last executing test programs: 8m20.731044299s ago: executing program 3 (id=16): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x32}, {0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0x400000000000}, 0x4, 0x6e6baf, 0xc819129d1ef8b85c}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x3502}}, 0xe8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x181002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r4 = getuid() r5 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}}, 0x0, 0x0, &(0x7f0000002140)) syz_fuse_handle_req(r3, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004240)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000080)='./file1\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@broadcast, @in=@rand_addr=0x64010101, 0x2b, 0x0, 0x0, 0x3000000, 0x11, 0x2}]}]}, 0xa0}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 8m17.876475597s ago: executing program 3 (id=19): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000380)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688e57e15c3f8e9639af0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1506, &(0x7f0000001e00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7008fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c006f00736f757263655f6d61635f69735f6d756c7469636173740005008300010000"], 0x58}}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643f, &(0x7f0000000300)) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "e4a12d146189f1f7", "e2d54cd929726529ff18ddc098ab4715", 'I9\vb', "ce2478a16532796e"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpgid(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000080)={@x25, {&(0x7f0000000000)=""/42, 0x2a}, 0x0, 0x13}, 0xa0) 8m15.953404002s ago: executing program 3 (id=25): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x32}, {0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0x400000000000}, 0x4, 0x6e6baf, 0xc819129d1ef8b85c}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x3502}}, 0xe8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x181002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r4 = getuid() r5 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}}, 0x0, 0x0, &(0x7f0000002140)) syz_fuse_handle_req(r3, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004240)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000080)='./file1\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@broadcast, @in=@rand_addr=0x64010101, 0x2b, 0x0, 0x0, 0x3000000, 0x11, 0x2}]}]}, 0xa0}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 8m12.417331689s ago: executing program 3 (id=28): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x7, r1, 0x0, &(0x7f0000000340)) syz_init_net_socket$bt_l2cap(0x1f, 0xb, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket(0x1e, 0x805, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe54, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/7, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) connect$caif(r3, &(0x7f0000000140), 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) prctl$PR_GET_THP_DISABLE(0x2a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) sendto$inet6(r6, &(0x7f00000003c0)="85529fcabd9bb4f56e20b4632cf202ce7ec7195d522f98b961f97949c547416415da671bdcd2faf70b7079a3ebf4f3e61b28732aaf3554efff54f06c2b0895297db80f3fce667773067d4ce791a4dc5a67dfb7eb695ea094aa35c0e0aa47a3f290dca35bae66c3ee4644d0f1562db3ca87d2927dfbf724e343432a8eb2714170cefbc8d76e4629", 0x87, 0x10, &(0x7f0000000180)={0xa, 0x4e20, 0xe, @mcast2, 0x3}, 0x1c) getpid() fadvise64(r6, 0xfcff, 0x20000, 0x3) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) 8m6.541408866s ago: executing program 3 (id=38): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8m2.779056226s ago: executing program 3 (id=41): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04"], 0x6) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x1, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x31, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44044}, 0x8040) 7m46.037900057s ago: executing program 32 (id=41): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04"], 0x6) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x1, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x31, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44044}, 0x8040) 2m38.586181747s ago: executing program 1 (id=523): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1021, 0x800000000004, @tid=r1}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a5, &(0x7f0000000140)="$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") 2m36.730639764s ago: executing program 1 (id=526): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$eJzs3U9rE0EYx/Hf7KZJamtdbUUQD1ItepK2XsRLQIqvwYuiNhGKocVaQb0YPIsvwLsXX4AvwpMInvXkyRfQ28pMJs1ss5s0Lc22+P1Ams3u/Hlms8nOs5CuAPy37q39+nz7j30YKVYs6a4U2U1XVZF0UZfqrzZ3NnbareawhmKpLvcwkqtpBsqsb7byqtp6roaX2FcVzYbrcDzSNE1/lx0EylT3z3Hexkiq+U9nHBY+Tab2ve7EUqekWE4Ks6tdvdZc2XEAAMpluuf3yJ/nZ/38PYqkJX/aD8//P8+WHO/R3NBu2SGULDj/uywrNfb9Pec29fM9l8LZ7VEvSxy3Hzt5rKp7ZGUmmCabVQ4miy6WaPrZRrt1a32r3Yz0Xg3HhHnhgqSGmj5n9TLRDja9mLMuq6qi1sYy48YwZcew2o+/0QiKzOd1evgeRzPfzHfzyCT6pObe/K+SmnDM/p26P9WPf7moua0XD+1z0i1VMMrzrpPL2R07dJRxUUYiv6fSWNkLBEk2zmpurar21eqObqWoJ9/OfG6t1RG1FmytL0Gt/tFcXPO4mY/mgVnUX33VWjD/j+zeXtLgJzO/EVfSHxlDx1NxJZNwVedKbslo/LFgTP19/EFPdUdzL9+8ff6k3W5tT3rBxjDxTlnoLvQOgpMSz+EW7HdsuEZJa7symd6rR951dY0qUwsLZ0e6f6H3sT5A770LeCMjnPA3E0rRf9OLy7ybZECYNPvlYbr5X5CvLLsUyf5JhszT01HTtqDFlZzcoLZX8EzQkvHX54szoJncDK6jMXKuazel68HKETlXogvS9NCxniZmTT/0mOv/AAAAAAAAAAAAAAAAAAAAp80kfq0RdMd/9AEAAAAAAAAAAAAAAAAAAAAA4BCK7/9b1zHe/zfzO4AD3/+3doSBAhjwLwAA///073LE") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) open(0x0, 0x6827e, 0x0) fsync(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$hidraw(0x0, 0x100000001, 0x8c00) ioctl$HCIINQUIRY(r6, 0x800448d4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffff9, 0x3, 0x6], 0x6, &(0x7f0000000180)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m33.866915876s ago: executing program 1 (id=531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x86) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x3, 0x8, 0x0, 0x8, 0x1, 0x0, 0x2ba, 0x4, 0x4}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/oss_mixer\x00', 0x103802, 0x0) r7 = dup3(r6, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, 0x0, 0x0) 2m31.266575996s ago: executing program 1 (id=535): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = getuid() mount$cgroup2(0x0, &(0x7f00000006c0)='./file1/file4\x00', &(0x7f0000000700), 0x2002040, &(0x7f0000000740)={[{@memory_hugetlb_accounting}, {@subsystem='pids'}, {}, {@subsystem='net_cls'}, {@subsystem='rdma'}, {}, {@favordynmods}], [{@euid_eq={'euid', 0x3d, r1}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x7, 0x2, 0x7, 0x4d942c23, 0x4, 0x3}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 2m28.310055338s ago: executing program 1 (id=540): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 2m25.715632369s ago: executing program 1 (id=542): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$eJzs3U9rE0EYx/Hf7KZJamtdbUUQD1ItepK2XsRLQIqvwYuiNhGKocVaQb0YPIsvwLsXX4AvwpMInvXkyRfQ28pMJs1ss5s0Lc22+P1Ams3u/Hlms8nOs5CuAPy37q39+nz7j30YKVYs6a4U2U1XVZF0UZfqrzZ3NnbareawhmKpLvcwkqtpBsqsb7byqtp6roaX2FcVzYbrcDzSNE1/lx0EylT3z3Hexkiq+U9nHBY+Tab2ve7EUqekWE4Ks6tdvdZc2XEAAMpluuf3yJ/nZ/38PYqkJX/aD8//P8+WHO/R3NBu2SGULDj/uywrNfb9Pec29fM9l8LZ7VEvSxy3Hzt5rKp7ZGUmmCabVQ4miy6WaPrZRrt1a32r3Yz0Xg3HhHnhgqSGmj5n9TLRDja9mLMuq6qi1sYy48YwZcew2o+/0QiKzOd1evgeRzPfzHfzyCT6pObe/K+SmnDM/p26P9WPf7moua0XD+1z0i1VMMrzrpPL2R07dJRxUUYiv6fSWNkLBEk2zmpurar21eqObqWoJ9/OfG6t1RG1FmytL0Gt/tFcXPO4mY/mgVnUX33VWjD/j+zeXtLgJzO/EVfSHxlDx1NxJZNwVedKbslo/LFgTP19/EFPdUdzL9+8ff6k3W5tT3rBxjDxTlnoLvQOgpMSz+EW7HdsuEZJa7symd6rR951dY0qUwsLZ0e6f6H3sT5A770LeCMjnPA3E0rRf9OLy7ybZECYNPvlYbr5X5CvLLsUyf5JhszT01HTtqDFlZzcoLZX8EzQkvHX54szoJncDK6jMXKuazel68HKETlXogvS9NCxniZmTT/0mOv/AAAAAAAAAAAAAAAAAAAAp80kfq0RdMd/9AEAAAAAAAAAAAAAAAAAAAAA4BCK7/9b1zHe/zfzO4AD3/+3doSBAhjwLwAA///073LE") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x6827e, 0x0) fsync(r0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$hidraw(0x0, 0x100000001, 0x8c00) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m9.398411924s ago: executing program 33 (id=542): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x6827e, 0x0) fsync(r0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$hidraw(0x0, 0x100000001, 0x8c00) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 18.838911034s ago: executing program 2 (id=681): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_mount_image$romfs(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f3200000be550020080000198c3b790000c19e57fc847c52a1695a251b480e31f9126b9b0b247df0690ca7d757194d0335d8e8a065e069e1290c00000000000000988309e751e0eec20f77"], 0x1, 0x162, &(0x7f0000000780)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq") socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x40008c4) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0xe3800, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@remote}, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf251200000008000300", @ANYRES32=r6, @ANYBLOB="0a000600ffffffffffff0000440081000500010009000000050002000800ee820500010000000000050001000700000005000100d6"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 17.232247241s ago: executing program 0 (id=682): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 16.902406352s ago: executing program 4 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 15.505427347s ago: executing program 0 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.124127009s ago: executing program 4 (id=686): creat(&(0x7f0000000200)='./file1\x00', 0x12e) syz_usb_connect(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000b4106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507020004814006090587030800"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100028bd7000ffdbdf251400000005000b000100000008000e00ffff00001400018008000300010000", @ANYRES32=0x0, @ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x40080c1) syz_emit_ethernet(0xae, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6001012000783afffe8000000000000000000000000000bbff03030000000000000000000000000186009078000000070000000000000000000aa78ce54006598080a8030037004023493b07aafaffffffffffffff23732472eefa45ad964892497465bb4c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbafe5af180200010000000004002600040000000101fe906d17efe30000000690efafb1dc37fd06a2bc60b57186f814d9"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() 15.117491349s ago: executing program 2 (id=687): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000440)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}]}) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e43a0be4b572305e8599be721a64f6341ca7f3d1f8339875a7d320f30fdf26dc4d01a83b0525130268ed23db0dbf744bbae394a29cb609001f5d36896baff74cfe0ba7aacfe1a60698c8c19c10234db8e364b07f6261b0768c74705797421f3ca10a31fd8900"/139], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x100) shmdt(0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c009900000000000000000044005e80080005000000000008000300000000000825dd0000000000100001000000000000000000000000000800070000000000080001000000"], 0x64}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 14.116906463s ago: executing program 5 (id=688): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a5, &(0x7f0000000140)="$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") 14.072432263s ago: executing program 0 (id=689): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) socket$kcm(0x29, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair(0x18, 0x1, 0xfffff001, &(0x7f0000000740)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='xprtrdma_inline_thresh\x00', r2, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c"], 0x114}], 0x1}, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 12.702330619s ago: executing program 5 (id=690): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$eJzs3U9rE0EYx/Hf7KZJamtdbUUQD1ItepK2XsRLQIqvwYuiNhGKocVaQb0YPIsvwLsXX4AvwpMInvXkyRfQ28pMJs1ss5s0Lc22+P1Ams3u/Hlms8nOs5CuAPy37q39+nz7j30YKVYs6a4U2U1XVZF0UZfqrzZ3NnbareawhmKpLvcwkqtpBsqsb7byqtp6roaX2FcVzYbrcDzSNE1/lx0EylT3z3Hexkiq+U9nHBY+Tab2ve7EUqekWE4Ks6tdvdZc2XEAAMpluuf3yJ/nZ/38PYqkJX/aD8//P8+WHO/R3NBu2SGULDj/uywrNfb9Pec29fM9l8LZ7VEvSxy3Hzt5rKp7ZGUmmCabVQ4miy6WaPrZRrt1a32r3Yz0Xg3HhHnhgqSGmj5n9TLRDja9mLMuq6qi1sYy48YwZcew2o+/0QiKzOd1evgeRzPfzHfzyCT6pObe/K+SmnDM/p26P9WPf7moua0XD+1z0i1VMMrzrpPL2R07dJRxUUYiv6fSWNkLBEk2zmpurar21eqObqWoJ9/OfG6t1RG1FmytL0Gt/tFcXPO4mY/mgVnUX33VWjD/j+zeXtLgJzO/EVfSHxlDx1NxJZNwVedKbslo/LFgTP19/EFPdUdzL9+8ff6k3W5tT3rBxjDxTlnoLvQOgpMSz+EW7HdsuEZJa7symd6rR951dY0qUwsLZ0e6f6H3sT5A770LeCMjnPA3E0rRf9OLy7ybZECYNPvlYbr5X5CvLLsUyf5JhszT01HTtqDFlZzcoLZX8EzQkvHX54szoJncDK6jMXKuazel68HKETlXogvS9NCxniZmTT/0mOv/AAAAAAAAAAAAAAAAAAAAp80kfq0RdMd/9AEAAAAAAAAAAAAAAAAAAAAA4BCK7/9b1zHe/zfzO4AD3/+3doSBAhjwLwAA///073LE") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) open(0x0, 0x6827e, 0x0) fsync(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$hidraw(0x0, 0x100000001, 0x8c00) ioctl$HCIINQUIRY(r5, 0x800448d4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffff9, 0x3, 0x6], 0x6, &(0x7f0000000180)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 11.556718023s ago: executing program 4 (id=691): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x5c74, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x0, 0x11cb}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e22f000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000a04fcff", 0x58}], 0x1) r4 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 11.488799264s ago: executing program 2 (id=692): socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001f80)=0xe9, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 11.410043874s ago: executing program 5 (id=693): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x34, &(0x7f0000002980)={[{0x2d, 0x4e00, "4c1761531a46c1705b29af176ff7ae5868a334996224c862a1ac1ccfe461809bc2e3d5c617f1be9607b4ecd082"}]}) 9.750851151s ago: executing program 4 (id=694): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 9.562170252s ago: executing program 2 (id=695): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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") fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0xd0, 0x208, 0x2d8, 0x3c8, 0xd0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x8], 0x6, 0xd, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x4], 0x9, 0x2, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1, 0x16, 0x0, 0x0, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001740)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0x11, 0x148, 0x128, 0x10, 0x260, 0x2a8, 0x2a8, 0x260, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x100, 0x128, 0x1c, {}, [@common=@unspec=@rateest={{0x68}, {'macsec0\x00', 'veth0_to_team\x00', 0x22, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'netpci0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {}, 'ip6tnl0\x00'}}]}, @common=@CLUSTERIP={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xfece) bind$802154_raw(0xffffffffffffffff, &(0x7f00000012c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f00000002c0)=0x3) read$dsp(r3, &(0x7f0000000340)=""/100, 0x64) 9.449044592s ago: executing program 0 (id=696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e1f, 0x0, @loopback}], 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0423"], 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000140)={0x20}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xf31, @empty, 0x2}, {0xa, 0x4e24, 0xb66, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, r9}}, 0x48) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x878, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x10001, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x0, 0x5, 0x7, 0x2, 0x9, 0x1fb, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0xd, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x7, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x81, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x6, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x1, 0xa5, 0x80, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x31, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0x101, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x7, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x80004, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0xffffffff, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd95, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x7ff, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x3, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x0, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 