82cf2c651586ac3f877c8909ed056b1828fff9211e414b8b8f5cd38542132d9562abae4bf63bbd0532208199e4d2c59b1e5d9a438f026d01c40fd0b8076a9e933e65e65ff9ea0fde753edc738aa079b6695c6055ac2690d6d928e9046c446bd9d0c3e685eee30f7a718436cfa917f678cfdc2f7f72e7bbe508cc64239597f5969f4a750cf1f0f5a646018eb1c35f912cc4c888da888ae8fad773fe47c6a78a63af9b035e15eb790a7ccff2f44d70acd069499d7db8bd02bb6bf252699d8d46a8923f21ba967585be41b79e4d653ab2fba065610ca31e683a5cd5b29678f45eb2593700b361919efb0dffa1782b70d0a4a34247cbd9b240536ce6d46615ec96387e05f60375a2fb8977898cdee503b1fa20924fdec96a1930dac55dddd2eb612c383e4eff4e95f6cdf88047fe76ce9dcbf18a6f81d091f8e767be97b105dbc709d92c6f25d785b4972cafaea96bafc82cdbd4525340e37903259117b8ab63bbb9fb34cf23cdc48b59f7bd0b50ea12950e424e706a5d9ef4d69b334a5de6629b2b585d64688dcd5d4230fbe6f8043e99e9942d13973568b789a34a3ec7a70ff4b34ed4f28a1ad2eb31d8c81ce77d8b554749522c149944a08669ba48926dca4429fe817a7d91f373db7a100f74d6a062ad5e9ea20c77fb575a0c54c5eafd640ee770c844c813d9d807dd80333571840bd8b4b6eae859ddef2f6dbffcd7040691e2228f927faa8c82de451e60303267df50e973b0c6c7f0738eb8cc82b899534a41ae37ede81b72c38d57d82c59f87a8acf456229cced3bd6da6003d1f456ab5849b4dce78b05eddb6188d69cf8ac5bc16799e99021b5485d5ce080b328e7e11e4bfc083a68d9ec22007fae9b04bd167ce4b8f455ed6419501ab6ca434d6418a8f8baf09a66a51ba426f61ccc2f30acfeb988f3a1f36bface215200b3ed62a3d2d74f7b8c0c8244472cc77fbec96721c55d10ae299fb1aba8c45ac1cc882ce964250b30d81bf8a8be110b9f8af1aa644313052e00ed644dd87ca7df34a50ccc3602f7d3ab93fd6ca19d5b9a06894a8f91d3aff8a3cd52fcd3af7adcc7f9ddfce8bb74b714ffd4d2e76cfe60b44a47b1d7fb2bbf0c4a3dac47edd09888fdbe781071900a2e473b4daeb545561ae8f34b4eeaa60f44900684ac1f620a6fa54e562de40645158a5d8c36e3d9027bfc65274ffc8bfca8c03d464047485c3db1e54294406d90ed05c3b0d2d4e66d5e992b99dc3ede4be703d2f31dfdc5dc8c6ef01f43b42306f4a4825be7499afdc8ba1c02e3998329726af89e030be58ecdd20bf8b5d7e5f81878791f92fbd000aa1f9c2bd0aeaba2cecdeffb476dbedf37692d23dac191dfd2f7633d04a0826512b79bc1f8a6737b9b36baec7f5a4555fc7054458f9c7169968ebac29009778dd739e3a5b6cb2f0a6ae0fcb4f545e89a61ad993e42dfa7a283bd9f3d2eac7797c345843244320da0ccad437458512747f321158cdad67ca63d9e3eb187c2fee00d5f9e20266e103317a54293a7ba090b40174d0232bfb2ebd8576adf8c8a9f963fe12a592fe19af02d6f684dbba4a2d6d98003f60a728b1e7b524cbf248666a88d6f19c4937db31e56b4f5373f8aa16926f7ec75da8a76cc340376958175d6f23585e97bee88164cd2e2df5835474c6cf21f65754b98766ab47857d3008be18186792ecc604fc17519cec1d67c727c84299201ba77ccb7e60aa7b912fcc61b5ae4f580a90892b6e7cc3610b357ba6ac5b377cf43bab2970ee240525e12767611842d1d52fe188f125d018889e3e2092b7a39ddb57c0546bb17ec2443e1bdc5a763c9ce5f9b528ed14134694802886d4420f02ee9574f62e6bcc456028663f0b1399d86599fe0047d93a2eb162d2fa13385192bd4221e41bcc61511e43103550f958ba6dfd5e1b855b82a543e8e0766678f1cdd1214a399aeef014150baba0556212132dbf135319868b9ff93adf51eefa64be829362388e2659101a3ec85e0bb5119423b60819aba5c3b8823b5e37f469783db165ff4cd2cd7306f163c0e4ac8695747b571d7941e2bf1be981a48e71f336bbcc20ccddfae7bdc7f94ab62dfda1d552bdef955189eeadc9bd710c2a3a8c9d414c45d2b99ab8b4e92f8fcf2b83380d079b3dd3ddb0978dadf5569f70444e48f26d32ae410a88bd7201a84b4e3b44a1764ad6428a8148907e86bb0a09cfc1191eda8202d3160c8a4716de885ee80fbbbb2278fcbcbfd1c76b1d55ccbb9ed228de215f5104a9a0b4d647b1fa4bc786c68bee29f5229ab9cc3ca0729199eb7bd2ec9e9be7d833b13586882ea069e2aac144f22442244655c33759aa1e101f87836ad0cb16ddc6e36a66a8755acd52b4e446c0e974756a087a725a95ef59121d39f1c75fa136d7212c71a14ad5579be27c1dd0af8f9e4fb9b407e2bbbdee423486c4d5127fcf5107177b1e21e81f1758f4c304f40c0eb35627113be1e4dcb06d209ca06696f214ca260721c4ce7b4d82db24f024c74786c8d6ba7c73f495eab53e545c44b53a78f82d0aedfe04b798bbe125c8622eb5a2a764cae9c8d01380d464bd2dc7a1b0eb2bc431ae432ccfa81f2913af53bd714fe97d958c928534aa2f7caff6cd926daad3e6ed4c44bd3dd3e1a3fe0e12e8423a79c93d7475e29d036b2491e3ae7e50e4098c107abc4eec102808c8d643c4d4ec5707ca06a0b584bbf1bdbfda771a708002ab235fbfe91923b95fe8f4decb6ea6f1022bd98b6f7df5b457a198f2dd8031db5998c56acb30526ac7a7ef157b269259d6606a91b13bc09db05d4f1ae91a8d4fddd9038e5c03506447a483f8759945ec9700b5ed83c7097c177756773c8a250c76415ff43ff091d2015452b8803297e882a832700cb2d4c5c09c9aff61aa04f9cfc81e3d68911c7029a9ab79bdf72d2814068c828c86aadf77bd56953019ad507f5e059ff6ddb5562722acb3193baf88f571a2aa6d575c35506569720d4829f4d29d155bbe186cb72707eddaab43052871ec43dbc5018c1ce41120bc53f2cae7ebcae5bfb42dd1a4d17f782638ffa9747802cb74c61ebd2936d35ae926dae166ae2ea88effad9467bcd028d733da52576db8892c7b77fb5c97814845e3651f5bd759edd3c72704cc3035cb9e15684a0e17fa0b5704a6ac35576643d6fdbee7c7d05e9f0b0ba3e691e2a281913f2f705077277311ae7b8ae3cf287faac63c8cb0534f8610aae68bfdc2e860dafca682af8ec0d73f5d521dcbd3c8b403ef5763c46a23f307c798a550d3a14c1a9db153c8f1b273cc2bbad5a3450ebc2b391f0e44a3223864a193df9fa27ca15293e36fd461bb4ffa6ca73ae5f2d79933b53e05c59017367125aaea376a509a20c9840100af4f1119f1a8cdab0b835c9315144b22335fda48835dbd7d32ac735f71f69a3fb2c593b5c344f23661ff3729e7142b6da61645f8446e2de64cd637186a66c45efc3ab13db3a9cd0117a3adbb44deae4944a9fd466a4f69af5a959430981deed8994bdfd060da92395e23e449eef961d61e82a65a4314ceb4fe3daa08bbda05ef91d70f549fb7959441cd19ac01cf221b83d6e75c3ad224eadcc3f74b097d2d9edc2ccae58ea09ad3af5bdb3e6b3e81ec38542b927fbfcce573b2ee2f2a71b14a24c4b5a443983665be22bc25251af121920540dfcf8c1f2d57d8f721b48efb9555690fbc3bab0fe71708f3edecc8ffd615b1af7feb0e893c3a458019764d16887dc2973333fa70aac3f5400bcace8dd0c8cd8c79bb1e28e744b6fd1a9a424c5f38cfe256df3e3d252a8941a3691f57098dc8658a93889b29690eb2406586ad10df48c0a34f90a37e5ba6583450946b96fc01867f462050f419058e490e5a0720258885b247f65c4db08b41f8236305daa37f0b83fe327f73a8d65a1d49986de9d8ea076c69003df5984926d0e39d30a41e4a660ef2242f42747a944d7664169fd41d0352d4362ebc6c2519dab028d904e8ca00921c936cdb197ae9f096a53c99d643ab30492be5144bb799dbde12499198c3cfb1483a2a29083fb3fb54957b68590526ef4b5a7fde45c773cd5e414f4ee4db79ba92c7a8c2cf77d3e0847f788ea6fcf10cd208ca5d04ee496f70ea0170bc60da6edbd95b444c100fddbd2e878f934c89b82480b16df600d236299886ff71612493eaaedddfa1dbebe596c8e3b8b4cdc2d231ce7e8df0f242677e6b5c3d2815b9e65e29c80ddee5c711c861950ae60d1b882803cb6c776598936d498c3a800fd1091005638efa23dab3eecd92c8a03734dec8f078e172d000313164f613f02ee24bda86e67adbcf618137a7ec3cdecf7829a8bf2546f62235d92c14ad5b39c1536d923dd579520055b1f89ef17240b89a616caeccbaff0db4d8fa087b5b2c7cadfe4507e0d351f5b045a5e401db68a8186f78edce6be621dbc5ba76b0ff3f406161b170354ca24d128d3a8bd02b7bafc1085b3dab482eaab63f1f165bb0d2d28f70bc9eee4e1fe31d73d12224363562152df7123f1977083534f8ae502984d41c593433be1936ed3296c5153dec58811d603efa95e4d895b9c8ae96af097a644dbdd0bb0aa8d3711bb8b494f3da0fcf48ede0ced49c031ee191e056426dd86276d69640fb1013747022d5b998b4fa7256a0474d2a9e183bd733d335d7208105b1c8676419d1f0252065c7de75c55cb0d221dc8e0532112403c215933ee84e654ebe4a09b34e4c747b34232344c2d3bf83ab53ee7b85f4a3f88914fe79a4f15c4c98a3ec126591591b0e6167e2544523e9070e830d792c78c693d2e6981015dea70a83982042d67a7f5229d106851c32933597e03ca171bc27c2a61380b8e58c41dd9bb808b4b308ab5ce45ba022048e02d89ca1a329f5a9cefb861ab3cd0a05236d58113b47592b0389ca6416b92ebbb367a3a41203d0baba90e8046412b7c23bb027e7cd656cbc864e38272545f66b712fb6ab080f972cd09c92c615a04ada2e24c74c1320ac02fc9ec077e5d5ba621aab5747bee120f5aaa9cb6ca91a162f06415f152cdc79f4117e0cc6fe9bfe53e7e396d5f21ad4328caec1141baddb16a7305ba49bd427e835dc23baae24e559ed66c215662ab3d517d87daf6dc4d2b4c8a3a0c77d65a9df67e756b7b719dc262b15891ccd9545919a5c63577be273276fc39df50dd9388e09fe3bcf1366df9df85fc9b8ef26651c439b76d73c40566fa035736d598ea1d77e1051a785d1717fedae7c687307b277e195555fa6ccaea28c57e07d84f51fb5ef64df87f62c651264ac4b268d116924f0ce008b6355f9901d74d7e8f0b440f337e51cb83fefc278da96edc32fec1012eb955493d8081885ec3dbe94e927f2b490b1bec6fc4b125008153706559a38e147e54d20917ab9d6bb5edf0550f5de539c7fbef949019b339f454be50a056223ccb014bbc078f04c01c8aea18ec58befeb4143c4fe2b6d23f487ff30309ef30986876c2073b7cd3589af3407ed921654683739551fe0cb65959181033b2d2de8482f9dfe9279a2febdba75f7523ae92cd89345494c41a3371f0d4c501f817aa751dc2e4c42597cf72baad04076cebbaa100fea0b0423eee35e32aa60831edb4c772dbe08918a9ede0450dd76430d47b3ebe097b99adaedf6b17dd649c25b77a81c0b1c1cf8447b69638be8872a9f17007f988cc5a555048a727078b5de08ad71156c0446764ef687e2f4bb6fcfe104c5dc862b5e78df61beeec1b1a026dc7283f65035cd5026624daec53c7b025953d9c0266d3e6f02f11931a088e47484230c00c3d6f3b72d095a66b1f87204e739f1b6d4716bb863b6b125e26c7c8e07596538f59b48cbd41250eca1efa85a9e185bc2d8a20787cb66be568f59ddc34a3b207a874d7aa4351da7df89a2ff1ff22bb9d69c177195686bcdc2f04724c8764696f7ef4a75a4e0dd875f07431883da3f9f9cbbc9950e57cfa7bb00b2b8ce162c807cc4d88dabdb91549d2d9a91b74ad5e518a2efae1b0e582423a5fb29e9aa792a2703505b578fd8c73f4f77c485916ede77a9f36be6a12391de7fdf73fdf1db6766ef38c23902be933c49ee8917858e8ee29559a2c2dec20e4a5ad650c52f97d1648f12733ef65466ce94b1268fbec2aef918c4d20886a373b6d3b5fa8b9dcca9c35033e2165803b55a34d87e012cb402ce79ae6de18a4cf57a89ad8dc698bf321a4cb0af1a4d5cdea3da832e3b44f3a47798fda07fc229ac89dde9d4f57b2f8305999400e69d2c5c8caa1bc98ccc833ccbae1682c6993f131a03466303cbc294ba22add02036f73149b2db98688d6462041be3d274d5217c7a6891694af9e2a626f8ec4d4ccb8d4946ef18904ad47a84c7a619e87e773126f61e30d5ced5232e14b6abfb4d44ad05ee999d4d54d2c751cd7c5c9cacfac6f7d47b9f97560038b0baa5e635b553a84f3cbeb04632a9abeb6740ea4ce627f60cd5e6aa71a7e2c205bc90adeb3d61bcd66f17d1296e0cd383b1fc38ad4e2cfd05d4a4ee7371f756eeaa0525bd1673f0070f9f5ae099a29e4c325015d9372ae27635d2eab686be9dd96ec2c014acd8123fea35f97d7ecb5e9bc8359b397e8c0c3b90658aa9fabdc8f9f4bd565dd6e20fc871b658fc3e5944efa972d80303d7a66dfd159e904dbfd894009291ddafdfe3a5c502755b5a3dbd89792b8e5633d6f81d23b63f599fc1f29d679f64afa697260e1e6a10ec075355b58ed9007408a379d3c890bcdbea8604e51c0520be1d8c1f10b0a91d40d7ea9ef9ca2c283153b902700635ce65c3ab69cf3107e2017d8a72160f1794136185afd57c743af49d84fb535fef777e6c6f2a18a04fce9618778c832a608861bc7dd7eab315644f998595d07c5a41bac3e7270a871257802d26f42c454c797414e0d5de88ad611c5e3a05ce76df1348e26509f52b7b125eebe5ce1ec0245bf2e715f2abe2626a42f37ed65c8ac086be9d169cc31adab8da3fc2e2dad0519c0a68cd6cb202c99f5ee48a65c6ac27b0d489faf3083fed64ee5b078d0092d5939fcd01b2a71dbf007367fcc56e2f62904be4097fd7c639caa8a390a59be7a6e46aae93667a26654fe461c043bfec083f065726e66b5f12d9e7013500068de45a49a87dc2d0933287e7575c9f3914071c110c9a8f492c67fc48784aea5c22d1ce26f3281d6deb14da66d69ef6ec8e9080ef0d543bc6ce58b177c01ade4232688fb252d6f3e1ceba283d1d59ae82a15b464746df9bec915f00a184469b846a19a7968d9b38e476e3aef47ae41ed8a7d4d3cf744da190747ee3266ff689428d372545f28e40713615b7f886e1f294056a95f3e50e1afa211ca3a2f4a04535646bf9f4cb709a5ecf437807072cc8b77fbed51e01bfac16c73876a5d2d4916555f7084a772847356855c69c193d8db2d37d8c1a5e6adb2169ddd3bd5b7a2cbf9418d00f174295381d51733924bfdc46017250df28679d6b378cc316c67198b57634f46d5f9c169fde3715ddbeb792fd2c1c74a7f97101d373351037c73af2643b8952665eca13f874aace302f60681e12523b6de8f5c5750d4fb480fe0cad1546af7c88426319baafceccca2b49fe96d2ff446a4867cc0ff6ef7845c93c6a6f2bbeac1e31d5d95618c990646a86b691ba387f6b31f75a69fc68e52c7efd0a1de03be8455514231e04bf7370ab6b49d931f4b581b52ca6e0b104bbd07013651d048dcc5271bce8de0f855c4d289a70b19fa616cddbe27b217116d3a52dfb590df3f932e9fee79e34b42844d4efe8a31844694ffaaf811d72b07ab4a281d75c4dd73f7fc82f9beb49e9ef70c72c31c6b7802ad77d25b405a002d63ba30c078aac97ad8cb9ac85299024c6dba7912c3844ed27097e6852a4567d332560e54bb835d2bfbc31a9bc181f8273b878349c9921c6cbd5466fdea1da224f5361c0c50c5fb4f6ccd9f15f6febea4d24265131cc991d85a5d3bf28ce78dd79a5ddff2b507c8b3d38ece81b386f428ed6cf9258657e7647dfa8a8b0aef5ce051208bf44e2d973885f72835f55458ed6cfcbcb75d998be711af59990eae176c637439b79ad8c41b1b71858a90e65aae941d92a2e9616784ad513321da97a2d1036d083c41eeacb374ca45904d6f205101b5e894cd3f0e2d7b8a737a07802a3a74eb4db792b204f69bf3278fff2538878634b84746b51a87d3364c64a860c568d82757761773b137a1f92fdb012c4f38add32dfd4cf0a6b6ccb8e7958abf0d8ab7cbe7c32919e3bf5618096af980cac33df3eae62fe9bb36eda0aac74dd81fd562113e2515c3d4aa6daec990506bf3b958888119d0b1dc215d5e5418eba9778bd53faa7e9f732ce01f3056fd5b89cafe357648592287c990fd5326df9eebb9452b69e0a94cca107d8ae2e72bca993a08c3531791762f52baef6486848d462854357cdd8788b20383b095d58a35b9ab04380629d8a10707b862bff7024b90555233f0b05848dc1c5145906e90b63b243bd7491673a55d9234a928e9bb37ed35afa3c9a4b936ac42ccb1d1dcb5abe7cc21717fa1025525d24f4eb745f1fe0b3584448e35ef9916fef74cfa511bf189591b2cabb0ff81306d13a37eb8578d183ebc7200b3e28d2c2f39e56ba76078d60192d806c972f4ad6077be01111b412587760e65105faa0d5cb2326f99687ceb7617e2d4d45b918dc581223f0909eb519856748849fac49a2bb4edf727a7b2edf6e4454f526d02ed459d7805b68142c25dfc5544ca04dc7fb3c45418eee7609712f5cdaeb3aa3c6936cdd1f1e0d1486dbe2f3ee05f6856727ebe888e797d834beafb969a90f950198b5ee0ec876172c290466118f8dee069bbdb463040ab8840b842bf2d1637b03040994ccf1b8180131c755c623e65a03c96172bd15ddf0f90dba2ac60800252c193547b0b6beb63c3542f95aa373bda1941edc0d441d6d758bac9a1d7301f51009aab487f1b2cb3935a5c8935e8f2ee2ee3e2dee90f06c6ae693f715b9480219c59abc458e6aee1a210767d26bd5c24f8a4fc6be59011417aac0eaac7ad5715c5942fe87fd341c842544f3e394bebce42c5667a511a0a363a89462aa18595ea6b51f86dd48db166c078adaf2d127b87e6ac9cb6826fb0010d869bf03f2afaee97b6a064fedf3cc0806d75060cd4c86d1014a47b9b81303d3c2716b8c0fa30193393dc1ddda76426fad6c03a41192f6c7cfaaa8e37e9e3eb3cc0c6bdaa721b66a9fab82e6c0fdf964286e4aca0d66201c0adca7c33fae61bba1be0c874f3b495f3f7857cb156ea2538e4101f89e708b4554444e95096a0a40fc78c35be82d843e2d2a3adb8d78d662cabedba523079fb6d52df3bb710d268d7cf32a6a0a88d4f80628c0ac8a447f3fc5e0d091514ca2c64680b7da00d9196adc481f61e281381f748f3b3b0d78f1c77fef19ce0b7466e14bde12a3a9bc5cb225d81fbef39cc1b3c5668e533a8a82375f6fb46dd8413c119a4366314350587685250b3799f0629e75e6a9ec79db0d589849401019fd5074a4ae910fd665c2736974f4ada686655329136e385a46c82d6929b9e01babecb45e780d444855a521ddf1c0f8dae1c1db21a72af45b82ca64939150a87af4e9b1a6d4ed11d547076a93853935f4a12cb388d7fbc5c054353d9ea5ac028dc4a2613b28014f52eda3610347babb083372240b4253071b20862355629a52e9d6342febd19d4ed645fcd1e6f6a1ad089e0a93c079eaf573890e5844d2c94e40549cae5988d5e68a7b4d7ce9f0a6d8917678cc0b9e416e88c7155eadd5a2b2d5a032dc2e409c7f587aee7d641a0c9cdff084708c0066045674e59267ee7b6e3e127fbfe1f3451f4396f568cb46856da5ea6af1bc5698e49c216a897dfd07771d5c4ffcee4ca502fd8df2b81972e5cae58b59b9c7a3368e43f2f9e7c86d68995c536a91b990c87fe90dba70b1cbd3d2396a4291c3d555561f5ec1acbca8f4922083603c94fd0f41ef5b9392ce42a5535829de651bad14cb05914f0e31e3e606728b823dfdc091a3d8d427f7aefa21bbb59f67dbaf0d05ebb5a55d50dd06fbcc5dfefb41cea425c19559d4423fb13d3174a040c3cb7ec86e4cdfaa253031c0af1328ba1570684d2aa3d534a016416a18800", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, 0xde2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006840)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a87b}, @TCA_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x874) keyctl$search(0x17, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x1, 0x12, 0x1, 0x20, 0x5}, 0x20) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r8, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 5m51.080897431s ago: executing program 34 (id=1172): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffffffffff4) syz_fuse_handle_req(r4, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, 0xde2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006840)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a87b}, @TCA_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x874) keyctl$search(0x17, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x1, 0x12, 0x1, 0x20, 0x5}, 0x20) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r8, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 5m51.06837017s ago: executing program 3 (id=1174): setns(0xc9, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002"], 0x54}}, 0x200040c4) 5m50.955027244s ago: executing program 3 (id=1175): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r3, 0xb) 5m49.931532869s ago: executing program 3 (id=1176): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]) 5m49.903372969s ago: executing program 3 (id=1177): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) 5m49.830323412s ago: executing program 3 (id=1178): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) 5m48.383245527s ago: executing program 3 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5m48.010265166s ago: executing program 35 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 4m13.466837711s ago: executing program 6 (id=1433): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f00000000c0)={'wlan1\x00', @remote}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 4m8.64896444s ago: executing program 6 (id=1448): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m8.095231673s ago: executing program 6 (id=1449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 4m7.624463315s ago: executing program 6 (id=1451): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) unshare(0x26020480) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) 4m5.564567016s ago: executing program 6 (id=1452): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") sendto$inet_nvme_of_msg(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 4m4.548310471s ago: executing program 6 (id=1454): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 4m4.148526521s ago: executing program 36 (id=1454): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 3m25.849685016s ago: executing program 8 (id=1529): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f016, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, r6, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0134014030d9"}) 3m24.386506643s ago: executing program 8 (id=1532): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x288, 0x168, 0x10, 0x0, 0xb, 0x288, 0x250, 0x250, 