last executing test programs: 22.560255246s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 20.524033374s ago: executing program 0 (id=6): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xffffffff) 19.587507611s ago: executing program 2 (id=8): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 18.790419376s ago: executing program 0 (id=10): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0), 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\t\x00\x00', 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="634a8cedb2355d50f89db3c3c7e0d065719905fba10cf679e74e00adfedd824b22e8e401d3313dd835f3df8f377776de2993a88e7e3d891215d8fc1a411fca4e2d40d1ed44f49ef2f5d8634f230b004630ef4004773b4438e0c2bd215eda0d754b0a741644e493a6cd7a7ffd632796c6dc0d4b6d0571ec6f21ffcc394fe705706060ad53c80cca13cb2aed34a3947ff5ae10807fcd53a867d3ce116aea8a3e87d0c11886a93c43d4d912beb200e03e13f8a379853cbe8f1a056642c35724a0677700"/204, 0xcc}], 0x1}, 0x8800) syz_usb_connect(0x5, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) listen(r0, 0xfffffffc) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0xe85, 0x4) 16.249501526s ago: executing program 32 (id=10): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0), 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\t\x00\x00', 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="634a8cedb2355d50f89db3c3c7e0d065719905fba10cf679e74e00adfedd824b22e8e401d3313dd835f3df8f377776de2993a88e7e3d891215d8fc1a411fca4e2d40d1ed44f49ef2f5d8634f230b004630ef4004773b4438e0c2bd215eda0d754b0a741644e493a6cd7a7ffd632796c6dc0d4b6d0571ec6f21ffcc394fe705706060ad53c80cca13cb2aed34a3947ff5ae10807fcd53a867d3ce116aea8a3e87d0c11886a93c43d4d912beb200e03e13f8a379853cbe8f1a056642c35724a0677700"/204, 0xcc}], 0x1}, 0x8800) syz_usb_connect(0x5, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) listen(r0, 0xfffffffc) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0xe85, 0x4) 16.177741235s ago: executing program 2 (id=13): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0xb2, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x1, 0xd4a, 0xffefe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x3ff, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x1, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0xffffffff, 0x9, 0x6, 0xffff, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x6, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x5, 0x8001, 0x7, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x1, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x400, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x6, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x0, 0x7, 0x3, 0x8241, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0x7, 0xf, 0x0, 0x3, 0x7, 0xd, 0x56be]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x0, 0x0, 0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x7], [0x0, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffd, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x99, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x2, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 15.429926156s ago: executing program 2 (id=16): bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) pwrite64(r0, &(0x7f0000000880)='u', 0x1, 0x83) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) pwrite64(r1, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x100) 14.556940982s ago: executing program 4 (id=17): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x400000004a882, 0x0) r1 = dup(r0) read$snddsp(r1, &(0x7f0000000300)=""/57, 0x39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 14.151093954s ago: executing program 1 (id=18): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x18}, 0x5, 0x2, 0x0, 0x1, 0xfffa, 0x7fe}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 13.771809357s ago: executing program 3 (id=19): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, 0x0}, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x4, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x71, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x4, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfffff001, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x6, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0x1, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x3, 0x4, 0x5, 0xf23, 0xe2eb, 0x6, 0xfffffffb, 0xef5, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x6, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0xfffffffb, 0x2, 0x5, 0x11, 0x2, 0x14c, 0x60a7, 0x6, 0x35b0fa9a, 0x400007, 0x2, 0x5, 0x735, 0x8, 0x3, 0x50fd, 0x10001, 0x3, 0x9, 0x54, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10200, 0xfffffffe, 0x8, 0x2b94, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x19, 0xb1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13.340331649s ago: executing program 4 (id=20): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e9780000000000000400"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 12.430965582s ago: executing program 3 (id=21): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)="95b938", 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000044) 12.324367428s ago: executing program 1 (id=22): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x1, 0xc56, &(0x7f0000001bc0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x5) fsync(r0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 12.138784223s ago: executing program 2 (id=23): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$eJzs3T+IHFUYAPBvb/Z27yThrhCCgjDaCXokURFtvBAuENwmyuKfQlxMonJ7BnK4mBTZnI1YCpYKgpUWWlikE0RQxM7C1gghKhaaLmDIyOzM/rvdvYhy+YO/X7H58t73vfdm78HODey7l1dj/fh8nLxy5XIsLFSiunp4Na5WYjmS6Dsfk2rFPx9N6QIAbnNXsyz+zAoRX/6TksrurwoA2E29z/9X9460vP3NTvmZT38AuOOVv/8vjrYl23IWZhWf2rVlAQC7aPz5f0Q8MJFSG4bViXsDAODO8+wLLz59qBHxTJouRGy802l2mvHksP/QyXg92nEi9sdSXIsobhTyl0rv9cjRxtr+NE278ctyNPOKTjNio9tpFncKh5JefT0OxFIsl/Xl3UaWZcmRLxprB9KeiDjf7c0fG5VOcz4Wy/l/uitOxMFI4+6J+oijjbWDaTlAc6NfPx+xNXxuka9/JZbih1fiVLTjeOS1/duaxtq5A2l6OGvsqQzru51mvZdXmPkEBAAAAAAAAAAAAAAAAAAAAAAA/pWVdGB5cH5ONjy/Z2VlSn/vfJyivjwfaKs4HyirZ5Flf7z1cPPdJMbOB9p2Pk+306zG3K29dAAAAAAAAAAAAAAAAAAAALhtbJ6pRavdPnF688zZ9dGge3rzzFxE5C1vfPfZ14sxnrNYDjBeNRZUy5SRrnRYlSX95CwZyymDJJ+8Ui1aPr0wWPFoTn1wFVOXUZ/aVS3WvPf+Sx8Mu+5L+iNfHyYnMfW6zibbllEEC2Nv7Oy3ZYfg4A1yLmZZNqv83EuTVVGJqE5Z6n8Ksjz49vJr9zyyue+xXstXWeHBh5aeu/j+x7+tt9r5zLl2u3Z681q23ir/P32zzQ6S/v755NJgs1VGd0K19ej1Y3tmjLw13tJKfvz9+Xvf+75smdv5x5SNtrw50lUpq5Ji0s+3l9eKIF/moOupPMjfo8m55qds/mnB47Fzzg0uZ9+Hq60L537+dWr53OQmGdnLDuoAAAAAAAAAAAAAAAAAAICbYuS74qXyy77zO1U9cWz3VwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN8/w7/8Pgpjb2tYyO6iWw+Qtf3VjMqeeDxi1kRmXb9GVAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf/Z3AAAA//8HNl2q") statx(0xffffffffffffffff, 0x0, 0x800, 0x10, 0x0) getrusage(0x1, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500eeffffff0000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, 0x0, &(0x7f0000000580)=r4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 12.071766174s ago: executing program 4 (id=24): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18050000000000000000000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000b500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) 11.46002981s ago: executing program 3 (id=25): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0xb2, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x1, 0xd4a, 0xffefe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x3ff, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x1, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0xffffffff, 0x9, 0x6, 0xffff, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x6, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x5, 0x8001, 0x7, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x1, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x400, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x6, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x0, 0x7, 0x3, 0x8241, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0x7, 0xf, 0x0, 0x3, 0x7, 0xd, 0x56be]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x0, 0x0, 0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x7], [0x0, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffd, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x99, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x2, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 11.239123428s ago: executing program 4 (id=26): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 10.690951233s ago: executing program 1 (id=27): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) pipe2$9p(0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(0xffffffffffffffff) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 10.580510471s ago: executing program 3 (id=28): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[], 0x1, 0xa27, &(0x7f00000029c0)="$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") setuid(0xee00) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086e8b, 0x0) 9.921812623s ago: executing program 4 (id=29): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xa, 0x801000089}, 0x0) msgget$private(0x0, 0xc4) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xa4602, 0x18) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x59616d61, 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001240)='./file1\x00', &(0x7f0000000180), &(0x7f0000000180)=ANY=[], 0x841, 0x0) 7.085502059s ago: executing program 1 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6.095649081s ago: executing program 3 (id=31): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.946395851s ago: executing program 2 (id=32): r0 = socket(0x11, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @random="bdd1221610b5"}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x10) 4.145900332s ago: executing program 1 (id=33): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e9780000000000000400"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 3.352220178s ago: executing program 3 (id=34): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket(0x6, 0x0, 0x8) socket$key(0xf, 0x3, 0x2) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) 1.682182515s ago: executing program 4 (id=35): mount$tmpfs(0x0, 0x0, 0x0, 0x1200002, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2a00a9, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x37]}}]}) open(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xd4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000940)={0x1, 0x2, 0x8aa5, 0x1, 0x3}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.584410128s ago: executing program 2 (id=36): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6a8, &(0x7f0000001dc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x130) getdents64(r0, &(0x7f0000001f80)=""/4098, 0x1002) 0s ago: executing program 1 (id=37): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0xb2, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x1, 0xd4a, 0xffefe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x3ff, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x1, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0xffffffff, 0x9, 0x6, 0xffff, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x6, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x5, 0x8001, 0x7, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x1, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x400, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x6, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x0, 0x7, 0x3, 