last executing test programs: 20m29.698763432s ago: executing program 0 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000}) socket(0x5, 0x803, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, 0x0) 20m27.119183002s ago: executing program 0 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = userfaultfd(0x801) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 20m25.541591277s ago: executing program 0 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) 20m22.389947025s ago: executing program 0 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000}) socket(0x5, 0x803, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001100)={0x0, 0x6, 0xee8}, &(0x7f0000001140)=0x8) 20m20.409396648s ago: executing program 0 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000200)={0x2, 0x4, 0x9, 0x9c3, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040), &(0x7f0000000080)) inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 20m17.490597517s ago: executing program 0 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001100)={r4, 0x6, 0xee8}, &(0x7f0000001140)=0x8) 20m2.420311423s ago: executing program 32 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001100)={r4, 0x6, 0xee8}, &(0x7f0000001140)=0x8) 18m59.665082003s ago: executing program 3 (id=323): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) close(r4) 18m57.644165965s ago: executing program 3 (id=326): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) writev(r0, 0x0, 0x0) 18m55.818977938s ago: executing program 3 (id=329): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) 18m53.700961431s ago: executing program 3 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80094) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x448c4) 18m52.067837194s ago: executing program 3 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 18m48.000427769s ago: executing program 3 (id=342): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) 18m32.830617454s ago: executing program 33 (id=342): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) 16m47.435149622s ago: executing program 1 (id=562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 16m46.538914528s ago: executing program 1 (id=564): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) 16m45.584404585s ago: executing program 1 (id=566): r0 = socket$inet(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) pipe2(0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 16m45.491518644s ago: executing program 1 (id=567): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 16m45.431973394s ago: executing program 1 (id=568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80094) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r5, 0x5608, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x448c4) 16m43.476744257s ago: executing program 1 (id=570): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x70bd27, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 16m28.380024391s ago: executing program 34 (id=570): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x70bd27, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 3m47.297193255s ago: executing program 2 (id=1502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) r2 = syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1117, &(0x7f00000024c0)="$eJzs2cFq1FAUBuD/JqPtbiTug6ALF1JaxgewC4XZutWNSEGwqw4Iiq/hG/gWvoJ25b50r4uCSyESM3GqDKh0KgjfB8k9OcnJyV3emwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvknwqyfUqacZclaQkbXs8P03Sjvlr7+sqJQ8P5ov7R7MHiyT198fLo6T0VX1Zmr2b282smTV7zd17+7c+LF6+ev7k8PDgaPmakjYnZxudRRlP9flc2WgPAAAA+G91FzbNmxd/0unqJfUHAAAAfmfT+wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6ubruJmDKokJWnb4/lpknZN3ZV/9H0AAADAxZVUeTxdlx+2AVbu5OO0/Mj345fSx7t5u6YeAAAAWHn27qfLbmsZnP+//rUb9Ovu25kM6/Lt4d6NTLKzM8TLIZ/3kzrJ7i+9Ts5ePx2P0tXJ1uXMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//YwzhLg==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000007480)=ANY=[@ANYRES8=r2, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff020447cd9caded4abf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/240, @ANYRES8, @ANYRESDEC=r2, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r2, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="61fc4777003a5456", 0x8}], 0x2}}], 0x2, 0x4008440) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x10, @loopback}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf71c7af90c8186dd60cca4000d00070000000000000000000040074de11a95351e10a100000000009ef143f5ce2069000000000000000000000cd7575a85350d3968892015afe9971b00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200"], 0x0) 3m46.637558192s ago: executing program 2 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000340)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$eJzs3b1v004YwPHnnKRNf636c19QJcZCJSYEZUEsRah/BAMgShOkqlGR2iJRFipmhNh42RjYmBELI3sFM4KJib3djO45O3WpfU6aNm7g+5ESufHd+TnbsZ+L5J4A+GfdWPz+7spP+zIiFamIyDWRQETqIlUROSMz9YdrmyubrWbD11BFa9iXEVfTHCqzvNbMqmrraY1YaP+qylj6M5yMKIqiH18r/jL/9y0clES//RkCkeH426nr632P7GRslx1Aycye7MkjGS87DgBAuez9v+YSf3ufH4vz9yAQmYtv+wN2//dnrXv9C+RUSt3/dZQVGXt8dZeZ/fGeDuHs+iAZJXpazF0zJC6RPJBgmqJRpcYSjNxfaTUvLj9oNQJ5KguxVLFpfW+4UzdREO2sJ9gMxX3Poz0OarYP8znxTx1liy+7D6VtNzI75o4J5Y002vlfNdI9okcq1LjDdgUX/6X8FkftmzFaKqeXE7qRs/EW5OP7DnpZzx6RtOOcSE7dJ+7DMInzxZCn1qQc/FnB9e5yfu+01lRmrfmCWtPpWvGVMz6b82seXU63/2Cem5tmVn7JB1lM5f+B3dtzWiDZ7Z4gjZaMzwxvf6paMuwgsKCj8NGpmnftM7knV2V8Y+vx6lKr1VzvdOHTty4KH9fC67duodJLO0nPD62qSq8RRsOu6ZPaCb1H2MlCcsL08eAmx6TvZ1TJC9JzOxUZltXkmnlsgcWHY3t1qeWWshOlkV6uSzhFUpfHmVtlB4My2GuIceM/zeRdVndd19mvf6h5ek2y8vSoqHFt8dXtHTd8SI0N9pPVSX3/r6sR3Gj+CC7VB++Y69wFkfOeLX4+2GwYx/mXMIvyRe7y+z8AAAAAAAAAAAAAAAAAAMCgKXwwYDda39iKH2854pMhJXcRAAAAAAAAAAAAAAAAAAAAAICB55v/V+fILJj/N3kyIH/+39R/9S6e/3fBNpQz/69/kloAXfsdAAD//7rQb18=") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setrlimit(0x1, &(0x7f0000006300)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r3, 0x200ffffffff400) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) signalfd4(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3m45.364102268s ago: executing program 2 (id=1504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000340)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$eJzs3b1v004YwPHnnKRNf636c19QJcZCJSYEZUEsRah/BAMgShOkqlGR2iJRFipmhNh42RjYmBELI3sFM4KJib3djO45O3WpfU6aNm7g+5ESufHd+TnbsZ+L5J4A+GfdWPz+7spP+zIiFamIyDWRQETqIlUROSMz9YdrmyubrWbD11BFa9iXEVfTHCqzvNbMqmrraY1YaP+qylj6M5yMKIqiH18r/jL/9y0clES//RkCkeH426nr632P7GRslx1Aycye7MkjGS87DgBAuez9v+YSf3ufH4vz9yAQmYtv+wN2//dnrXv9C+RUSt3/dZQVGXt8dZeZ/fGeDuHs+iAZJXpazF0zJC6RPJBgmqJRpcYSjNxfaTUvLj9oNQJ5KguxVLFpfW+4UzdREO2sJ9gMxX3Poz0OarYP8znxTx1liy+7D6VtNzI75o4J5Y002vlfNdI9okcq1LjDdgUX/6X8FkftmzFaKqeXE7qRs/EW5OP7DnpZzx6RtOOcSE7dJ+7DMInzxZCn1qQc/FnB9e5yfu+01lRmrfmCWtPpWvGVMz6b82seXU63/2Cem5tmVn7JB1lM5f+B3dtzWiDZ7Z4gjZaMzwxvf6paMuwgsKCj8NGpmnftM7knV2V8Y+vx6lKr1VzvdOHTty4KH9fC67duodJLO0nPD62qSq8RRsOu6ZPaCb1H2MlCcsL08eAmx6TvZ1TJC9JzOxUZltXkmnlsgcWHY3t1qeWWshOlkV6uSzhFUpfHmVtlB4My2GuIceM/zeRdVndd19mvf6h5ek2y8vSoqHFt8dXtHTd8SI0N9pPVSX3/r6sR3Gj+CC7VB++Y69wFkfOeLX4+2GwYx/mXMIvyRe7y+z8AAAAAAAAAAAAAAAAAAMCgKXwwYDda39iKH2854pMhJXcRAAAAAAAAAAAAAAAAAAAAAICB55v/V+fILJj/N3kyIH/+39R/9S6e/3fBNpQz/69/kloAXfsdAAD//7rQb18=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) setrlimit(0x1, 0x0) ftruncate(r3, 0x200ffffffff400) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) signalfd4(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3m44.235140114s ago: executing program 2 (id=1505): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x211, &(0x7f0000000880)="$eJzslbFvEzEUxj/7Lte0QhUMMLCEoRJFope7C6AuDGVHQmoRMEbUVAW3qdIMTSWkViwszIh/hKETAxtMzAyAhMRARyYkjOzzJb40l3A6EEPfT4rz2b73/Ox79wyCIE4tXz7/+PTi1vLaVQBnsIAZO/7NGz7Dnec/vvJqVr7dnn96NOqPAVBq2PenrB8AeLPiAQepW6Vca2ABwFkAa+BGa+6C44rV98AQZrGqobUAwwM7/HhHDXbTmbVCCvawI9cfbUoR6SbWTaKbFqBy8R8fMqwDqNslmBPfbn//SVsC3VRIkYmaytY5MVVWTDo/E98Kx03nCPT7uv/82aHuh3Y8cs4vBkdsdQsMq1YvYwZhGDZsV8TO/i/6Q/9e+tpSDsrspF7pIGplrc4tjZnSGT7ZfFYKvdtK78wVv9Tf8TMiglwK/pMl/ljoOMpb8QbQ9/IfSTDFj6geMxsdYW5KXDg+enfS6ut/Pd5qwhQuAO7US502H+akvD3W6nxu5FLBJ5NlYGFKpPWD+cBlpz75zq3Q7G3tNHf7+0ubW+0NsSG2k6R1I7oWRdeTpqnNaTuh/tVNfZpz/NcKng1YgL12r9eN94BeNx70k7R1Ku7q6853Y8NN/eNY/KlUdr2YbWcXJcuvweyPm3+tFr3C4AmCIAiCIAiCIAiCIAiCIErRAMP7+UFXjcdP7pjp3wEAAP//xbtYgA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}, {0x0, [0x2e, 0x25]}}, 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ptrace(0x10, r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) socket$inet6_udplite(0xa, 0x2, 0x88) 3m39.981216038s ago: executing program 2 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000340)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) setrlimit(0x1, 0x0) ftruncate(r3, 0x200ffffffff400) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) signalfd4(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3m38.754411323s ago: executing program 2 (id=1511): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040), &(0x7f0000000080)) io_uring_enter(r3, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close(0x3) r7 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x5452, &(0x7f0000000000)={'tunl0\x00', 0x0}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x80046108, 0x0) 3m23.125719766s ago: executing program 35 (id=1511): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040), &(0x7f0000000080)) io_uring_enter(r3, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close(0x3) r7 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x5452, &(0x7f0000000000)={'tunl0\x00', 0x0}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x80046108, 0x0) 16.5485583s ago: executing program 6 (id=1697): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000007480)=ANY=[@ANYRES8, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff020447cd9caded4abf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/240, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="61fc4777003a", 0x6}], 0x2}}], 0x2, 0x4008440) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x10, @loopback}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf71c7af90c8186dd60cca4000d00070000000000000000000040074de11a95351e10a100000000009ef143f5ce2069000000000000000000000cd7575a85350d3968892015afe9971b00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200"], 0x0) 16.54725003s ago: executing program 4 (id=1698): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x211, &(0x7f0000000880)="$eJzslbFvEzEUxj/7Lte0QhUMMLCEoRJFope7C6AuDGVHQmoRMEbUVAW3qdIMTSWkViwszIh/hKETAxtMzAyAhMRARyYkjOzzJb40l3A6EEPfT4rz2b73/Ox79wyCIE4tXz7/+PTi1vLaVQBnsIAZO/7NGz7Dnec/vvJqVr7dnn96NOqPAVBq2PenrB8AeLPiAQepW6Vca2ABwFkAa+BGa+6C44rV98AQZrGqobUAwwM7/HhHDXbTmbVCCvawI9cfbUoR6SbWTaKbFqBy8R8fMqwDqNslmBPfbn//SVsC3VRIkYmaytY5MVVWTDo/E98Kx03nCPT7uv/82aHuh3Y8cs4vBkdsdQsMq1YvYwZhGDZsV8TO/i/6Q/9e+tpSDsrspF7pIGplrc4tjZnSGT7ZfFYKvdtK78wVv9Tf8TMiglwK/pMl/ljoOMpb8QbQ9/IfSTDFj6geMxsdYW5KXDg+enfS6ut/Pd5qwhQuAO7US502H+akvD3W6nxu5FLBJ5NlYGFKpPWD+cBlpz75zq3Q7G3tNHf7+0ubW+0NsSG2k6R1I7oWRdeTpqnNaTuh/tVNfZpz/NcKng1YgL12r9eN94BeNx70k7R1Ku7q6853Y8NN/eNY/KlUdr2YbWcXJcuvweyPm3+tFr3C4AmCIAiCIAiCIAiCIAiCIErRAMP7+UFXjcdP7pjp3wEAAP//xbtYgA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x2e, 0x25]}}, 0x0, 0x28, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ptrace(0x10, r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) socket$inet6_udplite(0xa, 0x2, 0x88) 16.44041116s ago: executing program 8 (id=1699): sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x40c, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300"], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x0, 0x0, 0x148, 0x0, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'vxcan1\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x203, 0x0, 0x4, 0xef, 0x7}, {0xfffffffffffffffd}}}, @common=@inet=@multiport={{0x50}, {0x0, 0x80, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0xfd, 0x0, 0xfc]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0x93f]}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x276f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) syz_clone(0x102000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r3, 0x10, 0x0) ptrace$cont(0x9, 0x0, 0x6, 0x5) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) 14.406134573s ago: executing program 4 (id=1700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2ef00, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto(r4, &(0x7f0000000380)="d6", 0x1, 0x4000, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="170000800000000708000010800000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/20, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x58, &(0x7f0000000440)}, 0x10) 14.353412562s ago: executing program 6 (id=1701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2ef00, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto(r4, &(0x7f0000000380)="d6", 0x1, 0x4000, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="170000800000000708000010800000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/20, @ANYRES32], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x58, &(0x7f0000000440)}, 0x10) 12.026947584s ago: executing program 4 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2ef00, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto(r4, &(0x7f0000000380)="d6", 0x1, 0x4000, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="170000800000000708000010800000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/20, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x58, &(0x7f0000000440)}, 0x10) 11.903096903s ago: executing program 8 (id=1703): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000007480)=ANY=[@ANYRES8, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff020447cd9caded4abf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/240, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="61fc4777003a54", 0x7}], 0x2}}], 0x2, 0x4008440) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x10, @loopback}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf71c7af90c8186dd60cca4000d00070000000000000000000040074de11a95351e10a100000000009ef143f5ce2069000000000000000000000cd7575a85350d3968892015afe9971b00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200"], 0x0) 11.901836494s ago: executing program 6 (id=1704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2ef00, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto(r4, &(0x7f0000000380)="d6", 0x1, 0x4000, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x58, &(0x7f0000000440)}, 0x10) 10.067297387s ago: executing program 8 (id=1705): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x211, &(0x7f0000000880)="$eJzslbFvEzEUxj/7Lte0QhUMMLCEoRJFope7C6AuDGVHQmoRMEbUVAW3qdIMTSWkViwszIh/hKETAxtMzAyAhMRARyYkjOzzJb40l3A6EEPfT4rz2b73/Ox79wyCIE4tXz7/+PTi1vLaVQBnsIAZO/7NGz7Dnec/vvJqVr7dnn96NOqPAVBq2PenrB8AeLPiAQepW6Vca2ABwFkAa+BGa+6C44rV98AQZrGqobUAwwM7/HhHDXbTmbVCCvawI9cfbUoR6SbWTaKbFqBy8R8fMqwDqNslmBPfbn//SVsC3VRIkYmaytY5MVVWTDo/E98Kx03nCPT7uv/82aHuh3Y8cs4vBkdsdQsMq1YvYwZhGDZsV8TO/i/6Q/9e+tpSDsrspF7pIGplrc4tjZnSGT7ZfFYKvdtK78wVv9Tf8TMiglwK/pMl/ljoOMpb8QbQ9/IfSTDFj6geMxsdYW5KXDg+enfS6ut/Pd5qwhQuAO7US502H+akvD3W6nxu5FLBJ5NlYGFKpPWD+cBlpz75zq3Q7G3tNHf7+0ubW+0NsSG2k6R1I7oWRdeTpqnNaTuh/tVNfZpz/NcKng1YgL12r9eN94BeNx70k7R1Ku7q6853Y8NN/eNY/KlUdr2YbWcXJcuvweyPm3+tFr3C4AmCIAiCIAiCIAiCIAiCIErRAMP7+UFXjcdP7pjp3wEAAP//xbtYgA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}, {0x0, [0x25]}}, 0x0, 0x33, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ptrace(0x10, r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getanyicast={0x14, 0x3e, 0x3f8afa8584a43243, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x4000004) socket$inet6_udplite(0xa, 0x2, 0x88) 9.876894346s ago: executing program 4 (id=1706): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x211, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}, {0x0, [0x25]}}, 0x0, 0x33, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ptrace(0x10, r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) socket$inet6_udplite(0xa, 0x2, 0x88) 7.219214126s ago: executing program 8 (id=1707): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000007480)=ANY=[@ANYRES8, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff020447cd9caded4abf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/240, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="61fc4777003a5456", 0x8}], 0x2}}], 0x2, 0x4008440) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x10, @loopback}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, 0x0, 0x0) 7.217365157s ago: executing program 6 (id=1708): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x211, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}, {0x0, [0x2e, 0x25]}}, 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ptrace(0x10, r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44801}, 0x4000004) socket$inet6_udplite(0xa, 0x2, 0x88) 2.68493308s ago: executing program 4 (id=1709): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x211, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}, {0x0, [0x2e, 0x25]}}, 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ptrace(0x10, r4) execve(0x0, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) socket$inet6_udplite(0xa, 0x2, 0x88) 2.679720249s ago: executing program 8 (id=1710): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000007480)=ANY=[@ANYRES8, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff020447cd9caded4abf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/240, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="61fc4777003a5456", 0x8}], 0x1}}], 0x2, 0x4008440) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x10, @loopback}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf71c7af90c8186dd60cca4000d00070000000000000000000040074de11a95351e10a100000000009ef143f5ce2069000000000000000000000cd7575a85350d3968892015afe9971b00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200"], 0x0) 2.671027339s ago: executing program 6 (id=1711): sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x40c, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300"], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x0, 0x0, 0x148, 0x0, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'vxcan1\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x203, 0x0, 0x4, 0xef, 0x7}, {0xfffffffffffffffd}}}, @common=@inet=@multiport={{0x50}, {0x0, 0x80, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0xfd, 0x0, 0xfc]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0x93f]}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x276f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) syz_clone(0x102000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r3, 0x10, 0x0) ptrace$cont(0x9, 0x0, 0x6, 0x5) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 12.505119ms ago: executing program 8 (id=1712): sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x40c, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300"], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'vxcan1\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x203, 0x0, 0x4, 0xef, 0x7}, {0xfffffffffffffffd}}}, @common=@inet=@multiport={{0x50}, {0x0, 0x80, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0xfd, 0x0, 0xfc]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x276f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) syz_clone(0x102000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r3, 0x10, 0x0) ptrace$cont(0x9, 0x0, 0x6, 0x5) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) 9.668329ms ago: executing program 4 (id=1713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2ef00, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto(r4, &(0x7f0000000380)="d6", 0x1, 0x4000, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="170000800000000708000010800000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/20, @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x58, &(0x7f0000000440)}, 0x10) 0s ago: executing program 6 (id=1714): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000007480)=ANY=[@ANYRES8, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff020447cd9caded4abf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/240, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="61fc4777003a5456", 0x8}], 0x2}}], 0x2, 0x4008440) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x10, @loopback}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf71c7af90c8186dd60cca4000d00070000000000000000000040074de11a95351e10a100000000009ef143f5ce2069000000000000000000000cd7575a85350d3968892015afe997", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200"], 0x0) kernel console output (not intermixed with test programs): : (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1299.445832][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1299.450397][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1299.452276][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1299.454123][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1299.456053][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1299.457891][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1299.459852][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1299.461844][T13663] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1299.463718][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1299.465532][T13663] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1299.468018][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1299.469917][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1299.471808][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1299.473712][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1299.475535][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1299.477320][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1299.479133][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1299.481013][T13663] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1299.482920][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1299.484798][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1299.486596][T13663] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1301.878504][T13673] loop8: detected capacity change from 0 to 16 [ 1301.884152][T13673] erofs: (device loop8): mounted with root inode @ nid 36. [ 1303.209799][T13681] ptrace attach of "./syz-executor exec"[13682] was attempted by "./syz-executor exec"[13681] [ 1303.224424][T13681] bio_check_eod: 46 callbacks suppressed [ 1303.224464][T13681] syz.8.1641: attempt to access beyond end of device [ 1303.224464][T13681] loop8: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 1303.278595][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1303.280632][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1303.282641][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1303.284913][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1303.287000][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1303.289084][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1303.291360][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1303.293167][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1303.295012][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1303.297024][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1303.298901][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1303.300797][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1303.302748][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1303.304552][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1303.306514][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1303.309196][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1303.311226][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1303.313599][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1303.315540][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1303.317787][T13681] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1303.319661][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1303.321951][T13681] syz.8.1641: attempt to access beyond end of device [ 1303.321951][T13681] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1303.324894][T13681] syz.8.1641: attempt to access beyond end of device [ 1303.324894][T13681] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1303.328025][T13681] syz.8.1641: attempt to access beyond end of device [ 1303.328025][T13681] loop8: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1303.330975][T13681] syz.8.1641: attempt to access beyond end of device [ 1303.330975][T13681] loop8: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1303.334113][T13681] syz.8.1641: attempt to access beyond end of device [ 1303.334113][T13681] loop8: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1303.337117][T13681] syz.8.1641: attempt to access beyond end of device [ 1303.337117][T13681] loop8: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1303.340287][T13681] syz.8.1641: attempt to access beyond end of device [ 1303.340287][T13681] loop8: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1303.343403][T13681] syz.8.1641: attempt to access beyond end of device [ 1303.343403][T13681] loop8: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1303.346507][T13681] syz.8.1641: attempt to access beyond end of device [ 1303.346507][T13681] loop8: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1303.357805][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1303.360008][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1303.362428][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1303.364849][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1303.366797][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1303.368848][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1303.371260][T13681] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1303.373113][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1303.374942][T13681] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1303.376776][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1303.378978][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1303.380895][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1303.382998][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1303.384789][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1303.386595][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1303.388436][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1303.390308][T13681] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1303.392181][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1303.394162][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1303.395982][T13681] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1305.680370][ T4304] Bluetooth: hci5: command 0x0406 tx timeout [ 1308.213982][T13722] loop4: detected capacity change from 0 to 16 [ 1308.276926][T13722] erofs: (device loop4): mounted with root inode @ nid 36. [ 1308.527164][T13723] ptrace attach of "./syz-executor exec"[13724] was attempted by "./syz-executor exec"[13723] [ 1308.535001][T13723] bio_check_eod: 18 callbacks suppressed [ 1308.535017][T13723] syz.4.1648: attempt to access beyond end of device [ 1308.535017][T13723] loop4: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 1308.541795][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1308.543583][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1308.545328][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1308.547087][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1308.548822][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1308.550670][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1308.552431][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1308.554180][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1308.555977][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1308.557749][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1308.559442][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1308.561339][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1308.563077][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1308.564816][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1308.566494][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1308.568337][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1308.570187][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1308.572011][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1308.573692][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1308.575422][T13723] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1308.577272][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1308.579005][T13723] syz.4.1648: attempt to access beyond end of device [ 1308.579005][T13723] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1308.582130][T13723] syz.4.1648: attempt to access beyond end of device [ 1308.582130][T13723] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1308.584819][T13723] syz.4.1648: attempt to access beyond end of device [ 