0x288, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 3m23.465703446s ago: executing program 8 (id=1535): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x5e, &(0x7f0000000400)=""/94, 0x1e00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x10, 0x4}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) sendmsg$nl_route(r0, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 3m18.659196764s ago: executing program 8 (id=1541): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f00000000c0)={'wlan1\x00', @remote}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3m14.232585534s ago: executing program 8 (id=1549): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/kmsg\x00', 0x1, 0x0) read(r0, &(0x7f0000000000)=""/1024, 0x400) close(r0) 3m13.770472645s ago: executing program 8 (id=1552): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x401, 0x8, 0xaf2, 0x0, 0x8, 0xf, 0xfd, "d48283cf5eb388b31bed056da363b62d4288e03d", "a2f5baaa44d85db1c9041280676a36114716c0c9"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r0, 0x5a3f6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x51}, 0x1c) socket(0x3, 0x5, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003c00010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='test\n', 0x5) sched_setscheduler(r1, 0x6, &(0x7f0000000280)=0x5) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m58.649268568s ago: executing program 37 (id=1552): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x401, 0x8, 0xaf2, 0x0, 0x8, 0xf, 0xfd, "d48283cf5eb388b31bed056da363b62d4288e03d", "a2f5baaa44d85db1c9041280676a36114716c0c9"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r0, 0x5a3f6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x51}, 0x1c) socket(0x3, 0x5, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003c00010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='test\n', 0x5) sched_setscheduler(r1, 0x6, &(0x7f0000000280)=0x5) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m14.170339998s ago: executing program 4 (id=1786): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)="030000003300000007000000010000000100000001000000090400000000000000090400000000000000090400000000000000", 0x33) 1m14.061281101s ago: executing program 4 (id=1787): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000001900000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1m13.064630515s ago: executing program 4 (id=1788): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) epoll_create1(0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@fallback, 0x1d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@noprefix}]}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 1m12.043823061s ago: executing program 4 (id=1789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='1-1\x00', 0x4) 1m11.932463943s ago: executing program 4 (id=1790): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 1m11.65378478s ago: executing program 4 (id=1794): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) open(&(0x7f00000000c0)='./bus\x00', 0x280, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 56.206999952s ago: executing program 38 (id=1794): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) open(&(0x7f00000000c0)='./bus\x00', 0x280, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 48.418519323s ago: executing program 5 (id=1858): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', 0x0, &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/kmsg\x00', 0x1, 0x0) read(r0, &(0x7f0000000000)=""/1024, 0x400) close(r0) 48.191286389s ago: executing program 5 (id=1859): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0xdb) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006800090300000000000000000a000000000000000400040008000100010000002c0640da09e7ffbdb1986b14fab1e3ce439c004578647a7a4c4e363f759ce2ada42ea310af3417c04d958511f5df94e166d5c2e40011b7ddbb0a9dcacb65b62ba6900f53b682250d9f5be4b24402587a6a8c85ef"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1\x00', 0x1ff) chdir(&(0x7f0000000400)='./my_configfs/usb_gadget/g1\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000040)='functions/uvc.usb0/streaming/header/h\x00', 0x1ef) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xf, 0x3, 0x68, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2={0xff, 0x5}, 0x3f, 0x8, 0xe3e1, 0xd00}}) symlinkat(&(0x7f0000001300)='functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='configs/c.1/uvc.usb0\x00') 46.989258919s ago: executing program 5 (id=1861): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r4, 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x4}) memfd_create(&(0x7f0000000000)='\x02\x00\x00\x00\x96\x0e\x00\x00\x00\x00\x13p', 0x3) shmctl$SHM_UNLOCK(r4, 0xc) 40.265179505s ago: executing program 5 (id=1880): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x1, 0x1, 0x9, 0xe, 0x32, 0x5}) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 38.682923554s ago: executing program 5 (id=1885): timer_create(0x3, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') timer_create(0x0, 0x0, &(0x7f0000000180)) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) 38.203683536s ago: executing program 5 (id=1887): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x401, 0x8, 0xaf2, 0x0, 0x8, 0xf, 0xfd, "d48283cf5eb388b31bed056da363b62d4288e03d", "a2f5baaa44d85db1c9041280676a36114716c0c9"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r0, 0x5a3f6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x51}, 0x1c) socket(0x3, 0x5, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003c00010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='test\n', 0x5) 23.119350919s ago: executing program 39 (id=1887): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x401, 0x8, 0xaf2, 0x0, 0x8, 0xf, 0xfd, "d48283cf5eb388b31bed056da363b62d4288e03d", "a2f5baaa44d85db1c9041280676a36114716c0c9"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r0, 0x5a3f6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x51}, 0x1c) socket(0x3, 0x5, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003c00010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='test\n', 0x5) 11.601245473s ago: executing program 9 (id=1970): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 11.161288924s ago: executing program 9 (id=1971): socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800008, 0xfffffffffffffbff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x7a712bfc07b8374c) 6.591439867s ago: executing program 2 (id=1978): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r4, 0x89f2, &(0x7f0000000100)={0xfffffff9, 0xffffffff, 0x4, 0x0, 0x9, "5dee0000005940000000000f00"}) 6.188128617s ago: executing program 9 (id=1979): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfd00, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0) 5.306409268s ago: executing program 9 (id=1985): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000e00)={0x1, 0x0, 0x1a, 0x16, 0x155, &(0x7f0000000a00)}) 4.499774038s ago: executing program 2 (id=1986): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, 0x0, 0x0) 4.304583713s ago: executing program 2 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x288, 0x168, 0x10, 0x0, 0xb, 0x288, 0x250, 0x250, 0x288, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 4.294258903s ago: executing program 0 (id=1988): socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800008, 0xfffffffffffffbff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x7a712bfc07b8374c) 4.151665027s ago: executing program 7 (id=1989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xa, 0x2, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.873528884s ago: executing program 0 (id=1990): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x6, 0x7, [0x1, 0xffffffff, 0x400, 0x0]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) pipe2(&(0x7f0000000000), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f00000000c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff0900450000000000000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 2.871646169s ago: executing program 7 (id=1991): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="6e66736400c814550eae14d42e312032312100343833530200206c6f63616c686f73740a", 0x24) 2.867958239s ago: executing program 0 (id=1992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1000000, 0x3900, 0xfffffffe, 0x1e5}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00', @ANYBLOB="05082d"], 0x34}, 0x1, 0x0, 0x0, 0x2090}, 0x0) 2.673299124s ago: executing program 7 (id=1993): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) 2.661235254s ago: executing program 2 (id=1994): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt_trace/trace_marker\x00', 0x1, 0x0) r1 = syz_io_uring_setup(0xf, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)=0x0, &(0x7f0000001240)=0x0, &(0x7f0000001280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000012c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x0) write(r0, &(0x7f0000002340)='hello\n', 0x6) 2.44808545s ago: executing program 7 (id=1995): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.44744438s ago: executing program 2 (id=1996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) setns(0xc9, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x3}, 0x2) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x44, r6, 0x1, 0x0, 0x0, {0x35}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140)=0x1, 0x4) waitid(0x1, 0x0, 0x0, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000000940)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) open(&(0x7f00000000c0)='./bus\x00', 0x280, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 2.253626404s ago: executing program 7 (id=1997): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, 0x0, 0x0) 2.151789627s ago: executing program 7 (id=1998): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f016, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, r6, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0134014030d9"}) 887.915608ms ago: executing program 0 (id=1999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x44}}, 0x0) 659.966884ms ago: executing program 0 (id=2000): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x41, 0x25f, &(0x7f00000002c0)="$eJzs3U1oHGUYB/Bn9oOYZJGoF0FQQUQkEOJN8BIvCgEJ4kFQISLiRUkETfC268mLF88iOXkJpbemPZZeQi8thZ7SNof00tKGHhoK/YAp+xXSdttsupuZNvP7wWZmknfmeQfm/74T2GECKKyJiJiJiHJETEZENSKSvQ3ebX8mOpsro+vzEWn61a2k1a693dbdbzwiGhHxcUScKSXxcyViee3brTsbn3/w91L1/f/XvhnN9CQ7trc2v9j5b+6vE7MfLZ+/eGMuiZmoPXJew5f0+F0liXj9MIq9IJJK3j2gH1/+cfxSM/dvRMR7rfzfTdsiHuyu9ZLW/7l54a2s+wsMV5pWm3NgIwUKpxQRtc5Nams9SqWpqfY9/OXyWOmXxd9+n/xpcWnhx7xHKmBYahGbn50aOTneWk9KU538Xyu38w8cVfXOcvVK8+dOOd/eAMO0f6Cb8//k9/UPQ/6hcA6U/1ey6ROQjU7+W8l+LP/X8+oTkI0Dzf9P+xoA8FLy/z8U1zPzX82nT0A2zP9QXPIPxSX/UFzyD8W1N/8AQLGkI30+KNzo7gAcFTkPPwAAAAAAAAAAAAAAAAAAQA8ro+vz3U9WNc/+G7H9aURUetUvt95H3H352NjtpNlsV9LebSDfvTPgAQZ0LOenr1+9mm/9c2/nW7++ENH4MyKmK5Unr7+kc/09v9f2+Xv1hwELDOiTrw/ryLW+Wt1fPaz6/ZndiDjdHH+me40/pXiztew9/tSG8JqEX+8NeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAy8zAAAP//JS12Fg==") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8081, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 390.96309ms ago: executing program 9 (id=2001): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0\xdb\x10\x00', 0x0) 117.785767ms ago: executing program 2 (id=2002): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setresuid(0xee00, 0xee01, 0x0) setuid(0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 52.501369ms ago: executing program 0 (id=2003): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfd00, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) 0s ago: executing program 9 (id=2004): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)="030000003300000007000000010000000100000001000000090400000000000000090400000000000000090400000000000000", 0x33) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff7}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x35, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x30a429b, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x5, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7fff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x5, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x40b, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x1, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0xa, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0xffffffff, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x4, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x4, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x9, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x808, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffffff80, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) kernel console output (not intermixed with test programs): disabled state [ 561.965826][ T4335] device bridge_slave_0 left promiscuous mode [ 561.984766][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.004887][ T9630] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 562.072375][ T4335] device veth1_macvtap left promiscuous mode [ 562.093063][ T4335] device veth0_macvtap left promiscuous mode [ 562.107062][ T4335] device veth1_vlan left promiscuous mode [ 562.127474][ T4335] device veth0_vlan left promiscuous mode [ 562.519054][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 562.772123][ T26] audit: type=1326 audit(1788371275.065:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.6.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3257d9de99 code=0x0 [ 562.860088][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 563.005703][ T9644] loop5: detected capacity change from 0 to 128 [ 563.023844][ T9644] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 563.032703][ T9644] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 563.253674][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 563.294478][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 563.338023][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.398032][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.412961][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 564.573852][ T4335] bond0 (unregistering): Released all slaves [ 564.713799][ T9543] device hsr_slave_0 entered promiscuous mode [ 564.736070][ T9543] device hsr_slave_1 entered promiscuous mode [ 564.812555][ T9543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.830995][ T9543] Cannot create hsr debugfs directory [ 564.866034][ T9657] device vlan2 entered promiscuous mode [ 564.938012][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 564.950917][ T9490] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 564.978662][ T9669] loop4: detected capacity change from 0 to 256 [ 564.987175][ T9669] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 565.001566][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1211'. [ 565.011412][ T9660] device hsr_slave_0 left promiscuous mode [ 565.211943][ T9490] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 565.279426][ T9490] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 565.873480][ T9490] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 566.238463][ T26] audit: type=1326 audit(1788371278.537:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.4.1216" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a99de99 code=0x0 [ 566.265616][ T9683] loop6: detected capacity change from 0 to 128 [ 566.455066][ T4275] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 566.465732][ T4275] CPU: 1 PID: 4275 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 566.473320][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 566.483393][ T4275] Workqueue: hci5 hci_rx_work [ 566.488248][ T4275] Call Trace: [ 566.491548][ T4275] [ 566.494488][ T4275] dump_stack_lvl+0x188/0x24e [ 566.499219][ T4275] ? show_regs_print_info+0x12/0x12 [ 566.504437][ T4275] ? load_image+0x410/0x410 [ 566.508991][ T4275] sysfs_create_dir_ns+0x26a/0x290 [ 566.514137][ T4275] ? __lock_acquire+0x7c40/0x7c40 [ 566.519204][ T4275] ? sysfs_warn_dup+0xa0/0xa0 [ 566.523902][ T4275] ? do_raw_spin_unlock+0x11d/0x230 [ 566.529119][ T4275] kobject_add_internal+0x617/0xca0 [ 566.534368][ T4275] kobject_add+0x160/0x230 [ 566.538804][ T4275] ? kobject_init+0x1c0/0x1c0 [ 566.543499][ T4275] ? __raw_spin_lock_init+0x41/0x100 [ 566.548797][ T4275] ? klist_children_get+0x50/0x50 [ 566.553939][ T4275] ? get_device_parent+0x121/0x3e0 [ 566.559075][ T4275] device_add+0x470/0x1050 [ 566.563513][ T4275] hci_conn_add_sysfs+0xd1/0x1e0 [ 566.568558][ T4275] le_conn_complete_evt+0xfac/0x15c0 [ 566.573870][ T4275] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 566.580133][ T4275] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 566.585848][ T4275] ? mutex_unlock+0x10/0x10 [ 566.590372][ T4275] ? skb_pull_data+0xec/0x1f0 [ 566.595082][ T4275] hci_le_conn_complete_evt+0x183/0x440 [ 566.600651][ T4275] ? hci_remote_host_features_evt+0x230/0x230 [ 566.606736][ T4275] hci_event_packet+0x7b3/0x1290 [ 566.611701][ T4275] ? __lock_acquire+0x7c40/0x7c40 [ 566.616750][ T4275] ? bis_list+0x280/0x280 [ 566.621097][ T4275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 566.627014][ T4275] ? kcov_remote_start+0x4b0/0x7e0 [ 566.632164][ T4275] ? do_machine_check+0x380/0x750 [ 566.637211][ T4275] ? hci_send_to_monitor+0x9c/0x4a0 [ 566.642431][ T4275] hci_rx_work+0x3eb/0xd40 [ 566.646868][ T4275] ? _raw_spin_unlock+0x40/0x40 [ 566.651746][ T4275] ? process_one_work+0x7b4/0x1160 [ 