0x8241, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0x7, 0xf, 0x0, 0x3, 0x7, 0xd, 0x56be]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x0, 0x0, 0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x7], [0x0, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffd, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x99, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x2, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. syzkaller login: [ 205.169235][ T5783] cgroup: Unknown subsys name 'net' [ 205.338241][ T5783] cgroup: Unknown subsys name 'cpuset' [ 205.357841][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 212.171059][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 217.920315][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.943607][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.955254][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.965622][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.976502][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.001171][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.010155][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.011010][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.018239][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.027289][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.034295][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.043787][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.054780][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.062847][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.074288][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.083108][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.091072][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.099566][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.110047][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.121794][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.135843][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.146469][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.163430][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.177950][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.213779][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.609652][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 220.044096][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 220.067152][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 220.122283][ T5802] Bluetooth: hci0: command tx timeout [ 220.202355][ T5802] Bluetooth: hci2: command tx timeout [ 220.202419][ T5814] Bluetooth: hci3: command tx timeout [ 220.282524][ T5802] Bluetooth: hci1: command tx timeout [ 220.288163][ T5802] Bluetooth: hci4: command tx timeout [ 220.668268][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 220.758970][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.767322][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.775306][ T5804] bridge_slave_0: entered allmulticast mode [ 220.785377][ T5804] bridge_slave_0: entered promiscuous mode [ 220.799799][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 220.905598][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.913543][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.921202][ T5804] bridge_slave_1: entered allmulticast mode [ 220.931119][ T5804] bridge_slave_1: entered promiscuous mode [ 221.360631][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.448003][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.618832][ T5804] team0: Port device team_slave_0 added [ 221.936399][ T5804] team0: Port device team_slave_1 added [ 221.946183][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.958946][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.966838][ T5806] bridge_slave_0: entered allmulticast mode [ 221.975954][ T5806] bridge_slave_0: entered promiscuous mode [ 222.131391][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.139361][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.149460][ T5806] bridge_slave_1: entered allmulticast mode [ 222.162602][ T5806] bridge_slave_1: entered promiscuous mode [ 222.202517][ T5814] Bluetooth: hci0: command tx timeout [ 222.220752][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.228799][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.237157][ T5799] bridge_slave_0: entered allmulticast mode [ 222.246092][ T5799] bridge_slave_0: entered promiscuous mode [ 222.284288][ T5814] Bluetooth: hci3: command tx timeout [ 222.290060][ T5814] Bluetooth: hci2: command tx timeout [ 222.375738][ T5814] Bluetooth: hci4: command tx timeout [ 222.376563][ T5802] Bluetooth: hci1: command tx timeout [ 222.393394][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.400961][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.409573][ T5816] bridge_slave_0: entered allmulticast mode [ 222.419063][ T5816] bridge_slave_0: entered promiscuous mode [ 222.442578][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.496186][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.504037][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.511701][ T5799] bridge_slave_1: entered allmulticast mode [ 222.520595][ T5799] bridge_slave_1: entered promiscuous mode [ 222.533646][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.541003][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.568551][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.599666][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.613671][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.621243][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.629458][ T5816] bridge_slave_1: entered allmulticast mode [ 222.639602][ T5816] bridge_slave_1: entered promiscuous mode [ 