1308.584819][T13723] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1308.587419][T13723] syz.4.1648: attempt to access beyond end of device [ 1308.587419][T13723] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1308.590233][T13723] syz.4.1648: attempt to access beyond end of device [ 1308.590233][T13723] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1308.592838][T13723] syz.4.1648: attempt to access beyond end of device [ 1308.592838][T13723] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1308.595549][T13723] syz.4.1648: attempt to access beyond end of device [ 1308.595549][T13723] loop4: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1308.598254][T13723] syz.4.1648: attempt to access beyond end of device [ 1308.598254][T13723] loop4: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1308.601538][T13723] syz.4.1648: attempt to access beyond end of device [ 1308.601538][T13723] loop4: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1308.605659][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1308.607430][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1308.609199][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1308.611136][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1308.612959][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1308.615196][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1308.617001][T13723] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1308.618749][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1308.620556][T13723] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1308.622343][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1308.624082][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1308.625785][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1308.627608][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1308.629361][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1308.631152][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1308.632921][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1308.634639][T13723] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1308.636410][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1308.638176][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1308.639872][T13723] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1309.514089][ T9] bond0 (unregistering): Released all slaves [ 1310.103844][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1310.168067][T13729] loop8: detected capacity change from 0 to 16 [ 1310.188316][T13729] erofs: (device loop8): mounted with root inode @ nid 36. [ 1310.343655][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1312.313615][T12480] Bluetooth: hci0: command 0x0406 tx timeout [ 1312.445198][T12480] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1312.449347][T12480] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1312.459297][T12480] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1312.465725][T12480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1312.467834][T12480] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1312.469694][T12480] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1313.085805][T13743] ptrace attach of "./syz-executor exec"[13744] was attempted by "./syz-executor exec"[13743] [ 1313.609020][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1313.611164][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1313.613558][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1313.616677][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1313.619419][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1313.622202][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1313.625302][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1313.627252][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1313.629124][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1313.631528][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1313.633540][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1313.635461][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1313.637358][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1313.639290][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1313.641079][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1313.642884][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1313.644689][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1313.646557][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1313.648293][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1313.650134][T13743] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1313.652055][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1313.653881][T13743] bio_check_eod: 19 callbacks suppressed [ 1313.653892][T13743] syz.8.1649: attempt to access beyond end of device [ 1313.653892][T13743] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1313.657762][T13743] syz.8.1649: attempt to access beyond end of device [ 1313.657762][T13743] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1313.660686][T13743] syz.8.1649: attempt to access beyond end of device [ 1313.660686][T13743] loop8: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1313.663675][T13743] syz.8.1649: attempt to access beyond end of device [ 1313.663675][T13743] loop8: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1313.666674][T13743] syz.8.1649: attempt to access beyond end of device [ 1313.666674][T13743] loop8: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1313.669501][T13743] syz.8.1649: attempt to access beyond end of device [ 1313.669501][T13743] loop8: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1313.672589][T13743] syz.8.1649: attempt to access beyond end of device [ 1313.672589][T13743] loop8: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1313.675543][T13743] syz.8.1649: attempt to access beyond end of device [ 1313.675543][T13743] loop8: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1313.678461][T13743] syz.8.1649: attempt to access beyond end of device [ 1313.678461][T13743] loop8: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1313.681489][T13743] syz.8.1649: attempt to access beyond end of device [ 1313.681489][T13743] loop8: rw=524288, sector=790384, nr_sectors = 16 limit=16 [ 1313.685735][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1313.687678][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1313.689740][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1313.691797][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1313.693710][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1313.695533][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1313.697397][T13743] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1313.699319][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1313.701177][T13743] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1313.703035][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1313.704889][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1313.706673][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1313.708506][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1313.710365][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1313.712147][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1313.714062][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1313.715824][T13743] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1313.717731][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1313.719484][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1313.721388][T13743] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1313.810438][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.843624][T13748] loop4: detected capacity change from 0 to 16 [ 1313.848844][T13750] loop6: detected capacity change from 0 to 16 [ 1313.897811][T13748] erofs: (device loop4): mounted with root inode @ nid 36. [ 1313.923379][T13750] erofs: (device loop6): mounted with root inode @ nid 36. [ 1313.929559][T13753] loop8: detected capacity change from 0 to 16 [ 1313.932651][T13753] erofs: (device loop8): mounted with root inode @ nid 36. [ 1314.379090][T13753] ptrace attach of ""[13756] was attempted by "./syz-executor exec"[13753] [ 1314.384728][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1314.386725][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1314.388602][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1314.390587][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1314.392382][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1314.394276][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1314.395967][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1314.397738][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1314.399815][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1314.401950][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1314.403687][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1314.405471][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1314.407457][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1314.409316][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1314.411516][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1314.413707][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1314.415696][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1314.418303][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1314.420233][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1314.422337][T13753] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1314.424452][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1314.429050][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1314.431074][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1314.433004][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1314.434981][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1314.437402][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1314.439289][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1314.441320][T13753] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1314.443268][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1314.445076][T13753] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1314.446907][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1314.448930][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1314.450923][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1314.452841][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1314.454735][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1314.456672][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1314.458476][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1314.460303][T13753] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1314.462214][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1314.464036][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1314.465854][T13753] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1314.567108][T13757] ptrace attach of "./syz-executor exec"[13758] was attempted by "./syz-executor exec"[13757] [ 1314.573032][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1314.574889][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1314.576681][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1314.578512][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1314.580401][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1314.582162][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1314.584048][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1314.585701][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1314.587572][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1314.589431][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1314.591430][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1314.593572][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1314.595590][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1314.597369][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1314.599309][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1314.601326][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1314.603268][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1314.605123][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1314.606883][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1314.608804][T13757] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1314.610740][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1314.614144][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1314.616012][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1314.617937][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1314.619869][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1314.622276][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1314.624328][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1314.626450][T13757] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1314.628602][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1314.630796][T13757] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1314.632883][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1314.634757][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1314.636735][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1314.638827][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1314.640805][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1314.642609][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1314.644629][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1314.646526][T13757] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1314.648586][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1314.650786][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1314.652677][T13757] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1315.130908][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.212734][T13761] loop8: detected capacity change from 0 to 16 [ 1315.222601][T13761] erofs: (device loop8): mounted with root inode @ nid 36. [ 1316.315117][ T4304] Bluetooth: hci7: command 0x0409 tx timeout [ 1316.419809][T13769] ptrace attach of "./syz-executor exec"[13771] was attempted by "./syz-executor exec"[13769] [ 1316.425103][ T9] bond0 (unregistering): Released all slaves [ 