566.656969][ T4275] process_one_work+0x8ab/0x1160 [ 566.661938][ T4275] ? worker_detach_from_pool+0x240/0x240 [ 566.667594][ T4275] ? _raw_spin_lock_irq+0xb7/0xf0 [ 566.672636][ T4275] ? _raw_spin_lock_irqsave+0x100/0x100 [ 566.678199][ T4275] ? wq_worker_running+0x97/0x190 [ 566.683314][ T4275] worker_thread+0xaf5/0x12a0 [ 566.688034][ T4275] kthread+0x29d/0x330 [ 566.692113][ T4275] ? worker_clr_flags+0x1a0/0x1a0 [ 566.697149][ T4275] ? kthread_blkcg+0xd0/0xd0 [ 566.701750][ T4275] ret_from_fork+0x1f/0x30 [ 566.706220][ T4275] [ 566.733071][ T4275] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 566.748073][ T4275] Bluetooth: hci5: failed to register connection device [ 566.775529][ T9683] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 566.888857][ T9683] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 567.085929][ T9688] loop5: detected capacity change from 0 to 512 [ 567.194873][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.247869][ T9688] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 567.469535][ T9688] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.752567][ T9490] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.077162][ T8806] EXT4-fs (loop6): unmounting filesystem. [ 568.083111][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 568.087923][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 568.106641][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.142954][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 568.165160][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 568.196728][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.203903][ T4657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.271736][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 568.292344][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 568.307318][ T4657] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.314479][ T4657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.445446][ T9712] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 568.492765][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 568.546701][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 568.597293][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 568.647556][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 568.717723][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 568.754362][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 568.880933][ T4335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.121584][ T4335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.371245][ T4335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.704807][ T4335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.032095][ T9705] loop5: detected capacity change from 0 to 128 [ 570.499467][ T9543] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 570.508143][ T9705] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 570.519063][ T9543] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 570.533089][ T9705] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 570.580562][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 570.615486][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 570.755231][ T9543] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 570.879556][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 570.934617][ T9490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 570.973935][ T9490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.991116][ T9543] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 571.013213][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 571.027341][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 571.061738][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 571.135357][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 571.143954][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 571.201473][ T9723] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 571.265210][ T9733] loop5: detected capacity change from 0 to 256 [ 571.541661][ T9543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.914414][ T9743] loop4: detected capacity change from 0 to 2048 [ 571.955442][ T9743] EXT4-fs: Ignoring removed oldalloc option [ 572.010626][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 572.045306][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 572.074429][ T26] audit: type=1326 audit(1788371284.310:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9739 comm="syz.5.1228" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb39de99 code=0x0 [ 572.106622][ T9749] loop6: detected capacity change from 0 to 128 [ 572.215407][ T9743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 572.285075][ T9749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 572.330857][ T9543] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.602535][ T9749] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 572.884648][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 572.914729][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 572.976480][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.983608][ T4703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.012821][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 573.200753][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 573.750646][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.773121][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.780291][ T4703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.850813][ T8806] EXT4-fs (loop6): unmounting filesystem. [ 573.887607][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 573.896700][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 574.120121][ T9490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.061713][ T9780] loop4: detected capacity change from 0 to 128 [ 576.175165][ T9780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 576.184122][ T9780] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 577.193783][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 577.201344][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 577.301289][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 577.342061][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 577.390486][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 577.429000][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 577.467772][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 577.497615][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 577.499561][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 577.506213][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 577.526199][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 577.536351][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 577.545765][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 577.827566][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 578.332449][ T9815] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 578.586918][ T26] audit: type=1326 audit(1788371290.893:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.5.1240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb39de99 code=0x0 [ 578.714233][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 578.768717][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 579.215823][ T9830] loop4: detected capacity change from 0 to 128 [ 579.351649][ T9830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 579.411975][ T9830] ext4 filesystem being mounted at /268/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 579.443902][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.488327][ T9490] device veth0_vlan entered promiscuous mode [ 579.529571][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 579.567641][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 579.627795][ T9490] device veth1_vlan entered promiscuous mode [ 580.494106][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 580.504002][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 580.525095][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 580.550304][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 580.663377][ T4335] device hsr_slave_0 left promiscuous mode [ 580.825649][ T4335] device hsr_slave_1 left promiscuous mode [ 580.860536][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.599033][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.823941][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.873301][ T9844] loop5: detected capacity change from 0 to 128 [ 581.923750][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.059191][ T9844] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 582.094856][ T4335] device bridge_slave_1 left promiscuous mode [ 582.215815][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.245932][ T9844] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 582.433125][ T4335] device bridge_slave_0 left promiscuous mode [ 582.526332][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.932436][ T4335] device veth1_macvtap left promiscuous mode [ 582.938860][ T4335] device veth0_macvtap left promiscuous mode [ 583.161581][ T4335] device veth1_vlan left promiscuous mode [ 583.167532][ T4335] device veth0_vlan left promiscuous mode [ 583.237330][ T9867] loop4: detected capacity change from 0 to 1024 [ 583.303291][ T9867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 583.401113][ T9867] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 583.731012][ T9872] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 583.760190][ T9872] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 583.772474][ T9872] EXT4-fs (loop4): This should not happen!! Data will be lost [ 583.772474][ T9872] [ 583.789494][ T9873] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28 [ 583.801800][ T9873] EXT4-fs (loop4): This should not happen!! Data will be lost [ 583.801800][ T9873] [ 583.811468][ T9873] EXT4-fs (loop4): Total free blocks count 0 [ 583.817458][ T9873] EXT4-fs (loop4): Free/Dirty block details [ 583.823386][ T9873] EXT4-fs (loop4): free_blocks=20480 [ 583.828705][ T9873] EXT4-fs (loop4): dirty_blocks=80 [ 583.833823][ T9873] EXT4-fs (loop4): Block reservation details [ 584.227779][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 584.258164][ T4335] bond1 (unregistering): Released all slaves [ 585.544008][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 585.579796][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 585.602126][ T9884] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 585.620028][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.661619][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.924513][ T4335] bond0 (unregistering): Released all slaves [ 586.016536][ T9856] device syzkaller0 entered promiscuous mode [ 586.092968][ T9543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.118720][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 586.135934][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 586.282504][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 586.337124][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 586.357815][ T9490] device veth0_macvtap entered promiscuous mode [ 586.409056][ T9490] device veth1_macvtap entered promiscuous mode [ 586.518769][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.561772][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.592307][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.633290][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.666439][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.677922][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.685689][ T9900] nfs: Unknown parameter 'pr' [ 586.692728][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.726538][ T9898] netlink: 'syz.4.1254': attribute type 10 has an invalid length. [ 586.769299][ T9901] loop4: detected capacity change from 0 to 512 [ 586.793206][ T9901] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 586.828757][ T9898] device syz_tun entered promiscuous mode [ 586.861885][ T9901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e01c, mo2=0002] [ 586.888794][ T9898] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 586.897248][ T9901] System zones: 1-12 [ 586.901948][ T9901] EXT4-fs (loop4): orphan cleanup on readonly fs [ 586.909966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 586.924944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 586.962469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 586.967056][ T9901] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.1254: bad orphan inode 3 [ 586.997517][ T9901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 587.001322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 587.078051][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.145139][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.161391][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.188021][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.219653][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.236669][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.252527][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 587.280808][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.312610][ T9490] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.332777][ T9490] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.426863][ T9490] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.435619][ T9490] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.565639][ T9918] loop6: detected capacity change from 0 to 128 [ 588.383424][ T9918] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 588.394535][ T9918] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 588.426283][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.058943][ T4412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.072536][ T4412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.193426][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.218435][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.257815][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 589.563504][ T9932] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 589.857439][ T8806] EXT4-fs (loop6): unmounting filesystem. [ 589.919224][ T9582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.969946][ T9582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.985508][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 590.056342][ T9935] fuse: Bad value for 'fd' [ 590.272627][ T9942] loop4: detected capacity change from 0 to 256 [ 590.678070][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 590.839179][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 591.215304][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 591.302142][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 591.334065][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 591.348949][ T9952] loop4: detected capacity change from 0 to 512 [ 591.369544][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 591.525537][ T9543] device veth0_vlan entered promiscuous mode [ 591.538801][ T9543] device veth1_vlan entered promiscuous mode [ 591.574445][ T9952] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 591.601427][ T9543] device veth0_macvtap entered promiscuous mode [ 593.152203][ T9952] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 593.197258][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 594.369848][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 594.695513][ T9543] device veth1_macvtap entered promiscuous mode [ 594.917890][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.936316][T10028] fuse: Bad value for 'fd' [ 595.052326][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.062884][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.073847][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.084038][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.094751][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.105379][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.203018][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.369205][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.391814][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 595.577456][T10043] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 595.673216][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.686947][T10045] loop7: detected capacity change from 0 to 1024 [ 595.698244][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 595.753262][T10045] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 595.820758][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.948806][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.009713][T10045] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 596.082395][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.115403][T10052] loop5: detected capacity change from 0 to 128 [ 596.164312][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.467656][T10059] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 596.495514][T10059] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 596.507818][T10059] EXT4-fs (loop7): This should not happen!! Data will be lost [ 596.507818][T10059] [ 596.525597][T10060] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28 [ 596.537924][T10060] EXT4-fs (loop7): This should not happen!! Data will be lost [ 596.537924][T10060] [ 596.547595][T10060] EXT4-fs (loop7): Total free blocks count 0 [ 596.553611][T10060] EXT4-fs (loop7): Free/Dirty block details [ 596.559508][T10060] EXT4-fs (loop7): free_blocks=20480 [ 596.564828][T10060] EXT4-fs (loop7): dirty_blocks=80 [ 596.569941][T10060] EXT4-fs (loop7): Block reservation details [ 597.347670][T10062] loop4: detected capacity change from 0 to 128 [ 597.357566][T10062] EXT4-fs: Ignoring removed nobh option [ 597.770187][T10062] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 597.780089][T10062] ext4 filesystem being mounted at /280/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 598.356609][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.478814][T10052] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 598.561617][T10052] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 598.572424][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.664353][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.725273][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.786826][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.843923][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.889848][ T9543] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.919197][ T9543] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.943164][ T9543] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.967490][ T9543] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.209544][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 599.270323][T10061] wlan0 speed is unknown, defaulting to 1000 [ 599.350805][T10018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 599.359688][T10018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 599.581778][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 599.954474][ T26] audit: type=1326 audit(1788371312.274:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10076 comm="syz.6.