last executing test programs: 3m32.295013635s ago: executing program 1 (id=2): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$eJzslb9v00AUx793dpy0gkoMMLCkQyWKRB3bBdSFoexISC0Cxoheq4DbVGmGthJSKxYWZsQfwMbM0ImBDSZmBkBCYqAjC0gcuvM5Ptd22igIhr6PlMv33t27H8/PzyAI4tTy5fOPT89uLixfAXAGM6gb+zcnm8Ot+R9fODUj325MPT6whhqqYQCkzIzuMft7AN4sOsBesqyUmfcr86/WXAbHjOnfAcdlo++CwU/PKjNvAYb7xvxwUw5u050wIhbsQTdeWe3EIlBNqJpotfOyljufOv/hPsOKuaDagVnjWzu7j9ox0EtELFJRk+k+haFUJDcDSoZyYlj89PkWOW5YIVDP697TJ/uq7xt7YMUvBEdo9DwYloxeQB2+7zdNV4TW/S+62fpO8tgS9qrPXRSNUSaPL87N5SzTUEJl+HD3iVio2/61Y/yWQ+bUR16Qmazycin476JansrA6F68WfTyius0zEW1RRzzkpxgd3bUwuyUuHB48K7o9fW/hnc8ARNAe+i5CtSHyTi+Vep1PmeZrnhlPJzVJaEyJZL6wVzgklWfXOur0Oqvb7a2dnbnOuvtNbEmNqJo/npwNQiuRS1dm5PWLndH6l9D16dJa/1aRa30mIftdr/fC7eBfi8c9KOktZJp6XX3u/bhuv5xzP6SMv286Bcv/VCy/B7M/Lj+V2rWqTgOQRAEQRAEQRAEQRAEQRDECfhp6SYY3k8NurIcN7qth/8EAAD//7LLT5w=") socket$caif_stream(0x25, 0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0xfcff, 0x20000, 0x3) 3m30.178565169s ago: executing program 1 (id=9): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="008ec2abfa00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0xff, 0x59d6, &(0x7f0000007200)="$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") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @var]}}, 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xfff3, 0xffff}, {0x10, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c0001"], 0x24}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/106, 0x6a}], 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x39, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000001300)={{r1}, "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"}) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) 3m26.523983725s ago: executing program 1 (id=12): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="008ec2abfa00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0xff, 0x59d6, &(0x7f0000007200)="$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") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @var]}}, 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xfff3, 0xffff}, {0x10, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c0001"], 0x24}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/106, 0x6a}], 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x39, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000001300)={{r1}, "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"}) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) 3m10.744288048s ago: executing program 32 (id=12): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="008ec2abfa00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0xff, 0x59d6, &(0x7f0000007200)="$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") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @var]}}, 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xfff3, 0xffff}, {0x10, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c0001"], 0x24}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/106, 0x6a}], 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x39, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000001300)={{r1}, "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"}) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) 1m5.433221267s ago: executing program 0 (id=201): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x3, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0xc800) syz_open_pts(0xffffffffffffffff, 0x22000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a000000000000000100000d00000000060000000100000000305f00302e2f613e00"], 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 1m3.829668032s ago: executing program 0 (id=206): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1m0.612850082s ago: executing program 0 (id=209): munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8, 0x12, r5, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000400)=[@mss={0x2, 0x4}, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 58.401989262s ago: executing program 0 (id=212): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000034c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000003640)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB=',discard,errors=continue,errors=continue,\x00', @ANYRES8, @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYBLOB="a880643446b31b6a354a1ce925f41cb03cd82d0a2df0cc3407a514f07f667e7f7655f3f551b16cbc8502e52a9c5fb5482449da06953dd084329807295a2e4b63581015f806476097a0fda8b84451b9d54101a1428eec2f0e35be3c6e0b162dc4e380f442a9866f93cd6e500c820d28b8125c0a6d8697cba490cdc0d3d692ad67c8aeb55eeabe704b0028315681766a451f3e7757e8e16d"], 0x1, 0x152d, &(0x7f0000001f80)="$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") setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x5, 0x90, 0xffffffff, @vifc_lcl_ifindex, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 56.141981487s ago: executing program 0 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) 53.580345479s ago: executing program 0 (id=222): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000050000000804", @ANYRES32, @ANYRES8, @ANYBLOB], 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @pic={0x2, 0x0, 0x1, 0xfa, 0x2, 0x3, 0x2, 0xb6, 0xf7, 0x39, 0x3, 0x2, 0x7, 0x92, 0x3e, 0xc3}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$getown(r1, 0x9) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x0) mremap(&(0x7f000013c000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f00002f0000/0x3000)=nil) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffe, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007", @ANYBLOB="d8", @ANYRES64=r7], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1810031000000010101000000000081000a000f020000028002002d1fa02595", 0x31}], 0x1}, 0x8010) 37.076135155s ago: executing program 33 (id=222): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000050000000804", @ANYRES32, @ANYRES8, @ANYBLOB], 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @pic={0x2, 0x0, 0x1, 0xfa, 0x2, 0x3, 0x2, 0xb6, 0xf7, 0x39, 0x3, 0x2, 0x7, 0x92, 0x3e, 0xc3}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$getown(r1, 0x9) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x0) mremap(&(0x7f000013c000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f00002f0000/0x3000)=nil) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffe, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007", @ANYBLOB="d8", @ANYRES64=r7], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1810031000000010101000000000081000a000f020000028002002d1fa02595", 0x31}], 0x1}, 0x8010) 18.212245375s ago: executing program 2 (id=277): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000050000000804", @ANYRES32, @ANYRES8, @ANYBLOB], 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @pic={0x2, 0x0, 0x1, 0xfa, 0x2, 0x3, 0x2, 0xb6, 0xf7, 0x39, 0x3, 0x2, 0x7, 0x92, 0x3e, 0xc3}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$getown(r1, 0x9) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x0) mremap(&(0x7f000013c000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f00002f0000/0x3000)=nil) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffe, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007", @ANYBLOB="d8", @ANYRES64=r7], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1810031000000010101000000000081000a000f020000028002002d1fa02595", 0x31}], 0x1}, 0x8010) 13.746965295s ago: executing program 5 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0xa, 0x3, 0x3a) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0xffff3bac, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) 10.870672251s ago: executing program 5 (id=287): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, 0x0, 0x0) 10.728330525s ago: executing program 4 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xc4, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x44, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3c, 0x3, "f3f73fec176b89b141cd3e1d6e5d99e50640e5944d7cda5f39ba82fb9f2be738184009286d928b2dcb4ae519ee0a3b038e4758032d8351ff"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc4}}, 0x0) 10.552051334s ago: executing program 3 (id=289): memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x81) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 9.546306438s ago: executing program 5 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) 9.446960349s ago: executing program 4 (id=291): munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8, 0x12, r5, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000400)=[@mss={0x2, 0x4}, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 9.415796106s ago: executing program 3 (id=292): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 9.238255429s ago: executing program 2 (id=293): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000002c0)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@type={'type', 0x3d, "488b500c"}}, {@codepage={'codepage', 0x3d, 'cp862'}}, {}, {@uid}, {@umask={'umask', 0x3d, 0x5}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$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") r0 = open(0x0, 0x145142, 0x44) sendfile(r0, r0, 0x0, 0x800000009) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = epoll_create1(0x80000) kcmp(r1, r1, 0x0, r4, r2) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000380)={0x7, @vbi={0x80000000, 0x4, 0xfffffff7, 0x20385655, [0x10001, 0x8], [0x1, 0xa883], 0x1}}) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000a40)=ANY=[@ANYBLOB="737461636b203a0008c499100949c23262e80dfac1d62d08d42dceea7045b533260ba0d30b2345c44997fd10d56d0e2c427b3ca73ac20a6a4e0cf57dde73abc935d59b8049838b1c009c699a03ddd674e577650ab0284c95f7501f950601b8a322c74daedf6bc06aea1ff1a4269529ffa5e90880f13074c542"], 0xe4) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) 8.159323852s ago: executing program 5 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xac, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x3, 0x17d, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fff7, 0xfd5], [0x0, 0x0, 0xfffffffe, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24]}, 0x45c) ioprio_set$uid(0x3, 0x0, 0x2007) shmctl$SHM_UNLOCK(0x0, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=r0], 0x30}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000440)={0x0, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}}, 0x88) 7.200068394s ago: executing program 3 (id=295): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) open$dir(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = dup2(r4, r3) syz_open_procfs$userns(r0, &(0x7f0000000100)) readv(r5, &(0x7f0000001400), 0x0) 7.17570693s ago: executing program 4 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0xa, 0x3, 0x3a) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0xffff3bac, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) 4.794139778s ago: executing program 3 (id=297): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000034c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000003640)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB=',discard,errors=continue,errors=continue,\x00', @ANYRES8, @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYBLOB="a880643446b31b6a354a1ce925f41cb03cd82d0a2df0cc3407a514f07f667e7f7655f3f551b16cbc8502e52a9c5fb5482449da06953dd084329807295a2e4b63581015f806476097a0fda8b84451b9d54101a1428eec2f0e35be3c6e0b162dc4e380f442a9866f93cd6e500c820d28b8125c0a6d8697cba490cdc0d3d692ad67c8aeb55eeabe704b0028315681766a451f3e7757e8e16d"], 0x1, 0x152d, &(0x7f0000001f80)="$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") setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x5, 0x90, 0xffffffff, @vifc_lcl_ifindex, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 4.58713976s ago: executing program 2 (id=298): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) write$tcp_congestion(r1, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 3.651426841s ago: executing program 2 (id=299): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 3.649551914s ago: executing program 3 (id=300): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) 2.529012564s ago: executing program 4 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xc4, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x44, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3c, 0x3, "f3f73fec176b89b141cd3e1d6e5d99e50640e5944d7cda5f39ba82fb9f2be738184009286d928b2dcb4ae519ee0a3b038e4758032d8351ff"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc4}}, 0x0) 2.312778839s ago: executing program 3 (id=302): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000002c0)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@type={'type', 0x3d, "488b500c"}}, {@codepage={'codepage', 0x3d, 'cp862'}}, {}, {@uid}, {@umask={'umask', 0x3d, 0x5}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$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") r0 = open(0x0, 0x145142, 0x44) sendfile(r0, r0, 0x0, 0x800000009) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = epoll_create1(0x80000) kcmp(r1, r1, 0x0, r4, r2) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000380)={0x7, @vbi={0x80000000, 0x4, 0xfffffff7, 0x20385655, [0x10001, 0x8], [0x1, 0xa883], 0x1}}) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000a40)=ANY=[@ANYBLOB="737461636b203a0008c499100949c23262e80dfac1d62d08d42dceea7045b533260ba0d30b2345c44997fd10d56d0e2c427b3ca73ac20a6a4e0cf57dde73abc935d59b8049838b1c009c699a03ddd674e577650ab0284c95f7501f950601b8a322c74daedf6bc06aea1ff1a4269529ffa5e90880f13074c542"], 0xe4) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) 2.312032633s ago: executing program 4 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) 2.208182795s ago: executing program 2 (id=304): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.998053445s ago: executing program 5 (id=305): munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8, 0x12, r5, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000400)=[@mss={0x2, 0x4}, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.103386278s ago: executing program 2 (id=306): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000034c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000003640)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB=',discard,errors=continue,errors=continue,\x00', @ANYRES8, @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYBLOB="a880643446b31b6a354a1ce925f41cb03cd82d0a2df0cc3407a514f07f667e7f7655f3f551b16cbc8502e52a9c5fb5482449da06953dd084329807295a2e4b63581015f806476097a0fda8b84451b9d54101a1428eec2f0e35be3c6e0b162dc4e380f442a9866f93cd6e500c820d28b8125c0a6d8697cba490cdc0d3d692ad67c8aeb55eeabe704b0028315681766a451f3e7757e8e16d"], 0x1, 0x152d, &(0x7f0000001f80)="$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") setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x5, 0x90, 0xffffffff, @vifc_lcl_ifindex, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 52.226111ms ago: executing program 4 (id=307): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x3, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_pts(0xffffffffffffffff, 0x22000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a000000000000000100000d00000000060000000100000000305f00302e2f613e00"], 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 0s ago: executing program 5 (id=308): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) write$tcp_congestion(r1, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 0 [ 76.381000][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.396699][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.411184][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.425094][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.441165][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.449652][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.463445][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.470681][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.495231][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.513359][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.520493][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.539191][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.546400][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.569856][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.576986][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.586755][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.593877][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.629740][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.636867][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.646021][ T5839] Bluetooth: hci1: command tx timeout [ 76.648582][ T5834] Bluetooth: hci0: command tx timeout [ 76.722118][ T5834] Bluetooth: hci3: command tx timeout [ 76.722426][ T5839] Bluetooth: hci2: command tx timeout [ 76.802721][ T5839] Bluetooth: hci4: command tx timeout [ 