1316.434914][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1316.436794][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1316.439267][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1316.448838][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1316.453116][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1316.455129][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1316.457005][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1316.458972][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1316.468917][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1316.600322][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1316.602262][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1316.604026][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1316.645399][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1316.647461][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1316.654631][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1316.656682][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1316.663668][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1316.665718][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1316.680593][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1316.695916][T13769] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1316.705381][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1316.734337][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1316.760694][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1316.762634][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1316.764610][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1316.766436][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1316.768178][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1316.769967][T13769] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1316.771910][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1316.773971][T13769] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1316.775872][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1316.785545][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1316.787434][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1316.789003][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1316.791280][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1316.793229][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1316.795059][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1316.796807][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1316.798523][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1316.810377][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1316.810436][T13769] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1316.812336][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1316.814035][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1316.815884][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1316.817655][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1316.819390][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1316.828504][T13769] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1317.706381][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1317.750091][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1317.751906][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1317.753718][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1317.755539][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1317.757408][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1317.759323][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1317.866313][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1317.868120][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1317.869965][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1317.873106][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1317.875110][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1317.876956][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1317.878942][T13777] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1317.881320][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1317.885072][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1317.887123][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1317.898369][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1317.900707][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1317.902604][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1317.904491][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1317.906445][T13777] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1317.908488][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1317.927444][T13777] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1317.942361][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1317.958074][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1317.967362][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1317.969342][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1318.008268][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1318.059165][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1318.061753][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1318.063546][T13777] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1318.065322][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1318.067199][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1318.068954][T13777] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1318.320322][ T4304] Bluetooth: hci7: command 0x041b tx timeout [ 1319.259637][T13790] loop6: detected capacity change from 0 to 16 [ 1319.269786][T13790] erofs: (device loop6): mounted with root inode @ nid 36. [ 1319.781742][T13792] ptrace attach of "./syz-executor exec"[13793] was attempted by "./syz-executor exec"[13792] [ 1319.795252][T13792] bio_check_eod: 129 callbacks suppressed [ 1319.795291][T13792] syz.6.1659: attempt to access beyond end of device [ 1319.795291][T13792] loop6: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 1319.850260][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1319.852107][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1319.854058][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1319.856386][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1319.858495][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1319.860547][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1319.862773][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1319.864643][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1319.866452][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1319.868401][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1319.870241][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1319.871997][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1319.873927][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1319.875684][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1319.877589][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1319.880169][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1319.882112][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1319.884469][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1319.886435][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1319.888735][T13792] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1319.890582][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1319.892714][T13792] syz.6.1659: attempt to access beyond end of device [ 1319.892714][T13792] loop6: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1319.895693][T13792] syz.6.1659: attempt to access beyond end of device [ 1319.895693][T13792] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1319.898682][T13792] syz.6.1659: attempt to access beyond end of device [ 1319.898682][T13792] loop6: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1319.901766][T13792] syz.6.1659: attempt to access beyond end of device [ 1319.901766][T13792] loop6: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1319.904907][T13792] syz.6.1659: attempt to access beyond end of device [ 1319.904907][T13792] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1319.907813][T13792] syz.6.1659: attempt to access beyond end of device [ 1319.907813][T13792] loop6: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1319.920126][T13792] syz.6.1659: attempt to access beyond end of device [ 1319.920126][T13792] loop6: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1319.923264][T13792] syz.6.1659: attempt to access beyond end of device [ 1319.923264][T13792] loop6: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1319.926292][T13792] syz.6.1659: attempt to access beyond end of device [ 1319.926292][T13792] loop6: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1319.940378][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1319.942500][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1319.944746][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1319.946654][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1319.948599][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1319.950781][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1319.953149][T13792] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1319.954998][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1319.956792][T13792] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1319.958667][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1319.961054][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1319.962855][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1319.965010][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1319.966795][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1319.968634][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1319.970449][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1319.972292][T13792] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1319.974014][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1319.976033][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1319.977818][T13792] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1320.282809][T13796] loop4: detected capacity change from 0 to 16 [ 1320.286186][T13796] erofs: (device loop4): mounted with root inode @ nid 36. [ 1320.444837][T12480] Bluetooth: hci7: command 0x040f tx timeout [ 1320.487415][T13796] ptrace attach of "./syz-executor exec"[13799] was attempted by "./syz-executor exec"[13796] [ 1320.493482][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1320.495303][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1320.497052][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1320.498878][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1320.500806][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1320.502611][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1320.505260][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1320.507004][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1320.508755][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1320.510600][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1320.512378][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1320.514117][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1320.515821][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1320.517462][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1320.519205][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1320.521097][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1320.522875][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1320.524684][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1320.526417][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1320.528212][T13796] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1320.530024][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1320.533448][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1320.535582][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1320.537333][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1320.539162][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1320.541411][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1320.543356][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1320.545182][T13796] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1320.547157][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1320.549140][T13796] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1320.551109][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1320.553158][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1320.554924][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1320.557097][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1320.559163][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1320.561561][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1320.563320][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1320.565155][T13796] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1320.567212][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1320.569223][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1320.571328][T13796] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1322.987469][ T4304] Bluetooth: hci7: command 0x0419 tx timeout [ 1326.815321][T13837] loop8: detected capacity change from 0 to 16 [ 1326.819929][T13837] erofs: (device loop8): mounted with root inode @ nid 36. [ 1327.315864][T13844] ptrace attach of "./syz-executor exec"[13845] was attempted by "./syz-executor exec"[13844] [ 1327.319471][T13844] bio_check_eod: 46 callbacks suppressed [ 1327.319484][T13844] syz.8.1667: attempt to access beyond end of device [ 1327.319484][T13844] loop8: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 1327.328110][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1327.330131][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1327.332036][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1327.333958][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1327.335883][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1327.337790][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1327.339870][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1327.342056][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1327.344020][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1327.345921][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1327.347905][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1327.350270][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1327.352247][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1327.354404][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1327.356395][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1327.358420][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1327.360295][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1327.362420][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1327.364430][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1327.366375][T13844] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1327.368449][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1327.370469][T13844] syz.8.1667: attempt to access beyond end of device [ 1327.370469][T13844] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1327.373248][T13844] syz.8.1667: attempt to access beyond end of device [ 1327.373248][T13844] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1327.376099][T13844] syz.8.1667: attempt to access beyond end of device [ 1327.376099][T13844] loop8: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1327.378950][T13844] syz.8.1667: attempt to access beyond end of device [ 1327.378950][T13844] loop8: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1327.381977][T13844] syz.8.1667: attempt to access beyond end of device [ 1327.381977][T13844] loop8: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1327.384890][T13844] syz.8.1667: attempt to access beyond end of device [ 1327.384890][T13844] loop8: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1327.387873][T13844] syz.8.1667: attempt to access beyond end of device [ 1327.387873][T13844] loop8: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1327.399019][T13844] syz.8.1667: attempt to access beyond end of device [ 1327.399019][T13844] loop8: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1327.402346][T13844] syz.8.1667: attempt to access beyond end of device [ 1327.402346][T13844] loop8: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1327.407356][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1327.409419][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1327.411464][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1327.413611][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1327.415409][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1327.417444][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1327.419430][T13844] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1327.421481][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1327.423409][T13844] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1327.425513][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1327.427471][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1327.429484][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1327.431589][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1327.433464][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1327.435280][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1327.437133][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1327.439166][T13844] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1327.441246][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1327.443191][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1327.445002][T13844] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1333.233986][T13870] loop4: detected capacity change from 0 to 16 [ 1333.250185][T13870] erofs: (device loop4): mounted with root inode @ nid 36. [ 1334.342101][T13874] ptrace attach of ""[13875] was attempted by "./syz-executor exec"[13874] [ 1334.442664][T13874] bio_check_eod: 18 callbacks suppressed [ 1334.442727][T13874] syz.4.1673: attempt to access beyond end of device [ 1334.442727][T13874] loop4: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 1334.622612][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1334.624540][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1334.626434][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1334.628257][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1334.630099][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1334.631934][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1334.633730][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1334.635539][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1334.637291][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1334.639055][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1334.640907][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1334.642730][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1334.644524][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1334.646266][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1334.648143][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1334.649927][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1334.651775][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1334.653525][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1334.655299][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1334.657072][T13872] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1334.658880][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1334.660692][T13872] syz.4.1673: attempt to access beyond end of device [ 1334.660692][T13872] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1334.663395][T13872] syz.4.1673: attempt to access beyond end of device [ 1334.663395][T13872] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1334.666049][T13872] syz.4.1673: attempt to access beyond end of device [ 1334.666049][T13872] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1334.668710][T13872] syz.4.1673: attempt to access beyond end of device [ 1334.668710][T13872] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1334.671606][T13872] syz.4.1673: attempt to access beyond end of device [ 1334.671606][T13872] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1334.674352][T13872] syz.4.1673: attempt to access beyond end of device [ 1334.674352][T13872] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1334.677197][T13872] syz.4.1673: attempt to access beyond end of device [ 1334.677197][T13872] loop4: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1334.680104][T13872] syz.4.1673: attempt to access beyond end of device [ 1334.680104][T13872] loop4: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1334.683034][T13872] syz.4.1673: attempt to access beyond end of device [ 1334.683034][T13872] loop4: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1334.687263][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1334.689138][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1334.691018][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1334.692896][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1334.694721][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1334.696595][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1334.698406][T13872] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1334.700313][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1334.702147][T13872] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1334.704089][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1334.705944][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1334.707778][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1334.709671][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1334.711528][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1334.713348][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1334.715160][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1334.716924][T13872] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1334.718741][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1334.720687][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1334.722467][T13872] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1335.487306][T13878] loop4: detected capacity change from 0 to 16 [ 1335.504288][T13878] erofs: (device loop4): mounted with root inode @ nid 36. [ 1335.866898][T13883] ptrace attach of "./syz-executor exec"[13884] was attempted by "./syz-executor exec"[13883] [ 1335.871474][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1335.873305][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1335.875036][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1335.876822][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1335.878585][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1335.880352][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1335.882137][T13883] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1335.883922][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1335.885687][T13883] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1335.887503][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1335.889381][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1335.891174][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1335.892931][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1335.894664][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1335.896424][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1335.898184][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1335.899877][T13883] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1335.901777][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1335.903532][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1335.905256][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1335.907098][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1335.908827][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1335.910645][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1335.912402][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1335.914171][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1335.915936][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1335.917691][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1335.919359][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1335.921512][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1335.923345][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1335.925115][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1335.926919][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1335.928802][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1335.930641][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1335.932431][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1335.934313][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1335.936158][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1335.938084][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1335.939892][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1335.941901][T13883] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1335.943765][T13883] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1339.504594][T13896] loop8: detected capacity change from 0 to 16 [ 1339.511187][T13896] erofs: (device loop8): mounted with root inode @ nid 36. [ 1339.835377][T13910] ptrace attach of "./syz-executor exec"[13912] was attempted by "./syz-executor exec"[13910] [ 1339.838620][T13910] bio_check_eod: 40 callbacks suppressed [ 1339.838634][T13910] syz.8.1678: attempt to access beyond end of device [ 1339.838634][T13910] loop8: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 1339.845479][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1339.847354][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1339.849132][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1339.850937][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1339.852838][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1339.854619][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1339.856557][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1339.858440][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1339.860414][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1339.862220][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1339.863990][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1339.865851][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1339.867745][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1339.869669][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1339.871614][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1339.873742][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1339.875582][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1339.877580][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1339.879504][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1339.881518][T13910] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1339.883426][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1339.885440][T13910] syz.8.1678: attempt to access beyond end of device [ 1339.885440][T13910] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1339.888231][T13910] syz.8.1678: attempt to access beyond end of device [ 1339.888231][T13910] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1339.891161][T13910] syz.8.1678: attempt to access beyond end of device [ 1339.891161][T13910] loop8: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1339.893904][T13910] syz.8.1678: attempt to access beyond end of device [ 1339.893904][T13910] loop8: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1339.896735][T13910] syz.8.1678: attempt to access beyond end of device [ 1339.896735][T13910] loop8: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1339.899375][T13910] syz.8.1678: attempt to access beyond end of device [ 1339.899375][T13910] loop8: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1339.902224][T13910] syz.8.1678: attempt to access beyond end of device [ 1339.902224][T13910] loop8: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1339.905151][T13910] syz.8.1678: attempt to access beyond end of device [ 1339.905151][T13910] loop8: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1339.908010][T13910] syz.8.1678: attempt to access beyond end of device [ 