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3257d9de99 code=0x0 [ 600.013656][T10084] loop5: detected capacity change from 0 to 512 [ 600.061595][T10084] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 600.350380][T10084] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1279: bg 0: block 104: invalid block bitmap [ 600.430352][T10084] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 600.491471][T10084] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1279: invalid indirect mapped block 1 (level 1) [ 600.572184][T10084] EXT4-fs (loop5): 1 truncate cleaned up [ 600.609419][T10084] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 601.468529][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 602.144542][T10018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.214725][T10110] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 602.226939][T10018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.238354][T10109] loop5: detected capacity change from 0 to 256 [ 602.456123][T10112] loop6: detected capacity change from 0 to 1024 [ 602.462846][T10025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 602.464102][T10112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 602.638961][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.702949][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.745273][T10112] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 603.318788][T10129] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 603.347715][T10129] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 603.360146][T10129] EXT4-fs (loop6): This should not happen!! Data will be lost [ 603.360146][T10129] [ 603.377997][T10130] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28 [ 603.390337][T10130] EXT4-fs (loop6): This should not happen!! Data will be lost [ 603.390337][T10130] [ 603.400007][T10130] EXT4-fs (loop6): Total free blocks count 0 [ 603.406002][T10130] EXT4-fs (loop6): Free/Dirty block details [ 603.411935][T10130] EXT4-fs (loop6): free_blocks=20480 [ 603.417229][T10130] EXT4-fs (loop6): dirty_blocks=80 [ 603.422377][T10130] EXT4-fs (loop6): Block reservation details [ 603.440752][T10025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 603.800137][T10136] zram: Can't change algorithm for initialized device [ 603.841539][T10140] device syzkaller0 entered promiscuous mode [ 603.858811][T10136] zram: Cannot change disksize for initialized device [ 603.998498][ T26] audit: type=1326 audit(1788371316.296:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.6.1293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3257d9de99 code=0x0 [ 604.277839][ T4275] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 605.478420][T10159] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 605.566036][T10156] loop8: detected capacity change from 0 to 1024 [ 605.598587][T10156] EXT4-fs: Ignoring removed bh option [ 605.728386][T10156] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 605.755968][T10171] loop4: detected capacity change from 0 to 1024 [ 605.809506][T10171] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 605.891265][T10171] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 605.917340][ T9543] EXT4-fs (loop8): unmounting filesystem. [ 606.481293][T10182] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 606.510959][T10182] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 606.523375][T10182] EXT4-fs (loop4): This should not happen!! Data will be lost [ 606.523375][T10182] [ 606.540558][T10183] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28 [ 606.552961][T10183] EXT4-fs (loop4): This should not happen!! Data will be lost [ 606.552961][T10183] [ 606.563044][T10183] EXT4-fs (loop4): Total free blocks count 0 [ 606.569129][T10183] EXT4-fs (loop4): Free/Dirty block details [ 606.575060][T10183] EXT4-fs (loop4): free_blocks=20480 [ 606.580412][T10183] EXT4-fs (loop4): dirty_blocks=80 [ 606.585533][T10183] EXT4-fs (loop4): Block reservation details [ 606.939660][T10192] zram: Can't change algorithm for initialized device [ 606.977130][T10138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.985895][T10192] zram: Cannot change disksize for initialized device [ 607.094848][T10195] device syzkaller0 entered promiscuous mode [ 608.059019][T10209] nfs: Bad value for 'proto' [ 608.506047][T10217] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 608.865096][T10222] fuse: Bad value for 'fd' [ 610.210725][T10232] zram: Can't change algorithm for initialized device [ 610.218604][T10232] zram: Cannot change disksize for initialized device [ 611.131606][T10242] nfs: Bad value for 'proto' [ 611.263632][T10247] fuse: Bad value for 'fd' [ 611.320968][T10249] loop7: detected capacity change from 0 to 128 [ 611.375767][T10249] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 611.553354][T10249] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 611.585232][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.706505][T10270] zram: Can't change algorithm for initialized device [ 613.006100][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 613.189755][T10278] device syzkaller0 entered promiscuous mode [ 613.425785][T10288] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 614.019547][ T4275] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 614.045909][T10295] loop5: detected capacity change from 0 to 512 [ 614.097287][T10295] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 614.114677][T10295] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.159277][T10250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.181847][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 614.330233][T10301] nfs: Bad value for 'proto' [ 616.952346][T10321] loop7: detected capacity change from 0 to 128 [ 616.961209][T10324] zram: Can't change algorithm for initialized device [ 617.056796][T10321] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 617.140749][T10321] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 617.258706][ T26] audit: type=1326 audit(1788371329.583:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10317 comm="syz.5.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb39de99 code=0x0 [ 617.297735][T10337] nfs: Bad value for 'proto' [ 618.054983][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 618.374454][T10353] loop7: detected capacity change from 0 to 2048 [ 618.594804][T10353] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 618.806139][T10353] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.059937][T10362] loop8: detected capacity change from 0 to 1024 [ 619.210146][T10362] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 619.283168][T10362] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.317326][ T26] audit: type=1800 audit(1788371331.644:106): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1356" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 619.373986][T10362] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1356: bg 0: block 112: padding at end of block bitmap is not set [ 619.446641][T10376] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 619.710298][T10373] device syzkaller0 entered promiscuous mode [ 619.807752][T10362] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 619.850743][T10362] EXT4-fs (loop8): This should not happen!! Data will be lost [ 619.850743][T10362] [ 619.878663][T10362] EXT4-fs (loop8): Total free blocks count 0 [ 619.930702][T10362] EXT4-fs (loop8): Free/Dirty block details [ 619.947696][T10362] EXT4-fs (loop8): free_blocks=0 [ 619.972887][T10362] EXT4-fs (loop8): dirty_blocks=64 [ 620.000628][T10362] EXT4-fs (loop8): Block reservation details [ 620.026948][T10362] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 620.181758][ T9543] EXT4-fs (loop8): unmounting filesystem. [ 621.921827][T10397] loop8: detected capacity change from 0 to 128 [ 622.208390][T10397] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 622.224416][T10397] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 622.356455][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.363096][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.572415][T10383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.612628][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 623.606599][ T9543] EXT4-fs (loop8): unmounting filesystem. [ 624.438871][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 625.227273][T10419] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 626.653975][T10429] loop7: detected capacity change from 0 to 128 [ 626.730112][T10429] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 626.759103][T10429] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 627.480442][T10426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.506933][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 628.908133][T10452] loop8: detected capacity change from 0 to 512 [ 628.963383][T10452] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 629.139088][T10452] EXT4-fs (loop8): 1 truncate cleaned up [ 629.144833][T10452] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 629.218667][T10464] zram: Can't change algorithm for initialized device [ 629.413933][ T9543] EXT4-fs (loop8): unmounting filesystem. [ 629.534678][ T26] audit: type=1326 audit(1788371341.859:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.7.1380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08c2f9de99 code=0x0 [ 629.753920][T10477] wlan0 speed is unknown, defaulting to 1000 [ 629.760079][T10477] wlan0 speed is unknown, defaulting to 1000 [ 629.769076][T10477] wlan0 speed is unknown, defaulting to 1000 [ 629.781379][T10477] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 629.820899][T10477] wlan0 speed is unknown, defaulting to 1000 [ 629.837433][T10477] wlan0 speed is unknown, defaulting to 1000 [ 629.850329][T10477] wlan0 speed is unknown, defaulting to 1000 [ 629.864845][T10477] wlan0 speed is unknown, defaulting to 1000 [ 629.890982][T10477] wlan0 speed is unknown, defaulting to 1000 [ 631.021185][T10494] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 631.617679][T10499] device syzkaller0 entered promiscuous mode [ 632.337284][T10501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.370631][T10512] zram: Can't change algorithm for initialized device [ 632.625976][ T4289] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 632.635968][ T4289] CPU: 0 PID: 4289 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 632.643542][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 632.653619][ T4289] Workqueue: hci2 hci_rx_work [ 632.658324][ T4289] Call Trace: [ 632.661611][ T4289] [ 632.664551][ T4289] dump_stack_lvl+0x188/0x24e [ 632.669243][ T4289] ? show_regs_print_info+0x12/0x12 [ 632.674445][ T4289] ? load_image+0x410/0x410 [ 632.678959][ T4289] sysfs_create_dir_ns+0x26a/0x290 [ 632.684077][ T4289] ? __lock_acquire+0x7c40/0x7c40 [ 632.689126][ T4289] ? sysfs_warn_dup+0xa0/0xa0 [ 632.693808][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 632.699009][ T4289] kobject_add_internal+0x617/0xca0 [ 632.704213][ T4289] kobject_add+0x160/0x230 [ 632.708630][ T4289] ? kobject_init+0x1c0/0x1c0 [ 632.713309][ T4289] ? __raw_spin_lock_init+0x41/0x100 [ 632.718589][ T4289] ? klist_children_get+0x50/0x50 [ 632.723618][ T4289] ? get_device_parent+0x121/0x3e0 [ 632.728733][ T4289] device_add+0x470/0x1050 [ 632.733160][ T4289] hci_conn_add_sysfs+0xd1/0x1e0 [ 632.738105][ T4289] le_conn_complete_evt+0xfac/0x15c0 [ 632.743400][ T4289] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 632.749649][ T4289] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 632.755296][ T4289] ? mutex_unlock+0x10/0x10 [ 632.759804][ T4289] ? skb_pull_data+0xec/0x1f0 [ 632.764487][ T4289] hci_le_conn_complete_evt+0x183/0x440 [ 632.770037][ T4289] ? hci_remote_host_features_evt+0x230/0x230 [ 632.776102][ T4289] hci_event_packet+0x7b3/0x1290 [ 632.781049][ T4289] ? __lock_acquire+0x7c40/0x7c40 [ 632.786077][ T4289] ? bis_list+0x280/0x280 [ 632.790406][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 632.796301][ T4289] ? kcov_remote_start+0x4b0/0x7e0 [ 632.801410][ T4289] ? do_machine_check+0x380/0x750 [ 632.806439][ T4289] ? hci_send_to_monitor+0x9c/0x4a0 [ 632.811642][ T4289] hci_rx_work+0x3eb/0xd40 [ 632.816063][ T4289] ? _raw_spin_unlock+0x40/0x40 [ 632.820919][ T4289] ? process_one_work+0x7b4/0x1160 [ 632.826033][ T4289] process_one_work+0x8ab/0x1160 [ 632.830981][ T4289] ? worker_detach_from_pool+0x240/0x240 [ 632.836615][ T4289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 632.841644][ T4289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 632.847196][ T4289] ? wq_worker_running+0x97/0x190 [ 632.852229][ T4289] worker_thread+0xaf5/0x12a0 [ 632.856922][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 632.862825][ T4289] kthread+0x29d/0x330 [ 632.866889][ T4289] ? worker_clr_flags+0x1a0/0x1a0 [ 632.871912][ T4289] ? kthread_blkcg+0xd0/0xd0 [ 632.876521][ T4289] ret_from_fork+0x1f/0x30 [ 632.880962][ T4289] [ 632.900270][ T4289] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 632.919519][ T4289] Bluetooth: hci2: failed to register connection device [ 633.134648][T10518] loop8: detected capacity change from 0 to 512 [ 633.582295][T10518] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 633.610551][T10518] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.834730][ T9543] EXT4-fs (loop8): unmounting filesystem. [ 634.134476][T10533] fuse: Unknown parameter 'grou00000000000000000000' [ 635.859621][T10549] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 636.330586][T10555] zram: Can't change algorithm for initialized device [ 637.570866][T10565] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 638.205864][T10570] loop6: detected capacity change from 0 to 512 [ 638.221952][ T4289] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 638.231904][ T4289] CPU: 1 PID: 4289 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 638.239473][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 638.249548][ T4289] Workqueue: hci0 hci_rx_work [ 638.254261][ T4289] Call Trace: [ 638.257548][ T4289] [ 638.260492][ T4289] dump_stack_lvl+0x188/0x24e [ 638.265197][ T4289] ? show_regs_print_info+0x12/0x12 [ 638.270430][ T4289] ? load_image+0x410/0x410 [ 638.274979][ T4289] sysfs_create_dir_ns+0x26a/0x290 [ 638.280123][ T4289] ? __lock_acquire+0x7c40/0x7c40 [ 638.285189][ T4289] ? sysfs_warn_dup+0xa0/0xa0 [ 638.289897][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 638.295127][ T4289] kobject_add_internal+0x617/0xca0 [ 638.300361][ T4289] kobject_add+0x160/0x230 [ 638.304788][ T4289] ? kobject_init+0x1c0/0x1c0 [ 638.309466][ T4289] ? __raw_spin_lock_init+0x41/0x100 [ 638.314747][ T4289] ? klist_children_get+0x50/0x50 [ 638.319774][ T4289] ? get_device_parent+0x121/0x3e0 [ 638.324888][ T4289] device_add+0x470/0x1050 [ 638.329309][ T4289] hci_conn_add_sysfs+0xd1/0x1e0 [ 638.334250][ T4289] le_conn_complete_evt+0xfac/0x15c0 [ 638.339543][ T4289] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 638.345787][ T4289] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 638.351431][ T4289] ? mutex_unlock+0x10/0x10 [ 638.355933][ T4289] ? skb_pull_data+0xec/0x1f0 [ 638.360606][ T4289] hci_le_conn_complete_evt+0x183/0x440 [ 638.366161][ T4289] ? hci_remote_host_features_evt+0x230/0x230 [ 638.372226][ T4289] hci_event_packet+0x7b3/0x1290 [ 638.377178][ T4289] ? __lock_acquire+0x7c40/0x7c40 [ 638.382234][ T4289] ? bis_list+0x280/0x280 [ 638.386568][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 638.392463][ T4289] ? kcov_remote_start+0x4b0/0x7e0 [ 638.397570][ T4289] ? do_machine_check+0x380/0x750 [ 638.402600][ T4289] ? hci_send_to_monitor+0x9c/0x4a0 [ 638.407800][ T4289] hci_rx_work+0x3eb/0xd40 [ 638.412219][ T4289] ? _raw_spin_unlock+0x40/0x40 [ 638.417070][ T4289] ? process_one_work+0x7b4/0x1160 [ 638.422186][ T4289] process_one_work+0x8ab/0x1160 [ 638.427135][ T4289] ? worker_detach_from_pool+0x240/0x240 [ 638.432773][ T4289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 638.437794][ T4289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 638.443337][ T4289] ? wq_worker_running+0x97/0x190 [ 638.448367][ T4289] worker_thread+0xaf5/0x12a0 [ 638.453055][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 638.458954][ T4289] kthread+0x29d/0x330 [ 638.463016][ T4289] ? worker_clr_flags+0x1a0/0x1a0 [ 638.468035][ T4289] ? kthread_blkcg+0xd0/0xd0 [ 638.472621][ T4289] ret_from_fork+0x1f/0x30 [ 638.477048][ T4289] [ 638.509370][ T4289] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 638.523206][ T4289] Bluetooth: hci0: failed to register connection device [ 638.566590][T10570] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 639.178761][T10570] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.631188][ T8806] EXT4-fs (loop6): unmounting filesystem. [ 641.560052][T10649] zram: Cannot change disksize for initialized device [ 641.769243][ T26] audit: type=1326 audit(1788371354.095:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.6.1415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3257d9de99 code=0x0 [ 641.933432][T10629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.133178][T10665] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 643.366294][T10677] device syzkaller0 entered promiscuous mode [ 644.568256][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.629781][T10688] loop5: detected capacity change from 0 to 2048 [ 644.724135][T10688] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 644.732928][T10688] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.533021][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 645.667355][ T4289] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 645.684328][T10706] loop5: detected capacity change from 0 to 512 [ 645.783373][T10706] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 645.820302][T10706] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.984082][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 646.783693][T10719] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 646.805107][T10720] zram: Cannot change disksize for initialized device [ 649.269785][T10696] device syzkaller0 entered promiscuous mode [ 649.692917][T10741] device syzkaller0 entered promiscuous mode [ 649.868221][ T4289] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 649.883927][T10744] loop8: detected capacity change from 0 to 512 [ 649.967326][T10744] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 650.015669][T10744] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.031138][T10757] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 650.347536][ T9543] EXT4-fs (loop8): unmounting filesystem. [ 650.490300][T10768] zram: Cannot change disksize for initialized device [ 650.804804][ T26] audit: type=1326 audit(1788371363.139:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.1439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c2a99de99 code=0x0 [ 654.033797][T10791] loop7: detected capacity change from 0 to 2048 [ 654.102811][T10791] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 654.196408][T10791] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.350461][T10800] device syzkaller0 entered promiscuous mode [ 654.826277][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 654.893890][T10786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.958431][T10809] device syzkaller0 entered promiscuous mode [ 656.344683][T10817] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 658.227962][ T4791] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.354237][ T4791] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.483011][ T4791] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.784220][ T4791] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.187010][T10852] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 660.786906][T10856] cgroup: noprefix used incorrectly [ 661.778734][T10859] device syzkaller0 entered promiscuous mode [ 661.858153][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 661.867980][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 661.876367][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 661.910600][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 661.918268][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 661.930876][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.958129][T10862] loop5: detected capacity change from 0 to 2048 [ 662.063154][T10862] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 662.081971][T10862] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.345402][T10860] wlan0 speed is unknown, defaulting to 1000 [ 662.772474][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 664.636823][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 665.774130][T10914] loop7: detected capacity change from 0 to 128 [ 665.787268][T10914] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 666.459004][T10914] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 666.548469][ T4335] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 666.647338][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 667.885894][T10860] chnl_net:caif_netlink_parms(): no params data found [ 668.059261][ T4791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.086452][ T4791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.103547][ T4791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.117340][ T4791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.135430][ T4791] device bridge_slave_1 left promiscuous mode [ 668.274234][ T4791] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.331932][ T4791] device bridge_slave_0 left promiscuous mode [ 668.344197][ T4791] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.746335][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 669.146416][ T4791] device veth1_macvtap left promiscuous mode [ 669.182948][ T4791] device veth0_macvtap left promiscuous mode [ 669.276251][ T4791] device veth1_vlan left promiscuous mode [ 669.296099][ T4791] device veth0_vlan left promiscuous mode [ 670.264008][T10953] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 670.813101][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 670.830360][ T26] audit: type=1326 audit(1788371383.179:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz.7.1475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08c2f9de99 code=0x0 [ 671.490716][ T4791] team0 (unregistering): Port device team_slave_1 removed [ 671.567973][ T4791] team0 (unregistering): Port device team_slave_0 removed [ 671.644200][ T4791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.712205][ T4791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.135221][ T4791] bond0 (unregistering): Released all slaves [ 672.315098][T10939] device syzkaller0 entered promiscuous mode [ 672.920509][T10975] No such timeout policy "syz1" [ 675.483699][T10985] loop5: detected capacity change from 0 to 2048 [ 675.682587][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 675.866245][T10985] loop5: p2 < > p3 < p5 > p4 [ 675.870994][T10985] loop5: partition table partially beyond EOD, truncated [ 675.878517][T10985] loop5: p2 start 4278190080 is beyond EOD, truncated [ 675.886465][T10985] loop5: p4 size 8192 extends beyond EOD, truncated [ 675.895379][T10985] loop5: p5 size 8192 extends beyond EOD, truncated [ 679.295624][T10860] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.302924][T10860] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.337444][T10860] device bridge_slave_0 entered promiscuous mode [ 679.485844][T10860] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.555183][T10860] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.590946][T10860] device bridge_slave_1 entered promiscuous mode [ 679.656522][T11010] loop7: detected capacity change from 0 to 1024 [ 679.672946][T10860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.691655][T11010] EXT4-fs: Ignoring removed bh option [ 679.802709][T10860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.617525][T11010] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 680.747934][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 680.853799][T10860] team0: Port device team_slave_0 added [ 680.990917][T10860] team0: Port device team_slave_1 added [ 681.088041][T11027] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 681.222124][T10860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.229263][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.288583][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 681.408365][T10860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.177757][T10860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.622596][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.729066][ T26] audit: type=1326 audit(1788371395.075:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.8.1493" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4e5d9de99 code=0x0 [ 682.809893][T10860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.096363][T10860] device hsr_slave_0 entered promiscuous mode [ 683.225469][T10860] device hsr_slave_1 entered promiscuous mode [ 683.763593][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.770165][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.043360][T10860] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 684.090827][T10860] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 684.147414][T10860] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 684.189106][T10860] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 684.490997][T10860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.573828][T10018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.613753][T10018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.677460][T10860] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.722031][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 684.794672][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 684.843692][ T4791] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.850904][ T4791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.947748][T11077] loop5: detected capacity change from 0 to 128 [ 684.991658][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 685.026543][T11077] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 685.036424][T11077] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 685.076725][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 685.120555][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.142647][ T4791] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.149895][ T4791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.191756][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 685.210165][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 685.239040][T11071] device syzkaller0 entered promiscuous mode [ 685.326048][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 685.367573][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 685.396672][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 685.414500][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 685.433905][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 685.462199][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 685.482210][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.516163][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 685.535327][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.606384][T11082] loop7: detected capacity change from 0 to 2048 [ 685.619448][T10860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 685.626337][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 685.804086][T11082] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 685.804616][T11087] loop5: detected capacity change from 0 to 1024 [ 685.829958][T11087] EXT4-fs: inline encryption not supported [ 685.894733][T11087] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 685.947824][T11087] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.959011][T11082] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.066453][T11087] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.1501: lblock 3 mapped to illegal pblock 3 (length 3) [ 686.217582][T11087] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 686.253146][T11087] EXT4-fs (loop5): This should not happen!! Data will be lost [ 686.253146][T11087] [ 686.490189][ T4744] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 686.541975][ T4744] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 686.556837][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 686.558045][ T4744] EXT4-fs (loop5): This should not happen!! Data will be lost [ 686.558045][ T4744] [ 686.591576][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 687.093664][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 687.168978][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 687.612526][T10860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.899139][T11127] device syzkaller0 entered promiscuous mode [ 688.381046][T11141] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 688.929200][T11143] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 689.163311][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 689.176800][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 689.323273][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 689.353536][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 689.585090][T10860] device veth0_vlan entered promiscuous mode [ 689.687952][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 689.806345][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.052100][T10860] device veth1_vlan entered promiscuous mode [ 690.165745][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 690.234835][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 690.293125][T10860] device veth0_macvtap entered promiscuous mode [ 690.372639][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 690.391828][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.463166][T10860] device veth1_macvtap entered promiscuous mode [ 690.499130][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 690.576111][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 690.652447][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.742937][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.767688][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.814442][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.064361][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.238969][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.286107][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.337164][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.444451][T10860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.506053][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.579950][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.620712][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.683583][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.746337][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.823251][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.867554][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.878246][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.900538][T10860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.909364][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 691.942633][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 691.968936][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 692.000657][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 692.153399][T11177] device syzkaller0 entered promiscuous mode [ 692.212320][T10860] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.250476][T10860] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.314294][T10860] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.327896][T10860] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.993921][T11202] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 695.053796][T11213] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 698.705025][ T4822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.732627][T11230] No such timeout policy "syz1" [ 698.772801][ T4822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.052992][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 699.595052][T10006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.873006][T10006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.619936][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 708.427003][T11299] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a [ 709.554714][T11309] loop9: detected capacity change from 0 to 128 [ 709.562113][T11309] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 709.653403][T11309] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 709.703664][ T4412] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 713.378149][T11330] No such timeout policy "syz1" [ 715.664038][T11357] loop7: detected capacity change from 0 to 512 [ 715.778225][T11357] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 715.797921][T11357] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.115671][T11372] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 716.534669][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 