76.833220][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.889069][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.944284][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.951511][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.006081][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.013423][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.100709][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.139852][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.187560][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.216724][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.223950][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.254081][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.261174][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.303310][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.343228][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.372215][ T5830] veth0_vlan: entered promiscuous mode [ 77.476003][ T5830] veth1_vlan: entered promiscuous mode [ 77.537308][ T5837] veth0_vlan: entered promiscuous mode [ 77.547474][ T5835] veth0_vlan: entered promiscuous mode [ 77.582399][ T5835] veth1_vlan: entered promiscuous mode [ 77.603546][ T5830] veth0_macvtap: entered promiscuous mode [ 77.625315][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.633807][ T5837] veth1_vlan: entered promiscuous mode [ 77.661022][ T5830] veth1_macvtap: entered promiscuous mode [ 77.745744][ T5835] veth0_macvtap: entered promiscuous mode [ 77.768659][ T5837] veth0_macvtap: entered promiscuous mode [ 77.797629][ T5835] veth1_macvtap: entered promiscuous mode [ 77.815536][ T5837] veth1_macvtap: entered promiscuous mode [ 77.855614][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.889769][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.909018][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.920436][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.932952][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.953117][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.965664][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.977672][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.987792][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.999894][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.018244][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.030247][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.055585][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.064706][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.074353][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.084060][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.095843][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.106746][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.116581][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.127125][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.140659][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.166618][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.177220][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.188128][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.198942][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.210464][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.224633][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.249159][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.258726][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.271286][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.280318][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.382439][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.390755][ T5827] veth0_vlan: entered promiscuous mode [ 78.397636][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.446193][ T5845] veth0_vlan: entered promiscuous mode [ 78.460515][ T5827] veth1_vlan: entered promiscuous mode [ 78.520250][ T5845] veth1_vlan: entered promiscuous mode [ 78.531084][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.541696][ T5827] veth0_macvtap: entered promiscuous mode [ 78.548871][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.585725][ T5827] veth1_macvtap: entered promiscuous mode [ 78.593895][ T968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.608101][ T968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.680406][ T5845] veth0_macvtap: entered promiscuous mode [ 78.702462][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.710326][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.721087][ T968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.724736][ T5839] Bluetooth: hci1: command tx timeout [ 78.734490][ T5839] Bluetooth: hci0: command tx timeout [ 78.740053][ T968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.744513][ T5845] veth1_macvtap: entered promiscuous mode [ 78.782263][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.801893][ T5839] Bluetooth: hci2: command tx timeout [ 78.815253][ T5839] Bluetooth: hci3: command tx timeout [ 78.827007][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.837710][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.847677][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.858151][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.868874][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.880106][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.890170][ T5839] Bluetooth: hci4: command tx timeout [ 78.897137][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.909983][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.956910][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.971938][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.983292][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.993974][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.004567][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.015149][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.025785][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.037842][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.050080][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.065519][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.076245][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.088997][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.099309][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.110103][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.122886][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.133393][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.171768][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.191895][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.199736][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.226451][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.245592][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.247119][ T5917] loop2: detected capacity change from 0 to 16 [ 79.256242][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.262686][ T5917] ======================================================= [ 79.262686][ T5917] WARNING: The mand mount option has been deprecated and [ 79.262686][ T5917] and is ignored by this kernel. Remove the mand [ 79.262686][ T5917] option from the mount to silence this warning. [ 79.262686][ T5917] ======================================================= [ 79.301612][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.516062][ T5917] erofs (device loop2): mounted with root inode @ nid 36. [ 79.908663][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.919200][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.938750][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.974804][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.990481][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.999871][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.019716][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.232224][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.240977][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.255946][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.264718][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.280262][ T5922] input: syz0 as /devices/virtual/input/input5 [ 80.370619][ T5924] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 80.407396][ T5839] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 80.419880][ T5924] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 80.428437][ T5924] erofs (device loop2): read error -117 @ 0 of nid 89 [ 80.466189][ T30] audit: type=1800 audit(1744431879.076:2): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 80.859386][ T5924] syz.2.3 (5924) used greatest stack depth: 18704 bytes left [ 80.895244][ T5839] Bluetooth: hci0: command tx timeout [ 80.900980][ T5834] Bluetooth: hci1: command tx timeout [ 80.906514][ T5834] Bluetooth: hci3: command tx timeout [ 80.912447][ T5152] Bluetooth: hci2: command tx timeout [ 80.964376][ T5834] Bluetooth: hci4: command tx timeout [ 81.114163][ T5926] loop1: detected capacity change from 0 to 16 [ 81.134592][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.150794][ T5926] erofs (device loop1): mounted with root inode @ nid 36. [ 81.164706][ T5929] loop2: detected capacity change from 0 to 16 [ 81.179770][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.187725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.196274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.205101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.213625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.222215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.231002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.287122][ T5933] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 81.297160][ T5933] erofs (device loop1): readahead error at folio 47 @ nid 36 [ 81.304601][ T5933] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 81.313104][ T5933] erofs (device loop1): readahead error at folio 46 @ nid 36 [ 81.321151][ T5933] erofs (device loop1): readahead error at folio 45 @ nid 36 [ 81.330162][ T5933] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 81.339598][ T5933] erofs (device loop1): readahead error at folio 43 @ nid 36 [ 81.347777][ T5933] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 81.356355][ T5933] erofs (device loop1): readahead error at folio 42 @ nid 36 [ 81.364923][ T5933] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 81.373392][ T5933] erofs (device loop1): readahead error at folio 41 @ nid 36 [ 81.381021][ T5933] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 81.389721][ T5933] erofs (device loop1): readahead error at folio 40 @ nid 36 [ 81.397705][ T5933] erofs (device loop1): readahead error at folio 39 @ nid 36 [ 81.405341][ T5933] erofs (device loop1): readahead error at folio 38 @ nid 36 [ 81.413583][ T5933] erofs (device loop1): readahead error at folio 36 @ nid 36 [ 81.422892][ T5933] erofs (device loop1): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 81.431686][ T5933] erofs (device loop1): readahead error at folio 31 @ nid 36 [ 81.442308][ T5933] erofs (device loop1): readahead error at folio 25 @ nid 36 [ 81.450026][ T5933] erofs (device loop1): readahead error at folio 24 @ nid 36 [ 81.458189][ T5933] erofs (device loop1): readahead error at folio 19 @ nid 36 [ 81.468592][ T5933] syz.1.2: attempt to access beyond end of device [ 81.468592][ T5933] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 81.483496][ T5933] syz.1.2: attempt to access beyond end of device [ 81.483496][ T5933] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 81.499221][ T5933] syz.1.2: attempt to access beyond end of device [ 81.499221][ T5933] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 81.514183][ T5933] syz.1.2: attempt to access beyond end of device [ 81.514183][ T5933] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 81.597713][ T5929] erofs (device loop2): mounted with root inode @ nid 36. [ 81.747251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.756348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.362060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 82.463832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.131796][ T5938] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 83.139905][ T5834] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 83.174950][ T5938] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 83.217865][ T5938] erofs (device loop2): read error -117 @ 0 of nid 89 [ 83.256487][ T30] audit: type=1800 audit(1744431881.896:3): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 83.377390][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.411502][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.597417][ T5941] loop1: detected capacity change from 0 to 32768 [ 83.720132][ T5941] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 83.736879][ T5941] bcachefs (loop1): initializing new filesystem [ 83.745765][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.746739][ T5941] bcachefs (loop1): going read-write [ 83.836456][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.906994][ T5941] bcachefs (loop1): marking superblocks [ 83.928656][ T5941] bcachefs (loop1): initializing freespace [ 83.939292][ T5941] bcachefs (loop1): done initializing freespace [ 83.949763][ T5941] bcachefs (loop1): reading snapshots table [ 83.955881][ T5941] bcachefs (loop1): reading snapshots done [ 84.003977][ T5941] bcachefs (loop1): done starting filesystem [ 84.198611][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.236602][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.386060][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 85.394779][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 86.276487][ T5941] syz.1.9 (5941) used greatest stack depth: 13720 bytes left [ 86.624888][ T3085] cfg80211: failed to load regulatory.db [ 86.646993][ T5962] bcachefs (loop1): bch2_fsync(): error ERESTARTSYS [ 86.921031][ T5967] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 87.305264][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.289073][ T5837] bcachefs (loop1): shutting down [ 88.294479][ T5837] bcachefs (loop1): going read-only [ 88.301025][ T5837] bcachefs (loop1): finished waiting for writes to stop [ 89.347743][ T5837] bcachefs (loop1): flushing journal and stopping allocators, journal seq 9 [ 90.713959][ T5995] loop4: detected capacity change from 0 to 16 [ 91.670711][ T5995] erofs (device loop4): mounted with root inode @ nid 36. [ 92.215000][ T6001] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 92.919801][ T5840] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 92.939797][ T30] audit: type=1800 audit(1744431891.536:4): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.20" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 93.181946][ T6007] loop3: detected capacity change from 0 to 16 [ 93.779812][ T6007] erofs (device loop3): mounted with root inode @ nid 36. [ 94.408402][ T6016] netlink: 14 bytes leftover after parsing attributes in process `syz.4.23'. [ 94.681669][ T6007] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 94.690205][ T6007] erofs (device loop3): readahead error at folio 47 @ nid 36 [ 94.697962][ T6007] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 94.706432][ T6007] erofs (device loop3): readahead error at folio 46 @ nid 36 [ 94.715434][ T6007] erofs (device loop3): readahead error at folio 45 @ nid 36 [ 94.723712][ T6007] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 94.732272][ T6007] erofs (device loop3): readahead error at folio 43 @ nid 36 [ 94.739768][ T6007] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 94.748301][ T6007] erofs (device loop3): readahead error at folio 42 @ nid 36 [ 94.758612][ T6007] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 94.767056][ T6007] erofs (device loop3): readahead error at folio 41 @ nid 36 [ 94.774689][ T6007] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 94.783040][ T6007] erofs (device loop3): readahead error at folio 40 @ nid 36 [ 94.790578][ T6007] erofs (device loop3): readahead error at folio 39 @ nid 36 [ 94.798180][ T6007] erofs (device loop3): readahead error at folio 38 @ nid 36 [ 94.806409][ T6007] erofs (device loop3): readahead error at folio 36 @ nid 36 [ 94.814906][ T6007] erofs (device loop3): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 94.823442][ T6007] erofs (device loop3): readahead error at folio 31 @ nid 36 [ 94.831881][ T6007] erofs (device loop3): readahead error at folio 25 @ nid 36 [ 94.839496][ T6007] erofs (device loop3): readahead error at folio 24 @ nid 36 [ 94.847778][ T6007] erofs (device loop3): readahead error at folio 19 @ nid 36 [ 94.857467][ T6007] syz.3.22: attempt to access beyond end of device [ 94.857467][ T6007] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 94.871836][ T6007] syz.3.22: attempt to access beyond end of device [ 94.871836][ T6007] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 94.907005][ T6007] syz.3.22: attempt to access beyond end of device [ 94.907005][ T6007] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 94.921941][ T6007] syz.3.22: attempt to access beyond end of device [ 94.921941][ T6007] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 95.176330][ T6016] hsr_slave_0: left promiscuous mode [ 95.247286][ T6016] hsr_slave_1: left promiscuous mode [ 101.023674][ T6054] loop4: detected capacity change from 0 to 16 [ 101.054606][ T6054] erofs (device loop4): mounted with root inode @ nid 36. [ 101.672556][ T6058] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 