1339.908010][T13910] loop8: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1339.913138][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1339.915407][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1339.917282][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1339.919288][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1339.921257][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1339.923241][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1339.925162][T13910] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1339.926987][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1339.928846][T13910] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1339.930789][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1339.932679][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1339.934453][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1339.936505][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1339.938443][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1339.940290][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1339.942137][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1339.944077][T13910] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1339.946054][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1339.947904][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1339.949785][T13910] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1340.081123][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1340.753598][T13909] loop4: detected capacity change from 0 to 16 [ 1340.788355][T13909] erofs: (device loop4): mounted with root inode @ nid 36. [ 1341.066674][T13917] ptrace attach of "./syz-executor exec"[13918] was attempted by "./syz-executor exec"[13917] [ 1341.072488][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1341.074346][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1341.076161][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1341.077957][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1341.079784][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1341.081672][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1341.083666][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1341.085420][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1341.087262][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1341.089257][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1341.091287][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1341.093208][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1341.094987][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1341.096772][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1341.098674][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1341.100774][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1341.102567][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1341.104429][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1341.106288][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1341.108276][T13917] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1341.110215][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1341.114177][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1341.115987][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1341.117820][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1341.119564][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1341.121548][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1341.123486][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1341.125247][T13917] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1341.127034][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1341.128777][T13917] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1341.130646][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1341.132475][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1341.134184][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1341.135962][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1341.137687][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1341.139382][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1341.141201][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1341.142974][T13917] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1341.145044][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1341.146811][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1341.148534][T13917] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1341.253090][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1341.560887][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.810176][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.753352][T13923] loop4: detected capacity change from 0 to 16 [ 1342.756899][T13923] erofs: (device loop4): mounted with root inode @ nid 36. [ 1342.771256][T13925] loop6: detected capacity change from 0 to 16 [ 1342.777673][T13925] erofs: (device loop6): mounted with root inode @ nid 36. [ 1342.958406][T13924] loop8: detected capacity change from 0 to 16 [ 1342.962602][T13924] erofs: (device loop8): mounted with root inode @ nid 36. [ 1344.100207][T13929] ptrace attach of "./syz-executor exec"[13931] was attempted by "./syz-executor exec"[13929] [ 1344.301022][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1344.302815][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1344.304562][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1344.306341][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1344.308090][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1344.309870][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1344.311725][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1344.313434][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1344.314282][T13926] ptrace attach of ""[13930] was attempted by "./syz-executor exec"[13926] [ 1344.315160][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1344.318608][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1344.324148][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1344.326047][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1344.329748][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1344.334106][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1344.337498][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1344.340831][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1344.344865][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1344.346812][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1344.348890][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1344.351716][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1344.353761][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1344.355765][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1344.358222][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1344.360200][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1344.363175][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1344.369260][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1344.372322][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1344.376671][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1344.379429][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1344.383652][T13926] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1344.385603][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1344.420091][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1344.420972][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1344.421984][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1344.423771][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1344.425618][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1344.427369][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1344.429009][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1344.430942][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1344.432607][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1344.434311][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1344.436151][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1344.437786][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1344.439350][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1344.441318][T13926] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1344.442966][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1344.444654][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1344.446369][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1344.448078][T13926] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1344.449861][T13929] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1344.451617][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1344.453373][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1344.455140][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1344.458360][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1344.458502][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1344.460300][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1344.462077][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1344.463763][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1344.465424][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1344.467228][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1344.468883][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1344.470635][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1344.472322][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1344.474060][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1344.475760][T13926] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1344.477537][T13929] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1344.479223][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1344.481132][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1344.482889][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1344.484559][T13929] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1344.486259][T13926] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1344.488015][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1344.491924][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1344.493693][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1344.495455][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1344.497188][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1344.498923][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1344.500774][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1344.502557][T13929] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1344.504383][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1344.506185][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1344.507946][T13929] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1345.348921][T13938] ptrace attach of "./syz-executor exec"[13939] was attempted by "./syz-executor exec"[13938] [ 1345.352818][T13938] bio_check_eod: 102 callbacks suppressed [ 1345.352832][T13938] syz.8.1681: attempt to access beyond end of device [ 1345.352832][T13938] loop8: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 1345.359297][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1345.361241][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1345.363007][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1345.364810][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1345.366628][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1345.368404][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1345.370221][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1345.371942][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1345.373682][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1345.375384][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1345.377120][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1345.378829][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1345.380688][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1345.382516][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1345.384424][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1345.386462][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1345.388302][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1345.390365][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1345.392321][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1345.394239][T13938] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1345.396151][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1345.397983][T13938] syz.8.1681: attempt to access beyond end of device [ 1345.397983][T13938] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1345.400823][T13938] syz.8.1681: attempt to access beyond end of device [ 1345.400823][T13938] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1345.403681][T13938] syz.8.1681: attempt to access beyond end of device [ 1345.403681][T13938] loop8: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1345.406436][T13938] syz.8.1681: attempt to access beyond end of device [ 1345.406436][T13938] loop8: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1345.409335][T13938] syz.8.1681: attempt to access beyond end of device [ 1345.409335][T13938] loop8: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1345.412130][T13938] syz.8.1681: attempt to access beyond end of device [ 1345.412130][T13938] loop8: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1345.415066][T13938] syz.8.1681: attempt to access beyond end of device [ 1345.415066][T13938] loop8: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1345.417969][T13938] syz.8.1681: attempt to access beyond end of device [ 1345.417969][T13938] loop8: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1345.420977][T13938] syz.8.1681: attempt to access beyond end of device [ 1345.420977][T13938] loop8: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1345.426146][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1345.428134][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1345.438723][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1345.440825][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1345.442677][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1345.445160][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1345.447185][T13938] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1345.449071][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1345.451060][T13938] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1345.452970][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1345.454809][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1345.456690][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1345.458575][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1345.460459][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1345.462255][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1345.464083][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1345.465924][T13938] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1345.467733][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1345.469507][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1345.471323][T13938] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1345.557174][T13940] ptrace