716.715252][T11387] loop4: detected capacity change from 0 to 128 [ 716.809681][T11387] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 716.843289][T11387] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 716.896750][ T4412] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 718.078745][T11384] syz.9.1565 (11384): drop_caches: 2 [ 721.645835][T11421] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 723.481872][T11443] cgroup: noprefix used incorrectly [ 724.016092][T11444] loop4: detected capacity change from 0 to 512 [ 724.138645][T11444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 724.279387][T11448] loop9: detected capacity change from 0 to 512 [ 724.336573][T11444] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec01c, mo2=0102] [ 724.368763][T11444] System zones: 0-2, 18-18, 34-35 [ 724.418686][T11444] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 724.478362][T11444] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.492443][T11448] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 724.538282][T11448] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.642694][T11458] loop5: detected capacity change from 0 to 128 [ 724.657474][T11458] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 724.743271][T11458] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 724.829734][ T4718] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 725.714693][T10860] EXT4-fs (loop9): unmounting filesystem. [ 726.110420][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 726.725715][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 726.736401][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 726.745484][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 726.754474][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 726.763137][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 726.771331][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 728.240172][T11478] wlan0 speed is unknown, defaulting to 1000 [ 729.728067][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 730.282830][T11478] chnl_net:caif_netlink_parms(): no params data found [ 730.601417][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.651492][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.660161][T11478] device bridge_slave_0 entered promiscuous mode [ 730.668860][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.676171][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.685278][T11478] device bridge_slave_1 entered promiscuous mode [ 730.711832][T11478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.773863][T11513] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 730.786200][T11478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.928023][T11517] cgroup: noprefix used incorrectly [ 731.081650][T11514] loop5: detected capacity change from 0 to 512 [ 731.213536][T11514] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 731.242222][T11514] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.566009][T11478] team0: Port device team_slave_0 added [ 731.577066][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 731.598460][T11478] team0: Port device team_slave_1 added [ 731.614434][T11528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 731.650771][T11528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 731.679268][T11530] 8021q: VLANs not supported on hsr0 [ 731.854586][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 731.930478][ T4326] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.317214][T11478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.406494][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.484399][T11478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.688699][T11478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.724258][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.945457][T11478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.154349][ T4326] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.117615][ T4326] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.715889][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 735.065864][T11567] loop5: detected capacity change from 0 to 512 [ 735.275029][T11567] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 735.304412][T11567] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.383160][T11478] device hsr_slave_0 entered promiscuous mode [ 735.463555][T11478] device hsr_slave_1 entered promiscuous mode [ 735.497801][T11478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 735.520426][T11478] Cannot create hsr debugfs directory [ 735.626042][ T4326] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.783188][T11583] loop9: detected capacity change from 0 to 2048 [ 735.882170][T11584] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 735.918364][T11583] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 735.935252][T11583] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.953530][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 736.089314][T11590] 8021q: VLANs not supported on hsr0 [ 736.733650][T10860] EXT4-fs (loop9): unmounting filesystem. [ 736.772346][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 738.408077][T11612] loop5: detected capacity change from 0 to 128 [ 738.419396][T11612] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 738.518666][T11612] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 738.566388][ T5050] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 740.517686][T11621] loop5: detected capacity change from 0 to 1024 [ 740.718283][T11621] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 742.534822][T11637] loop4: detected capacity change from 0 to 512 [ 742.614113][T11637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 742.631572][T11637] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.815914][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 743.151644][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1616'. [ 743.440558][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 743.544644][T11644] loop7: detected capacity change from 0 to 128 [ 743.615687][T11644] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 743.645909][T11644] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.774282][ T26] audit: type=1804 audit(1788371456.156:112): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1617" name="/newroot/81/file1/file0" dev="loop7" ino=12 res=1 errno=0 [ 744.028589][T11478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 744.119988][T11478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 744.249129][T11478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 744.509749][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 744.589778][T11478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 745.399401][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.422433][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.951450][ T4326] device hsr_slave_0 left promiscuous mode [ 746.281924][T11684] loop4: detected capacity change from 0 to 128 [ 746.315308][T11684] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 746.327573][T11684] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 746.336294][T11684] FAT-fs (loop4): Filesystem has been set read-only [ 746.392690][ T4326] device hsr_slave_1 left promiscuous mode [ 747.281695][T11686] loop9: detected capacity change from 0 to 512 [ 747.508785][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.533564][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.876392][T11691] No such timeout policy "syz1" [ 748.092094][T11686] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 748.113858][T11686] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 748.288447][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.471732][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.634271][ T4326] device bridge_slave_1 left promiscuous mode [ 748.879393][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.091799][ T4326] device bridge_slave_0 left promiscuous mode [ 749.224206][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.353144][T11702] loop4: detected capacity change from 0 to 128 [ 749.656741][ T4326] device veth1_macvtap left promiscuous mode [ 749.718077][T10860] EXT4-fs (loop9): unmounting filesystem. [ 749.726580][T11702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 750.084630][ T4326] device veth0_macvtap left promiscuous mode [ 750.189291][T11701] loop5: detected capacity change from 0 to 512 [ 750.236158][T11702] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.247245][ T4326] device veth1_vlan left promiscuous mode [ 750.253086][ T4326] device veth0_vlan left promiscuous mode [ 750.357447][T11701] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 750.385780][T11701] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.404712][ T26] audit: type=1804 audit(1788371462.789:113): pid=11702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1629" name="/newroot/342/file1/file0" dev="loop4" ino=12 res=1 errno=0 [ 750.637654][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 750.660397][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 752.762431][T11739] No such timeout policy "syz1" [ 753.291733][T11741] loop4: detected capacity change from 0 to 512 [ 753.344239][T11741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 753.374045][T11741] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 753.692367][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 753.869369][T11748] loop7: detected capacity change from 0 to 128 [ 753.881227][T11748] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 753.918494][T11748] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 753.951763][ T4822] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 755.716656][ T4326] team0 (unregistering): Port device team_slave_1 removed [ 756.880346][T11760] loop7: detected capacity change from 0 to 512 [ 756.882725][ T4326] team0 (unregistering): Port device team_slave_0 removed [ 756.913037][T11762] loop4: detected capacity change from 0 to 128 [ 756.978001][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.989654][T11762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 757.054090][T11762] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.066448][T11760] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 757.105085][T11760] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.152723][ T26] audit: type=1804 audit(1788371469.553:114): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1643" name="/newroot/347/file1/file0" dev="loop4" ino=12 res=1 errno=0 [ 757.252124][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.270419][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 757.687271][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 758.019230][ T4326] bond0 (unregistering): Released all slaves [ 759.389675][ T4288] Bluetooth: hci1: command 0x2016 tx timeout [ 761.580182][T11478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.696584][T11478] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.892554][T11478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 761.918851][T11810] loop9: detected capacity change from 0 to 512 [ 761.987283][T11478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.137576][T11810] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 762.176061][T11810] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.354231][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 762.386353][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 762.415931][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 762.448558][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 762.477307][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.484538][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.517327][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 762.539934][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 762.559055][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.566254][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.825111][T10860] EXT4-fs (loop9): unmounting filesystem. [ 762.847334][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 762.871558][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 762.885055][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 762.898453][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 762.925613][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 763.000278][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 763.018087][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 763.076696][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 763.095319][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 763.116511][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 763.140730][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 763.156798][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 763.165094][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 764.143102][ T4275] Bluetooth: hci0: command 0x2016 tx timeout [ 764.836589][T11849] loop7: detected capacity change from 0 to 128 [ 764.847979][T11849] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 764.963651][T11849] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 765.165131][ T4822] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 766.342938][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 766.363504][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 766.413013][T11478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.825940][T11867] loop4: detected capacity change from 0 to 128 [ 767.741620][T11867] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 767.752253][T11867] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 767.761473][T11867] FAT-fs (loop4): Filesystem has been set read-only [ 768.725822][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 768.997379][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 769.130127][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 769.196888][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 769.246311][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 769.310347][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 769.359384][T11478] device veth0_vlan entered promiscuous mode [ 769.419141][T11478] device veth1_vlan entered promiscuous mode [ 769.533835][T11885] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 769.747131][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 769.867483][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 770.124919][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 770.196763][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 770.239926][T11478] device veth0_macvtap entered promiscuous mode [ 770.278794][T11478] device veth1_macvtap entered promiscuous mode [ 770.467060][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.513356][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.593400][T11895] loop5: detected capacity change from 0 to 128 [ 772.532363][T11895] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 772.543487][T11895] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 772.552234][T11895] FAT-fs (loop5): Filesystem has been set read-only [ 772.715891][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.772896][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.784920][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.826339][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.062630][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.078021][T11902] No such timeout policy "syz1" [ 773.146295][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.166050][T11478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.177662][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.189189][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.200995][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.219124][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.230599][ T4288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 773.240622][ T4288] CPU: 0 PID: 4288 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 773.248205][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 773.258291][ T4288] Workqueue: hci5 hci_rx_work [ 773.263003][ T4288] Call Trace: [ 773.266289][ T4288] [ 773.269233][ T4288] dump_stack_lvl+0x188/0x24e [ 773.273939][ T4288] ? show_regs_print_info+0x12/0x12 [ 773.279160][ T4288] ? load_image+0x410/0x410 [ 773.283752][ T4288] sysfs_create_dir_ns+0x26a/0x290 [ 773.288900][ T4288] ? __lock_acquire+0x7c40/0x7c40 [ 773.293974][ T4288] ? sysfs_warn_dup+0xa0/0xa0 [ 773.298685][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 773.303919][ T4288] kobject_add_internal+0x617/0xca0 [ 773.309149][ T4288] kobject_add+0x160/0x230 [ 773.313575][ T4288] ? kobject_init+0x1c0/0x1c0 [ 773.318354][ T4288] ? __raw_spin_lock_init+0x41/0x100 [ 773.323644][ T4288] ? klist_children_get+0x50/0x50 [ 773.328681][ T4288] ? get_device_parent+0x121/0x3e0 [ 773.333818][ T4288] device_add+0x470/0x1050 [ 773.338245][ T4288] hci_conn_add_sysfs+0xd1/0x1e0 [ 773.343192][ T4288] le_conn_complete_evt+0xfac/0x15c0 [ 773.348499][ T4288] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 773.354746][ T4288] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 773.360386][ T4288] ? mutex_unlock+0x10/0x10 [ 773.364905][ T4288] ? skb_pull_data+0xec/0x1f0 [ 773.369956][ T4288] hci_le_conn_complete_evt+0x183/0x440 [ 773.375535][ T4288] ? hci_remote_host_features_evt+0x230/0x230 [ 