101.703644][ T5839] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 101.718764][ T6058] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 101.729104][ T6058] erofs (device loop4): read error -117 @ 0 of nid 89 [ 101.958621][ T6061] loop2: detected capacity change from 0 to 32768 [ 102.097356][ T6061] bcachefs (loop2): filesystem UUID already open [ 102.103963][ T6061] bcachefs (loop2): shutdown complete [ 102.283935][ T30] audit: type=1800 audit(1744431900.846:5): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.32" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 102.512007][ T6061] bcachefs: bch2_fs_get_tree() error: EINVAL [ 102.980340][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 102.989213][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 103.816678][ T6068] loop0: detected capacity change from 0 to 16 [ 103.849720][ T6068] erofs (device loop0): mounted with root inode @ nid 36. [ 104.301314][ T6074] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 104.335418][ T5839] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[8192] [ 104.345140][ T6074] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[8192] [ 104.353658][ T6074] erofs (device loop0): read error -117 @ 0 of nid 89 [ 104.395923][ T30] audit: type=1800 audit(1744431902.996:6): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 104.901650][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.917011][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.022121][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.047031][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.078482][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.226709][ T5152] Bluetooth: hci5: command tx timeout [ 108.823173][ T6101] loop4: detected capacity change from 0 to 16 [ 108.882200][ T6101] erofs (device loop4): mounted with root inode @ nid 36. [ 109.108614][ T6100] loop0: detected capacity change from 0 to 32768 [ 109.315640][ T5839] Bluetooth: hci5: command tx timeout [ 109.371870][ T6100] bcachefs (loop0): filesystem UUID already open [ 109.378328][ T6100] bcachefs (loop0): shutdown complete [ 109.561913][ T6100] bcachefs: bch2_fs_get_tree() error: EINVAL [ 110.832679][ T6114] input: syz0 as /devices/virtual/input/input6 [ 111.653653][ T5839] Bluetooth: hci5: command tx timeout [ 111.901585][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 112.051564][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 112.251640][ T6117] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 112.441601][ T6117] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 112.921611][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'. [ 113.860662][ T5839] Bluetooth: hci5: command tx timeout [ 114.659656][ T6072] chnl_net:caif_netlink_parms(): no params data found [ 114.767745][ T6126] overlayfs: missing 'workdir' [ 114.994736][ T6133] loop3: detected capacity change from 0 to 128 [ 115.048309][ T6133] EXT4-fs: Ignoring removed nobh option [ 115.181312][ T6133] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.212741][ T6133] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.369501][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.401961][ T6142] netlink: 'syz.4.53': attribute type 4 has an invalid length. [ 115.444970][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.465482][ T6072] bridge_slave_0: entered allmulticast mode [ 115.473621][ T6072] bridge_slave_0: entered promiscuous mode [ 115.481940][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.489149][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.497762][ T6072] bridge_slave_1: entered allmulticast mode [ 115.506573][ T6072] bridge_slave_1: entered promiscuous mode [ 116.487533][ T6072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.750993][ T6072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.792106][ T6072] team0: Port device team_slave_0 added [ 116.800950][ T6072] team0: Port device team_slave_1 added [ 116.901450][ T6163] input: syz0 as /devices/virtual/input/input7 [ 117.042644][ T6164] netlink: 'syz.4.54': attribute type 4 has an invalid length. [ 117.121775][ T6165] netlink: 'syz.4.54': attribute type 4 has an invalid length. [ 117.197173][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54'. [ 117.775319][ T5830] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.927093][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.187369][ T6173] loop4: detected capacity change from 0 to 32768 [ 118.203509][ T6173] bcachefs (loop4): filesystem UUID already open [ 118.209957][ T6173] bcachefs (loop4): shutdown complete [ 118.238901][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.266700][ T6072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.293488][ T6173] bcachefs: bch2_fs_get_tree() error: EINVAL [ 118.377015][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.391537][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.620535][ T6072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.707633][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 118.718097][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 119.563579][ T6072] hsr_slave_0: entered promiscuous mode [ 119.582817][ T6072] hsr_slave_1: entered promiscuous mode [ 119.600832][ T6072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.626073][ T6072] Cannot create hsr debugfs directory [ 119.986852][ T6185] openvswitch: netlink: Message has 24 unknown bytes. [ 120.793425][ T6072] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.825807][ T6072] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.057008][ T6192] loop0: detected capacity change from 0 to 16 [ 121.715253][ T6072] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.036688][ T6195] input: syz0 as /devices/virtual/input/input8 [ 122.053097][ T6192] erofs (device loop0): mounted with root inode @ nid 36. [ 122.088203][ T6199] netlink: 'syz.2.61': attribute type 4 has an invalid length. [ 122.156592][ T6195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.61'. [ 122.484607][ T6072] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.695210][ T6203] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 122.703969][ T6203] erofs (device loop0): readahead error at folio 47 @ nid 36 [ 122.713309][ T6203] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 122.722006][ T6203] erofs (device loop0): readahead error at folio 46 @ nid 36 [ 122.730289][ T6203] erofs (device loop0): readahead error at folio 45 @ nid 36 [ 122.738266][ T6203] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 122.749321][ T6203] erofs (device loop0): readahead error at folio 43 @ nid 36 [ 122.757083][ T6203] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 122.765683][ T6203] erofs (device loop0): readahead error at folio 42 @ nid 36 [ 122.773347][ T6203] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 122.782003][ T6203] erofs (device loop0): readahead error at folio 41 @ nid 36 [ 122.789702][ T6203] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 122.798256][ T6203] erofs (device loop0): readahead error at folio 40 @ nid 36 [ 122.806316][ T6203] erofs (device loop0): readahead error at folio 39 @ nid 36 [ 122.815696][ T6203] erofs (device loop0): readahead error at folio 38 @ nid 36 [ 122.824030][ T6203] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 122.832637][ T6203] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 122.841181][ T6203] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 122.849923][ T6203] erofs (device loop0): readahead error at folio 25 @ nid 36 [ 123.121453][ T6203] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 123.129714][ T6203] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 123.138784][ T6203] syz.0.62: attempt to access beyond end of device [ 123.138784][ T6203] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 123.153072][ T6203] syz.0.62: attempt to access beyond end of device [ 123.153072][ T6203] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 123.167875][ T6203] syz.0.62: attempt to access beyond end of device [ 123.167875][ T6203] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 123.182689][ T6203] syz.0.62: attempt to access beyond end of device [ 123.182689][ T6203] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 124.156281][ T6205] loop3: detected capacity change from 0 to 40427 [ 124.176436][ T6205] F2FS-fs (loop3): Invalid segment count (1) [ 124.182655][ T6205] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.192339][ T6205] F2FS-fs (loop3): Unrecognized mount option "whint_mode=user-based" or missing value [ 125.753045][ T6213] loop4: detected capacity change from 0 to 16 [ 125.841980][ T6213] erofs (device loop4): mounted with root inode @ nid 36. [ 127.106092][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.241662][ T6225] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 127.250183][ T6225] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 127.257981][ T6225] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 127.266694][ T6225] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 127.274626][ T6225] erofs (device loop4): readahead error at folio 45 @ nid 36 [ 127.282979][ T6225] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 127.291664][ T6225] erofs (device loop4): readahead error at folio 43 @ nid 36 [ 127.299364][ T6225] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 127.308141][ T6225] erofs (device loop4): readahead error at folio 42 @ nid 36 [ 127.316004][ T6225] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 127.326155][ T6225] erofs (device loop4): readahead error at folio 41 @ nid 36 [ 127.333950][ T6225] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 127.342502][ T6225] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 127.350202][ T6225] erofs (device loop4): readahead error at folio 39 @ nid 36 [ 127.358053][ T6225] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 127.366511][ T6225] erofs (device loop4): readahead error at folio 36 @ nid 36 [ 127.375201][ T6225] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 127.384048][ T6225] erofs (device loop4): readahead error at folio 31 @ nid 36 [ 127.392693][ T6225] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 127.463112][ T6225] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 127.470792][ T6225] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 128.295162][ T6226] netlink: 14 bytes leftover after parsing attributes in process `syz.3.69'. [ 128.297792][ T6225] syz.4.63: attempt to access beyond end of device [ 128.297792][ T6225] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 128.299806][ T6225] syz.4.63: attempt to access beyond end of device [ 128.299806][ T6225] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 128.345714][ T6226] hsr_slave_0: left promiscuous mode [ 128.346824][ T6226] hsr_slave_1: left promiscuous mode [ 128.507714][ T6225] syz.4.63: attempt to access beyond end of device [ 128.507714][ T6225] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 128.507992][ T6225] syz.4.63: attempt to access beyond end of device [ 128.507992][ T6225] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 130.052825][ T6072] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.138967][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.146165][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.406685][ T6238] loop4: detected capacity change from 0 to 16 [ 130.419670][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.426829][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.428925][ T6238] erofs (device loop4): mounted with root inode @ nid 36. [ 130.531134][ T6240] input: syz0 as /devices/virtual/input/input9 [ 130.764057][ T6240] netlink: 'syz.2.70': attribute type 4 has an invalid length. [ 130.814899][ T6241] netlink: 'syz.2.70': attribute type 4 has an invalid length. [ 131.051139][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 132.656248][ T6253] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 133.377360][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.384151][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.404300][ T5839] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 133.590917][ T6252] loop0: detected capacity change from 0 to 16 [ 133.600088][ T6252] erofs (device loop0): mounted with root inode @ nid 36. [ 133.701595][ T6253] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 133.709981][ T6253] erofs (device loop4): read error -117 @ 0 of nid 89 [ 133.899799][ T30] audit: type=1800 audit(1744431932.366:7): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.71" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 133.920015][ T6072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.315870][ T6259] overlayfs: missing 'lowerdir' [ 135.495666][ T6272] input: syz0 as /devices/virtual/input/input10 [ 135.827047][ T6269] loop3: detected capacity change from 0 to 40427 [ 135.837695][ T6272] netlink: 'syz.2.75': attribute type 4 has an invalid length. [ 135.853091][ T6272] netlink: 'syz.2.75': attribute type 4 has an invalid length. [ 136.269312][ T6269] F2FS-fs (loop3): Invalid segment count (1) [ 136.275535][ T6269] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 136.296436][ T6269] F2FS-fs (loop3): Unrecognized mount option "whint_mode=user-based" or missing value [ 136.659373][ T6271] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 136.797651][ T5839] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[8192] [ 136.809797][ T6271] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[8192] [ 137.315074][ T6271] erofs (device loop0): read error -117 @ 0 of nid 89 [ 137.375518][ T30] audit: type=1800 audit(1744431936.016:8): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.74" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 137.866332][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.297406][ T6301] loop2: detected capacity change from 0 to 16 [ 139.451605][ T6300] loop3: detected capacity change from 0 to 32768 [ 139.520158][ T6301] erofs (device loop2): mounted with root inode @ nid 36. [ 139.560088][ T6300] bcachefs (loop3): filesystem UUID already open [ 139.566743][ T6300] bcachefs (loop3): shutdown complete [ 139.679401][ T6307] input: syz0 as /devices/virtual/input/input11 [ 139.833429][ T6309] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 139.875334][ T6309] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 140.346042][ T6310] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 141.686501][ T6300] bcachefs: bch2_fs_get_tree() error: EINVAL [ 141.790279][ T6310] erofs (device loop2): failed to decompress -29 in[58, 4038] out[1851] [ 141.799398][ T6310] erofs (device loop2): read error -117 @ 43 of nid 36 [ 142.035082][ T6072] veth0_vlan: entered promiscuous mode [ 142.098873][ T6072] veth1_vlan: entered promiscuous mode [ 143.057491][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 143.066331][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 144.774228][ T6072] veth0_macvtap: entered promiscuous mode [ 145.091183][ T6327] input: syz0 as /devices/virtual/input/input12 [ 145.153418][ T6327] netlink: 'syz.4.87': attribute type 4 has an invalid length. [ 145.205712][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.87'. [ 145.263586][ T6072] veth1_macvtap: entered promiscuous mode [ 145.281974][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.292966][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.303400][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.314404][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.324269][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.345537][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.571613][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.595324][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.621433][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.668949][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.703890][ T6333] input: syz0 as /devices/virtual/input/input13 [ 145.940284][ T6336] netlink: 'syz.2.88': attribute type 4 has an invalid length. [ 146.016890][ T6337] netlink: 'syz.2.88': attribute type 4 has an invalid length. [ 146.062454][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.444135][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.458780][ T6340] loop0: detected capacity change from 0 to 16 [ 146.483689][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.503602][ T6340] erofs (device loop0): mounted with root inode @ nid 36. [ 146.531822][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.534362][ T6343] loop4: detected capacity change from 0 to 16 [ 146.548293][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.615484][ T6343] erofs (device loop4): mounted with root inode @ nid 36. [ 146.863423][ T6344] loop2: detected capacity change from 0 to 40427 [ 146.874838][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.885323][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.895152][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.905622][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.915468][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.925927][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.977718][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.986848][ T6344] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 