8.138226287s ago: executing program 4 (id=697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b5738", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001040)="8af11dfbd2c6a2ce0af38dff9fe616786f8f551f6b1fe46a6ef36b7d33480fbd7024e6d8395908aa88d4d8d776f23d4fb832b250b5a520fa20543c93850b822e8ab246f6add9a1", 0x47}], 0x1, 0x0, 0x0, 0x20000001}], 0x1, 0x48000) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 6.866400732s ago: executing program 2 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.865238532s ago: executing program 0 (id=699): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) fsync(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448d4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffff9, 0x3, 0x6], 0x6, &(0x7f0000000180)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.677358873s ago: executing program 5 (id=700): clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x40001) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r5, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, &(0x7f0000004dc0), 0x0, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x3, 0x2, 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 6.592701943s ago: executing program 4 (id=701): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x32}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0x400000000000}, 0x4, 0x6e6baf, 0xc819129d1ef8b85c}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x3502}}, 0xe8) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x181002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r1, 0x1) fsmount(r0, 0x1, 0x8) 4.80954209s ago: executing program 5 (id=702): clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x40001) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e24, @empty}, {0x306, @broadcast}, 0x1e, {0x2, 0x4e21, @remote}, 'sit0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r6, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, &(0x7f0000004dc0), 0x0, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x3, 0x2, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 4.417781182s ago: executing program 2 (id=703): openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) socket(0x25, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x4, 0xfffffffffffffffd, 0x8000000000000000, 0x0, 0x0, 0xc, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x8, 0x1, 0x0, 0x10002, 0x7}, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 11.278149ms ago: executing program 5 (id=704): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040), 0x1, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f00003d6000/0x4000)=nil, 0x4000, 0xb635773f05ebbee9, 0x20010, 0xffffffffffffffff, 0x963ac000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 0s ago: executing program 0 (id=705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x3, 0x6, 0x0, 0x0, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24]}, 0x45c) shmctl$SHM_UNLOCK(0x0, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000440)={0x0, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}}, 0x88) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x10, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): hfs: hfs: Invalid key length: 94 [ 427.604502][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 427.650251][ T6772] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.659061][ T6772] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.667856][ T6772] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.676569][ T6772] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.746807][ T6772] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.755953][ T6772] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.764902][ T6772] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.773868][ T6772] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.250260][ T6776] loop5: detected capacity change from 0 to 24 [ 428.294000][ T6776] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 428.303567][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'. [ 428.341565][ T6773] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.350492][ T6773] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.359305][ T6773] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.368107][ T6773] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.435680][ T6773] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.444852][ T6773] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.453928][ T6773] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.463668][ T6773] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.473810][ T6776] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 428.775801][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.495'. [ 428.784872][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.495'. [ 429.647562][ T6785] UBIFS error (pid: 6785): cannot open "./file0", error -22 [ 430.011811][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.495'. [ 433.458041][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 435.219766][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aae5800: rx timeout, send abort [ 435.782930][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aae5800: abort rx timeout. Force session deactivation [ 436.845277][ T6827] loop0: detected capacity change from 0 to 32768 [ 438.249893][ T6830] loop1: detected capacity change from 0 to 32768 [ 439.920565][ T6827] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 439.939976][ T6830] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 440.175868][ T6825] loop2: detected capacity change from 0 to 32768 [ 440.183814][ T6825] (syz.2.507,6825,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option """ or missing value [ 440.195746][ T6825] (syz.2.507,6825,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 440.227188][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.233565][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.437233][ T4334] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 442.079111][ T6848] loop4: detected capacity change from 0 to 40427 [ 442.367724][ T6848] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 442.377442][ T6848] F2FS-fs (loop4): invalid crc value [ 442.388823][ T6848] F2FS-fs (loop4): Found nat_bits in checkpoint [ 442.430059][ T6848] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 442.861808][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 442.870902][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.513'. [ 442.880301][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 443.690850][ T6858] UBIFS error (pid: 6858): cannot open "./file0", error -22 [ 444.133867][ T5295] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 444.377250][ T6863] loop1: detected capacity change from 0 to 32768 [ 444.385086][ T6863] (syz.1.515,6863,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option """ or missing value [ 444.396329][ T6863] (syz.1.515,6863,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 444.469925][ T6864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.515'. [ 444.487957][ T6864] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 446.673505][ T4260] syz-executor: attempt to access beyond end of device [ 446.673505][ T4260] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 447.865929][ T6873] loop0: detected capacity change from 0 to 8 [ 448.311596][ T6873] SQUASHFS error: xz decompression failed, data probably corrupt [ 448.337273][ T6873] SQUASHFS error: Failed to read block 0x10d: -5 [ 448.343686][ T6873] SQUASHFS error: Unable to read metadata cache entry [10b] [ 448.385891][ T6875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.520'. [ 448.595238][ T6873] SQUASHFS error: Unable to read inode 0x5011f [ 448.630589][ T6877] sctp: failed to load transform for md5: -2 [ 449.660002][ T6892] loop5: detected capacity change from 0 to 64 [ 449.761234][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 449.770226][ T6894] device bridge_slave_1 left promiscuous mode [ 449.777725][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.793517][ T6894] device bridge_slave_0 left promiscuous mode [ 449.800944][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.859334][ T6892] hfs: hfs: Invalid key length: 94 [ 451.025106][ T6900] loop2: detected capacity change from 0 to 64 [ 451.102139][ T6902] loop1: detected capacity change from 0 to 64 [ 451.188845][ T6900] hfs: hfs: Invalid key length: 94 [ 451.395498][ T6905] hfs: hfs: Invalid key length: 94 [ 451.426001][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 451.453708][ T6905] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.462868][ T6905] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.471766][ T6905] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.480541][ T6905] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.387235][ T6905] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.396228][ T6905] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.407142][ T6905] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.416064][ T6905] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.480356][ T6913] input: syz0 as /devices/virtual/input/input21 [ 453.546533][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 453.561414][ T6910] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.570252][ T6910] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.578994][ T6910] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.587737][ T6910] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.603977][ T6910] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.614921][ T6910] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.623969][ T6910] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.632988][ T6910] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.926725][ T6915] loop0: detected capacity change from 0 to 40427 [ 453.945362][ T6915] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 453.964308][ T6915] F2FS-fs (loop0): invalid crc value [ 454.008689][ T6915] F2FS-fs (loop0): Found nat_bits in checkpoint [ 454.048600][ T6915] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 454.861900][ T6928] UBIFS error (pid: 6928): cannot open "./file0", error -22 [ 456.267192][ T6932] ALSA: mixer_oss: invalid OSS volume '' [ 456.531091][ T6934] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 456.557553][ T4256] syz-executor: attempt to access beyond end of device [ 456.557553][ T4256] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 456.596803][ T6937] loop4: detected capacity change from 0 to 16 [ 456.650344][ T6937] erofs: (device loop4): mounted with root inode @ nid 36. [ 456.805588][ T6939] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 456.815065][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 456.824342][ T6939] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 456.833768][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 456.843197][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 456.866478][ T6939] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 456.876057][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 456.885369][ T6939] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 456.895322][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 456.904649][ T6939] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 456.914225][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 456.923512][ T6939] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 456.933058][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 456.942496][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 456.951937][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 456.961528][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 456.971350][ T6939] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 456.980969][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 456.991096][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 457.000420][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 457.010219][ T6939] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 457.020739][ T6939] syz.4.533: attempt to access beyond end of device [ 457.020739][ T6939] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 457.034756][ T6939] syz.4.533: attempt to access beyond end of device [ 457.034756][ T6939] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 457.049620][ T6939] syz.4.533: attempt to access beyond end of device [ 457.049620][ T6939] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 457.064549][ T6939] syz.4.533: attempt to access beyond end of device [ 457.064549][ T6939] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 459.181855][ T6944] loop5: detected capacity change from 0 to 64 [ 459.303735][ T6947] loop2: detected capacity change from 0 to 64 [ 459.338871][ T6944] hfs: hfs: Invalid key length: 94 [ 459.507406][ T6947] hfs: hfs: Invalid key length: 94 [ 459.957381][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'. [ 459.970947][ T6953] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.979768][ T6953] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.988817][ T6953] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.997614][ T6953] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.256485][ T6953] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.265856][ T6953] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.274919][ T6953] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.283920][ T6953] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.281733][ T6958] loop5: detected capacity change from 0 to 32768 [ 461.364626][ T6958] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 462.750332][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.541'. [ 462.759338][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.5.541'. [ 462.768302][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.541'. [ 464.000328][ T6976] loop1: detected capacity change from 0 to 64 [ 464.398565][ T6975] UBIFS error (pid: 6975): cannot open "./file0", error -22 [ 464.935864][ T6978] loop2: detected capacity change from 0 to 64 [ 464.952365][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 464.959249][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 464.965899][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 464.972526][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 464.979211][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 464.985797][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 464.992432][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 