222.780519][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.789794][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.816469][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.917279][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.925408][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.935031][ T5800] bridge_slave_0: entered allmulticast mode [ 222.944406][ T5800] bridge_slave_0: entered promiscuous mode [ 223.046768][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.057393][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.065400][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.073437][ T5800] bridge_slave_1: entered allmulticast mode [ 223.084774][ T5800] bridge_slave_1: entered promiscuous mode [ 223.106670][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.165404][ T5806] team0: Port device team_slave_0 added [ 223.185435][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.244763][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.341286][ T5806] team0: Port device team_slave_1 added [ 223.438139][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.530550][ T5816] team0: Port device team_slave_0 added [ 223.599075][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.619672][ T5799] team0: Port device team_slave_0 added [ 223.643866][ T5804] hsr_slave_0: entered promiscuous mode [ 223.654262][ T5804] hsr_slave_1: entered promiscuous mode [ 223.710135][ T5816] team0: Port device team_slave_1 added [ 223.765759][ T5799] team0: Port device team_slave_1 added [ 223.840948][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.849775][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.877244][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.012842][ T5800] team0: Port device team_slave_0 added [ 224.023038][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.030271][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.057450][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.072653][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.079838][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.106797][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.194576][ T5800] team0: Port device team_slave_1 added [ 224.226125][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.233516][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.261496][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.276546][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.282988][ T5802] Bluetooth: hci0: command tx timeout [ 224.284188][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.315890][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.332224][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.339561][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.366585][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.366694][ T5802] Bluetooth: hci2: command tx timeout [ 224.379952][ T5814] Bluetooth: hci3: command tx timeout [ 224.445075][ T5802] Bluetooth: hci1: command tx timeout [ 224.445168][ T5814] Bluetooth: hci4: command tx timeout [ 224.604505][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.611663][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.638432][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.760206][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.767842][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.794481][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.966254][ T5806] hsr_slave_0: entered promiscuous mode [ 224.975449][ T5806] hsr_slave_1: entered promiscuous mode [ 224.984345][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 224.990306][ T5806] Cannot create hsr debugfs directory [ 225.019339][ T5799] hsr_slave_0: entered promiscuous mode [ 225.029418][ T5799] hsr_slave_1: entered promiscuous mode [ 225.038251][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 225.044597][ T5799] Cannot create hsr debugfs directory [ 225.121693][ T5816] hsr_slave_0: entered promiscuous mode [ 225.132768][ T5816] hsr_slave_1: entered promiscuous mode [ 225.141511][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 225.147660][ T5816] Cannot create hsr debugfs directory [ 225.473470][ T5800] hsr_slave_0: entered promiscuous mode [ 225.483459][ T5800] hsr_slave_1: entered promiscuous mode [ 225.491333][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 225.497595][ T5800] Cannot create hsr debugfs directory [ 226.363894][ T5814] Bluetooth: hci0: command tx timeout [ 226.457385][ T5814] Bluetooth: hci3: command tx timeout [ 226.463279][ T5814] Bluetooth: hci2: command tx timeout [ 226.527885][ T5802] Bluetooth: hci1: command tx timeout [ 226.533807][ T5814] Bluetooth: hci4: command tx timeout [ 226.610209][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.724101][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.749044][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.789510][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.985274][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.011577][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.059801][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.090270][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 227.327815][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.384204][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.413863][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.447845][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.522484][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.570292][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.668420][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.708305][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.899990][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.957494][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.027594][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.131633][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.488755][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.724339][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.810096][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.861002][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.868734][ T3637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.963228][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.971129][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.102635][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.246244][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.290691][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.424204][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.464114][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.472000][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.591446][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.607620][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.663913][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.671550][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.696492][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.704134][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.776556][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.804291][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.812043][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.863738][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.871300][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.005428][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.013184][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.194610][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.438122][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.445823][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.570165][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.630257][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.637987][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.875171][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.432930][ T5804] veth0_vlan: entered promiscuous mode [ 232.530200][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.628495][ T5804] veth1_vlan: entered promiscuous mode [ 232.754526][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.017856][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.034060][ T5804] veth0_macvtap: entered promiscuous mode [ 233.055254][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.101650][ T5804] veth1_macvtap: entered promiscuous mode [ 233.349850][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.488532][ T5816] veth0_vlan: entered promiscuous mode [ 233.508631][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.608930][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.634129][ T5816] veth1_vlan: entered promiscuous mode [ 233.674098][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.744747][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.776989][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.823669][ T5799] veth0_vlan: entered promiscuous mode [ 233.890909][ T5800] veth0_vlan: entered promiscuous mode [ 233.968512][ T5799] veth1_vlan: entered promiscuous mode [ 234.024003][ T5800] veth1_vlan: entered promiscuous mode [ 234.140645][ T5816] veth0_macvtap: entered promiscuous mode [ 234.243541][ T5816] veth1_macvtap: entered promiscuous mode [ 234.437341][ T5800] veth0_macvtap: entered promiscuous mode [ 234.492845][ T5799] veth0_macvtap: entered promiscuous mode [ 234.514938][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.571238][ T5800] veth1_macvtap: entered promiscuous mode [ 234.617717][ T5799] veth1_macvtap: entered promiscuous mode [ 234.638385][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.785031][ T4147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.821394][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.866894][ T3637] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.923615][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.968634][ T3637] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.986787][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.993667][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.039022][ T3637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.067132][ T3637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.089890][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.138653][ T3637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.170891][ T3637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.228794][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.253769][ T3637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.331686][ T3637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.376832][ T3637] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.442854][ T3637] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.491090][ T3637] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.648835][ T5806] veth0_vlan: entered promiscuous mode [ 235.755804][ T5806] veth1_vlan: entered promiscuous mode [ 236.087260][ T5806] veth0_macvtap: entered promiscuous mode [ 236.129696][ T5806] veth1_macvtap: entered promiscuous mode [ 236.347398][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.481716][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.562327][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.573565][ T3819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.606015][ T3002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.638199][ T3002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.583251][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.591327][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.774709][ T3919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.783074][ T3919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.245579][ T5804] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 242.717432][ T3919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.726515][ T3919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.875224][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.883538][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.999058][ T5987] loop0: detected capacity change from 0 to 1024 [ 243.027560][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.035824][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.070225][ T4147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.080197][ T4147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.235957][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.255581][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.271795][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.280089][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.389651][ T5987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.627955][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.636757][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.822264][ T5987] loop0: detected capacity change from 1024 to 0 [ 243.877428][ T5993] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 244.009210][ T4147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.017774][ T4147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.332732][ T5804] syz-executor: attempt to access beyond end of device [ 244.332732][ T5804] loop0: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 244.745663][ T5804] syz-executor: attempt to access beyond end of device [ 244.745663][ T5804] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 244.759856][ T5804] syz-executor: attempt to access beyond end of device [ 244.759856][ T5804] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 244.774273][ T5804] syz-executor: attempt to access beyond end of device [ 244.774273][ T5804] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 244.795686][ T5804] syz-executor: attempt to access beyond end of device [ 244.795686][ T5804] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 244.812000][ T5804] syz-executor: attempt to access beyond end of device [ 244.812000][ T5804] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 244.826637][ T5804] syz-executor: attempt to access beyond end of device [ 244.826637][ T5804] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 244.840948][ T5804] syz-executor: attempt to access beyond end of device [ 244.840948][ T5804] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 244.854974][ T5804] syz-executor: attempt to access beyond end of device [ 244.854974][ T5804] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 244.868986][ T5804] syz-executor: attempt to access beyond end of device [ 244.868986][ T5804] loop0: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 244.890075][ T5804] EXT4-fs error (device loop0): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 244.905288][ T5804] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 244.914003][ T5804] EXT4-fs (loop0): I/O error while writing superblock [ 244.920978][ T5804] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: IO failure [ 244.930504][ T5804] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 244.939123][ T5804] EXT4-fs (loop0): I/O error while writing superblock [ 244.946319][ T5804] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 244.958302][ T5804] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 244.967170][ T5804] EXT4-fs (loop0): I/O error while writing superblock [ 245.124985][ T4147] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:23: unable to read itable block [ 245.139932][ T4147] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 245.151289][ T4147] EXT4-fs (loop0): I/O error while writing superblock [ 245.258819][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.414388][ T5804] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 245.423459][ T5804] EXT4-fs (loop0): I/O error while writing superblock [ 245.475304][ T5990] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 245.602892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 245.733155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 245.784988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 245.809656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 245.829119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 245.940053][ T4300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.362264][ T4300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.630919][ T4300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.773108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 246.824295][ T4300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.539012][ T4300] bridge_slave_1: left allmulticast mode [ 247.552460][ T4300] bridge_slave_1: left promiscuous mode [ 247.559292][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.630474][ T4300] bridge_slave_0: left allmulticast mode [ 247.636577][ T4300] bridge_slave_0: left promiscuous mode [ 247.644073][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.360276][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.385620][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.409324][ T4300] bond0 (unregistering): Released all slaves [ 249.102209][ T4300] hsr_slave_0: left promiscuous mode [ 249.138399][ T4300] hsr_slave_1: left promiscuous mode [ 249.146922][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.157877][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.225043][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.232976][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.430037][ T6025] loop3: detected capacity change from 0 to 2048 [ 249.438933][ T4300] veth1_macvtap: left promiscuous mode [ 249.448384][ T4300] veth0_macvtap: left promiscuous mode [ 249.454430][ T4300] veth1_vlan: left promiscuous mode [ 249.460031][ T4300] veth0_vlan: left promiscuous mode [ 249.779174][ T6025] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 249.789345][ T6025] NILFS (loop3): mounting unchecked fs [ 250.144289][ T6025] NILFS (loop3): recovery complete [ 250.179006][ T6015] udevd[6015]: incorrect nilfs2 checksum on /dev/loop3 [ 250.332786][ T6032] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.528444][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.603437][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.624914][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.654778][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.743431][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.827787][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 250.968577][ T6031] loop2: detected capacity change from 0 to 2048 [ 251.052927][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 251.486577][ T6031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.601500][ T6030] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 251.622144][ T30] audit: type=1800 audit(1755751835.781:2): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 251.646811][ T30] audit: type=1800 audit(1755751835.791:3): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 251.797525][ T6031] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 251.810251][ T6031] EXT4-fs (loop2): This should not happen!! Data will be lost [ 251.810251][ T6031] [ 251.820417][ T6031] EXT4-fs (loop2): Total free blocks count 0 [ 251.826965][ T6031] EXT4-fs (loop2): Free/Dirty block details [ 251.833319][ T6031] EXT4-fs (loop2): free_blocks=4096 [ 251.838717][ T6031] EXT4-fs (loop2): dirty_blocks=16 [ 251.844186][ T6031] EXT4-fs (loop2): Block reservation details [ 251.853403][ T6031] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 252.065435][ T6043] warning: `syz.1.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 252.215263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 252.229102][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 252.798458][ T1149] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 252.922794][ T5802] Bluetooth: hci3: command tx timeout [ 252.956543][ T6061] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.192805][ T6060] loop1: detected capacity change from 0 to 2048 [ 253.327690][ T6060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.651254][ T6068] loop2: detected capacity change from 0 to 256 [ 253.777878][ T6060] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 40960 lbcount: 45056 extent 129+9216 [ 253.798703][ T6033] chnl_net:caif_netlink_parms(): no params data found [ 253.808072][ T6068] ======================================================= [ 253.808072][ T6068] WARNING: The mand mount option has been deprecated and [ 253.808072][ T6068] and is ignored by this kernel. Remove the mand [ 253.808072][ T6068] option from the mount to silence this warning. [ 253.808072][ T6068] ======================================================= [ 254.583657][ T6068] FAT-fs (loop2): Directory bread(block 64) failed [ 254.590470][ T6068] FAT-fs (loop2): Directory bread(block 65) failed [ 254.597802][ T6068] FAT-fs (loop2): Directory bread(block 66) failed [ 254.605393][ T6068] FAT-fs (loop2): Directory bread(block 67) failed [ 254.617503][ T6068] FAT-fs (loop2): Directory bread(block 68) failed [ 254.626034][ T6068] FAT-fs (loop2): Directory bread(block 69) failed [ 254.633066][ T6068] FAT-fs (loop2): Directory bread(block 70) failed [ 254.639839][ T6068] FAT-fs (loop2): Directory bread(block 71) failed [ 254.647709][ T6068] FAT-fs (loop2): Directory bread(block 72) failed [ 254.654761][ T6068] FAT-fs (loop2): Directory bread(block 73) failed [ 255.032444][ T5802] Bluetooth: hci3: command tx timeout [ 255.140271][ T6078] loop3: detected capacity change from 0 to 2048 [ 255.291781][ T6078] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 255.302882][ T6078] NILFS (loop3): mounting unchecked fs [ 255.640767][ T6087] 9pnet_fd: Insufficient options for proto=fd [ 255.824774][ T6078] NILFS (loop3): recovery complete [ 255.920238][ T6089] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.148894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 256.353509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 256.456512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 257.152283][ T5802] Bluetooth: hci3: command tx timeout [ 257.806411][ T6084] loop4: detected capacity change from 0 to 2048 [ 257.915909][ T6084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.846710][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.856170][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.864084][ T6033] bridge_slave_0: entered allmulticast mode [ 258.874050][ T6033] bridge_slave_0: entered promiscuous mode [ 258.899020][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.907361][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.908811][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 258.919474][ T6033] bridge_slave_1: entered allmulticast mode [ 258.923644][ T6033] bridge_slave_1: entered promiscuous mode [ 259.154327][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888026c09e00: rx timeout, send abort [ 259.172930][ T5802] Bluetooth: hci3: command tx timeout [ 259.817104][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.018724][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.047517][ T6033] team0: Port device