773.381607][ T4288] hci_event_packet+0x7b3/0x1290 [ 773.386557][ T4288] ? __lock_acquire+0x7c40/0x7c40 [ 773.391593][ T4288] ? bis_list+0x280/0x280 [ 773.395929][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 773.401869][ T4288] ? kcov_remote_start+0x4b0/0x7e0 [ 773.406984][ T4288] ? do_machine_check+0x380/0x750 [ 773.412029][ T4288] ? hci_send_to_monitor+0x9c/0x4a0 [ 773.417230][ T4288] hci_rx_work+0x3eb/0xd40 [ 773.421647][ T4288] ? _raw_spin_unlock+0x40/0x40 [ 773.426530][ T4288] ? process_one_work+0x7b4/0x1160 [ 773.431659][ T4288] process_one_work+0x8ab/0x1160 [ 773.436607][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 773.442239][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 773.447259][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 773.452804][ T4288] ? wq_worker_running+0x97/0x190 [ 773.457839][ T4288] worker_thread+0xaf5/0x12a0 [ 773.462534][ T4288] kthread+0x29d/0x330 [ 773.466595][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 773.471616][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 773.476289][ T4288] ret_from_fork+0x1f/0x30 [ 773.480724][ T4288] [ 773.491303][ T4288] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 773.504781][ T4288] Bluetooth: hci5: failed to register connection device [ 773.520609][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.529391][T11907] loop5: detected capacity change from 0 to 512 [ 773.531709][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.548603][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.562111][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.167533][T11478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.181131][T11907] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 774.221522][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 774.229500][T11907] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.245846][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 774.277384][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 774.301146][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 774.329517][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 774.348907][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 774.458095][T11478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.468563][T11478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.477336][T11478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.487441][T11478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.213639][ T6331] EXT4-fs (loop5): unmounting filesystem. [ 775.470498][ T4744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.499132][T11935] 8021q: VLANs not supported on hsr0 [ 775.500434][ T4744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.553007][ T4288] Bluetooth: hci5: command 0x2016 tx timeout [ 775.627322][T11937] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 776.274316][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 776.345935][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.364727][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.405246][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 776.736393][T11949] device syzkaller0 entered promiscuous mode [ 776.744542][T11955] No such timeout policy "syz1" [ 776.890220][T11958] loop2: detected capacity change from 0 to 128 [ 776.900310][T11958] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 777.032633][T11958] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 777.075799][T10010] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 780.907597][T12000] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 782.348424][T12024] loop4: detected capacity change from 0 to 512 [ 783.693917][T12024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 783.703345][T12024] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 786.718303][T12038] 8021q: VLANs not supported on hsr0 [ 786.919509][T12042] loop9: detected capacity change from 0 to 128 [ 786.926767][T12042] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 787.016647][T12042] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 787.071927][ T5050] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 788.566851][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 788.938672][T12054] file system registered [ 788.993945][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 789.080931][T12054] read descriptors [ 789.343534][ T4288] Bluetooth: hci4: link tx timeout [ 789.350895][ T4288] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 789.875264][ T4288] Bluetooth: hci4: link tx timeout [ 789.880994][ T4288] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 789.998206][ T6331] ffs_data_put(): freeing [ 790.208971][T12072] No such timeout policy "syz1" [ 790.352045][T12083] 8021q: VLANs not supported on hsr0 [ 790.489336][T12086] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 791.403237][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 792.550413][T12118] loop4: detected capacity change from 0 to 128 [ 792.557605][T12118] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 792.585638][T12118] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 792.619358][T10006] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 796.979670][T12127] loop7: detected capacity change from 0 to 256 [ 797.620242][T12140] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 798.151490][T12149] 8021q: VLANs not supported on hsr0 [ 798.161448][T12150] No such timeout policy "syz1" [ 799.374825][T12166] loop9: detected capacity change from 0 to 512 [ 799.489196][T12168] zram: Can't change algorithm for initialized device [ 799.548507][T12173] zram: Cannot change disksize for initialized device [ 799.571422][T12166] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 799.610891][T12166] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 799.742568][T12177] loop4: detected capacity change from 0 to 512 [ 799.825210][T10860] EXT4-fs (loop9): unmounting filesystem. [ 801.588637][T12189] loop9: detected capacity change from 0 to 128 [ 801.598839][T12189] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 802.689807][T12177] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 802.781107][T12189] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 804.042783][T12198] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 805.166367][T12208] loop9: detected capacity change from 0 to 128 [ 805.275444][T12208] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 805.331018][T12208] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 805.528144][T12213] device syzkaller0 entered promiscuous mode [ 806.573642][T12230] zram: Can't change algorithm for initialized device [ 806.586922][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.593375][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.637355][T12230] zram: Cannot change disksize for initialized device [ 806.639514][T12232] fuse: Unknown parameter 'user_id00000000000000000000' [ 807.896034][T12246] loop2: detected capacity change from 0 to 128 [ 807.993227][T12246] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 808.012043][T12246] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 808.020743][T12246] FAT-fs (loop2): Filesystem has been set read-only [ 811.093414][T12255] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 812.581193][T10860] EXT4-fs (loop9): unmounting filesystem. [ 816.013041][T12284] fuse: Unknown parameter 'user_id00000000000000000000' [ 816.126271][T12293] loop7: detected capacity change from 0 to 256 [ 816.231239][T12299] loop4: detected capacity change from 0 to 512 [ 816.319564][T12299] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 816.341585][T12299] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 817.407440][T12323] loop2: detected capacity change from 0 to 128 [ 817.414746][T12323] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 818.716072][T12323] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 819.698915][ T26] audit: type=1800 audit(1788371532.124:115): pid=12299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1767" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 820.080770][ T5050] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 820.371873][T12322] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 820.642918][T12335] read descriptors [ 820.906648][T12339] loop5: detected capacity change from 0 to 128 [ 820.917100][T12339] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 820.931734][T12339] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 820.964614][ T5050] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 821.643614][T12338] device syzkaller0 entered promiscuous mode [ 821.682956][T10860] ffs_data_put(): freeing [ 822.512430][T12351] loop7: detected capacity change from 0 to 128 [ 822.520015][T12351] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 822.577365][T12351] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 822.621413][ T9] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 826.421227][T12386] loop9: detected capacity change from 0 to 512 [ 826.472484][T12386] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 826.517402][T12386] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 826.715879][T10860] EXT4-fs (loop9): unmounting filesystem. [ 827.453564][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 828.766759][T12406] read descriptors [ 828.804925][ T4280] ffs_data_put(): freeing [ 830.131417][T12416] cgroup: noprefix used incorrectly [ 830.984171][T12393] 8021q: VLANs not supported on hsr0 [ 831.432972][T12436] loop4: detected capacity change from 0 to 512 [ 832.421635][T12445] loop7: detected capacity change from 0 to 128 [ 832.431605][T12445] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 834.098962][T12445] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 834.353342][ T5050] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 834.483805][T12436] EXT4-fs: failed to create workqueue [ 834.492262][T12436] EXT4-fs (loop4): mount failed [ 837.070775][T12473] cgroup: noprefix used incorrectly [ 837.083544][T12470] No such timeout policy "syz1" [ 837.448211][T12474] read descriptors [ 837.688218][T11478] ffs_data_put(): freeing [ 839.339049][T12498] capability: warning: `syz.9.1813' uses deprecated v2 capabilities in a way that may be insecure [ 839.573138][T12501] 8021q: VLANs not supported on hsr0 [ 839.782853][T12504] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 841.977356][T12526] No such timeout policy "syz1" [ 842.077672][T12528] read descriptors [ 842.310707][ T9490] ffs_data_put(): freeing [ 843.698105][T12542] loop9: detected capacity change from 0 to 128 [ 843.780732][T12542] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 843.792463][T12542] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 843.802630][T12542] FAT-fs (loop9): Filesystem has been set read-only [ 845.595429][T12561] loop9: detected capacity change from 0 to 256 [ 846.598913][T12572] read descriptors [ 846.818684][T11478] ffs_data_put(): freeing [ 847.251711][T12587] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 848.001728][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 848.013113][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 848.021744][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 848.030776][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 848.044388][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 848.053767][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 848.119282][T12600] wlan0 speed is unknown, defaulting to 1000 [ 848.534852][T12600] chnl_net:caif_netlink_parms(): no params data found [ 848.797259][T12600] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.909870][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.951030][T12600] device bridge_slave_0 entered promiscuous mode [ 849.106101][T12600] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.106645][T12617] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 849.113399][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.152764][T12623] cgroup: noprefix used incorrectly [ 849.181570][T12600] device bridge_slave_1 entered promiscuous mode [ 849.265487][T12600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.327392][T12600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.419303][T12435] bond0: (slave syz_tun): Releasing backup interface [ 849.538094][T12600] team0: Port device team_slave_0 added [ 849.564307][T12600] team0: Port device team_slave_1 added [ 849.669397][T12600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.704977][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.772030][T12600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.802813][T12600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.825412][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.024282][T12600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.035861][T12631] 8021q: VLANs not supported on hsr0 [ 850.075489][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 850.119114][T12600] device hsr_slave_0 entered promiscuous mode [ 850.174378][T12600] device hsr_slave_1 entered promiscuous mode [ 850.221051][T12600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 850.256189][T12600] Cannot create hsr debugfs directory [ 850.484685][T10860] ffs_data_put(): freeing [ 851.984240][T12600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 852.041631][T12600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 852.072566][T12600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 852.147623][T12600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 852.157390][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 852.227346][T12680] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 853.136423][T12600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.178254][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 853.194673][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 853.233050][T12600] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.284273][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 853.313968][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 853.364921][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.372090][ T4822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.427826][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 853.475086][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 853.501446][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 853.528330][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.535564][ T4822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.574011][T12693] 8021q: VLANs not supported on hsr0 [ 853.689426][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 853.709280][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 853.738455][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 853.772390][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 853.799401][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 853.818830][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 853.849553][T12600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 853.889599][T12600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 853.932138][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 853.946721][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 853.974011][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 854.011256][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 854.054472][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 854.090393][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 854.233908][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 854.257795][T12705] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 854.532397][T12715] 8021q: VLANs not supported on hsr0 [ 856.142539][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 856.150112][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 856.191445][T12600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.230743][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 856.251396][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 856.297366][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 856.312656][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 856.323526][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 856.395889][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 856.459466][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 856.485315][T12600] device veth0_vlan entered promiscuous mode [ 856.539744][T12600] device veth1_vlan entered promiscuous mode [ 856.656459][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 856.706218][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 856.733180][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 856.763019][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 856.805163][T12600] device veth0_macvtap entered promiscuous mode [ 856.868994][T12600] device veth1_macvtap entered promiscuous mode [ 857.099373][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.281754][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.498934][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.612304][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.623071][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.638949][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.662687][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.698810][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.729360][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.771500][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.820154][T12600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.911691][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 