464.999099][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.005759][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.012382][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.019997][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.026606][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.033251][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.039883][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.046428][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.053062][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.059685][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.066226][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.074330][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.080986][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.087612][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.094209][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.100774][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.107402][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.113976][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.120533][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.127173][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.133790][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.140390][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.146956][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.153556][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.160125][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.166679][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.173251][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.179882][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.186471][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.193093][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.199761][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.206314][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.212926][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.219517][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.226070][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.232615][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.239488][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.246137][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.252713][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.259360][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.265921][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.272514][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.279110][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.285796][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.292382][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.298967][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.305552][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.312168][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.318832][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.325366][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.332024][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.338683][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.345232][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.351807][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.358759][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.365297][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.371934][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.380245][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.386853][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.393567][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.400204][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.406767][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.413329][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.419996][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.426612][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.433213][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.439795][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.446330][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.452934][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.459536][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.466098][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.472702][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.479263][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.485815][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.492389][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.498929][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.505541][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.512214][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.518796][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.525365][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.531924][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.538493][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.545898][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.552492][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.559181][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.565754][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.572309][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.578903][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.585519][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.592122][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.598695][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.605262][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.611936][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.618509][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.625078][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.631693][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.638277][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.645010][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.651596][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.658187][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.664797][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.671533][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.678203][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.684974][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.691609][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.698226][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.704817][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.711444][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.718018][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.724680][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.731246][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.737805][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.744345][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.750909][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.757474][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.764018][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.770683][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.777304][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.783839][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.790400][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.796950][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.804685][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.811374][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.817977][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.824603][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.831197][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.837823][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.844346][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.850893][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.857426][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.863950][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.870480][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.877041][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.883592][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.890144][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.896681][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.903248][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.909896][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.916417][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.922969][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.929746][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.936567][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.943139][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.949774][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.956801][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.963449][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.970019][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.976567][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.983156][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.989792][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 465.996317][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.002888][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.009438][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.015963][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.022551][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.029141][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.035799][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.042987][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.049550][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.056116][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.062787][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.069439][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.076054][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.082656][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.089258][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.095803][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.102428][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.109013][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.115657][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.122267][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.128942][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.135482][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.142163][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.148779][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.155313][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.161893][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.168462][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.175016][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.181557][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.188141][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.194685][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.201243][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.207839][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.214452][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.221016][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.228101][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.234754][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.241319][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.247915][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.254660][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.261300][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.267846][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.274417][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.280998][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.287531][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.294146][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.300718][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.307405][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.313945][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.320493][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.327068][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.333603][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.340177][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.346725][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.353311][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.360044][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.366565][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.373231][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.380114][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.386687][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.393241][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.400054][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.406570][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.413122][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.419685][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.426213][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.432799][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.440037][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.446736][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.453401][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.459968][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.466488][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.473034][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.479604][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.486146][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.492949][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.499480][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.506009][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.512741][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.519355][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.525945][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.532534][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.539099][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.545673][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.552221][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.558792][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.565331][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.571873][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.578418][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.585218][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.591886][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.598477][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.605227][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.611850][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.618446][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.625042][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.631664][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.638220][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.644776][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 466.674846][ C0] vcan0: j1939_tp_txtimer: 0xffff888058072800: tx aborted with unknown reason: -2 [ 466.896776][ T6976] hfs: hfs: Invalid key length: 94 [ 467.184222][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058072800: abort rx timeout. Force session deactivation [ 467.216520][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 467.229505][ T6976] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.238328][ T6976] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.247094][ T6976] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.255779][ T6976] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.298336][ T6976] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.307785][ T6976] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.317254][ T6976] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.326190][ T6976] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.042971][ T6997] autofs4:pid:6997:autofs_fill_super: called with bogus options [ 468.589213][ T6995] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 468.610155][ T5295] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 468.704592][ T7001] loop4: detected capacity change from 0 to 16 [ 468.715395][ T7001] erofs: (device loop4): mounted with root inode @ nid 36. [ 469.055638][ T7007] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 469.065143][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 469.074769][ T7007] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 469.084217][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 469.093672][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 469.109268][ T7007] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 469.118913][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 469.128227][ T7007] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 469.137753][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 469.147282][ T7007] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 469.156760][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 469.166021][ T7007] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 469.175848][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 469.185271][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 469.194572][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 469.204441][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 469.214093][ T7007] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 469.223890][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 469.233612][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 469.243150][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 469.252910][ T7007] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 469.263341][ T7007] syz.4.549: attempt to access beyond end of device [ 469.263341][ T7007] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 469.277555][ T7007] syz.4.549: attempt to access beyond end of device [ 469.277555][ T7007] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 469.292391][ T7007] syz.4.549: attempt to access beyond end of device [ 469.292391][ T7007] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 469.307395][ T7007] syz.4.549: attempt to access beyond end of device [ 469.307395][ T7007] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 474.431622][ T7019] loop2: detected capacity change from 0 to 32768 [ 474.439254][ T7019] (syz.2.553,7019,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option """ or missing value [ 474.450431][ T7019] (syz.2.553,7019,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 474.555668][ T7020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.553'. [ 474.572860][ T7020] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 475.902753][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.909465][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.916420][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.923058][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.929603][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.936166][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.942704][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.949268][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.955958][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.962610][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.969207][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.976003][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.982696][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.989274][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 475.995790][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.002345][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.008971][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.015494][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.022052][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.028764][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.035328][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.041978][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.048615][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.055176][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.061729][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.068497][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.075095][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.081683][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.088341][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.095031][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.101638][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.108620][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.115157][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.121797][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.128378][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.134957][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.141528][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.148108][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.154691][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.161339][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.167993][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.174930][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.181540][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.188120][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.194645][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.201211][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.207748][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.214260][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.220874][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.227427][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.234192][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.240740][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.247282][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.253835][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.260390][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.266901][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.273451][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.280013][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.286638][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.293182][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.299728][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.306320][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.313107][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 476.319937][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 478.199962][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c1f8800: rx timeout, send abort [ 478.515251][ T7029] loop5: detected capacity change from 0 to 64 [ 478.708278][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c1f8800: abort rx timeout. Force session deactivation [ 479.509114][ T7036] UBIFS error (pid: 7036): cannot open "./file0", error -22 [ 480.119731][ T7040] hfs: hfs: Invalid key length: 94 [ 480.173122][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.558'. [ 480.224676][ T7040] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.233625][ T7040] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.242522][ T7040] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.251399][ T7040] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.601935][ T7040] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.610945][ T7040] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.619917][ T7040] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.629376][ T7040] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.798434][ T7044] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 480.865666][ T7046] loop4: detected capacity change from 0 to 16 [ 480.947787][ T7046] erofs: (device loop4): mounted with root inode @ nid 36. [ 480.966047][ T7048] loop2: detected capacity change from 0 to 16 [ 481.009820][ T7048] erofs: (device loop2): mounted with root inode @ nid 36. [ 481.172252][ T7049] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 481.181970][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 481.191196][ T7049] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 481.200597][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 481.209956][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 481.229188][ T7049] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 481.238867][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 481.248294][ T7049] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 481.258959][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 481.268322][ T7049] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 481.277998][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 481.288007][ T7049] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 481.297822][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 481.307535][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 481.316794][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 481.326493][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 481.336412][ T7049] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 481.346026][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 481.355799][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 481.366241][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 481.376054][ T7049] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 481.386351][ T7049] syz.4.560: attempt to access beyond end of device [ 481.386351][ T7049] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 481.400548][ T7049] syz.4.560: attempt to access beyond end of device [ 481.400548][ T7049] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 481.415454][ T7049] syz.4.560: attempt to access beyond end of device [ 481.415454][ T7049] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 481.430260][ T7049] syz.4.560: attempt to access beyond end of device [ 481.430260][ T7049] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 482.841804][ T7052] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 482.851516][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 482.860834][ T7052] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 482.870274][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 482.879605][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 482.894976][ T7052] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 482.904965][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 482.914322][ T7052] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 482.923902][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 482.933501][ T7052] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 482.943015][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 482.952374][ T7052] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 482.962144][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 482.971772][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 482.981207][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 482.990936][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 483.042100][ T7052] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 483.051701][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 483.061348][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 483.070714][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 483.080492][ T7052] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 483.090957][ T7052] syz.2.562: attempt to access beyond end of device [ 483.090957][ T7052] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 483.105206][ T7052] syz.2.562: attempt to access beyond end of device [ 483.105206][ T7052] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 483.120611][ T7052] syz.2.562: attempt to access beyond end of device [ 483.120611][ T7052] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 483.135617][ T7052] syz.2.562: attempt to access beyond end of device [ 483.135617][ T7052] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 485.481607][ T4267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.491877][ T4267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.501487][ T4267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.510650][ T4267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.519530][ T4267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 485.526979][ T4267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.762392][ T7063] loop0: detected capacity change from 0 to 512 [ 485.842605][ T7063] EXT4-fs: Ignoring removed orlov option [ 485.893218][ T7063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.971448][ T7063] EXT4-fs (loop0): orphan cleanup on readonly fs [ 485.985971][ T7066] loop5: detected capacity change from 0 to 512 [ 486.024248][ T7063] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.565: bg 0: block 248: padding at end of block bitmap is not set [ 486.053587][ T7066] EXT4-fs: Ignoring removed orlov option [ 486.094918][ T7066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 486.132745][ T7063] Quota error (device loop0): write_blk: dquota write failed [ 486.160935][ T7063] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 486.188727][ T7066] EXT4-fs (loop5): orphan cleanup on readonly fs [ 486.201867][ T7066] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.567: bg 0: block 248: padding at end of block bitmap is not set [ 486.234870][ T7063] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.565: Failed to acquire dquot type 1 [ 486.265709][ T7066] Quota error (device loop5): write_blk: dquota write failed [ 486.283121][ T7063] EXT4-fs (loop0): 1 truncate cleaned up [ 486.309396][ T7066] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 486.324580][ T7063] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 486.354233][ T7066] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.567: Failed to acquire dquot type 1 [ 486.464535][ T7066] EXT4-fs (loop5): 1 truncate cleaned up [ 486.499947][ T7066] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 487.143486][ T7077] EXT4-fs: Ignoring removed orlov option [ 487.289092][ T7077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.409004][ T7074] EXT4-fs: Ignoring removed orlov option [ 487.415765][ T7074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.424914][ T7074] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 487.738489][ T4261] Bluetooth: hci5: command 0x0409 tx timeout [ 487.835361][ T7077] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 487.840200][ T7081] loop4: detected capacity change from 0 to 64 [ 488.035068][ T7081] hfs: hfs: Invalid key length: 94 [ 488.038868][ T7074] EXT4-fs error (device loop5): __ext4_remount:6611: comm syz.5.567: Abort forced by user [ 488.058852][ T7077] EXT4-fs error (device loop0): __ext4_remount:6611: comm syz.0.565: Abort forced by user [ 488.263110][ T7077] EXT4-fs (loop0): Remounting filesystem read-only [ 488.277150][ T7077] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 488.286350][ T4370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.810392][ T7077] ext4 filesystem being remounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 488.823452][ T7074] EXT4-fs (loop5): Remounting filesystem read-only [ 488.847845][ T7074] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 488.870303][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 488.882696][ T7088] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.891485][ T7088] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.900200][ T7088] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.908928][ T7088] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.920384][ T7088] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.929410][ T7088] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.939718][ T7088] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.948922][ T7088] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.019581][ T7074] ext4 filesystem being remounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.041654][ T7059] chnl_net:caif_netlink_parms(): no params data found [ 489.220231][ T4370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.807165][ T4261] Bluetooth: hci5: command 0x041b tx timeout [ 491.392401][ T4370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.523539][ T4370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.543938][ T5518] EXT4-fs (loop5): unmounting filesystem. [ 491.764479][ T7101] loop2: detected capacity change from 0 to 64 [ 491.906150][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.917066][ T4261] Bluetooth: hci5: command 0x040f tx timeout [ 492.467643][ T7111] hfs: hfs: Invalid key length: 94 [ 492.699963][ T7103] input: syz0 as /devices/virtual/input/input22 [ 492.747704][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.757424][ T7059] device bridge_slave_0 entered promiscuous mode [ 492.814424][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 492.826963][ T7110] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.836112][ T7110] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.844983][ T7110] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.853848][ T7110] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.887349][ T7110] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.896417][ T7110] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.905443][ T7110] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.914408][ T7110] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.966814][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.993232][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.034912][ T7059] device bridge_slave_1 entered promiscuous mode [ 493.365397][ T7059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.396487][ T7116] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 493.518509][ T7118] loop2: detected capacity change from 0 to 16 [ 493.566066][ T7118] erofs: (device loop2): mounted with root inode @ nid 36. [ 493.592762][ T7059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.786510][ T7121] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 493.796145][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 493.805746][ T7121] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 493.815797][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 493.825319][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 493.873178][ T7121] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 493.883002][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 493.892473][ T7121] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 493.902021][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 493.911306][ T7121] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 493.920995][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 493.930413][ T7121] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 493.940004][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 493.949474][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 493.959125][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 493.968732][ T4261] Bluetooth: hci5: command 0x0419 tx timeout [ 493.975317][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 493.984995][ T7121] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 493.994590][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 494.004492][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 494.015094][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 494.025459][ T7121] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 494.037269][ T7121] syz.2.575: attempt to access beyond end of device [ 494.037269][ T7121] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 494.051394][ T7121] syz.2.575: attempt to access beyond end of device [ 494.051394][ T7121] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 494.066756][ T7121] syz.2.575: attempt to access beyond end of device [ 494.066756][ T7121] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 494.081773][ T7121] syz.2.575: attempt to access beyond end of device [ 494.081773][ T7121] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 494.611148][ T7125] binder: 7124:7125 unknown command 0 [ 494.637374][ T7125] binder: 7124:7125 ioctl c0306201 200000000440 returned -22 [ 494.679944][ T7059] team0: Port device team_slave_0 added [ 494.773488][ T7128] ALSA: mixer_oss: invalid OSS volume '' [ 494.831578][ T7059] team0: Port device team_slave_1 added [ 496.824262][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.847389][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.959157][ T7135] loop2: detected capacity change from 0 to 1024 [ 497.118476][ T7059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.376446][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.384072][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.626712][ T7059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.376057][ T7059] device hsr_slave_0 entered promiscuous mode [ 498.444208][ T7059] device hsr_slave_1 entered promiscuous mode [ 498.552891][ T7059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.634641][ T7059] Cannot create hsr debugfs directory [ 498.863534][ T7147] loop5: detected capacity change from 0 to 8 [ 499.167503][ T4300] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 499.213362][ C0] vcan0: j1939_tp_rxtimer: 0xffff888072e0c000: rx timeout, send abort [ 499.721708][ C0] vcan0: j1939_tp_rxtimer: 0xffff888072e0c000: abort rx timeout. Force session deactivation [ 499.939711][ T7147] SQUASHFS error: xz decompression failed, data probably corrupt [ 499.967164][ T4261] Bluetooth: hci5: command 0x0405 tx timeout [ 499.993781][ T7147] SQUASHFS error: Failed to read block 0x10d: -5 [ 500.023339][ T7147] SQUASHFS error: Unable to read metadata cache entry [10b] [ 500.045845][ T7147] SQUASHFS error: Unable to read inode 0x5011f [ 500.072543][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 501.573365][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.579898][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.603430][ T7164] loop2: detected capacity change from 0 to 40427 [ 501.612429][ T7164] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 501.624682][ T7164] F2FS-fs (loop2): invalid crc value [ 501.643006][ T7164] F2FS-fs (loop2): Found nat_bits in checkpoint [ 501.686324][ T7164] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 502.017199][ T7170] UBIFS error (pid: 7170): cannot open "./file0", error -22 [ 502.237521][ T4300] usb 5-1: unable to get BOS descriptor or descriptor too short [ 502.599481][ T4300] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 502.617844][ T4300] usb 5-1: can't read configurations, error -71 [ 502.876852][ T7179] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 502.941691][ T7181] input: syz0 as /devices/virtual/input/input23 [ 504.790316][ T4257] syz-executor: attempt to access beyond end of device [ 504.790316][ T4257] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 506.198158][ T7201] loop0: detected capacity change from 0 to 16 [ 506.383438][ T7200] loop4: detected capacity change from 0 to 32768 [ 506.391202][ T7200] (syz.4.590,7200,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option """ or missing value [ 506.402205][ T7200] (syz.4.590,7200,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 506.458211][ T7201] erofs: (device loop0): mounted with root inode @ nid 36. [ 506.793274][ T7205] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 509.205729][ T7207] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 509.216390][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 509.226003][ T7207] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 509.236021][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 509.246622][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 509.587277][ T7202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.590'. [ 509.655578][ T7207] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 509.665732][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 509.675222][ T7207] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 509.685313][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 509.695241][ T7207] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 509.705251][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 509.714840][ T7207] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 509.725182][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 509.735081][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 509.744924][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 509.755619][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 509.765867][ T7207] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 509.775774][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 509.786824][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 509.796533][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 509.806395][ T7207] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 509.818685][ T7207] syz.0.591: attempt to access beyond end of device [ 509.818685][ T7207] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 509.833879][ T7207] syz.0.591: attempt to access beyond end of device [ 509.833879][ T7207] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 509.849676][ T7207] syz.0.591: attempt to access beyond end of device [ 509.849676][ T7207] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 509.865462][ T7207] syz.0.591: attempt to access beyond end of device [ 509.865462][ T7207] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 509.981950][ T4370] device hsr_slave_0 left promiscuous mode [ 510.014612][ T4370] device hsr_slave_1 left promiscuous mode [ 510.238484][ T7213] loop2: detected capacity change from 0 to 32768 [ 510.246131][ T7213] (syz.2.588,7213,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "ÿ" or missing value [ 510.257246][ T7213] (syz.2.588,7213,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 510.308648][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.913256][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.926869][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.935672][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.254953][ T7220] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 511.319876][ T4370] device veth1_macvtap left promiscuous mode [ 511.373571][ T4370] device veth0_macvtap left promiscuous mode [ 511.433509][ T4370] device veth1_vlan left promiscuous mode [ 511.490582][ T4370] device veth0_vlan left promiscuous mode [ 513.039763][ T7221] loop2: detected capacity change from 0 to 32768 [ 513.083944][ T7221] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 513.093225][ T7221] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 513.138709][ T7221] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 513.138709][ T7221] inode = 1 71 [ 513.138709][ T7221] function = gfs2_check_internal_file_size, file = fs/gfs2/inode.h, line = 87 [ 513.158945][ T7221] gfs2: fsid=syz:syz.0: G: s:SH n:2/47 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 513.168632][ T7221] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 513.178540][ T7221] gfs2: fsid=syz:syz.0: I: n:1/71 t:8 f:0x00 d:0x00000200 s:8390144 p:0 [ 513.187079][ T7221] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 513.230613][ T7221] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 513.240331][ T7221] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 513.248881][ T7221] gfs2: fsid=syz:syz.0: File system withdrawn [ 513.255911][ T7221] CPU: 1 PID: 7221 Comm: syz.2.588 Not tainted 6.1.140-syzkaller #0 [ 513.264021][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.274247][ T7221] Call Trace: [ 513.277563][ T7221] [ 513.280534][ T7221] dump_stack_lvl+0x168/0x22e [ 513.285262][ T7221] ? kobject_uevent_env+0x35f/0x8a0 [ 513.290503][ T7221] ? show_regs_print_info+0x12/0x12 [ 513.295865][ T7221] ? load_image+0x3b0/0x3b0 [ 513.300590][ T7221] ? kobject_uevent_env+0x35f/0x8a0 [ 513.306280][ T7221] gfs2_withdraw+0x143f/0x1780 [ 513.311117][ T7221] ? gfs2_lm+0x220/0x220 [ 513.315879][ T7221] ? gfs2_consist_inode_i+0xf1/0x110 [ 513.321311][ T7221] gfs2_jdesc_check+0x137/0x290 [ 513.326260][ T7221] init_journal+0xcad/0x2300 [ 513.331016][ T7221] ? format_decode+0xb3b/0x1330 [ 513.336175][ T7221] ? init_inodes+0xdb/0x320 [ 513.340729][ T7221] ? _compound_head+0x120/0x120 [ 513.345700][ T7221] ? vsnprintf+0x1905/0x1a00 [ 513.350331][ T7221] ? snprintf+0xd7/0x120 [ 513.354608][ T7221] ? init_inodes+0xdb/0x320 [ 513.359154][ T7221] ? vscnprintf+0x80/0x80 [ 513.363512][ T7221] ? gfs2_glock_nq_num+0x17f/0x1c0 [ 513.368657][ T7221] init_inodes+0xdb/0x320 [ 513.373112][ T7221] gfs2_fill_super+0x1718/0x1f80 [ 513.378098][ T7221] ? gfs2_reconfigure+0xcd0/0xcd0 [ 513.383155][ T7221] ? init_locking+0xb8/0x200 [ 513.387795][ T7221] ? sb_set_blocksize+0xa5/0xe0 [ 513.392696][ T7221] get_tree_bdev+0x3f1/0x610 [ 513.397323][ T7221] ? gfs2_reconfigure+0xcd0/0xcd0 [ 513.402381][ T7221] gfs2_get_tree+0x4d/0x1e0 [ 513.407024][ T7221] vfs_get_tree+0x88/0x270 [ 513.411499][ T7221] do_new_mount+0x24a/0xa40 [ 513.416137][ T7221] __se_sys_mount+0x2d6/0x3c0 [ 513.420948][ T7221] ? __x64_sys_mount+0xc0/0xc0 [ 513.425936][ T7221] ? lockdep_hardirqs_on+0x94/0x140 [ 513.431439][ T7221] ? __x64_sys_mount+0x1c/0xc0 [ 513.436338][ T7221] do_syscall_64+0x4c/0xa0 [ 513.440889][ T7221] ? clear_bhb_loop+0x60/0xb0 [ 513.445594][ T7221] ? clear_bhb_loop+0x60/0xb0 [ 513.450398][ T7221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.456346][ T7221] RIP: 0033:0x7fcf0f59010a [ 513.460815][ T7221] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.480477][ T7221] RSP: 002b:00007fcf10373e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 513.488938][ T7221] RAX: ffffffffffffffda RBX: 00007fcf10373ef0 RCX: 00007fcf0f59010a [ 513.496939][ T7221] RDX: 00002000000006c0 RSI: 0000200000000040 RDI: 00007fcf10373eb0 [ 513.504953][ T7221] RBP: 00002000000006c0 R08: 00007fcf10373ef0 R09: 0000000000000000 [ 513.512968][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 513.521062][ T7221] R13: 00007fcf10373eb0 R14: 0000000000037fa7 R15: 0000200000000480 [ 513.529171][ T7221] [ 513.533703][ T7221] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 514.654314][ T4370] team0 (unregistering): Port device team_slave_1 removed [ 514.707055][ T4370] team0 (unregistering): Port device team_slave_0 removed [ 514.756869][ T4370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.813603][ T4370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.395479][ T4370] bond0 (unregistering): Released all slaves [ 515.477169][ T7217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.588'. [ 515.683746][ T7059] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 515.781729][ T7059] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 515.994274][ T7227] loop5: detected capacity change from 0 to 32768 [ 516.001499][ T7227] (syz.5.594,7227,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "ÿ" or missing value [ 516.012745][ T7227] (syz.5.594,7227,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 516.049890][ T7059] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 516.133705][ T4334] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 516.206432][ T7059] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 517.456042][ T7242] loop4: detected capacity change from 0 to 8 [ 517.799616][ T7227] netlink: 32 bytes leftover after parsing attributes in process `syz.5.594'. [ 517.879421][ T7242] SQUASHFS error: xz decompression failed, data probably corrupt [ 517.890027][ T7224] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 517.957418][ T7242] SQUASHFS error: Failed to read block 0x10d: -5 [ 517.963886][ T7242] SQUASHFS error: Unable to read metadata cache entry [10b] [ 518.027157][ T7242] SQUASHFS error: Unable to read inode 0x5011f [ 518.119576][ T7252] loop2: detected capacity change from 0 to 64 [ 518.254447][ T7252] hfs: hfs: Invalid key length: 94 [ 518.317614][ T7059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.396886][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 518.410458][ T7252] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.419629][ T7252] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.428922][ T7252] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.437882][ T7252] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.472432][ T7252] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.481794][ T7252] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.491029][ T7252] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.500080][ T7252] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.727409][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.735587][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.821317][ T7059] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.934885][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 519.032130][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 519.048715][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.055895][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.944520][ T7261] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 521.088472][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 522.066849][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 522.076048][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.084986][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.092225][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.102841][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.112289][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 522.246032][ T7059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 522.317572][ T7059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.369159][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 522.388457][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 522.559901][ T7279] loop5: detected capacity change from 0 to 32768 [ 522.567502][ T7279] (syz.5.602,7279,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option """ or missing value [ 522.578869][ T7279] (syz.5.602,7279,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 522.595149][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 522.608542][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 522.622379][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 522.645150][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.695695][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 522.964479][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.169005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 523.403498][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.710925][ T7288] loop4: detected capacity change from 0 to 16 [ 523.897389][ T7289] loop2: detected capacity change from 0 to 32768 [ 523.904650][ T7289] (syz.2.604,7289,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option """ or missing value [ 523.916071][ T7289] (syz.2.604,7289,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 523.947920][ T7288] erofs: (device loop4): mounted with root inode @ nid 36. [ 524.078925][ T7293] netlink: 32 bytes leftover after parsing attributes in process `syz.5.602'. [ 524.095497][ T7293] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 524.115883][ T4375] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 525.478346][ T7293] loop5: detected capacity change from 0 to 32768 [ 525.499236][ T7293] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 525.507729][ T7293] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 525.525671][ T7293] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 525.525671][ T7293] inode = 1 71 [ 525.525671][ T7293] function = gfs2_check_internal_file_size, file = fs/gfs2/inode.h, line = 87 [ 525.545641][ T7293] gfs2: fsid=syz:syz.0: G: s:SH n:2/47 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 525.554726][ T7293] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 525.564004][ T7293] gfs2: fsid=syz:syz.0: I: n:1/71 t:8 f:0x00 d:0x00000200 s:8390144 p:0 [ 525.572714][ T7293] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 525.640081][ T7293] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 525.649222][ T7293] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 525.657509][ T7293] gfs2: fsid=syz:syz.0: File system withdrawn [ 525.663818][ T7293] CPU: 0 PID: 7293 Comm: syz.5.602 Not tainted 6.1.140-syzkaller #0 [ 525.671846][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.681956][ T7293] Call Trace: [ 525.685360][ T7293] [ 525.688332][ T7293] dump_stack_lvl+0x168/0x22e [ 525.693678][ T7293] ? kobject_uevent_env+0x35f/0x8a0 [ 525.698919][ T7293] ? show_regs_print_info+0x12/0x12 [ 525.704176][ T7293] ? load_image+0x3b0/0x3b0 [ 525.708747][ T7293] ? kobject_uevent_env+0x35f/0x8a0 [ 525.714025][ T7293] gfs2_withdraw+0x143f/0x1780 [ 525.718875][ T7293] ? gfs2_lm+0x220/0x220 [ 525.723172][ T7293] ? gfs2_glock_nq+0xcf0/0x14e0 [ 525.728068][ T7293] ? gfs2_consist_inode_i+0xf1/0x110 [ 525.733392][ T7293] gfs2_jdesc_check+0x137/0x290 [ 525.738299][ T7293] init_journal+0xcad/0x2300 [ 525.742939][ T7293] ? format_decode+0xb3b/0x1330 [ 525.748214][ T7293] ? init_inodes+0xdb/0x320 [ 525.752771][ T7293] ? _compound_head+0x120/0x120 [ 525.757661][ T7293] ? vsnprintf+0x1905/0x1a00 [ 525.762308][ T7293] ? snprintf+0xd7/0x120 [ 525.766689][ T7293] ? init_inodes+0xdb/0x320 [ 525.771239][ T7293] ? vscnprintf+0x80/0x80 [ 525.775618][ T7293] ? gfs2_glock_nq_num+0x17f/0x1c0 [ 525.780791][ T7293] init_inodes+0xdb/0x320 [ 525.785162][ T7293] gfs2_fill_super+0x1718/0x1f80 [ 525.790186][ T7293] ? gfs2_reconfigure+0xcd0/0xcd0 [ 525.795443][ T7293] ? init_locking+0xb8/0x200 [ 525.800079][ T7293] ? sb_set_blocksize+0xa5/0xe0 [ 525.804996][ T7293] get_tree_bdev+0x3f1/0x610 [ 525.810085][ T7293] ? gfs2_reconfigure+0xcd0/0xcd0 [ 525.815533][ T7293] gfs2_get_tree+0x4d/0x1e0 [ 525.820283][ T7293] vfs_get_tree+0x88/0x270 [ 525.824757][ T7293] do_new_mount+0x24a/0xa40 [ 525.829326][ T7293] __se_sys_mount+0x2d6/0x3c0 [ 525.834159][ T7293] ? __x64_sys_mount+0xc0/0xc0 [ 525.838973][ T7293] ? lockdep_hardirqs_on+0x94/0x140 [ 525.844217][ T7293] ? __x64_sys_mount+0x1c/0xc0 [ 525.849021][ T7293] do_syscall_64+0x4c/0xa0 [ 525.853569][ T7293] ? clear_bhb_loop+0x60/0xb0 [ 525.858290][ T7293] ? clear_bhb_loop+0x60/0xb0 [ 525.863022][ T7293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.868967][ T7293] RIP: 0033:0x7fbec739010a [ 525.873413][ T7293] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.893055][ T7293] RSP: 002b:00007fbec819ce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 525.901514][ T7293] RAX: ffffffffffffffda RBX: 00007fbec819cef0 RCX: 00007fbec739010a [ 525.909525][ T7293] RDX: 00002000000006c0 RSI: 0000200000000040 RDI: 00007fbec819ceb0 [ 525.917526][ T7293] RBP: 00002000000006c0 R08: 00007fbec819cef0 R09: 0000000000000000 [ 525.925528][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 525.933535][ T7293] R13: 00007fbec819ceb0 R14: 0000000000037fa7 R15: 0000200000000480 [ 525.941551][ T7293] [ 525.945966][ T7293] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 527.219473][ T7294] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 527.229275][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 527.238809][ T7294] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 527.248300][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 527.257771][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 527.273557][ T7294] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 527.283256][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 527.292601][ T7294] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 527.302421][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 527.312019][ T7294] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 527.321730][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 527.332511][ T7294] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 527.342576][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 527.352317][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 527.361796][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 527.521205][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 527.531791][ T7294] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 527.543209][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 527.553041][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 527.562584][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 527.572306][ T7294] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 527.582005][ T7294] syz.4.605: attempt to access beyond end of device [ 527.582005][ T7294] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 527.604046][ T7294] syz.4.605: attempt to access beyond end of device [ 527.604046][ T7294] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 528.900260][ T7294] syz.4.605: attempt to access beyond end of device [ 528.900260][ T7294] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 528.926824][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.935529][ T7294] syz.4.605: attempt to access beyond end of device [ 528.935529][ T7294] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 529.014987][ T7305] loop2: detected capacity change from 0 to 8 [ 529.115639][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 529.455844][ T7059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.490518][ T7305] SQUASHFS error: xz decompression failed, data probably corrupt [ 529.504486][ T7305] SQUASHFS error: Failed to read block 0x10d: -5 [ 529.589427][ T7305] SQUASHFS error: Unable to read metadata cache entry [10b] [ 529.621608][ T7305] SQUASHFS error: Unable to read inode 0x5011f [ 529.991781][ T7313] loop0: detected capacity change from 0 to 1024 [ 531.406839][ T7317] loop4: detected capacity change from 0 to 8 [ 531.690214][ T7317] SQUASHFS error: xz decompression failed, data probably corrupt [ 531.700581][ T7317] SQUASHFS error: Failed to read block 0x10d: -5 [ 531.713923][ T7317] SQUASHFS error: Unable to read metadata cache entry [10b] [ 531.725263][ T7317] SQUASHFS error: Unable to read inode 0x5011f [ 532.503192][ T7327] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 532.611827][ T7324] sctp: failed to load transform for md5: -2 [ 532.891141][ T7335] loop2: detected capacity change from 0 to 40427 [ 532.908245][ T7335] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 532.918348][ T7335] F2FS-fs (loop2): invalid crc value [ 532.936021][ T7335] F2FS-fs (loop2): Found nat_bits in checkpoint [ 533.031936][ T7335] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 533.109756][ T4447] hfsplus: b-tree write err: -5, ino 8 [ 533.607334][ T7342] UBIFS error (pid: 7342): cannot open "./file0", error -22 [ 534.095589][ T7343] ALSA: mixer_oss: invalid OSS volume '' [ 534.319874][ T7350] loop0: detected capacity change from 0 to 1024 [ 534.380710][ T4257] syz-executor: attempt to access beyond end of device [ 534.380710][ T4257] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 534.489453][ T7347] ALSA: mixer_oss: invalid OSS volume '' [ 537.663952][ T7361] loop5: detected capacity change from 0 to 64 [ 537.738693][ T7364] loop4: detected capacity change from 0 to 16 [ 537.758573][ T7364] erofs: (device loop4): mounted with root inode @ nid 36. [ 537.781078][ T7353] sctp: failed to load transform for md5: -2 [ 537.938034][ T7370] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 537.947752][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 537.957065][ T7370] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 537.966448][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 537.976183][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 537.993574][ T7370] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 538.003194][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 538.012651][ T7370] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 538.022290][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 538.031689][ T7370] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 538.041281][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 538.050583][ T7370] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 538.060548][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 538.070309][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 538.079695][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 538.089730][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 538.099710][ T7370] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 538.109264][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 538.119291][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 538.128769][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 538.138619][ T7370] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 538.149896][ T7370] syz.4.619: attempt to access beyond end of device [ 538.149896][ T7370] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 538.164162][ T7370] syz.4.619: attempt to access beyond end of device [ 538.164162][ T7370] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 538.179212][ T7370] syz.4.619: attempt to access beyond end of device [ 538.179212][ T7370] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 538.194939][ T7370] syz.4.619: attempt to access beyond end of device [ 538.194939][ T7370] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 539.860680][ T4349] hfsplus: b-tree write err: -5, ino 8 [ 540.267578][ T7385] hfs: hfs: Invalid key length: 94 [ 540.298493][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.618'. [ 540.329077][ T7385] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.337910][ T7385] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.347520][ T7385] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.356787][ T7385] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.094004][ T7385] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.103023][ T7385] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.112014][ T7385] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.120975][ T7385] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.567033][ T7389] loop0: detected capacity change from 0 to 8 [ 541.875614][ T7389] SQUASHFS error: xz decompression failed, data probably corrupt [ 542.023982][ T7393] loop4: detected capacity change from 0 to 64 [ 542.143359][ T7393] hfs: hfs: Invalid key length: 94 [ 542.163790][ T7389] SQUASHFS error: Failed to read block 0x10d: -5 [ 542.374734][ T7389] SQUASHFS error: Unable to read metadata cache entry [10b] [ 542.417188][ T7389] SQUASHFS error: Unable to read inode 0x5011f [ 542.502571][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'. [ 542.530374][ T7397] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.540036][ T7397] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.548851][ T7397] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.557702][ T7397] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.007986][ T7397] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.018905][ T7397] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.027965][ T7397] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.037176][ T7397] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.102681][ T7395] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 543.308824][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 543.322556][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 543.339107][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 543.349380][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 543.358173][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 543.365600][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 543.591988][ T7407] loop4: detected capacity change from 0 to 24 [ 543.638187][ T7407] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 543.847590][ T7407] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 545.407302][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 545.754994][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.624'. [ 545.764676][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 545.988677][ T7417] autofs4:pid:7417:autofs_fill_super: called with bogus options [ 546.170364][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.624'. [ 546.199331][ T4267] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 547.239890][ T7438] loop5: detected capacity change from 0 to 16 [ 547.329802][ T7438] erofs: (device loop5): mounted with root inode @ nid 36. [ 547.331324][ T7400] chnl_net:caif_netlink_parms(): no params data found [ 547.510783][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 547.522928][ T7439] input: syz0 as /devices/virtual/input/input24 [ 547.618748][ T7438] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 547.628484][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 547.638016][ T7438] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 547.647510][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 547.657382][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 547.667518][ T7438] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 547.677160][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 547.686681][ T7438] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 547.696857][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 547.707983][ T7438] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 547.718450][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 547.728289][ T7438] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 547.738562][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 547.749181][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 547.758706][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 547.768538][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 547.780077][ T7438] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 547.789674][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 547.800121][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 547.809951][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 547.820236][ T7438] erofs: (device loop5): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 547.831054][ T7438] syz.5.630: attempt to access beyond end of device [ 547.831054][ T7438] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 547.845248][ T7438] syz.5.630: attempt to access beyond end of device [ 547.845248][ T7438] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 547.860423][ T7438] syz.5.630: attempt to access beyond end of device [ 547.860423][ T7438] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 547.875694][ T7438] syz.5.630: attempt to access beyond end of device [ 547.875694][ T7438] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 548.699565][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.706851][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.748466][ T7400] device bridge_slave_0 entered promiscuous mode [ 548.796734][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.832438][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.876303][ T7400] device bridge_slave_1 entered promiscuous mode [ 549.037417][ T7449] loop5: detected capacity change from 0 to 32768 [ 549.045074][ T7449] (syz.5.631,7449,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option """ or missing value [ 549.057377][ T7449] (syz.5.631,7449,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 549.187291][ T5295] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 549.483001][ T7453] loop4: detected capacity change from 0 to 40427 [ 549.512016][ T7453] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 549.538970][ T7453] F2FS-fs (loop4): invalid crc value [ 549.567090][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 549.898318][ T7453] F2FS-fs (loop4): Found nat_bits in checkpoint [ 549.937443][ T7455] loop2: detected capacity change from 0 to 32768 [ 549.945668][ T7455] (syz.2.632,7455,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option """ or missing value [ 549.957101][ T7455] (syz.2.632,7455,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 550.119543][ T7453] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 550.245451][ T7462] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 551.657151][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 551.836840][ T7462] loop5: detected capacity change from 0 to 32768 [ 551.862999][ T7462] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 551.871661][ T7462] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 551.957095][ T7464] UBIFS error (pid: 7464): cannot open "./file0", error -22 [ 552.061587][ T7462] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 552.061587][ T7462] inode = 1 71 [ 552.061587][ T7462] function = gfs2_check_internal_file_size, file = fs/gfs2/inode.h, line = 87 [ 552.095288][ T7462] gfs2: fsid=syz:syz.0: G: s:SH n:2/47 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 552.114306][ T7462] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 552.128786][ T7462] gfs2: fsid=syz:syz.0: I: n:1/71 t:8 f:0x00 d:0x00000200 s:8390144 p:0 [ 552.139851][ T7462] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 552.567221][ T7462] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 552.576703][ T7462] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 552.584309][ T7462] gfs2: fsid=syz:syz.0: File system withdrawn [ 552.591111][ T7462] CPU: 1 PID: 7462 Comm: syz.5.631 Not tainted 6.1.140-syzkaller #0 [ 552.599501][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.610047][ T7462] Call Trace: [ 552.613882][ T7462] [ 552.617021][ T7462] dump_stack_lvl+0x168/0x22e [ 552.622569][ T7462] ? kobject_uevent_env+0x35f/0x8a0 [ 552.627991][ T7462] ? show_regs_print_info+0x12/0x12 [ 552.633332][ T7462] ? load_image+0x3b0/0x3b0 [ 552.637903][ T7462] ? kobject_uevent_env+0x35f/0x8a0 [ 552.643343][ T7462] gfs2_withdraw+0x143f/0x1780 [ 552.648267][ T7462] ? gfs2_lm+0x220/0x220 [ 552.652732][ T7462] ? gfs2_glock_nq+0xcf0/0x14e0 [ 552.657711][ T7462] ? gfs2_consist_inode_i+0xf1/0x110 [ 552.663139][ T7462] gfs2_jdesc_check+0x137/0x290 [ 552.668441][ T7462] init_journal+0xcad/0x2300 [ 552.673753][ T7462] ? format_decode+0xb3b/0x1330 [ 552.678743][ T7462] ? init_inodes+0xdb/0x320 [ 552.683291][ T7462] ? _compound_head+0x120/0x120 [ 552.688271][ T7462] ? vsnprintf+0x1905/0x1a00 [ 552.692908][ T7462] ? snprintf+0xd7/0x120 [ 552.697363][ T7462] ? init_inodes+0xdb/0x320 [ 552.702093][ T7462] ? vscnprintf+0x80/0x80 [ 552.706591][ T7462] ? gfs2_glock_nq_num+0x17f/0x1c0 [ 552.711939][ T7462] init_inodes+0xdb/0x320 [ 552.716327][ T7462] gfs2_fill_super+0x1718/0x1f80 [ 552.721326][ T7462] ? gfs2_reconfigure+0xcd0/0xcd0 [ 552.726480][ T7462] ? init_locking+0xb8/0x200 [ 552.731115][ T7462] ? sb_set_blocksize+0xa5/0xe0 [ 552.736020][ T7462] get_tree_bdev+0x3f1/0x610 [ 552.740731][ T7462] ? gfs2_reconfigure+0xcd0/0xcd0 [ 552.745809][ T7462] gfs2_get_tree+0x4d/0x1e0 [ 552.750367][ T7462] vfs_get_tree+0x88/0x270 [ 552.754840][ T7462] do_new_mount+0x24a/0xa40 [ 552.759851][ T7462] __se_sys_mount+0x2d6/0x3c0 [ 552.764832][ T7462] ? __x64_sys_mount+0xc0/0xc0 [ 552.770261][ T7462] ? lockdep_hardirqs_on+0x94/0x140 [ 552.775533][ T7462] ? __x64_sys_mount+0x1c/0xc0 [ 552.780757][ T7462] do_syscall_64+0x4c/0xa0 [ 552.785511][ T7462] ? clear_bhb_loop+0x60/0xb0 [ 552.790331][ T7462] ? clear_bhb_loop+0x60/0xb0 [ 552.795156][ T7462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.801906][ T7462] RIP: 0033:0x7fbec739010a [ 552.806729][ T7462] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.828394][ T7462] RSP: 002b:00007fbec8139e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 552.837696][ T7462] RAX: ffffffffffffffda RBX: 00007fbec8139ef0 RCX: 00007fbec739010a [ 552.846595][ T7462] RDX: 00002000000006c0 RSI: 0000200000000040 RDI: 00007fbec8139eb0 [ 552.855255][ T7462] RBP: 00002000000006c0 R08: 00007fbec8139ef0 R09: 0000000000000000 [ 552.863527][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 552.871536][ T7462] R13: 00007fbec8139eb0 R14: 0000000000037fa7 R15: 0000200000000480 [ 552.879741][ T7462] [ 552.885577][ T7462] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 552.943316][ T4260] syz-executor: attempt to access beyond end of device [ 552.943316][ T4260] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 553.112702][ T7458] netlink: 32 bytes leftover after parsing attributes in process `syz.5.631'. [ 553.583162][ T7400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.647786][ T7470] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 553.705434][ T7471] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 553.755497][ T7400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.947298][ T4300] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 554.151456][ T4300] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 554.180540][ T4300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.222592][ T4300] usb 5-1: Product: syz [ 554.261077][ T4300] usb 5-1: Manufacturer: syz [ 554.266033][ T4300] usb 5-1: SerialNumber: syz [ 554.462832][ T7482] input: syz0 as /devices/virtual/input/input25 [ 555.919979][ T7400] team0: Port device team_slave_0 added [ 555.969250][ T4300] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 556.242596][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.637'. [ 556.249942][ T4300] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 556.256384][ T7484] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.269540][ T7484] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.278317][ T7484] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.287223][ T7484] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.301483][ T7484] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.310536][ T7484] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.322435][ T7484] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.331407][ T7484] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.426153][ T7400] team0: Port device team_slave_1 added [ 556.437201][ T4252] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 556.733783][ T7494] autofs4:pid:7494:autofs_fill_super: called with bogus options [ 557.173899][ T7496] loop5: detected capacity change from 0 to 64 [ 557.338306][ T4300] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 557.346277][ T4300] ath9k_htc: Failed to initialize the device [ 557.569179][ T125] usb 5-1: USB disconnect, device number 4 [ 557.927829][ T7502] hfs: hfs: Invalid key length: 94 [ 558.001136][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'. [ 558.060563][ T125] usb 5-1: ath9k_htc: USB layer deinitialized [ 558.101046][ T7505] loop4: detected capacity change from 0 to 64 [ 558.170958][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.640'. [ 558.282827][ T7496] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.292026][ T7496] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.300983][ T7496] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.310204][ T7496] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.534268][ T7509] hfs: hfs: Invalid key length: 94 [ 559.107893][ T4252] usb 1-1: unable to get BOS descriptor or descriptor too short [ 559.261569][ T4252] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 559.292951][ T4252] usb 1-1: can't read configurations, error -71 [ 559.327564][ T7496] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.336712][ T7496] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.346103][ T7496] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.355294][ T7496] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.628197][ T7514] loop0: detected capacity change from 0 to 40427 [ 559.642460][ T7514] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 559.652564][ T7514] F2FS-fs (loop0): invalid crc value [ 559.686481][ T7514] F2FS-fs (loop0): Found nat_bits in checkpoint [ 559.747242][ T7514] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 559.896599][ T7519] UBIFS error (pid: 7519): cannot open "./file0", error -22 [ 559.936497][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.093953][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.411778][ T7400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.437504][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'. [ 560.457578][ T7510] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.466394][ T7510] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.475155][ T7510] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.483889][ T7510] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.506805][ T7510] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.516948][ T7510] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.526248][ T7510] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.535277][ T7510] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.658940][ T7523] ALSA: mixer_oss: invalid OSS volume '' [ 561.468807][ T4256] syz-executor: attempt to access beyond end of device [ 561.468807][ T4256] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 561.484351][ T6941] device hsr_slave_0 left promiscuous mode [ 561.527967][ T6941] device hsr_slave_1 left promiscuous mode [ 561.577561][ T6941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.616821][ T6941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.651460][ T6941] device bridge_slave_1 left promiscuous mode [ 561.664527][ T7525] loop2: detected capacity change from 0 to 64 [ 561.687259][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.712877][ T6941] device bridge_slave_0 left promiscuous mode [ 561.738830][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.933580][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.943900][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.996014][ T6941] team0 (unregistering): Port device team_slave_1 removed [ 563.044838][ T6941] team0 (unregistering): Port device team_slave_0 removed [ 563.095908][ T6941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.144487][ T6941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.663844][ T6941] bond0 (unregistering): Released all slaves [ 563.732762][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.740181][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.766497][ T7400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.794829][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 563.811204][ T7526] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.820330][ T7526] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.829509][ T7526] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.838497][ T7526] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.850774][ T7526] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.859755][ T7526] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.868737][ T7526] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.877767][ T7526] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.916795][ T7532] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 564.119040][ T7537] loop5: detected capacity change from 0 to 16 [ 564.139063][ T7537] erofs: (device loop5): mounted with root inode @ nid 36. [ 564.745206][ T7400] device hsr_slave_0 entered promiscuous mode [ 565.968335][ T7400] device hsr_slave_1 entered promiscuous mode [ 566.053926][ T7545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 566.063583][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 566.072845][ T7545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 566.082345][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 566.092743][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 566.102624][ T7545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 566.112202][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 566.121408][ T7545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 566.131020][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 566.140551][ T7545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 566.150306][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 566.159684][ T7545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 566.169156][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 566.178390][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 566.187599][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 566.197165][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 566.206951][ T7545] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 566.216488][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 566.227530][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 566.236866][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 566.247691][ T7545] erofs: (device loop5): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 566.262719][ T7545] syz.5.648: attempt to access beyond end of device [ 566.262719][ T7545] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 566.277310][ T7545] syz.5.648: attempt to access beyond end of device [ 566.277310][ T7545] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 566.292560][ T7545] syz.5.648: attempt to access beyond end of device [ 566.292560][ T7545] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 566.308049][ T7545] syz.5.648: attempt to access beyond end of device [ 566.308049][ T7545] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 566.360458][ T7400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.509335][ T7400] Cannot create hsr debugfs directory [ 568.935378][ T7571] loop0: detected capacity change from 0 to 64 [ 569.954608][ T7573] loop2: detected capacity change from 0 to 40427 [ 569.970883][ T7573] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 569.980925][ T7573] F2FS-fs (loop2): invalid crc value [ 570.043963][ T7573] F2FS-fs (loop2): Found nat_bits in checkpoint [ 570.118449][ T7573] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 570.330872][ T7582] UBIFS error (pid: 7582): cannot open "./file0", error -22 [ 570.946785][ T4257] syz-executor: attempt to access beyond end of device [ 570.946785][ T4257] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 571.006722][ T7585] loop5: detected capacity change from 0 to 16 [ 571.077304][ T7585] erofs: (device loop5): mounted with root inode @ nid 36. [ 571.268434][ T7590] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 571.381045][ T7588] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 571.390457][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 571.399549][ T7588] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 571.408993][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 571.418089][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 571.427232][ T7588] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 571.436520][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 571.445612][ T7588] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 571.454951][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 571.464100][ T7588] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 571.474095][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 571.483185][ T7588] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 571.493307][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 571.502470][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 571.511586][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 571.520794][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 571.530147][ T7588] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 571.539839][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 571.549271][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 571.559019][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 571.568616][ T7588] erofs: (device loop5): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 571.578945][ T7588] syz.5.656: attempt to access beyond end of device [ 571.578945][ T7588] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 571.593488][ T7588] syz.5.656: attempt to access beyond end of device [ 571.593488][ T7588] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 571.607893][ T7588] syz.5.656: attempt to access beyond end of device [ 571.607893][ T7588] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 571.622480][ T7588] syz.5.656: attempt to access beyond end of device [ 571.622480][ T7588] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 574.105859][ T7400] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 574.263684][ T7400] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 574.375334][ T7610] input: syz0 as /devices/virtual/input/input26 [ 574.556777][ T7609] mmap: syz.5.660 (7609) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 575.294100][ T7400] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 575.524239][ T7615] loop2: detected capacity change from 0 to 40427 [ 575.553293][ T7615] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 575.604703][ T7615] F2FS-fs (loop2): invalid crc value [ 575.734244][ T7400] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 575.840482][ T7615] F2FS-fs (loop2): Found nat_bits in checkpoint [ 575.878154][ T7615] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 576.290031][ T7625] UBIFS error (pid: 7625): cannot open "./file0", error -22 [ 577.112563][ T7626] autofs4:pid:7626:autofs_fill_super: called with bogus options [ 577.362757][ T4257] syz-executor: attempt to access beyond end of device [ 577.362757][ T4257] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 577.739726][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.664'. [ 578.546923][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.908744][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.980658][ T7640] input: syz0 as /devices/virtual/input/input27 [ 579.073118][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 579.934639][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.058857][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 580.074836][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 580.136874][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.144441][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.155677][ T7645] loop2: detected capacity change from 0 to 64 [ 580.158342][ T7646] loop4: detected capacity change from 0 to 64 [ 580.228055][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 580.287607][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 580.312156][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.319390][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.665743][ T7648] hfs: hfs: Invalid key length: 94 [ 580.941107][ T7653] hfs: hfs: Invalid key length: 94 [ 581.331467][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 581.358732][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 581.415601][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'. [ 581.428350][ T7647] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.437149][ T7647] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.445956][ T7647] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.454914][ T7647] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.484139][ T7647] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.493860][ T7647] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.502865][ T7647] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.512250][ T7647] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.645704][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.669'. [ 581.659055][ T7651] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.668800][ T7651] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.677772][ T7651] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.686766][ T7651] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.825923][ T7651] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.835184][ T7651] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.844200][ T7651] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.853244][ T7651] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.026836][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 582.660312][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 582.771542][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.780995][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 582.817368][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 582.878839][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 582.970047][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 583.027847][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 583.106616][ T7669] ALSA: mixer_oss: invalid OSS volume '' [ 583.777588][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 583.929300][ T7671] loop4: detected capacity change from 0 to 2048 [ 585.945356][ T7671] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 585.953226][ T7671] UDF-fs: Scanning with blocksize 512 failed [ 585.995806][ T7671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 586.198119][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.649904][ T7679] loop5: detected capacity change from 0 to 8 [ 586.941538][ T7679] SQUASHFS error: xz decompression failed, data probably corrupt [ 586.975623][ T7679] SQUASHFS error: Failed to read block 0x10d: -5 [ 587.004751][ T7679] SQUASHFS error: Unable to read metadata cache entry [10b] [ 587.046937][ T7679] SQUASHFS error: Unable to read inode 0x5011f [ 587.734418][ T7692] loop0: detected capacity change from 0 to 512 [ 587.746007][ T7692] EXT4-fs: Invalid want_extra_isize 43 [ 588.507442][ T4267] Bluetooth: hci0: command 0x0405 tx timeout [ 590.783749][ T7710] loop2: detected capacity change from 0 to 24 [ 590.877978][ T7710] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 591.007688][ T7714] input: syz0 as /devices/virtual/input/input28 [ 591.286694][ T7710] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 591.375744][ T7711] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 592.067190][ T6941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 592.098228][ T6941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 592.141187][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.681'. [ 592.150271][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'. [ 592.393479][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.681'. [ 592.414339][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.793472][ T7723] input: syz0 as /devices/virtual/input/input29 [ 593.837126][ T4326] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 593.875283][ T7735] loop5: detected capacity change from 0 to 47 [ 593.902857][ T7738] loop0: detected capacity change from 0 to 512 [ 593.912149][ T7735] MINIX-fs: bad superblock or unable to read bitmaps [ 593.964739][ T7738] EXT4-fs: Ignoring removed orlov option [ 593.978019][ T7738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 593.992025][ T7738] EXT4-fs (loop0): orphan cleanup on readonly fs [ 594.016081][ T7738] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.689: bg 0: block 248: padding at end of block bitmap is not set [ 594.037764][ T7738] Quota error (device loop0): write_blk: dquota write failed [ 594.287270][ T7738] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 594.310712][ T7738] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.689: Failed to acquire dquot type 1 [ 595.140907][ T7743] loop5: detected capacity change from 0 to 64 [ 595.158469][ T7738] EXT4-fs (loop0): 1 truncate cleaned up [ 595.170362][ T7738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 595.587286][ T7749] hfs: hfs: Invalid key length: 94 [ 595.622957][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.690'. [ 595.653645][ T7749] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.662725][ T7749] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.671895][ T7749] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.680839][ T7749] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.093018][ T7749] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.103475][ T7749] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.116267][ T7749] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.125705][ T7749] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.188849][ T4326] usb 5-1: unable to get BOS descriptor or descriptor too short [ 596.260740][ T4326] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 596.384309][ T4326] usb 5-1: can't read configurations, error -71 [ 596.662061][ T7744] netlink: 256 bytes leftover after parsing attributes in process `syz.0.689'. [ 596.868165][ T7744] EXT4-fs: Ignoring removed orlov option [ 596.897057][ T7744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 596.905784][ T7744] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 597.811193][ T7744] EXT4-fs error (device loop0): __ext4_remount:6611: comm syz.0.689: Abort forced by user [ 597.838814][ T7744] EXT4-fs (loop0): Remounting filesystem read-only [ 597.857171][ T4296] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 597.892868][ T7744] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 597.917656][ T7744] ext4 filesystem being remounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 598.120358][ T7766] sctp: failed to load transform for md5: -2 [ 598.152892][ T4296] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 598.270410][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.282638][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 598.320846][ T4296] usb 6-1: Product: syz [ 598.325823][ T4296] usb 6-1: Manufacturer: syz [ 598.372550][ T4296] usb 6-1: SerialNumber: syz [ 598.385034][ T7779] loop2: detected capacity change from 0 to 64 [ 598.396130][ T7776] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 598.415515][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 598.420924][ T4296] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 598.506588][ T4296] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 599.827256][ T4267] Bluetooth: hci0: command 0x0405 tx timeout [ 599.992604][ T4326] usb 6-1: USB disconnect, device number 4 [ 600.287185][ T4296] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 600.313011][ T4296] ath9k_htc: Failed to initialize the device [ 600.325160][ T4326] usb 6-1: ath9k_htc: USB layer deinitialized [ 600.715479][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 600.741009][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 601.038975][ T7803] loop0: detected capacity change from 0 to 64 [ 601.618256][ T7814] hfs: hfs: Invalid key length: 94 [ 601.725229][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'. [ 601.851409][ T7814] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.860696][ T7814] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.869834][ T7814] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.879684][ T7814] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.075639][ T7814] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.085232][ T7814] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.095292][ T7814] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.104744][ T7814] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.684066][ T7815] autofs4:pid:7815:autofs_fill_super: called with bogus options [ 604.386225][ T7831] loop2: detected capacity change from 0 to 2048 [ 604.442029][ T7831] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 604.451597][ T7831] UDF-fs: Scanning with blocksize 512 failed [ 604.482162][ T7831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.883382][ T7400] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN [ 607.895762][ T7400] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 607.904489][ T7400] CPU: 1 PID: 7400 Comm: syz-executor Not tainted 6.1.140-syzkaller #0 [ 607.913707][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 607.923897][ T7400] RIP: 0010:klist_remove+0x158/0x380 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 607.929345][ T7400] Code: 80 3c 04 00 74 08 4c 89 f7 e8 14 38 d7 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 ed 37 d7 f7 49 8b 47 58 48 89 44 24 10 4c 89 [ 607.949720][ T7400] RSP: 0018:ffffc9000499f580 EFLAGS: 00010202 [ 607.955977][ T7400] RAX: 000000000000000b RBX: ffff888025b00000 RCX: dffffc0000000000 [ 607.964352][ T7400] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 607.972441][ T7400] RBP: ffffc9000499f680 R08: dffffc0000000000 R09: fffffbfff1bce559 [ 607.980526][ T7400] R10: fffffbfff1bce559 R11: 1ffffffff1bce558 R12: 1ffff1100aa86c8c [ 607.989388][ T7400] R13: dffffc0000000000 R14: ffff888055436460 R15: 0000000000000000 [ 607.997388][ T7400] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 608.006428][ T7400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.013034][ T7400] CR2: 00007f24190a5000 CR3: 000000002e77b000 CR4: 00000000003506e0 [ 608.021048][ T7400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.029209][ T7400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.037724][ T7400] Call Trace: [ 608.041013][ T7400] [ 608.043987][ T7400] ? klist_del+0x110/0x110 [ 608.048624][ T7400] ? kobject_move+0x593/0x6d0 [ 608.053674][ T7400] ? kobject_put+0x460/0x460 [ 608.058283][ T7400] ? get_device_parent+0x288/0x3f0 [ 608.063419][ T7400] device_move+0x18f/0x6f0 [ 608.068435][ T7400] hci_conn_del_sysfs+0xab/0x160 [ 608.073400][ T7400] hci_conn_cleanup+0x575/0x730 [ 608.078807][ T7400] hci_conn_del+0x515/0x720 [ 608.083516][ T7400] ? sco_connect_cfm+0xad0/0xad0 [ 608.088579][ T7400] hci_conn_hash_flush+0x203/0x290 [ 608.093705][ T7400] hci_dev_close_sync+0x930/0xf40 [ 608.099109][ T7400] ? blocking_notifier_chain_unregister+0x115/0x210 [ 608.105745][ T7400] hci_unregister_dev+0x202/0x4f0 [ 608.111218][ T7400] vhci_release+0x7f/0xd0 [ 608.115662][ T7400] ? vhci_open+0x360/0x360 [ 608.120105][ T7400] __fput+0x22c/0x920 [ 608.124504][ T7400] task_work_run+0x1ca/0x250 [ 608.130068][ T7400] ? task_work_cancel+0x230/0x230 [ 608.135223][ T7400] ? do_exit+0x931/0x2400 [ 608.139937][ T7400] ? kmem_cache_free+0xf7/0x290 [ 608.145063][ T7400] do_exit+0x936/0x2400 [ 608.149844][ T7400] ? put_task_struct+0x80/0x80 [ 608.155140][ T7400] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 608.161304][ T7400] ? lock_chain_count+0x20/0x20 [ 608.166342][ T7400] ? _raw_spin_lock_irq+0xab/0xe0 [ 608.171652][ T7400] do_group_exit+0x217/0x2d0 [ 608.176470][ T7400] ? lockdep_hardirqs_on+0x94/0x140 [ 608.181713][ T7400] get_signal+0x1272/0x1350 [ 608.186331][ T7400] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 608.191628][ T7400] arch_do_signal_or_restart+0xb0/0x1230 [ 608.197791][ T7400] ? __ia32_sys_getpeername+0x80/0x80 [ 608.203210][ T7400] ? get_sigframe_size+0x10/0x10 [ 608.208163][ T7400] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 608.214465][ T7400] ? exit_to_user_mode_loop+0x3b/0x110 [ 608.219933][ T7400] exit_to_user_mode_loop+0x70/0x110 [ 608.225230][ T7400] exit_to_user_mode_prepare+0xb1/0x140 [ 608.230835][ T7400] syscall_exit_to_user_mode+0x16/0x40 [ 608.236397][ T7400] do_syscall_64+0x58/0xa0 [ 608.240832][ T7400] ? clear_bhb_loop+0x60/0xb0 [ 608.245703][ T7400] ? clear_bhb_loop+0x60/0xb0 [ 608.250405][ T7400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.256519][ T7400] RIP: 0033:0x7ffa427907fc [ 608.261192][ T7400] Code: Unable to access opcode bytes at 0x7ffa427907d2. [ 608.268539][ T7400] RSP: 002b:00007ffd5aa2b560 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 608.277243][ T7400] RAX: 0000000000000028 RBX: 00007ffa434e4620 RCX: 00007ffa427907fc [ 608.285346][ T7400] RDX: 0000000000000028 RSI: 00007ffa434e4670 RDI: 0000000000000003 [ 608.293426][ T7400] RBP: 0000000000000000 R08: 00007ffd5aa2b5b4 R09: 000000000000000c [ 608.301865][ T7400] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 608.310295][ T7400] R13: 0000000000000000 R14: 00007ffa434e4670 R15: 0000000000000000 [ 608.318645][ T7400] [ 608.322479][ T7400] Modules linked in: [ 608.326596][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.370224][ T7836] loop5: detected capacity change from 0 to 2048 [ 608.655161][ T7836] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 608.797457][ T7400] ---[ end trace 0000000000000000 ]--- [ 608.803840][ T7400] RIP: 0010:klist_remove+0x158/0x380 [ 608.812996][ T7400] Code: 80 3c 04 00 74 08 4c 89 f7 e8 14 38 d7 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 ed 37 d7 f7 49 8b 47 58 48 89 44 24 10 4c 89 [ 608.835971][ T7400] RSP: 0018:ffffc9000499f580 EFLAGS: 00010202 [ 608.854960][ T7400] RAX: 000000000000000b RBX: ffff888025b00000 RCX: dffffc0000000000 [ 608.877196][ T7400] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 608.885573][ T7400] RBP: ffffc9000499f680 R08: dffffc0000000000 R09: fffffbfff1bce559 [ 608.917007][ T7400] R10: fffffbfff1bce559 R11: 1ffffffff1bce558 R12: 1ffff1100aa86c8c [ 608.926620][ T7400] R13: dffffc0000000000 R14: ffff888055436460 R15: 0000000000000000 [ 608.959257][ T7400] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 608.981018][ T7400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.001098][ T7400] CR2: 00007f24190a3000 CR3: 000000007e631000 CR4: 00000000003506e0 [ 609.038893][ T7400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 609.067012][ T7400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 609.075114][ T7400] Kernel panic - not syncing: Fatal exception [ 609.081562][ T7400] Kernel Offset: disabled [ 609.085896][ T7400] Rebooting in 86400 seconds..