team_slave_0 added [ 261.085325][ T6104] netlink: 'syz.2.32': attribute type 10 has an invalid length. [ 261.112517][ T6104] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.128683][ T6104] bond0: (slave team0): Enslaving as an active interface with an up link [ 261.200426][ T6033] team0: Port device team_slave_1 added [ 263.059847][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.067780][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.104721][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.285814][ T5806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.345038][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.352446][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.378982][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.053424][ T6033] hsr_slave_0: entered promiscuous mode [ 265.068073][ T6033] hsr_slave_1: entered promiscuous mode [ 265.420140][ T6118] loop2: detected capacity change from 0 to 1024 [ 265.572545][ T6118] ===================================================== [ 265.579771][ T6118] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x9a6/0x27a0 [ 265.587587][ T6118] hfsplus_uni2asc+0x9a6/0x27a0 [ 265.592736][ T6118] hfsplus_readdir+0xd60/0x1a70 [ 265.597798][ T6118] iterate_dir+0x452/0x620 [ 265.602743][ T6118] __se_sys_getdents64+0x17e/0x550 [ 265.608052][ T6118] __x64_sys_getdents64+0x97/0xe0 [ 265.613616][ T6118] x64_sys_call+0x3a14/0x3e20 [ 265.618515][ T6118] do_syscall_64+0xd9/0x210 [ 265.623412][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.629495][ T6118] [ 265.632005][ T6118] Uninit was created at: [ 265.636502][ T6118] __kmalloc_noprof+0x95f/0x1310 [ 265.641646][ T6118] hfsplus_find_init+0x90/0x1d0 [ 265.648695][ T6118] hfsplus_readdir+0x1dc/0x1a70 [ 265.655102][ T6118] iterate_dir+0x452/0x620 [ 265.660229][ T6118] __se_sys_getdents64+0x17e/0x550 [ 265.665725][ T6118] __x64_sys_getdents64+0x97/0xe0 [ 265.673750][ T6118] x64_sys_call+0x3a14/0x3e20 [ 265.678648][ T6118] do_syscall_64+0xd9/0x210 [ 265.684389][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.690473][ T6118] [ 265.693067][ T6118] CPU: 1 UID: 0 PID: 6118 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT(none) [ 265.703984][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.714604][ T6118] ===================================================== [ 265.721642][ T6118] Disabling lock debugging due to kernel taint [ 265.728078][ T6118] Kernel panic - not syncing: kmsan.panic set ... [ 265.734658][ T6118] CPU: 1 UID: 0 PID: 6118 Comm: syz.2.36 Tainted: G B syzkaller #0 PREEMPT(none) [ 265.745557][ T6118] Tainted: [B]=BAD_PAGE [ 265.749815][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.760024][ T6118] Call Trace: [ 265.763432][ T6118] [ 265.766468][ T6118] __dump_stack+0x26/0x30 [ 265.771015][ T6118] dump_stack_lvl+0x53/0x270 [ 265.775912][ T6118] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 265.781943][ T6118] dump_stack+0x1e/0x25 [ 265.786320][ T6118] vpanic+0x361/0xc50 [ 265.790609][ T6118] panic+0x15d/0x160 [ 265.794941][ T6118] kmsan_report+0x31c/0x320 [ 265.799655][ T6118] ? kmsan_get_metadata+0xfb/0x160 [ 265.805094][ T6118] ? __msan_warning+0x1b/0x30 [ 265.809960][ T6118] ? hfsplus_uni2asc+0x9a6/0x27a0 [ 265.815601][ T6118] ? hfsplus_readdir+0xd60/0x1a70 [ 265.820851][ T6118] ? iterate_dir+0x452/0x620 [ 265.825632][ T6118] ? __se_sys_getdents64+0x17e/0x550 [ 265.831114][ T6118] ? __x64_sys_getdents64+0x97/0xe0 [ 265.836530][ T6118] ? x64_sys_call+0x3a14/0x3e20 [ 265.841609][ T6118] ? do_syscall_64+0xd9/0x210 [ 265.846503][ T6118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.852776][ T6118] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 265.859226][ T6118] ? kmsan_get_metadata+0xfb/0x160 [ 265.864551][ T6118] ? kmsan_get_metadata+0xfb/0x160 [ 265.869881][ T6118] ? kmsan_get_metadata+0xfb/0x160 [ 265.875200][ T6118] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 265.881657][ T6118] ? kmsan_get_metadata+0xfb/0x160 [ 265.886984][ T6118] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 265.893024][ T6118] ? utf32_to_utf8+0x3e4/0x410 [ 265.898043][ T6118] ? kmsan_get_metadata+0xfb/0x160 [ 265.903446][ T6118] __msan_warning+0x1b/0x30 [ 265.908154][ T6118] hfsplus_uni2asc+0x9a6/0x27a0 [ 265.913214][ T6118] ? __msan_memcpy+0x108/0x1c0 [ 265.918236][ T6118] hfsplus_readdir+0xd60/0x1a70 [ 265.923381][ T6118] ? aa_file_perm+0x549/0x2140 [ 265.928380][ T6118] ? __futex_wait+0x3f6/0x450 [ 265.933342][ T6118] ? __pfx_hfsplus_readdir+0x10/0x10 [ 265.938948][ T6118] iterate_dir+0x452/0x620 [ 265.943610][ T6118] __se_sys_getdents64+0x17e/0x550 [ 265.949008][ T6118] ? __pfx_filldir64+0x10/0x10 [ 265.953994][ T6118] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 265.960044][ T6118] __x64_sys_getdents64+0x97/0xe0 [ 265.965307][ T6118] x64_sys_call+0x3a14/0x3e20 [ 265.970229][ T6118] do_syscall_64+0xd9/0x210 [ 265.974952][ T6118] ? irqentry_exit+0x16/0x60 [ 265.979747][ T6118] ? clear_bhb_loop+0x40/0x90 [ 265.984629][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.990717][ T6118] RIP: 0033:0x7fc892d8ebe9 [ 265.995288][ T6118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.015085][ T6118] RSP: 002b:00007fc893b18038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 266.023702][ T6118] RAX: ffffffffffffffda RBX: 00007fc892fb5fa0 RCX: 00007fc892d8ebe9 [ 266.031920][ T6118] RDX: 0000000000001002 RSI: 0000200000001f80 RDI: 0000000000000004 [ 266.040040][ T6118] RBP: 00007fc892e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 266.048171][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.056283][ T6118] R13: 00007fc892fb6038 R14: 00007fc892fb5fa0 R15: 00007ffcccdbe298 [ 266.064450][ T6118] [ 266.067900][ T6118] Kernel Offset: disabled [ 266.072302][ T6118] Rebooting in 86400 seconds..