146.994684][ T6344] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 147.016114][ T6344] F2FS-fs (loop2): invalid crc value [ 147.061878][ T6340] 9pnet_fd: Insufficient options for proto=fd [ 147.081097][ T6340] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 147.089580][ T6340] erofs (device loop0): readahead error at folio 47 @ nid 36 [ 147.097070][ T6340] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 147.105524][ T6340] erofs (device loop0): readahead error at folio 46 @ nid 36 [ 147.113318][ T6340] erofs (device loop0): readahead error at folio 45 @ nid 36 [ 147.121106][ T6340] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 147.129819][ T6340] erofs (device loop0): readahead error at folio 43 @ nid 36 [ 147.137411][ T6340] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 147.146005][ T6340] erofs (device loop0): readahead error at folio 42 @ nid 36 [ 147.153650][ T6340] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 147.162124][ T6340] erofs (device loop0): readahead error at folio 41 @ nid 36 [ 147.169736][ T6340] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 147.178222][ T6340] erofs (device loop0): readahead error at folio 40 @ nid 36 [ 147.187156][ T6340] erofs (device loop0): readahead error at folio 39 @ nid 36 [ 147.195721][ T6340] erofs (device loop0): readahead error at folio 38 @ nid 36 [ 147.203826][ T6340] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 147.212079][ T6340] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 147.220628][ T6340] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 147.229129][ T6340] erofs (device loop0): readahead error at folio 25 @ nid 36 [ 147.236733][ T6340] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 147.245105][ T6340] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 147.254417][ T6340] syz.0.89: attempt to access beyond end of device [ 147.254417][ T6340] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 147.620751][ T6340] syz.0.89: attempt to access beyond end of device [ 147.620751][ T6340] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 147.637125][ T6340] syz.0.89: attempt to access beyond end of device [ 147.637125][ T6340] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 147.653216][ T6340] syz.0.89: attempt to access beyond end of device [ 147.653216][ T6340] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 147.973913][ T6072] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.009698][ T6349] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 148.020979][ T6072] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.038627][ T6344] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 148.045851][ T6344] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.076017][ T6349] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 148.083696][ T6072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.096769][ T6349] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 148.116900][ T6349] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 148.170165][ T6072] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.187835][ T6349] erofs (device loop4): readahead error at folio 45 @ nid 36 [ 148.197877][ T6349] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 148.209415][ T6349] erofs (device loop4): readahead error at folio 43 @ nid 36 [ 148.216987][ T6349] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 148.225608][ T6349] erofs (device loop4): readahead error at folio 42 @ nid 36 [ 148.247045][ T6349] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 148.256473][ T6349] erofs (device loop4): readahead error at folio 41 @ nid 36 [ 148.270386][ T6349] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 148.407314][ T6349] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 148.555616][ T6349] erofs (device loop4): readahead error at folio 39 @ nid 36 [ 148.681032][ T6349] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 148.708724][ T6349] erofs (device loop4): readahead error at folio 36 @ nid 36 [ 148.785192][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.912144][ T6349] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 148.920503][ T6349] erofs (device loop4): readahead error at folio 31 @ nid 36 [ 148.930446][ T6349] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 148.938139][ T6349] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 148.946203][ T6349] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 148.955406][ T6361] loop0: detected capacity change from 0 to 16 [ 149.544782][ T6349] syz.4.91: attempt to access beyond end of device [ 149.544782][ T6349] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 149.546432][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.583319][ T6361] erofs (device loop0): mounted with root inode @ nid 36. [ 149.614962][ T6349] syz.4.91: attempt to access beyond end of device [ 149.614962][ T6349] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 149.701015][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.717306][ T6349] syz.4.91: attempt to access beyond end of device [ 149.717306][ T6349] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 149.758285][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.804271][ T6349] syz.4.91: attempt to access beyond end of device [ 149.804271][ T6349] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 149.844431][ T6364] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 149.866982][ T6364] erofs (device loop0): failed to decompress -29 in[58, 4038] out[1851] [ 149.875551][ T6364] erofs (device loop0): read error -117 @ 43 of nid 36 [ 149.897264][ T6364] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 149.905902][ T6364] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 149.914416][ T6364] erofs (device loop0): readahead error at folio 42 @ nid 36 [ 149.922711][ T6364] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 149.931000][ T6364] erofs (device loop0): readahead error at folio 41 @ nid 36 [ 149.939040][ T6364] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 149.948031][ T6364] erofs (device loop0): readahead error at folio 40 @ nid 36 [ 149.956234][ T6364] erofs (device loop0): readahead error at folio 39 @ nid 36 [ 149.963894][ T6364] erofs (device loop0): readahead error at folio 38 @ nid 36 [ 149.972225][ T6364] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 149.980706][ T6364] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 149.989297][ T6364] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 149.998162][ T6364] erofs (device loop0): readahead error at folio 25 @ nid 36 [ 150.005817][ T6364] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 150.014936][ T6364] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 150.025950][ T6364] syz.0.94: attempt to access beyond end of device [ 150.025950][ T6364] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 150.040849][ T6364] syz.0.94: attempt to access beyond end of device [ 150.040849][ T6364] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 150.466688][ T6364] erofs (device loop0): failed to decompress -29 in[58, 4038] out[2639] [ 150.476236][ T6364] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 150.484746][ T6364] erofs (device loop0): readahead error at folio 47 @ nid 36 [ 150.492246][ T6364] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 150.500603][ T6364] erofs (device loop0): readahead error at folio 46 @ nid 36 [ 150.508319][ T6364] erofs (device loop0): readahead error at folio 45 @ nid 36 [ 150.520447][ T6364] erofs (device loop0): failed to decompress -29 in[58, 4038] out[3537] [ 151.034731][ T6368] input: syz0 as /devices/virtual/input/input15 [ 151.067471][ T6368] netlink: 'syz.3.96': attribute type 4 has an invalid length. [ 151.127619][ T6368] netlink: 'syz.3.96': attribute type 4 has an invalid length. [ 151.174867][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.96'. [ 151.883031][ T6375] loop3: detected capacity change from 0 to 16 [ 152.002533][ T6375] erofs (device loop3): mounted with root inode @ nid 36. [ 152.087238][ T6377] input: syz0 as /devices/virtual/input/input16 [ 152.132693][ T6377] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 152.196091][ T6377] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 152.246469][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.98'. [ 152.676499][ T6375] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 152.687510][ T6375] erofs (device loop3): failed to decompress -29 in[58, 4038] out[1851] [ 152.696151][ T6375] erofs (device loop3): read error -117 @ 43 of nid 36 [ 152.799107][ T6375] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 152.807736][ T6375] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 152.816800][ T6375] erofs (device loop3): readahead error at folio 42 @ nid 36 [ 152.824212][ T6375] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 152.832524][ T6375] erofs (device loop3): readahead error at folio 41 @ nid 36 [ 152.839886][ T6375] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 152.848154][ T6375] erofs (device loop3): readahead error at folio 40 @ nid 36 [ 152.855561][ T6375] erofs (device loop3): readahead error at folio 39 @ nid 36 [ 152.862958][ T6375] erofs (device loop3): readahead error at folio 38 @ nid 36 [ 152.870531][ T6375] erofs (device loop3): readahead error at folio 36 @ nid 36 [ 152.878129][ T6375] erofs (device loop3): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 152.886576][ T6375] erofs (device loop3): readahead error at folio 31 @ nid 36 [ 152.894158][ T6375] erofs (device loop3): readahead error at folio 25 @ nid 36 [ 152.901559][ T6375] erofs (device loop3): readahead error at folio 24 @ nid 36 [ 152.909106][ T6375] erofs (device loop3): readahead error at folio 19 @ nid 36 [ 152.917363][ T6375] bio_check_eod: 2 callbacks suppressed [ 152.917373][ T6375] syz.3.99: attempt to access beyond end of device [ 152.917373][ T6375] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 152.936561][ T6375] syz.3.99: attempt to access beyond end of device [ 152.936561][ T6375] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 152.950750][ T6375] syz.3.99: attempt to access beyond end of device [ 152.950750][ T6375] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 152.966269][ T6375] erofs (device loop3): failed to decompress -29 in[58, 4038] out[2639] [ 152.974744][ T6375] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 152.983093][ T6375] erofs (device loop3): readahead error at folio 47 @ nid 36 [ 152.990460][ T6375] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 152.998832][ T6375] erofs (device loop3): readahead error at folio 46 @ nid 36 [ 153.006293][ T6375] erofs (device loop3): readahead error at folio 45 @ nid 36 [ 153.013795][ T6375] syz.3.99: attempt to access beyond end of device [ 153.013795][ T6375] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 153.028869][ T6375] erofs (device loop3): failed to decompress -29 in[58, 4038] out[3537] [ 153.049814][ T6381] loop4: detected capacity change from 0 to 16 [ 153.122100][ T6381] erofs (device loop4): mounted with root inode @ nid 36. [ 154.016579][ T6388] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 154.938683][ T6388] erofs (device loop4): failed to decompress -29 in[58, 4038] out[1851] [ 154.952352][ T6391] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 154.961196][ T6391] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 154.970400][ T6391] erofs (device loop4): readahead error at folio 42 @ nid 36 [ 154.979743][ T6388] erofs (device loop4): read error -117 @ 43 of nid 36 [ 154.987036][ T6391] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 155.007993][ T6391] erofs (device loop4): readahead error at folio 41 @ nid 36 [ 155.015518][ T6391] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 155.023939][ T6391] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 155.031612][ T6391] erofs (device loop4): readahead error at folio 39 @ nid 36 [ 155.039227][ T6391] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 155.048195][ T6391] erofs (device loop4): readahead error at folio 36 @ nid 36 [ 155.056898][ T6391] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 155.067356][ T6391] erofs (device loop4): readahead error at folio 31 @ nid 36 [ 155.078774][ T6391] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 155.086471][ T6391] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 155.094755][ T6391] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 155.106418][ T6391] syz.4.100: attempt to access beyond end of device [ 155.106418][ T6391] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 155.292685][ T6391] syz.4.100: attempt to access beyond end of device [ 155.292685][ T6391] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 155.860987][ T6391] syz.4.100: attempt to access beyond end of device [ 155.860987][ T6391] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 155.881733][ T6391] erofs (device loop4): failed to decompress -29 in[58, 4038] out[2639] [ 155.892021][ T6391] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 155.900435][ T6391] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 155.907921][ T6391] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 155.916380][ T6391] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 155.924374][ T6391] erofs (device loop4): readahead error at folio 45 @ nid 36 [ 155.933511][ T6391] syz.4.100: attempt to access beyond end of device [ 155.933511][ T6391] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 155.947791][ T6391] erofs (device loop4): failed to decompress -29 in[58, 4038] out[3537] [ 156.666893][ T6395] loop0: detected capacity change from 0 to 40427 [ 156.684307][ T6395] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 156.692145][ T6395] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 156.716698][ T6398] loop5: detected capacity change from 0 to 16 [ 156.723303][ T6395] F2FS-fs (loop0): invalid crc value [ 156.732997][ T6398] erofs (device loop5): mounted with root inode @ nid 36. [ 156.819152][ T6395] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 156.826307][ T6395] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.927669][ T6407] 9pnet_fd: Insufficient options for proto=fd [ 156.941576][ T6407] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 156.950100][ T6407] erofs (device loop5): readahead error at folio 47 @ nid 36 [ 156.958533][ T6407] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 156.970152][ T6407] erofs (device loop5): readahead error at folio 46 @ nid 36 [ 156.978198][ T6407] erofs (device loop5): readahead error at folio 45 @ nid 36 [ 156.986172][ T6407] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 156.994875][ T6407] erofs (device loop5): readahead error at folio 43 @ nid 36 [ 157.002528][ T6407] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 157.016261][ T6407] erofs (device loop5): readahead error at folio 42 @ nid 36 [ 157.024125][ T6407] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 157.032812][ T6407] erofs (device loop5): readahead error at folio 41 @ nid 36 [ 157.040493][ T6407] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 157.049300][ T6407] erofs (device loop5): readahead error at folio 40 @ nid 36 [ 157.060320][ T6407] erofs (device loop5): readahead error at folio 39 @ nid 36 [ 157.068083][ T6407] erofs (device loop5): readahead error at folio 38 @ nid 36 [ 157.080754][ T6407] erofs (device loop5): readahead error at folio 36 @ nid 36 [ 157.089712][ T6407] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 157.098309][ T6407] erofs (device loop5): readahead error at folio 31 @ nid 36 [ 157.106698][ T6407] erofs (device loop5): readahead error at folio 25 @ nid 36 [ 157.121570][ T6407] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 157.130010][ T6407] erofs (device loop5): readahead error at folio 19 @ nid 36 [ 157.139537][ T6407] syz.5.102: attempt to access beyond end of device [ 157.139537][ T6407] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 157.153954][ T6407] syz.5.102: attempt to access beyond end of device [ 157.153954][ T6407] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 158.187104][ T6414] input: syz0 as /devices/virtual/input/input17 [ 158.219593][ T6414] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 158.300863][ T6415] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 158.380937][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.106'. [ 159.637236][ T6419] loop5: detected capacity change from 0 to 40427 [ 159.651288][ T6419] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 159.659151][ T6419] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 159.672685][ T6419] F2FS-fs (loop5): invalid crc value [ 159.784979][ T6419] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 159.793533][ T6419] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 160.599536][ T6430] loop2: detected capacity change from 0 to 64 [ 163.694255][ T6440] netlink: 14 bytes leftover after parsing attributes in process `syz.3.113'. [ 164.020019][ T6448] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.114'. [ 165.307708][ T6455] loop0: detected capacity change from 0 to 16 [ 165.325922][ T6455] erofs (device loop0): mounted with root inode @ nid 36. [ 165.609841][ T6452] loop2: detected capacity change from 0 to 40427 [ 165.620791][ T6452] F2FS-fs (loop2): Invalid segment count (1) [ 165.627127][ T6452] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 165.636575][ T6452] F2FS-fs (loop2): Unrecognized mount option "whint_mode=user-based" or missing value [ 166.026397][ T6462] netlink: 14 bytes leftover after parsing attributes in process `syz.4.117'. [ 166.114404][ T6463] loop5: detected capacity change from 0 to 16 [ 166.537225][ T6463] erofs (device loop5): mounted with root inode @ nid 36. [ 166.622314][ T6455] 9pnet_fd: Insufficient options for proto=fd [ 166.640149][ T6455] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 166.649897][ T6455] erofs (device loop0): readahead error at folio 47 @ nid 36 [ 166.657514][ T6455] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 166.666219][ T6455] erofs (device loop0): readahead error at folio 46 @ nid 36 [ 166.674101][ T6455] erofs (device loop0): readahead error at folio 45 @ nid 36 [ 166.682142][ T6455] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 166.690715][ T6455] erofs (device loop0): readahead error at folio 43 @ nid 36 [ 166.698392][ T6455] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 166.707136][ T6455] erofs (device loop0): readahead error at folio 42 @ nid 36 [ 166.714879][ T6455] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 166.723532][ T6455] erofs (device loop0): readahead error at folio 41 @ nid 36 [ 166.731206][ T6455] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 166.749741][ T6455] erofs (device loop0): readahead error at folio 40 @ nid 36 [ 166.757376][ T6455] erofs (device loop0): readahead error at folio 39 @ nid 36 [ 166.765078][ T6455] erofs (device loop0): readahead error at folio 38 @ nid 36 [ 166.773444][ T6455] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 166.781863][ T6455] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 166.790469][ T6455] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 167.079141][ T6455] erofs (device loop0): readahead error at folio 25 @ nid 36 [ 167.086941][ T6455] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 167.095209][ T6455] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 167.104814][ T6455] bio_check_eod: 2 callbacks suppressed [ 167.110500][ T6455] syz.0.116: attempt to access beyond end of device [ 167.110500][ T6455] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 167.124783][ T6455] syz.0.116: attempt to access beyond end of device [ 167.124783][ T6455] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 167.139796][ T6455] syz.0.116: attempt to access beyond end of device [ 167.139796][ T6455] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 167.175014][ T6455] syz.0.116: attempt to access beyond end of device [ 167.175014][ T6455] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 167.925197][ T6467] loop3: detected capacity change from 0 to 16 [ 168.015756][ T6468] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 168.026516][ T6468] erofs (device loop5): readahead error at folio 47 @ nid 36 [ 168.034361][ T6468] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 168.043036][ T6468] erofs (device loop5): readahead error at folio 46 @ nid 36 [ 168.050780][ T6468] erofs (device loop5): readahead error at folio 45 @ nid 36 [ 168.059308][ T6468] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 168.067885][ T6468] erofs (device loop5): readahead error at folio 43 @ nid 36 [ 168.075847][ T6468] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 168.084706][ T6468] erofs (device loop5): readahead error at folio 42 @ nid 36 [ 168.092299][ T6468] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 168.100631][ T6468] erofs (device loop5): readahead error at folio 41 @ nid 36 [ 168.108255][ T6468] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 168.116693][ T6468] erofs (device loop5): readahead error at folio 40 @ nid 36 [ 168.124263][ T6468] erofs (device loop5): readahead error at folio 39 @ nid 36 [ 168.131738][ T6468] erofs (device loop5): readahead error at folio 38 @ nid 36 [ 168.139837][ T6468] erofs (device loop5): readahead error at folio 36 @ nid 36 [ 168.148277][ T6468] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 168.156686][ T6468] erofs (device loop5): readahead error at folio 31 @ nid 36 [ 168.165125][ T6468] erofs (device loop5): readahead error at folio 25 @ nid 36 [ 168.173004][ T6468] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 168.181189][ T6468] erofs (device loop5): readahead error at folio 19 @ nid 36 [ 168.190825][ T6468] syz.5.111: attempt to access beyond end of device [ 168.190825][ T6468] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 168.205301][ T6468] syz.5.111: attempt to access beyond end of device [ 168.205301][ T6468] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 168.220249][ T6468] syz.5.111: attempt to access beyond end of device [ 168.220249][ T6468] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 168.235313][ T6468] syz.5.111: attempt to access beyond end of device [ 168.235313][ T6468] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 168.607873][ T5837] Allocator stuck? Waited for 30 seconds [ 168.607966][ T5837] Allocator debug: [ 168.608015][ T5837] capacity26112 [ 168.608065][ T5837] reserved 6656 [ 168.608076][ T5837] hidden 0 [ 168.608139][ T5837] btree 512 [ 168.608188][ T5837] data 1376 [ 168.608239][ T5837] cached 0 [ 168.608289][ T5837] reserved 0 [ 168.608300][ T5837] online_reserved 96 [ 168.608354][ T5837] nr_inodes 0 [ 168.608442][ T5837] [ 168.608497][ T5837] freelist_wait waiting [ 168.608553][ T5837] open buckets allocated3 [ 168.608565][ T5837] open buckets total 1024 [ 168.608616][ T5837] open_buckets_wait empty [ 168.608671][ T5837] open_buckets_btree 1 [ 168.608726][ T5837] open_buckets_user 1 [ 170.694925][ T6467] erofs (device loop3): mounted with root inode @ nid 36. [ 170.722505][ T5837] btree reserve cache 0 [ 170.722522][ T5837] [ 170.722532][ T5837] Dev 0: [ 170.722542][ T5837] buckets sectors fragmented [ 170.722554][ T5837] free 2 0 0 [ 170.722567][ T5837] sb 25 6152 248 [ 170.722579][ T5837] journal 8 2048 0 [ 170.722592][ T5837] btree 10 512 0 [ 170.722604][ T5837] user 0 0 0 [ 170.722617][ T5837] cached 0 0 0 [ 170.722630][ T5837] parity 0 0 0 [ 170.722642][ T5837] stripe 0 0 0 [ 170.722655][ T5837] need_gc_gens 0 0 0 [ 170.722668][ T5837] need_discard 0 0 0 [ 170.722680][ T5837] unstriped 0 0 0 [ 170.722693][ T5837] capacity 128 [ 170.722704][ T5837] [ 170.722713][ T5837] reserves: [ 170.722723][ T5837] stripe 12 [ 170.722733][ T5837] normal 10 [ 170.722744][ T5837] copygc 8 [ 170.722755][ T5837] btree 4 [ 170.722766][ T5837] btree_copygc 0 [ 170.722776][ T5837] reclaim 0 [ 170.722787][ T5837] interior_updates 0 [ 170.722797][ T5837] [ 170.722807][ T5837] open buckets 2 [ 170.722818][ T5837] buckets to invalidate 0 [ 170.722828][ T5837] [ 170.722837][ T5837] Copygc debug: [ 170.722846][ T5837] running: 0 [ 170.722856][ T5837] copygc_wait:23552 [ 170.722867][ T5837] copygc_wait_at:14592 [ 170.722877][ T5837] Currently waiting for:0 B [ 170.722888][ T5837] Currently waiting since:13.9 MiB [ 170.722899][ T5837] Currently calculated wait:0 B [ 170.722909][ T5837] [ 170.722919][ T5837] Journal debug: [ 170.722928][ T5837] flags: replay_done,running,may_skip_flush [ 170.722941][ T5837] dirty journal entries: 1/32768 [ 170.722952][ T5837] seq: 222 [ 170.722962][ T5837] seq_ondisk: 222 [ 170.722973][ T5837] last_seq: 222 [ 170.722983][ T5837] last_seq_ondisk: 221 [ 170.722994][ T5837] flushed_seq_ondisk: 221 [ 170.723011][ T5837] watermark: stripe [ 170.723021][ T5837] each entry reserved: 321 [ 170.760335][ T5837] nr flush writes: 41 [ 170.760380][ T5837] nr noflush writes: 181 [ 170.760391][ T5837] average write size: 4.84 KiB [ 170.760433][ T5837] free buf: 131072 [ 170.760478][ T5837] nr direct reclaim: 0 [ 170.760488][ T5837] nr background reclaim: 45 [ 170.760533][ T5837] reclaim kicked: 0 [ 170.760578][ T5837] reclaim runs in: 0 ms [ 170.760588][ T5837] blocked: 0 [ 170.760632][ T5837] current entry sectors: 256 [ 170.760676][ T5837] current entry error: (No error) [ 170.760687][ T5837] current entry: closed [ 170.760731][ T5837] unwritten entries: [ 170.760776][ T5837] last buf closed [ 170.760785][ T5837] space: [ 170.760828][ T5837] discarded 256:1536 [ 170.760877][ T5837] clean ondisk 256:1536 [ 170.760887][ T5837] clean 256:1536 [ 170.760951][ T5837] total 256:2048 [ 170.760996][ T5837] dev 0: [ 170.761005][ T5837] durability 1: [ 170.761014][ T5837] nr 8 [ 170.761054][ T5837] bucket size 256 [ 170.761102][ T5837] available 6:8 [ 170.761112][ T5837] discard_idx 4 [ 170.761154][ T5837] dirty_ondisk 4 (seq 222) [ 170.761199][ T5837] dirty_idx 4 (seq 222) [ 170.761209][ T5837] cur_idx 4 (seq 222) [ 170.761253][ T5837] replicas want 1 need 1 [ 170.815042][ T6471] 9pnet_fd: Insufficient options for proto=fd [ 170.824118][ T6471] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 170.824150][ T6471] erofs (device loop3): readahead error at folio 47 @ nid 36 [ 170.824205][ T6471] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 170.824252][ T6471] erofs (device loop3): readahead error at folio 46 @ nid 36 [ 170.824581][ T6471] erofs (device loop3): readahead error at folio 45 @ nid 36 [ 170.824932][ T6471] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 170.824986][ T6471] erofs (device loop3): readahead error at folio 43 @ nid 36 [ 170.825035][ T6471] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 170.825087][ T6471] erofs (device loop3): readahead error at folio 42 @ nid 36 [ 170.825196][ T6471] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 170.825246][ T6471] erofs (device loop3): readahead error at folio 41 @ nid 36 [ 170.825297][ T6471] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 170.825344][ T6471] erofs (device loop3): readahead error at folio 40 @ nid 36 [ 170.825438][ T6471] erofs (device loop3): readahead error at folio 39 @ nid 36 [ 170.825493][ T6471] erofs (device loop3): readahead error at folio 38 @ nid 36 [ 170.826181][ T6471] erofs (device loop3): readahead error at folio 36 @ nid 36 [ 170.827014][ T6471] erofs (device loop3): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 170.827067][ T6471] erofs (device loop3): readahead error at folio 31 @ nid 36 [ 170.827871][ T6471] erofs (device loop3): readahead error at folio 25 @ nid 36 [ 170.827911][ T6471] erofs (device loop3): readahead error at folio 24 @ nid 36 [ 170.828629][ T6471] erofs (device loop3): readahead error at folio 19 @ nid 36 [ 170.830087][ T6471] syz.3.118: attempt to access beyond end of device [ 170.830087][ T6471] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 170.830839][ T6471] syz.3.118: attempt to access beyond end of device [ 170.830839][ T6471] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 171.730532][ T6470] loop2: detected capacity change from 0 to 64 [ 172.510952][ T6484] loop5: detected capacity change from 0 to 16 [ 172.600129][ T6484] erofs (device loop5): mounted with root inode @ nid 36. [ 172.838433][ T6486] loop3: detected capacity change from 0 to 40427 [ 172.858925][ T6486] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 172.867057][ T6486] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 173.872326][ T6486] F2FS-fs (loop3): invalid crc value [ 173.945179][ T6484] 9pnet_fd: Insufficient options for proto=fd [ 173.957407][ T6484] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 173.966277][ T6484] erofs (device loop5): readahead error at folio 47 @ nid 36 [ 173.973869][ T6484] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 173.982331][ T6484] erofs (device loop5): readahead error at folio 46 @ nid 36 [ 173.990242][ T6484] erofs (device loop5): readahead error at folio 45 @ nid 36 [ 173.998445][ T6484] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 174.007187][ T6484] erofs (device loop5): readahead error at folio 43 @ nid 36 [ 174.017431][ T6484] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 174.026044][ T6484] erofs (device loop5): readahead error at folio 42 @ nid 36 [ 174.033803][ T6484] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 174.042324][ T6484] erofs (device loop5): readahead error at folio 41 @ nid 36 [ 174.049973][ T6484] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 174.058655][ T6484] erofs (device loop5): readahead error at folio 40 @ nid 36 [ 174.066378][ T6484] erofs (device loop5): readahead error at folio 39 @ nid 36 [ 174.074064][ T6484] erofs (device loop5): readahead error at folio 38 @ nid 36 [ 174.082389][ T6484] erofs (device loop5): readahead error at folio 36 @ nid 36 [ 174.091041][ T6484] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 174.099937][ T6484] erofs (device loop5): readahead error at folio 31 @ nid 36 [ 174.398246][ T6484] erofs (device loop5): readahead error at folio 25 @ nid 36 [ 174.406171][ T6484] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 174.414462][ T6484] erofs (device loop5): readahead error at folio 19 @ nid 36 [ 174.426794][ T6484] bio_check_eod: 2 callbacks suppressed [ 174.432531][ T6484] syz.5.124: attempt to access beyond end of device [ 174.432531][ T6484] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 174.446634][ T6484] syz.5.124: attempt to access beyond end of device [ 174.446634][ T6484] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 174.461603][ T6484] syz.5.124: attempt to access beyond end of device [ 174.461603][ T6484] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 174.476393][ T6484] syz.5.124: attempt to access beyond end of device [ 174.476393][ T6484] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 177.263065][ T6486] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 177.981163][ T6504] loop2: detected capacity change from 0 to 128 [ 178.610555][ T6507] netlink: 14 bytes leftover after parsing attributes in process `syz.4.126'. [ 178.865914][ T6511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.169788][ T6517] 9pnet_fd: Insufficient options for proto=fd [ 180.295368][ T6522] loop4: detected capacity change from 0 to 16 [ 180.358723][ T6522] erofs (device loop4): mounted with root inode @ nid 36. [ 180.818112][ T6530] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 180.896251][ T6531] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 180.977403][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.132'. [ 181.104845][ T6533] 9pnet_fd: Insufficient options for proto=fd [ 181.119713][ T6533] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 181.128156][ T6533] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 181.135880][ T6533] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 181.144432][ T6533] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 181.152395][ T6533] erofs (device loop4): readahead error at folio 45 @ nid 36 [ 181.160284][ T6533] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 181.168918][ T6533] erofs (device loop4): readahead error at folio 43 @ nid 36 [ 181.176586][ T6533] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 181.185505][ T6533] erofs (device loop4): readahead error at folio 42 @ nid 36 [ 181.193449][ T6533] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 181.201871][ T6533] erofs (device loop4): readahead error at folio 41 @ nid 36 [ 181.209308][ T6533] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 181.217839][ T6533] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 181.225490][ T6533] erofs (device loop4): readahead error at folio 39 @ nid 36 [ 181.233108][ T6533] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 181.241157][ T6533] erofs (device loop4): readahead error at folio 36 @ nid 36 [ 181.249776][ T6533] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 181.258401][ T6533] erofs (device loop4): readahead error at folio 31 @ nid 36 [ 181.266912][ T6533] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 181.274575][ T6533] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 181.284160][ T6533] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 181.293825][ T6533] syz.4.131: attempt to access beyond end of device [ 181.293825][ T6533] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 181.308360][ T6533] syz.4.131: attempt to access beyond end of device [ 181.308360][ T6533] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 181.323412][ T6533] syz.4.131: attempt to access beyond end of device [ 181.323412][ T6533] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 181.338352][ T6533] syz.4.131: attempt to access beyond end of device [ 181.338352][ T6533] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 182.647375][ T6527] input: syz0 as /devices/virtual/input/input18 [ 183.066257][ T6233] kworker/u8:12: attempt to access beyond end of device [ 183.066257][ T6233] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 183.096823][ T6540] loop0: detected capacity change from 0 to 16 [ 183.128473][ T6540] erofs (device loop0): mounted with root inode @ nid 36. [ 183.131251][ T6233] kworker/u8:12: attempt to access beyond end of device [ 183.131251][ T6233] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 183.168169][ T6233] kworker/u8:12: attempt to access beyond end of device [ 183.168169][ T6233] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 