857.931269][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 857.943277][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 858.024261][T12761] loop9: detected capacity change from 0 to 128 [ 858.034409][T12761] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 858.097026][T12761] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 858.129545][T10038] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 858.606288][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 859.063958][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.112926][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.152646][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.220765][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.284147][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.366058][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.432351][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.513995][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.589415][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.670165][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.739717][T12600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.750326][T12600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.759515][T12600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.770548][T12600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.779384][T12600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.836298][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 859.866133][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 860.633231][ T5145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.719241][ T5145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.729840][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 860.843708][T12792] 8021q: VLANs not supported on hsr0 [ 860.960259][T10038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.030062][T10038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.039460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 862.800887][T12822] 8021q: VLANs not supported on hsr0 [ 862.989330][T12823] loop2: detected capacity change from 0 to 128 [ 862.996479][T12823] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 863.034090][T12823] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 863.079955][ T4744] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 864.017276][T12836] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 864.383316][T12843] loop9: detected capacity change from 0 to 128 [ 864.528436][T12843] EXT4-fs (loop9): Test dummy encryption mode enabled [ 864.634448][T12843] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 864.758369][T12843] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 866.171920][T12878] loop7: detected capacity change from 0 to 256 [ 866.535745][T10860] EXT4-fs (loop9): unmounting filesystem. [ 867.492813][T12897] 8021q: VLANs not supported on hsr0 [ 867.994697][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.001110][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.850229][T12924] loop9: detected capacity change from 0 to 512 [ 868.927155][T12924] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 869.028603][T12924] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1902: bg 0: block 104: invalid block bitmap [ 869.052572][T12930] loop7: detected capacity change from 0 to 256 [ 869.099567][T12924] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 869.116957][T12924] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1902: invalid indirect mapped block 1 (level 1) [ 869.131722][T12924] EXT4-fs (loop9): 1 truncate cleaned up [ 869.137744][T12924] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 869.216668][T12924] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 869.855998][T10860] EXT4-fs (loop9): unmounting filesystem. [ 870.201708][T12948] 8021q: VLANs not supported on hsr0 [ 871.613853][T12962] loop7: detected capacity change from 0 to 512 [ 871.698718][T12962] EXT4-fs: Ignoring removed i_version option [ 871.705005][T12962] EXT4-fs: Ignoring removed nobh option [ 871.769243][T12962] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 871.804504][T12962] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 872.304371][T12972] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 872.873393][T12981] loop7: detected capacity change from 0 to 4096 [ 872.941579][T12981] EXT4-fs: Ignoring removed bh option [ 872.982315][T12989] loop2: detected capacity change from 0 to 256 [ 873.013277][T12981] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 874.798304][ T9490] EXT4-fs (loop7): unmounting filesystem. [ 876.892086][T13020] zram: Cannot change disksize for initialized device [ 878.358540][T13045] loop9: detected capacity change from 0 to 256 [ 878.926421][T13050] loop2: detected capacity change from 0 to 128 [ 878.936294][T13050] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 878.957506][T13050] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 878.989216][T10006] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 880.567406][T13055] wlan0 speed is unknown, defaulting to 1000 [ 880.677172][T13057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 880.760314][T13057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 881.831505][T13071] zram: Cannot change disksize for initialized device [ 882.780090][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 882.792006][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 882.802455][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 882.810657][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 882.819902][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 882.828673][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 883.240678][T13085] wlan0 speed is unknown, defaulting to 1000 [ 884.921501][T13126] loop9: detected capacity change from 0 to 512 [ 884.938535][T13109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.951256][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 885.319242][T13126] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 885.328752][T13126] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 885.911422][T13085] chnl_net:caif_netlink_parms(): no params data found [ 887.026913][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 887.273495][T13140] zram: Cannot change disksize for initialized device [ 887.327327][T10860] EXT4-fs (loop9): unmounting filesystem. [ 887.539902][T13147] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 887.880963][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.977807][T13085] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.989569][T13085] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.015138][T13085] device bridge_slave_0 entered promiscuous mode [ 888.202481][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.247220][T13085] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.260781][T13085] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.294274][T13085] device bridge_slave_1 entered promiscuous mode [ 888.405386][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.596709][T13085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.097959][T13179] loop9: detected capacity change from 0 to 128 [ 889.105599][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 889.112566][T13179] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 889.124787][T13179] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 889.133449][T13179] FAT-fs (loop9): Filesystem has been set read-only [ 890.037432][T13085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.881673][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.175171][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 891.227446][T13085] team0: Port device team_slave_0 added [ 891.446718][T13195] device syzkaller0 entered promiscuous mode [ 891.498540][T13085] team0: Port device team_slave_1 added [ 891.583663][T13199] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 894.284524][T13244] loop2: detected capacity change from 0 to 128 [ 894.293570][T13244] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 894.305550][T13244] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 894.314731][T13244] FAT-fs (loop2): Filesystem has been set read-only [ 895.270724][T13251] No such timeout policy "syz1" [ 896.652783][T13085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.816597][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.090897][T13085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.328405][T13085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.341405][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.389494][T13085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.453068][T13252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.466917][T13266] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 897.517598][T13085] device hsr_slave_0 entered promiscuous mode [ 897.525335][T13085] device hsr_slave_1 entered promiscuous mode [ 897.532557][T13085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.540920][T13085] Cannot create hsr debugfs directory [ 898.913201][T13290] device syzkaller0 entered promiscuous mode [ 899.383660][T13299] No such timeout policy "syz1" [ 900.877114][T13319] loop2: detected capacity change from 0 to 512 [ 901.189105][T13319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 901.198711][T13319] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 901.794209][ T26] audit: type=1800 audit(1788371614.255:116): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1996" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 902.817570][ T4317] wlan0 speed is unknown, defaulting to 1000 [ 902.843245][T11478] EXT4-fs (loop2): unmounting filesystem. [ 902.860702][ T4317] ================================================================== [ 902.868811][ T4317] BUG: KASAN: use-after-free in siw_query_port+0x359/0x450 [ 902.876060][ T4317] Read of size 4 at addr ffff88807def40e0 by task kworker/1:3/4317 [ 902.883967][ T4317] [ 902.886303][ T4317] CPU: 1 PID: 4317 Comm: kworker/1:3 Not tainted syzkaller #0 [ 902.893772][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 902.903841][T13335] read descriptors [ 902.903841][ T4317] Workqueue: infiniband ib_cache_event_task [ 902.913471][ T4317] Call Trace: [ 902.916755][ T4317] [ 902.919691][ T4317] dump_stack_lvl+0x188/0x24e [ 902.924386][ T4317] ? __lock_acquire+0x7c40/0x7c40 [ 902.929435][ T4317] ? show_regs_print_info+0x12/0x12 [ 902.934657][ T4317] ? load_image+0x410/0x410 [ 902.939170][ T4317] ? __virt_addr_valid+0x467/0x540 [ 902.944322][ T4317] ? siw_query_port+0x359/0x450 [ 902.949187][ T4317] print_report+0xa8/0x210 [ 902.953626][ T4317] kasan_report+0x10b/0x140 [ 902.958189][ T4317] ? siw_query_port+0x359/0x450 [ 902.963070][ T4317] siw_query_port+0x359/0x450 [ 902.967761][ T4317] ib_cache_update+0x1bd/0x9c0 [ 902.972522][ T4317] ? ib_cache_setup_one+0x5c0/0x5c0 [ 902.977709][ T4317] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 902.983687][ T4317] ? __lock_acquire+0x7c40/0x7c40 [ 902.988809][ T4317] ? read_lock_is_recursive+0x10/0x10 [ 902.994172][ T4317] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 903.000071][ T4317] ? _raw_spin_unlock+0x40/0x40 [ 903.004911][ T4317] ib_cache_event_task+0xcf/0x1c0 [ 903.009930][ T4317] ? process_one_work+0x7b4/0x1160 [ 903.015035][ T4317] process_one_work+0x8ab/0x1160 [ 903.019967][ T4317] ? worker_detach_from_pool+0x240/0x240 [ 903.025591][ T4317] ? _raw_spin_lock_irq+0xb7/0xf0 [ 903.030605][ T4317] ? _raw_spin_lock_irqsave+0x100/0x100 [ 903.036139][ T4317] ? wq_worker_running+0x97/0x190 [ 903.041157][ T4317] worker_thread+0xaf5/0x12a0 [ 903.045829][ T4317] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 903.051716][ T4317] kthread+0x29d/0x330 [ 903.055774][ T4317] ? worker_clr_flags+0x1a0/0x1a0 [ 903.060787][ T4317] ? kthread_blkcg+0xd0/0xd0 [ 903.065366][ T4317] ret_from_fork+0x1f/0x30 [ 903.069782][ T4317] [ 903.072788][ T4317] [ 903.075102][ T4317] The buggy address belongs to the physical page: [ 903.081500][ T4317] page:ffffea0001f7bd00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7def4 [ 903.091637][ T4317] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 903.098744][ T4317] raw: 00fff00000000000 ffffea0001107808 ffff8880b8f415f0 0000000000000000 [ 903.107316][ T4317] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 903.115883][ T4317] page dumped because: kasan: bad access detected [ 903.122291][ T4317] page_owner tracks the page as freed [ 903.127640][ T4317] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x546dc0(GFP_USER|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO|__GFP_ACCOUNT), pid 6331, tgid 6331 (syz-executor), ts 323845952930, free_ts 902829632220 [ 903.149698][ T4317] post_alloc_hook+0x173/0x1a0 [ 903.154538][ T4317] get_page_from_freelist+0x206b/0x2180 [ 903.160076][ T4317] __alloc_pages+0x1ec/0x4f0 [ 903.164657][ T4317] __kmalloc_large_node+0x8c/0x1f0 [ 903.169822][ T4317] __kmalloc_node+0x111/0x240 [ 903.174492][ T4317] kvmalloc_node+0x6c/0x180 [ 903.179030][ T4317] alloc_netdev_mqs+0x84/0xf10 [ 903.183826][ T4317] ieee80211_if_add+0xbfe/0x1580 [ 903.188830][ T4317] ieee80211_register_hw+0x2e7b/0x39f0 [ 903.194316][ T4317] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 903.200100][ T4317] hwsim_new_radio_nl+0xab7/0xc90 [ 903.205115][ T4317] genl_family_rcv_msg_doit+0x22f/0x350 [ 903.210683][ T4317] genl_rcv_msg+0x601/0x790 [ 903.215171][ T4317] netlink_rcv_skb+0x1ef/0x440 [ 903.219961][ T4317] genl_rcv+0x24/0x40 [ 903.223931][ T4317] netlink_unicast+0x7ad/0x920 [ 903.228689][ T4317] page last free stack trace: [ 903.233346][ T4317] free_unref_page_prepare+0x8e5/0x9e0 [ 903.238797][ T4317] free_unref_page+0x2e/0x3f0 [ 903.243469][ T4317] free_large_kmalloc+0xfd/0x1a0 [ 903.248398][ T4317] device_release+0x92/0x1c0 [ 903.252988][ T4317] kobject_put+0x217/0x450 [ 903.257395][ T4317] netdev_run_todo+0xca9/0xdb0 [ 903.262167][ T4317] ieee80211_unregister_hw+0xfc/0x290 [ 903.267590][ T4317] mac80211_hwsim_del_radio+0x285/0x480 [ 903.273149][ T4317] hwsim_exit_net+0x589/0x650 [ 903.277828][ T4317] cleanup_net+0x703/0xba0 [ 903.282243][ T4317] process_one_work+0x8ab/0x1160 [ 903.287178][ T4317] worker_thread+0xaf5/0x12a0 [ 903.291845][ T4317] kthread+0x29d/0x330 [ 903.295900][ T4317] ret_from_fork+0x1f/0x30 [ 903.300312][ T4317] [ 903.302621][ T4317] Memory state around the buggy address: [ 903.308235][ T4317] ffff88807def3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 903.316281][ T4317] ffff88807def4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 903.324416][ T4317] >ffff88807def4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 903.332549][ T4317] ^ [ 903.339725][ T4317] ffff88807def4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 903.347770][ T4317] ffff88807def4180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 903.355820][ T4317] ================================================================== [ 903.820527][ T4317] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 903.827770][ T4317] CPU: 1 PID: 4317 Comm: kworker/1:3 Not tainted syzkaller #0 [ 903.835242][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 903.845310][ T4317] Workqueue: infiniband ib_cache_event_task [ 903.851653][ T4317] Call Trace: [ 903.854935][ T4317] [ 903.857866][ T4317] dump_stack_lvl+0x188/0x24e [ 903.862554][ T4317] ? memcpy+0x3c/0x60 [ 903.866605][ T4317] ? show_regs_print_info+0x12/0x12 [ 903.871807][ T4317] ? load_image+0x410/0x410 [ 903.876320][ T4317] panic+0x2d3/0x710 [ 903.880220][ T4317] ? bpf_jit_dump+0xd0/0xd0 [ 903.884735][ T4317] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 903.890742][ T4317] ? _raw_spin_unlock+0x40/0x40 [ 903.895601][ T4317] ? print_memory_metadata+0x314/0x400 [ 903.901074][ T4317] check_panic_on_warn+0x80/0xa0 [ 903.906098][ T4317] ? siw_query_port+0x359/0x450 [ 903.910968][ T4317] end_report+0x66/0x110 [ 903.915231][ T4317] kasan_report+0x118/0x140 [ 903.919751][ T4317] ? siw_query_port+0x359/0x450 [ 903.924617][ T4317] siw_query_port+0x359/0x450 [ 903.929305][ T4317] ib_cache_update+0x1bd/0x9c0 [ 903.934081][ T4317] ? ib_cache_setup_one+0x5c0/0x5c0 [ 903.939290][ T4317] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 903.945274][ T4317] ? __lock_acquire+0x7c40/0x7c40 [ 903.950307][ T4317] ? read_lock_is_recursive+0x10/0x10 [ 903.955683][ T4317] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 903.961576][ T4317] ? _raw_spin_unlock+0x40/0x40 [ 903.966428][ T4317] ib_cache_event_task+0xcf/0x1c0 [ 903.971459][ T4317] ? process_one_work+0x7b4/0x1160 [ 903.976576][ T4317] process_one_work+0x8ab/0x1160 [ 903.981537][ T4317] ? worker_detach_from_pool+0x240/0x240 [ 903.987181][ T4317] ? _raw_spin_lock_irq+0xb7/0xf0 [ 903.992212][ T4317] ? _raw_spin_lock_irqsave+0x100/0x100 [ 903.997766][ T4317] ? wq_worker_running+0x97/0x190 [ 904.002801][ T4317] worker_thread+0xaf5/0x12a0 [ 904.007487][ T4317] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 904.013387][ T4317] kthread+0x29d/0x330 [ 904.017454][ T4317] ? worker_clr_flags+0x1a0/0x1a0 [ 904.022478][ T4317] ? kthread_blkcg+0xd0/0xd0 [ 904.027068][ T4317] ret_from_fork+0x1f/0x30 [ 904.031498][ T4317] [ 904.034798][ T4317] Kernel Offset: disabled [ 904.039122][ T4317] Rebooting in 86400 seconds..