183.216656][ T6233] kworker/u8:12: attempt to access beyond end of device [ 183.216656][ T6233] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 183.307867][ T6543] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 183.316651][ T6543] erofs (device loop0): readahead error at folio 47 @ nid 36 [ 183.324253][ T6543] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 183.333420][ T6543] erofs (device loop0): readahead error at folio 46 @ nid 36 [ 183.342028][ T6543] erofs (device loop0): readahead error at folio 45 @ nid 36 [ 183.350539][ T6543] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 183.359206][ T6543] erofs (device loop0): readahead error at folio 43 @ nid 36 [ 183.366930][ T6543] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 183.375569][ T6543] erofs (device loop0): readahead error at folio 42 @ nid 36 [ 183.383849][ T6543] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 183.392338][ T6543] erofs (device loop0): readahead error at folio 41 @ nid 36 [ 183.399932][ T6543] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 183.408414][ T6543] erofs (device loop0): readahead error at folio 40 @ nid 36 [ 183.416178][ T6543] erofs (device loop0): readahead error at folio 39 @ nid 36 [ 183.423749][ T6543] erofs (device loop0): readahead error at folio 38 @ nid 36 [ 183.432344][ T6543] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 183.441551][ T6543] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 183.450147][ T6543] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 183.459059][ T6543] erofs (device loop0): readahead error at folio 25 @ nid 36 [ 183.466829][ T6543] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 183.476500][ T6543] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 183.486006][ T6543] syz.0.135: attempt to access beyond end of device [ 183.486006][ T6543] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 183.500487][ T6543] syz.0.135: attempt to access beyond end of device [ 183.500487][ T6543] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 184.057766][ T6546] loop5: detected capacity change from 0 to 16 [ 184.235861][ T6546] erofs (device loop5): mounted with root inode @ nid 36. [ 185.000142][ T6547] 9pnet_fd: Insufficient options for proto=fd [ 185.090232][ T6548] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 185.098966][ T6548] erofs (device loop5): readahead error at folio 47 @ nid 36 [ 185.106802][ T6548] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 185.115496][ T6548] erofs (device loop5): readahead error at folio 46 @ nid 36 [ 185.123657][ T6548] erofs (device loop5): readahead error at folio 45 @ nid 36 [ 185.131929][ T6548] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 185.140575][ T6548] erofs (device loop5): readahead error at folio 43 @ nid 36 [ 185.148294][ T6548] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 185.157272][ T6548] erofs (device loop5): readahead error at folio 42 @ nid 36 [ 185.165004][ T6548] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 185.174541][ T6548] erofs (device loop5): readahead error at folio 41 @ nid 36 [ 185.182965][ T6548] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 185.191406][ T6548] erofs (device loop5): readahead error at folio 40 @ nid 36 [ 185.199296][ T6548] erofs (device loop5): readahead error at folio 39 @ nid 36 [ 185.206988][ T6548] erofs (device loop5): readahead error at folio 38 @ nid 36 [ 185.222248][ T6548] erofs (device loop5): readahead error at folio 36 @ nid 36 [ 185.230655][ T6548] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 185.239253][ T6548] erofs (device loop5): readahead error at folio 31 @ nid 36 [ 185.247730][ T6548] erofs (device loop5): readahead error at folio 25 @ nid 36 [ 185.255381][ T6548] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 185.263621][ T6548] erofs (device loop5): readahead error at folio 19 @ nid 36 [ 186.127877][ T6557] loop0: detected capacity change from 0 to 128 [ 186.323965][ T6560] input: syz0 as /devices/virtual/input/input19 [ 186.366227][ T6560] netlink: 'syz.2.134': attribute type 4 has an invalid length. [ 186.408460][ T6560] netlink: 'syz.2.134': attribute type 4 has an invalid length. [ 186.461121][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.134'. [ 186.868397][ T6561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.965843][ T36] bio_check_eod: 24 callbacks suppressed [ 187.965860][ T36] kworker/u8:2: attempt to access beyond end of device [ 187.965860][ T36] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 188.049301][ T36] kworker/u8:2: attempt to access beyond end of device [ 188.049301][ T36] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 188.170787][ T6566] loop5: detected capacity change from 0 to 64 [ 188.186523][ T36] kworker/u8:2: attempt to access beyond end of device [ 188.186523][ T36] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 188.200865][ T36] kworker/u8:2: attempt to access beyond end of device [ 188.200865][ T36] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 188.214756][ T36] kworker/u8:2: attempt to access beyond end of device [ 188.214756][ T36] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 188.229715][ T36] kworker/u8:2: attempt to access beyond end of device [ 188.229715][ T36] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 188.254379][ T36] kworker/u8:2: attempt to access beyond end of device [ 188.254379][ T36] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 188.280249][ T36] kworker/u8:2: attempt to access beyond end of device [ 188.280249][ T36] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 188.302445][ T36] kworker/u8:2: attempt to access beyond end of device [ 188.302445][ T36] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 188.320912][ T36] kworker/u8:2: attempt to access beyond end of device [ 188.320912][ T36] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 189.375636][ T6572] process 'syz.5.142' launched './file2' with NULL argv: empty string added [ 190.092734][ T6571] loop2: detected capacity change from 0 to 40427 [ 190.309108][ T6571] F2FS-fs (loop2): Invalid segment count (1) [ 190.315234][ T6571] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 190.332797][ T6571] F2FS-fs (loop2): Unrecognized mount option "whint_mode=user-based" or missing value [ 190.405856][ T6575] loop4: detected capacity change from 0 to 64 [ 191.478552][ T6577] loop0: detected capacity change from 0 to 256 [ 191.789560][ T6577] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 194.312102][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.328785][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.401833][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 196.408350][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 196.414810][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 196.421008][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 196.427597][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 196.686536][ T6614] input: syz0 as /devices/virtual/input/input20 [ 196.704535][ T6614] netlink: 'syz.2.150': attribute type 4 has an invalid length. [ 196.720620][ T6614] netlink: 'syz.2.150': attribute type 4 has an invalid length. [ 196.734639][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.150'. [ 196.943101][ T6618] loop4: detected capacity change from 0 to 16 [ 197.001141][ T6618] erofs (device loop4): mounted with root inode @ nid 36. [ 197.951749][ T6621] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 197.960663][ T6621] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 197.968232][ T6621] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 197.978287][ T6621] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 197.987247][ T6621] erofs (device loop4): readahead error at folio 45 @ nid 36 [ 197.995234][ T6621] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 198.003867][ T6621] erofs (device loop4): readahead error at folio 43 @ nid 36 [ 198.011369][ T6621] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 198.019750][ T6621] erofs (device loop4): readahead error at folio 42 @ nid 36 [ 198.027344][ T6621] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 198.035729][ T6621] erofs (device loop4): readahead error at folio 41 @ nid 36 [ 198.043220][ T6621] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 198.051676][ T6621] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 198.059362][ T6621] erofs (device loop4): readahead error at folio 39 @ nid 36 [ 198.066870][ T6621] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 198.076049][ T6621] erofs (device loop4): readahead error at folio 36 @ nid 36 [ 198.085452][ T6621] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 198.093893][ T6621] erofs (device loop4): readahead error at folio 31 @ nid 36 [ 198.102447][ T6621] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 198.109960][ T6621] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 198.118077][ T6621] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 198.127336][ T6621] bio_check_eod: 102 callbacks suppressed [ 198.127386][ T6621] syz.4.155: attempt to access beyond end of device [ 198.127386][ T6621] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 198.148075][ T6621] syz.4.155: attempt to access beyond end of device [ 198.148075][ T6621] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 198.163588][ T6621] syz.4.155: attempt to access beyond end of device [ 198.163588][ T6621] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 198.179714][ T6621] syz.4.155: attempt to access beyond end of device [ 198.179714][ T6621] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 198.629667][ T6624] loop2: detected capacity change from 0 to 16 [ 198.684796][ T6625] loop5: detected capacity change from 0 to 16 [ 198.797280][ T6624] erofs (device loop2): mounted with root inode @ nid 36. [ 198.807712][ T6625] erofs (device loop5): mounted with root inode @ nid 36. [ 200.126034][ T6626] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 200.135680][ T6626] erofs (device loop2): readahead error at folio 47 @ nid 36 [ 200.143355][ T6626] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 200.151796][ T6626] erofs (device loop2): readahead error at folio 46 @ nid 36 [ 200.159476][ T6626] erofs (device loop2): readahead error at folio 45 @ nid 36 [ 200.167375][ T6626] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 200.175919][ T6626] erofs (device loop2): readahead error at folio 43 @ nid 36 [ 200.183494][ T6626] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 200.192040][ T6626] erofs (device loop2): readahead error at folio 42 @ nid 36 [ 200.199719][ T6626] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 200.208143][ T6626] erofs (device loop2): readahead error at folio 41 @ nid 36 [ 200.215691][ T6626] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 200.225230][ T6626] erofs (device loop2): readahead error at folio 40 @ nid 36 [ 200.233652][ T6626] erofs (device loop2): readahead error at folio 39 @ nid 36 [ 200.241197][ T6626] erofs (device loop2): readahead error at folio 38 @ nid 36 [ 200.249431][ T6626] erofs (device loop2): readahead error at folio 36 @ nid 36 [ 200.257900][ T6626] erofs (device loop2): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 200.266401][ T6626] erofs (device loop2): readahead error at folio 31 @ nid 36 [ 200.274901][ T6626] erofs (device loop2): readahead error at folio 25 @ nid 36 [ 200.447867][ T6626] erofs (device loop2): readahead error at folio 24 @ nid 36 [ 200.456092][ T6626] erofs (device loop2): readahead error at folio 19 @ nid 36 [ 200.464843][ T6626] syz.2.157: attempt to access beyond end of device [ 200.464843][ T6626] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 200.479149][ T6626] syz.2.157: attempt to access beyond end of device [ 200.479149][ T6626] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 200.494748][ T6626] syz.2.157: attempt to access beyond end of device [ 200.494748][ T6626] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 200.510102][ T6626] syz.2.157: attempt to access beyond end of device [ 200.510102][ T6626] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 201.287640][ T6627] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 201.307763][ T6627] erofs (device loop5): readahead error at folio 47 @ nid 36 [ 201.320062][ T6627] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 201.329740][ T6627] erofs (device loop5): readahead error at folio 46 @ nid 36 [ 201.338113][ T6627] erofs (device loop5): readahead error at folio 45 @ nid 36 [ 201.347410][ T6627] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 201.356786][ T6627] erofs (device loop5): readahead error at folio 43 @ nid 36 [ 201.366455][ T6627] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 201.377489][ T6627] erofs (device loop5): readahead error at folio 42 @ nid 36 [ 201.385154][ T6627] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 201.393634][ T6627] erofs (device loop5): readahead error at folio 41 @ nid 36 [ 201.401233][ T6627] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 201.409745][ T6627] erofs (device loop5): readahead error at folio 40 @ nid 36 [ 201.417416][ T6627] erofs (device loop5): readahead error at folio 39 @ nid 36 [ 201.425312][ T6627] erofs (device loop5): readahead error at folio 38 @ nid 36 [ 201.433700][ T6627] erofs (device loop5): readahead error at folio 36 @ nid 36 [ 201.442673][ T6627] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 201.451445][ T6627] erofs (device loop5): readahead error at folio 31 @ nid 36 [ 201.462457][ T6627] erofs (device loop5): readahead error at folio 25 @ nid 36 [ 201.470202][ T6627] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 201.478828][ T6627] erofs (device loop5): readahead error at folio 19 @ nid 36 [ 201.488952][ T6627] syz.5.158: attempt to access beyond end of device [ 201.488952][ T6627] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 201.503617][ T6627] syz.5.158: attempt to access beyond end of device [ 201.503617][ T6627] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 202.386688][ T6629] loop4: detected capacity change from 0 to 128 [ 202.393345][ T6635] loop2: detected capacity change from 0 to 16 [ 202.400841][ T6633] loop5: detected capacity change from 0 to 16 [ 202.478239][ T6635] erofs (device loop2): mounted with root inode @ nid 36. [ 202.487822][ T6633] erofs (device loop5): mounted with root inode @ nid 36. [ 202.660459][ T6637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.979116][ T6640] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 203.258909][ T5839] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 203.273819][ T6640] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 203.283698][ T6640] erofs (device loop2): read error -117 @ 0 of nid 89 [ 203.356389][ T6641] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 203.373380][ T6641] erofs (device loop5): readahead error at folio 47 @ nid 36 [ 203.389039][ T6641] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 203.400156][ T6641] erofs (device loop5): readahead error at folio 46 @ nid 36 [ 203.408113][ T6641] erofs (device loop5): readahead error at folio 45 @ nid 36 [ 203.416121][ T6641] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 203.424811][ T6641] erofs (device loop5): readahead error at folio 43 @ nid 36 [ 203.432386][ T6641] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 203.440898][ T6641] erofs (device loop5): readahead error at folio 42 @ nid 36 [ 203.448562][ T6641] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 203.457175][ T6641] erofs (device loop5): readahead error at folio 41 @ nid 36 [ 203.464717][ T6641] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 203.473176][ T6641] erofs (device loop5): readahead error at folio 40 @ nid 36 [ 203.480751][ T6641] erofs (device loop5): readahead error at folio 39 @ nid 36 [ 203.488311][ T6641] erofs (device loop5): readahead error at folio 38 @ nid 36 [ 203.496542][ T6641] erofs (device loop5): readahead error at folio 36 @ nid 36 [ 203.506144][ T6641] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 203.514687][ T6641] erofs (device loop5): readahead error at folio 31 @ nid 36 [ 203.523348][ T6641] erofs (device loop5): readahead error at folio 25 @ nid 36 [ 203.530916][ T6641] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 203.539507][ T6641] erofs (device loop5): readahead error at folio 19 @ nid 36 [ 203.548885][ T6641] bio_check_eod: 2 callbacks suppressed [ 203.548940][ T6641] syz.5.161: attempt to access beyond end of device [ 203.548940][ T6641] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 203.569230][ T6641] syz.5.161: attempt to access beyond end of device [ 203.569230][ T6641] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 203.584456][ T6641] syz.5.161: attempt to access beyond end of device [ 203.584456][ T6641] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 203.599645][ T6641] syz.5.161: attempt to access beyond end of device [ 203.599645][ T6641] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 203.734914][ T30] audit: type=1800 audit(1744432001.936:9): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.162" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 206.085104][ T6654] loop3: detected capacity change from 0 to 256 [ 206.335810][ T6654] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 206.608239][ T6655] loop2: detected capacity change from 0 to 32768 [ 206.831566][ T6658] loop5: detected capacity change from 0 to 256 [ 206.868895][ T6655] bcachefs (loop2): filesystem UUID already open [ 206.875536][ T6655] bcachefs (loop2): shutdown complete [ 206.920170][ T6655] bcachefs: bch2_fs_get_tree() error: EINVAL [ 206.922516][ T6658] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 208.978178][ T6669] loop4: detected capacity change from 0 to 64 [ 209.346805][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 209.490931][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 210.365514][ T6677] loop3: detected capacity change from 0 to 256 [ 210.405496][ T6679] loop5: detected capacity change from 0 to 256 [ 210.748091][ T6677] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 210.805854][ T6679] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 211.830154][ T6689] loop4: detected capacity change from 0 to 256 [ 211.864305][ T6689] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 212.955161][ T6694] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 213.364105][ T6696] loop4: detected capacity change from 0 to 64 [ 213.672974][ T6700] loop3: detected capacity change from 0 to 16 [ 213.714824][ T6700] erofs (device loop3): mounted with root inode @ nid 36. [ 215.642556][ T6706] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 215.656962][ T6707] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 215.665781][ T6707] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 215.674449][ T6707] erofs (device loop3): readahead error at folio 42 @ nid 36 [ 215.682492][ T6707] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 215.696481][ T6707] erofs (device loop3): readahead error at folio 41 @ nid 36 [ 215.706862][ T6707] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 215.715458][ T6707] erofs (device loop3): readahead error at folio 40 @ nid 36 [ 215.723130][ T6707] erofs (device loop3): readahead error at folio 39 @ nid 36 [ 215.730626][ T6707] erofs (device loop3): readahead error at folio 38 @ nid 36 [ 215.738975][ T6707] erofs (device loop3): readahead error at folio 36 @ nid 36 [ 215.747432][ T6707] erofs (device loop3): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 215.756005][ T6707] erofs (device loop3): readahead error at folio 31 @ nid 36 [ 215.764633][ T6707] erofs (device loop3): readahead error at folio 25 @ nid 36 [ 215.772360][ T6707] erofs (device loop3): readahead error at folio 24 @ nid 36 [ 215.780614][ T6707] erofs (device loop3): readahead error at folio 19 @ nid 36 [ 215.792250][ T6707] syz.3.180: attempt to access beyond end of device [ 215.792250][ T6707] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 215.806548][ T6707] syz.3.180: attempt to access beyond end of device [ 215.806548][ T6707] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 215.821504][ T6707] syz.3.180: attempt to access beyond end of device [ 215.821504][ T6707] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 215.839117][ T6707] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 215.847751][ T6707] erofs (device loop3): readahead error at folio 47 @ nid 36 [ 215.855334][ T6707] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 215.864029][ T6707] erofs (device loop3): readahead error at folio 46 @ nid 36 [ 215.871906][ T6707] erofs (device loop3): readahead error at folio 45 @ nid 36 [ 215.879974][ T6707] syz.3.180: attempt to access beyond end of device [ 215.879974][ T6707] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 216.335570][ T6709] loop0: detected capacity change from 0 to 256 [ 216.530867][ T6709] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 216.729927][ T6706] erofs (device loop3): failed to decompress -29 in[58, 4038] out[3537] [ 216.786575][ T6706] erofs (device loop3): read error -117 @ 43 of nid 36 [ 218.953609][ T6725] loop4: detected capacity change from 0 to 16 [ 218.971609][ T6725] erofs (device loop4): mounted with root inode @ nid 36. [ 219.393176][ T6729] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 219.422179][ T5842] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 219.432212][ T6729] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 219.440661][ T6729] erofs (device loop4): read error -117 @ 0 of nid 89 [ 219.512162][ T30] audit: type=1800 audit(1744432018.086:10): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 219.854548][ T6730] loop0: detected capacity change from 0 to 256 [ 220.084792][ T6730] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 222.651562][ T6752] loop2: detected capacity change from 0 to 256 [ 222.701022][ T6752] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 227.528099][ T6772] loop5: detected capacity change from 0 to 16 [ 227.720770][ T6772] erofs (device loop5): mounted with root inode @ nid 36. [ 228.880198][ T6784] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 229.077271][ T5842] erofs (device loop5): failed to decompress 6887 in[4096, 0] out[8192] [ 229.085987][ T30] audit: type=1800 audit(1744432027.676:11): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.198" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 229.229385][ T6789] loop3: detected capacity change from 0 to 16 [ 229.284177][ T6789] erofs (device loop3): mounted with root inode @ nid 36. [ 230.373231][ T6798] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 230.444734][ T6798] erofs (device loop3): readahead error at folio 47 @ nid 36 [ 230.504984][ T6798] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 230.607244][ T6798] erofs (device loop3): readahead error at folio 46 @ nid 36 [ 230.750571][ T6798] erofs (device loop3): readahead error at folio 45 @ nid 36 [ 231.984427][ T6798] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 232.438722][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 232.483847][ T6798] erofs (device loop3): readahead error at folio 43 @ nid 36 [ 232.523481][ T6798] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 232.621733][ T6798] erofs (device loop3): readahead error at folio 42 @ nid 36 [ 232.629272][ T6798] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 232.695784][ T6798] erofs (device loop3): readahead error at folio 41 @ nid 36 [ 232.766750][ T6798] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 232.902155][ T6798] erofs (device loop3): readahead error at folio 40 @ nid 36 [ 232.909706][ T6798] erofs (device loop3): readahead error at folio 39 @ nid 36 [ 233.815268][ T6798] erofs (device loop3): readahead error at folio 38 @ nid 36 [ 233.852606][ T6798] erofs (device loop3): readahead error at folio 36 @ nid 36 [ 233.979894][ T6798] erofs (device loop3): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 234.476467][ T6817] loop2: detected capacity change from 0 to 40427 [ 234.557501][ T6817] F2FS-fs (loop2): Invalid segment count (1) [ 234.563625][ T6817] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 234.588172][ T6817] F2FS-fs (loop2): Unrecognized mount option "whint_mode=user-based" or missing value [ 234.901483][ T6798] erofs (device loop3): readahead error at folio 31 @ nid 36 [ 234.950607][ T6798] erofs (device loop3): readahead error at folio 25 @ nid 36 [ 234.959464][ T6823] loop5: detected capacity change from 0 to 256 [ 234.980533][ T6798] erofs (device loop3): readahead error at folio 24 @ nid 36 [ 234.994004][ T6798] erofs (device loop3): readahead error at folio 19 @ nid 36 [ 235.002120][ T6798] syz.3.202: attempt to access beyond end of device [ 235.002120][ T6798] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 235.024667][ T6825] loop0: detected capacity change from 0 to 256 [ 235.025892][ T6823] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 235.034159][ T6798] syz.3.202: attempt to access beyond end of device [ 235.034159][ T6798] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 235.063777][ T6798] syz.3.202: attempt to access beyond end of device [ 235.063777][ T6798] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 235.086752][ T6825] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 235.131476][ T6798] syz.3.202: attempt to access beyond end of device [ 235.131476][ T6798] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 236.366600][ T6836] loop4: detected capacity change from 0 to 16 [ 236.388023][ T6836] erofs (device loop4): mounted with root inode @ nid 36. [ 237.492666][ T6843] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 237.560794][ T5842] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 237.569555][ T6843] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 237.578097][ T6843] erofs (device loop4): read error -117 @ 0 of nid 89 [ 238.264226][ T30] audit: type=1800 audit(1744432036.226:12): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.216" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 238.299978][ T6847] loop2: detected capacity change from 0 to 256 [ 238.344042][ T6847] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 239.636818][ T6858] loop5: detected capacity change from 0 to 16 [ 240.062922][ T6858] erofs (device loop5): mounted with root inode @ nid 36. [ 240.597426][ T6868] 9pnet_fd: Insufficient options for proto=fd [ 240.621282][ T6868] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 240.629779][ T6868] erofs (device loop5): readahead error at folio 47 @ nid 36 [ 240.637316][ T6868] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 240.645905][ T6868] erofs (device loop5): readahead error at folio 46 @ nid 36 [ 240.653715][ T6868] erofs (device loop5): readahead error at folio 45 @ nid 36 [ 240.661850][ T6868] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 240.670377][ T6868] erofs (device loop5): readahead error at folio 43 @ nid 36 [ 240.679175][ T6868] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 240.688783][ T6868] erofs (device loop5): readahead error at folio 42 @ nid 36 [ 240.696654][ T6868] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 240.705168][ T6868] erofs (device loop5): readahead error at folio 41 @ nid 36 [ 240.712751][ T6868] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 240.721185][ T6868] erofs (device loop5): readahead error at folio 40 @ nid 36 [ 240.728931][ T6868] erofs (device loop5): readahead error at folio 39 @ nid 36 [ 240.736552][ T6868] erofs (device loop5): readahead error at folio 38 @ nid 36 [ 240.744648][ T6868] erofs (device loop5): readahead error at folio 36 @ nid 36 [ 240.752908][ T6868] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 240.761374][ T6868] erofs (device loop5): readahead error at folio 31 @ nid 36 [ 240.770224][ T6868] erofs (device loop5): readahead error at folio 25 @ nid 36 [ 240.968093][ T6868] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 241.015626][ T6868] erofs (device loop5): readahead error at folio 19 @ nid 36 [ 241.023381][ T6868] syz.5.220: attempt to access beyond end of device [ 241.023381][ T6868] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 241.037144][ T6868] syz.5.220: attempt to access beyond end of device [ 241.037144][ T6868] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 241.256362][ T6868] syz.5.220: attempt to access beyond end of device [ 241.256362][ T6868] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 241.903552][ T6868] syz.5.220: attempt to access beyond end of device [ 241.903552][ T6868] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 243.322845][ T6889] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 245.119032][ T6901] loop3: detected capacity change from 0 to 256 [ 245.174747][ T6881] netlink: 14 bytes leftover after parsing attributes in process `syz.0.222'. [ 245.186489][ T6899] loop5: detected capacity change from 0 to 40427 [ 245.209275][ T6899] F2FS-fs (loop5): Invalid segment count (1) [ 245.215450][ T6899] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 245.224876][ T6899] F2FS-fs (loop5): Unrecognized mount option "whint_mode=user-based" or missing value [ 245.232354][ T6901] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 245.527931][ T6881] hsr_slave_0: left promiscuous mode [ 246.390360][ T6881] hsr_slave_1: left promiscuous mode [ 250.655997][ T6941] loop2: detected capacity change from 0 to 256 [ 250.711043][ T6941] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 254.135797][ T6959] loop2: detected capacity change from 0 to 16 [ 254.261198][ T6959] erofs (device loop2): mounted with root inode @ nid 36. [ 254.305010][ T6963] loop5: detected capacity change from 0 to 256 [ 255.227988][ T6968] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 255.399547][ T5842] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 255.411533][ T6968] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 255.422357][ T6968] erofs (device loop2): read error -117 @ 0 of nid 89 [ 255.429433][ T30] audit: type=1800 audit(1744432054.066:13): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.245" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 256.067563][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.073969][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.121442][ T6963] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 257.653986][ T6986] loop2: detected capacity change from 0 to 64 [ 260.160838][ T7000] loop3: detected capacity change from 0 to 256 [ 260.171014][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.179974][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.187641][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.412363][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.431537][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.195755][ T7000] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 261.272662][ T7006] loop5: detected capacity change from 0 to 64 [ 264.413142][ T7021] loop2: detected capacity change from 0 to 256 [ 264.531596][ T5842] Bluetooth: hci6: command tx timeout [ 264.713402][ T7021] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 265.559292][ T7024] loop5: detected capacity change from 0 to 64 [ 266.561816][ T5842] Bluetooth: hci6: command tx timeout [ 266.726986][ T7040] loop3: detected capacity change from 0 to 16 [ 266.780684][ T7040] erofs (device loop3): mounted with root inode @ nid 36. [ 267.593878][ T7041] 9pnet_fd: Insufficient options for proto=fd [ 268.402285][ T7041] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 268.410663][ T7041] erofs (device loop3): readahead error at folio 47 @ nid 36 [ 268.503516][ T7041] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 268.581882][ T7041] erofs (device loop3): readahead error at folio 46 @ nid 36 [ 268.651712][ T5842] Bluetooth: hci6: command tx timeout [ 268.714844][ T7044] loop5: detected capacity change from 0 to 256 [ 268.732369][ T7041] erofs (device loop3): readahead error at folio 45 @ nid 36 [ 268.817966][ T7044] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 268.867597][ T5919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.882141][ T7041] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 268.890494][ T7041] erofs (device loop3): readahead error at folio 43 @ nid 36 [ 269.666465][ T7041] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 269.678101][ T7050] loop4: detected capacity change from 0 to 16 [ 269.748385][ T7041] erofs (device loop3): readahead error at folio 42 @ nid 36 [ 269.764582][ T7050] erofs (device loop4): mounted with root inode @ nid 36. [ 269.784409][ T7041] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 269.792929][ T7041] erofs (device loop3): readahead error at folio 41 @ nid 36 [ 269.800405][ T7041] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 269.808846][ T7041] erofs (device loop3): readahead error at folio 40 @ nid 36 [ 269.816370][ T7041] erofs (device loop3): readahead error at folio 39 @ nid 36 [ 269.823878][ T7041] erofs (device loop3): readahead error at folio 38 @ nid 36 [ 269.831637][ T7041] erofs (device loop3): readahead error at folio 36 @ nid 36 [ 269.839436][ T7041] erofs (device loop3): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 269.847944][ T7041] erofs (device loop3): readahead error at folio 31 @ nid 36 [ 269.856676][ T7041] erofs (device loop3): readahead error at folio 25 @ nid 36 [ 269.864353][ T7041] erofs (device loop3): readahead error at folio 24 @ nid 36 [ 269.872261][ T7041] erofs (device loop3): readahead error at folio 19 @ nid 36 [ 269.880212][ T7041] syz.3.264: attempt to access beyond end of device [ 269.880212][ T7041] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 269.894219][ T7041] syz.3.264: attempt to access beyond end of device [ 269.894219][ T7041] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 269.908765][ T7041] syz.3.264: attempt to access beyond end of device [ 269.908765][ T7041] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 270.037789][ T7041] syz.3.264: attempt to access beyond end of device [ 270.037789][ T7041] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 270.038086][ T7050] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 270.063059][ T5842] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 270.071747][ T7050] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[8192] [ 270.072896][ T5919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.080177][ T7050] erofs (device loop4): read error -117 @ 0 of nid 89 [ 270.195021][ T30] audit: type=1800 audit(1744432068.716:14): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.267" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 271.393237][ T5842] Bluetooth: hci6: command tx timeout [ 272.183157][ T7063] loop5: detected capacity change from 0 to 40427 [ 272.191386][ T7063] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 272.199145][ T7063] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 272.212741][ T5919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.227381][ T7063] F2FS-fs (loop5): invalid crc value [ 272.243751][ T7065] loop3: detected capacity change from 0 to 256 [ 272.449963][ T7063] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 272.457833][ T7063] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 272.473760][ T7065] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 273.694200][ T5919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.085163][ T7080] input: syz0 as /devices/virtual/input/input21 [ 274.633819][ T6998] chnl_net:caif_netlink_parms(): no params data found [ 274.669171][ T7084] netlink: 'syz.4.272': attribute type 4 has an invalid length. [ 274.773414][ T7087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.272'. [ 274.798656][ T7080] netlink: 'syz.4.272': attribute type 4 has an invalid length. [ 274.826848][ T7089] loop3: detected capacity change from 0 to 256 [ 274.956878][ T7089] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 276.812234][ T5919] bridge_slave_1: left allmulticast mode [ 276.854093][ T5919] bridge_slave_1: left promiscuous mode [ 276.861004][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.887115][ T7105] loop5: detected capacity change from 0 to 256 [ 276.915259][ T7105] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 276.983327][ T5919] bridge_slave_0: left allmulticast mode [ 276.983368][ T5919] bridge_slave_0: left promiscuous mode [ 276.983630][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.088267][ T7108] loop3: detected capacity change from 0 to 16 [ 277.121796][ T7108] erofs (device loop3): mounted with root inode @ nid 36. [ 277.297174][ T7108] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 277.306582][ T5842] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[8192] [ 277.306849][ T7108] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[8192] [ 277.306887][ T7108] erofs (device loop3): read error -117 @ 0 of nid 89 [ 277.307133][ T30] audit: type=1800 audit(1744432075.946:15): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.279" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 277.711661][ T7109] netlink: 14 bytes leftover after parsing attributes in process `syz.2.277'. [ 279.681267][ T7102] tty tty24: ldisc open failed (-12), clearing slot 23 [ 281.598664][ T7131] loop3: detected capacity change from 0 to 256 [ 281.697734][ T7131] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 281.993919][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.031574][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.060256][ T5919] bond0 (unregistering): Released all slaves [ 282.101596][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.126126][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.157582][ T6998] bridge_slave_0: entered allmulticast mode [ 282.174095][ T6998] bridge_slave_0: entered promiscuous mode [ 282.206933][ T7109] hsr_slave_0: left promiscuous mode [ 282.227700][ T7109] hsr_slave_1: left promiscuous mode [ 282.299028][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.306468][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.314309][ T6998] bridge_slave_1: entered allmulticast mode [ 282.322585][ T6998] bridge_slave_1: entered promiscuous mode [ 282.366775][ T6998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.379562][ T6998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.560225][ T6998] team0: Port device team_slave_0 added [ 283.774728][ T6998] team0: Port device team_slave_1 added [ 284.126319][ T7164] loop2: detected capacity change from 0 to 64 [ 286.127484][ T7177] input: syz0 as /devices/virtual/input/input22 [ 287.152179][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.526526][ T7182] netlink: 'syz.5.294': attribute type 4 has an invalid length. [ 288.327309][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.566115][ T7188] netlink: 'syz.5.294': attribute type 4 has an invalid length. [ 288.645726][ T7191] loop3: detected capacity change from 0 to 256 [ 288.702612][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.718073][ T7191] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 288.755035][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.779833][ T5919] veth1_macvtap: left promiscuous mode [ 288.796544][ T5919] veth0_macvtap: left promiscuous mode [ 288.811693][ T5919] veth1_vlan: left promiscuous mode [ 288.822170][ T5919] veth0_vlan: left promiscuous mode [ 290.181149][ T5919] team0 (unregistering): Port device team_slave_1 removed [ 290.213958][ T5919] team0 (unregistering): Port device team_slave_0 removed [ 290.520428][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.527521][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.555670][ T6998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.568668][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.575964][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.608335][ T6998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.924083][ T6998] hsr_slave_0: entered promiscuous mode [ 290.945211][ T6998] hsr_slave_1: entered promiscuous mode [ 291.010584][ T7210] loop3: detected capacity change from 0 to 64 [ 293.289051][ T7223] loop2: detected capacity change from 0 to 256 [ 293.974318][ T7223] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 293.987144][ T31] INFO: task bch-reclaim/loo:5950 blocked for more than 143 seconds. [ 294.100981][ T31] Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 [ 294.310096][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.467666][ T31] task:bch-reclaim/loo state:D stack:20864 pid:5950 tgid:5950 ppid:2 task_flags:0x200040 flags:0x00004000 [ 294.536126][ T31] Call Trace: [ 294.562686][ T31] [ 294.580880][ T31] __schedule+0x1b9a/0x5250 [ 294.607995][ T31] ? __lock_acquire+0xad5/0xd80 [ 294.632303][ T31] ? schedule+0x163/0x360 [ 294.659799][ T31] ? __pfx___schedule+0x10/0x10 [ 294.687123][ T31] ? schedule+0x90/0x360 [ 294.707380][ T31] ? schedule+0x90/0x360 [ 294.728208][ T31] schedule+0x163/0x360 [ 294.744531][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 294.765530][ T31] schedule_preempt_disabled+0x13/0x30 [ 294.784497][ T31] __mutex_lock+0x805/0x10c0 [ 294.807026][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 294.824619][ T31] ? bch2_journal_reclaim_thread+0x160/0x580 [ 294.847916][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 294.876295][ T31] ? do_raw_spin_lock+0x151/0x370 [ 294.898167][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 294.919719][ T31] bch2_journal_reclaim_thread+0x160/0x580 [ 294.938941][ T31] ? bch2_journal_reclaim_thread+0x266/0x580 [ 294.969596][ T31] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 294.997683][ T31] kthread+0x7b7/0x940 [ 295.015506][ T31] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 295.043111][ T31] ? __pfx_kthread+0x10/0x10 [ 295.069744][ T31] ? __pfx_kthread+0x10/0x10 [ 295.096323][ T31] ? __pfx_kthread+0x10/0x10 [ 295.113867][ T31] ? __pfx_kthread+0x10/0x10 [ 295.128736][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.154999][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 295.177033][ T31] ? __pfx_kthread+0x10/0x10 [ 295.200095][ T31] ret_from_fork+0x4b/0x80 [ 295.222601][ T31] ? __pfx_kthread+0x10/0x10 [ 295.241668][ T31] ret_from_fork_asm+0x1a/0x30 [ 295.263897][ T31] [ 295.274896][ T31] [ 295.274896][ T31] Showing all locks held in the system: [ 295.344247][ T31] 2 locks held by kworker/u8:1/13: [ 295.349417][ T31] 1 lock held by khungtaskd/31: [ 295.412856][ T31] #0: ffffffff8ed3f180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 295.521429][ T31] 2 locks held by getty/5583: [ 295.526150][ T31] #0: ffff888035d890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 295.562930][ T31] #1: ffffc900033262f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 295.581378][ T31] 1 lock held by syz-executor/5830: [ 295.586614][ T31] #0: ffffffff8ed446b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 295.601616][ T31] 1 lock held by syz-executor/5835: [ 295.606848][ T31] #0: ffffffff8ed446b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 295.617826][ T31] 6 locks held by syz-executor/5837: [ 295.623174][ T31] #0: ffff8880326680e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 295.633478][ T31] #1: ffff888059480278 (&c->state_lock){+.+.}-{4:4}, at: __bch2_fs_stop+0xff/0x5b0 [ 295.643058][ T31] #2: ffff8880594cad28 (&j->reclaim_lock){+.+.}-{4:4}, at: journal_flush_done+0x85/0x820 [ 295.653250][ T31] #3: ffff8880594845c0 (&wb->flushing.lock){+.+.}-{4:4}, at: btree_write_buffer_flush_seq+0x1aec/0x1ca0 [ 295.666781][ T31] #4: ffff888059484218 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0x9a/0x1a0 [ 295.677610][ T31] #5: ffff8880594a6590 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x68a/0x16c0 [ 295.688014][ T31] 4 locks held by kworker/u8:8/5919: [ 295.693357][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 295.704327][ T31] #1: ffffc90004597c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 295.714917][ T31] #2: ffffffff900f6710 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 295.724482][ T31] #3: ffffffff8ed44580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 295.734535][ T31] 1 lock held by bch-reclaim/loo/5950: [ 295.739998][ T31] #0: ffff8880594cad28 (&j->reclaim_lock){+.+.}-{4:4}, at: bch2_journal_reclaim_thread+0x160/0x580 [ 295.750857][ T31] 2 locks held by syz-executor/6998: [ 295.756191][ T31] #0: ffffffff8f896560 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 295.767008][ T31] #1: ffffffff90103248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 295.776425][ T31] [ 295.778901][ T31] ============================================= [ 295.778901][ T31] [ 295.812081][ T31] NMI backtrace for cpu 1 [ 295.812114][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 295.812138][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.812150][ T31] Call Trace: [ 295.812159][ T31] [ 295.812167][ T31] dump_stack_lvl+0x241/0x360 [ 295.812205][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.812235][ T31] ? __pfx__printk+0x10/0x10 [ 295.812294][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 295.812333][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 295.812361][ T31] ? _printk+0xd5/0x120 [ 295.812390][ T31] ? __wake_up_klogd+0xcc/0x110 [ 295.812420][ T31] ? __pfx__printk+0x10/0x10 [ 295.812453][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 295.812475][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 295.812515][ T31] watchdog+0x1058/0x10a0 [ 295.812538][ T31] ? watchdog+0x1ea/0x10a0 [ 295.812563][ T31] ? __pfx_watchdog+0x10/0x10 [ 295.812582][ T31] kthread+0x7b7/0x940 [ 295.812610][ T31] ? __pfx_watchdog+0x10/0x10 [ 295.812631][ T31] ? __pfx_kthread+0x10/0x10 [ 295.812654][ T31] ? __pfx_kthread+0x10/0x10 [ 295.812679][ T31] ? __pfx_kthread+0x10/0x10 [ 295.812712][ T31] ? __pfx_kthread+0x10/0x10 [ 295.812736][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.812754][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 295.812777][ T31] ? __pfx_kthread+0x10/0x10 [ 295.812803][ T31] ret_from_fork+0x4b/0x80 [ 295.812823][ T31] ? __pfx_kthread+0x10/0x10 [ 295.812848][ T31] ret_from_fork_asm+0x1a/0x30 [ 295.812885][ T31] [ 295.813282][ T31] Sending NMI from CPU 1 to CPUs 0: [ 295.983109][ C0] NMI backtrace for cpu 0 [ 295.983135][ C0] CPU: 0 UID: 0 PID: 5496 Comm: dhcpcd Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 295.983160][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.983170][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40 [ 295.983194][ C0] Code: f5 90 0f 0b 90 90 90 eb c6 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 27 18 2d 04 00 <74> 1e 83 3d fa 45 2d 04 00 74 15 65 48 8b 0c 25 08 00 6a 93 31 c0 [ 295.983209][ C0] RSP: 0018:ffffc900039e7820 EFLAGS: 00000202 [ 295.983224][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000000000b0 [ 295.983234][ C0] RDX: 0000000000000000 RSI: ffffffff8ca1ee20 RDI: ffffffff8ca1ede0 [ 295.983246][ C0] RBP: 0000000000000000 R08: ffffffff81d3254a R09: 0000000000000000 [ 295.983257][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888030039e00 [ 295.983268][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 00007fecd5e8f9a4 [ 295.983280][ C0] FS: 00007fecd5dc5740(0000) GS:ffff888124f80000(0000) knlGS:0000000000000000 [ 295.983294][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.983305][ C0] CR2: 00007f78bdf79ab8 CR3: 0000000029214000 CR4: 00000000003526f0 [ 295.983319][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.983329][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 295.983339][ C0] Call Trace: [ 295.983345][ C0] [ 295.983351][ C0] is_bpf_text_address+0x1ec/0x2a0 [ 295.983371][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 295.983389][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 295.983412][ C0] kernel_text_address+0xa7/0xe0 [ 295.983435][ C0] __kernel_text_address+0xd/0x40 [ 295.983458][ C0] unwind_get_return_address+0x4d/0x90 [ 295.983478][ C0] arch_stack_walk+0xff/0x150 [ 295.983505][ C0] stack_trace_save+0x11a/0x1d0 [ 295.983527][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 295.983547][ C0] ? __unix_dgram_recvmsg+0xcf7/0x12e0 [ 295.983571][ C0] kasan_save_track+0x3f/0x80 [ 295.983588][ C0] ? kasan_save_track+0x3f/0x80 [ 295.983603][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 295.983621][ C0] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 295.983641][ C0] ? getname_flags+0xb6/0x530 [ 295.983663][ C0] ? do_sys_openat2+0xbf/0x1d0 [ 295.983685][ C0] ? __x64_sys_openat+0x249/0x2a0 [ 295.983709][ C0] ? do_syscall_64+0xf3/0x230 [ 295.983727][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.983768][ C0] __kasan_slab_alloc+0x66/0x80 [ 295.983787][ C0] kmem_cache_alloc_noprof+0x1e1/0x390 [ 295.983808][ C0] ? getname_flags+0xb6/0x530 [ 295.983833][ C0] getname_flags+0xb6/0x530 [ 295.983859][ C0] do_sys_openat2+0xbf/0x1d0 [ 295.983883][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 295.983905][ C0] ? rcu_is_watching+0x15/0xb0 [ 295.983930][ C0] __x64_sys_openat+0x249/0x2a0 [ 295.984019][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 295.984053][ C0] ? do_syscall_64+0xb6/0x230 [ 295.984075][ C0] do_syscall_64+0xf3/0x230 [ 295.984093][ C0] ? clear_bhb_loop+0x45/0xa0 [ 295.984112][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.984128][ C0] RIP: 0033:0x7fecd5e8f9a4 [ 295.984153][ C0] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 295.984167][ C0] RSP: 002b:00007ffc2bf71810 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 295.984186][ C0] RAX: ffffffffffffffda RBX: 00007fecd5dc56c0 RCX: 00007fecd5e8f9a4 [ 295.984198][ C0] RDX: 0000000000000241 RSI: 00007ffc2bf81aa8 RDI: 00000000ffffff9c [ 295.984209][ C0] RBP: 00007ffc2bf81aa8 R08: 0000000000000000 R09: 00007ffc2bf81a18 [ 295.984220][ C0] R10: 00000000000001b4 R11: 0000000000000246 R12: 0000000000000241 [ 295.984230][ C0] R13: 00007ffc2bf81ad9 R14: 0000000000000002 R15: 00000000000001b4 [ 295.984250][ C0] [ 296.370808][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 296.377687][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 296.388985][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 296.399068][ T31] Call Trace: [ 296.402367][ T31] [ 296.405311][ T31] dump_stack_lvl+0x241/0x360 [ 296.410027][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.415263][ T31] ? __pfx__printk+0x10/0x10 [ 296.419889][ T31] ? vscnprintf+0x5d/0x90 [ 296.424255][ T31] panic+0x349/0x880 [ 296.428183][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 296.433609][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 296.439801][ T31] ? __pfx_panic+0x10/0x10 [ 296.444245][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 296.449655][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 296.455830][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 296.462001][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 296.468162][ T31] watchdog+0x1097/0x10a0 [ 296.472490][ T31] ? watchdog+0x1ea/0x10a0 [ 296.476913][ T31] ? __pfx_watchdog+0x10/0x10 [ 296.481602][ T31] kthread+0x7b7/0x940 [ 296.485694][ T31] ? __pfx_watchdog+0x10/0x10 [ 296.490371][ T31] ? __pfx_kthread+0x10/0x10 [ 296.494959][ T31] ? __pfx_kthread+0x10/0x10 [ 296.499551][ T31] ? __pfx_kthread+0x10/0x10 [ 296.504151][ T31] ? __pfx_kthread+0x10/0x10 [ 296.508743][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.513945][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 296.519144][ T31] ? __pfx_kthread+0x10/0x10 [ 296.523743][ T31] ret_from_fork+0x4b/0x80 [ 296.528156][ T31] ? __pfx_kthread+0x10/0x10 [ 296.532743][ T31] ret_from_fork_asm+0x1a/0x30 [ 296.537511][ T31] [ 296.540879][ T31] Kernel Offset: disabled [ 296.545212][ T31] Rebooting in 86400 seconds..