attach of "./syz-executor exec"[13942] was attempted by "./syz-executor exec"[13940] [ 1346.053637][T13944] loop6: detected capacity change from 0 to 16 [ 1346.075396][T13944] erofs: (device loop6): mounted with root inode @ nid 36. [ 1346.100723][ T4304] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1346.105295][ T4304] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1346.107666][ T4307] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1346.110824][ T4307] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1346.112752][ T4307] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1346.115128][ T4304] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1346.610786][T13950] ptrace attach of "./syz-executor exec"[13951] was attempted by "./syz-executor exec"[13950] [ 1346.675234][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1346.677176][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1346.679416][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1346.681835][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1346.684078][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1346.686187][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1346.688433][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1346.690270][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1346.692069][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1346.694162][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1346.696088][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1346.697913][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1346.699969][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1346.701892][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1346.703946][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1346.706518][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1346.708554][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1346.711009][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1346.712983][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1346.715253][T13950] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1346.717101][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1346.738541][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1346.740622][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1346.742919][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1346.745412][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1346.747377][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1346.749490][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1346.751891][T13950] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1346.753724][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1346.755503][T13950] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1346.757300][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1346.759561][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1346.761412][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1346.763539][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1346.765390][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1346.767178][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1346.768932][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1346.770858][T13950] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1346.772660][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1346.774640][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1346.776407][T13950] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1347.098822][ T4304] Bluetooth: hci1: command 0x0406 tx timeout [ 1348.287224][T12480] Bluetooth: hci8: command 0x0409 tx timeout [ 1351.902832][T12480] Bluetooth: hci8: command 0x041b tx timeout [ 1354.900694][ T4304] Bluetooth: hci8: command 0x040f tx timeout [ 1354.902834][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1354.908164][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 1355.365216][T13995] loop6: detected capacity change from 0 to 16 [ 1355.371815][T13995] erofs: (device loop6): mounted with root inode @ nid 36. [ 1355.744675][T14002] ptrace attach of "./syz-executor exec"[14003] was attempted by "./syz-executor exec"[14002] [ 1355.747730][T14002] bio_check_eod: 46 callbacks suppressed [ 1355.747744][T14002] syz.6.1694: attempt to access beyond end of device [ 1355.747744][T14002] loop6: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 1355.754522][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1355.756312][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1355.758056][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1355.759952][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1355.761787][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1355.763560][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1355.765349][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1355.767086][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1355.768835][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1355.770657][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1355.772432][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1355.774136][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1355.775892][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1355.777674][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1355.779451][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1355.781476][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1355.783218][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1355.784986][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1355.786980][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1355.788822][T14002] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1355.790644][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1355.792370][T14002] syz.6.1694: attempt to access beyond end of device [ 1355.792370][T14002] loop6: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1355.794997][T14002] syz.6.1694: attempt to access beyond end of device [ 1355.794997][T14002] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1355.797676][T14002] syz.6.1694: attempt to access beyond end of device [ 1355.797676][T14002] loop6: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1355.800400][T14002] syz.6.1694: attempt to access beyond end of device [ 1355.800400][T14002] loop6: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1355.803215][T14002] syz.6.1694: attempt to access beyond end of device [ 1355.803215][T14002] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1355.805934][T14002] syz.6.1694: attempt to access beyond end of device [ 1355.805934][T14002] loop6: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1355.808730][T14002] syz.6.1694: attempt to access beyond end of device [ 1355.808730][T14002] loop6: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1355.811635][T14002] syz.6.1694: attempt to access beyond end of device [ 1355.811635][T14002] loop6: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1355.814563][T14002] syz.6.1694: attempt to access beyond end of device [ 1355.814563][T14002] loop6: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1355.819505][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1355.821558][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1355.823433][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1355.825410][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1355.827333][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1355.829204][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1355.838822][T14002] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1355.841013][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1355.842922][T14002] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1355.844854][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1355.846751][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1355.848614][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1355.850616][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1355.852430][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1355.854206][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1355.856063][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1355.857933][T14002] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1355.859840][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1355.861797][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1355.863632][T14002] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1359.344018][T14016] loop4: detected capacity change from 0 to 16 [ 1359.367477][T14016] erofs: (device loop4): mounted with root inode @ nid 36. [ 1359.375366][T12480] Bluetooth: hci8: command 0x0419 tx timeout [ 1360.622987][T14027] ptrace attach of ""[14028] was attempted by "./syz-executor exec"[14027] [ 1360.833207][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1360.835178][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1360.837760][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1360.840893][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1360.843706][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1360.846290][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1360.854364][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1360.856274][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1360.858060][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1360.859943][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1360.861773][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1360.863509][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1360.865298][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1360.867030][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1360.868781][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1360.870660][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1360.872451][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1360.874224][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1360.876075][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1360.877980][T14027] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1360.879826][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1360.881729][T14027] bio_check_eod: 19 callbacks suppressed [ 1360.882861][T14027] syz.4.1698: attempt to access beyond end of device [ 1360.882861][T14027] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1360.885588][T14027] syz.4.1698: attempt to access beyond end of device [ 1360.885588][T14027] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1360.888367][T14027] syz.4.1698: attempt to access beyond end of device [ 1360.888367][T14027] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1360.891260][T14027] syz.4.1698: attempt to access beyond end of device [ 1360.891260][T14027] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1360.894230][T14027] syz.4.1698: attempt to access beyond end of device [ 1360.894230][T14027] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1360.897040][T14027] syz.4.1698: attempt to access beyond end of device [ 1360.897040][T14027] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1360.899915][T14027] syz.4.1698: attempt to access beyond end of device [ 1360.899915][T14027] loop4: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1360.902837][T14027] syz.4.1698: attempt to access beyond end of device [ 1360.902837][T14027] loop4: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1360.905827][T14027] syz.4.1698: attempt to access beyond end of device [ 1360.905827][T14027] loop4: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1360.908678][T14027] syz.4.1698: attempt to access beyond end of device [ 1360.908678][T14027] loop4: rw=524288, sector=790384, nr_sectors = 16 limit=16 [ 1360.913800][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1360.915730][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1360.917647][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1360.919543][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1360.921464][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1360.923356][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1360.925242][T14027] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1360.927081][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1360.928876][T14027] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1360.930782][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1360.932700][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1360.934562][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1360.936486][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1360.938284][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1360.940219][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1360.942068][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1360.943854][T14027] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1360.945744][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1360.947599][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1360.949404][T14027] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1365.967460][T14064] loop8: detected capacity change from 0 to 16 [ 1365.979183][T14064] erofs: (device loop8): mounted with root inode @ nid 36. [ 1365.992757][T14065] loop4: detected capacity change from 0 to 16 [ 1365.999864][T14065] erofs: (device loop4): mounted with root inode @ nid 36. [ 1367.552522][T14066] ptrace attach of "./syz-executor exec"[14069] was attempted by "./syz-executor exec"[14066] [ 1367.555997][T14066] bio_check_eod: 17 callbacks suppressed [ 1367.557229][T14066] syz.8.1705: attempt to access beyond end of device [ 1367.557229][T14066] loop8: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 1367.563872][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1367.565802][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1367.567681][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1367.569688][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1367.571602][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1367.573507][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1367.575437][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1367.577221][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1367.579042][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1367.580874][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1367.582684][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1367.584466][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1367.586440][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1367.588206][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1367.590100][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1367.592208][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1367.594061][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1367.596096][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1367.597986][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1367.599938][T14066] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1367.601946][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1367.603794][T14066] syz.8.1705: attempt to access beyond end of device [ 1367.603794][T14066] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1367.606594][T14066] syz.8.1705: attempt to access beyond end of device [ 1367.606594][T14066] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1367.609462][T14066] syz.8.1705: attempt to access beyond end of device [ 1367.609462][T14066] loop8: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1367.612259][T14066] syz.8.1705: attempt to access beyond end of device [ 1367.612259][T14066] loop8: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1367.615254][T14066] syz.8.1705: attempt to access beyond end of device [ 1367.615254][T14066] loop8: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1367.617877][T14066] syz.8.1705: attempt to access beyond end of device [ 1367.617877][T14066] loop8: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1367.620766][T14066] syz.8.1705: attempt to access beyond end of device [ 1367.620766][T14066] loop8: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1367.623688][T14066] syz.8.1705: attempt to access beyond end of device [ 1367.623688][T14066] loop8: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1367.626619][T14066] syz.8.1705: attempt to access beyond end of device [ 1367.626619][T14066] loop8: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1367.633193][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1367.635132][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1367.637066][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1367.639001][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1367.640922][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1367.642807][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1367.644784][T14066] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1367.646768][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1367.648684][T14066] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1367.650583][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1367.652439][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1367.654268][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1367.656156][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1367.657955][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1367.659827][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1367.661687][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1367.663584][T14066] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1367.665391][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1367.667211][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1367.669058][T14066] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1368.678442][T14076] loop6: detected capacity change from 0 to 16 [ 1368.740299][T14076] erofs: (device loop6): mounted with root inode @ nid 36. [ 1369.036726][T14078] ptrace attach of "./syz-executor exec"[14079] was attempted by "./syz-executor exec"[14078] [ 1369.046213][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1369.048032][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1369.049948][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1369.052024][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1369.053989][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1369.055973][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1369.057975][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1369.059890][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1369.061864][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1369.063778][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1369.065832][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1369.067774][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1369.069978][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1369.072037][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1369.074098][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1369.076172][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1369.078281][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1369.080475][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1369.082631][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1369.084664][T14078] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1369.086600][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1369.091395][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1369.093398][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1369.095391][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1369.097783][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1369.100192][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1369.102145][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1369.104151][T14078] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1369.106276][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1369.108327][T14078] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1369.119370][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1369.122234][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1369.124192][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1369.126265][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1369.128553][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1369.130646][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1369.132736][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1369.134744][T14078] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1369.136768][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1369.138802][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1369.140797][T14078] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1369.750300][T14082] ptrace attach of "./syz-executor exec"[14083] was attempted by "./syz-executor exec"[14082] [ 1370.051846][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1370.053722][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1370.055630][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1370.057676][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1370.059668][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1370.061778][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1370.063817][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1370.065720][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1370.067597][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1370.069471][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1370.071310][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1370.073097][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1370.075028][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1370.076905][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1370.078732][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1370.080691][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1370.082489][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1370.084345][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1370.086135][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1370.087993][T14082] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1370.089836][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1370.094613][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1370.096529][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1370.098411][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1370.100615][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1370.102498][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1370.104531][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1370.106478][T14082] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1370.108427][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1370.110360][T14082] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1370.112585][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1370.114521][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1370.116401][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1370.118393][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1370.120336][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1370.122305][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1370.124178][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1370.126054][T14082] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1370.128055][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1370.129990][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1370.131881][T14082] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1372.385188][ T9] bond0 (unregistering): Released all slaves [ 1372.935386][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1373.033412][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1373.161071][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.182332][T14092] loop4: detected capacity change from 0 to 16 [ 1373.184903][T14092] erofs: (device loop4): mounted with root inode @ nid 36. [ 1373.830201][T14096] ptrace attach of "./syz-executor exec"[14097] was attempted by "./syz-executor exec"[14096] [ 1374.042028][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1374.043933][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 1374.045734][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 1374.047529][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1374.049340][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1374.051181][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1374.052981][T14096] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1374.055319][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1374.057103][T14096] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1374.058919][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 1374.060815][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1374.062835][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 1374.064941][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1374.066849][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 1374.068975][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 1374.070926][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1374.072763][T14096] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1374.074711][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1374.076580][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1374.078451][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1374.080496][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1374.082434][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1374.084391][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1374.086217][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 1374.088079][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1374.090113][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 1374.092026][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 1374.093892][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1374.095783][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1374.097623][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1374.099496][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 1374.101397][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1374.103298][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1374.105172][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1374.107077][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1374.109021][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1374.111003][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1374.112982][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1374.114794][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1374.116692][T14096] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1374.118682][T14096] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1374.120727][T14096] bio_check_eod: 74 callbacks suppressed [ 1374.120753][T14096] syz.4.1709: attempt to access beyond end of device [ 1374.120753][T14096] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1374.124811][T14096] syz.4.1709: attempt to access beyond end of device [ 1374.124811][T14096] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1374.127695][T14096] syz.4.1709: attempt to access beyond end of device [ 1374.127695][T14096] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1374.130794][T14096] syz.4.1709: attempt to access beyond end of device [ 1374.130794][T14096] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1374.133619][T14096] syz.4.1709: attempt to access beyond end of device [ 1374.133619][T14096] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 1374.136623][T14096] syz.4.1709: attempt to access beyond end of device [ 1374.136623][T14096] loop4: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 1374.139728][T14096] syz.4.1709: attempt to access beyond end of device [ 1374.139728][T14096] loop4: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1374.142779][T14096] syz.4.1709: attempt to access beyond end of device [ 1374.142779][T14096] loop4: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 1374.145656][T14096] syz.4.1709: attempt to access beyond end of device [ 1374.145656][T14096] loop4: rw=524288, sector=790384, nr_sectors = 16 limit=16 [ 1374.148830][T14096] syz.4.1709: attempt to access beyond end of device [ 1374.148830][T14096] loop4: rw=524288, sector=72, nr_sectors = 16 limit=16 [ 1375.835660][T12480] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1375.850611][T12480] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1375.852973][T12480] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1375.855665][T12480] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1375.858494][T12480] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1375.860985][T12480] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1379.376850][T12480] Bluetooth: hci4: command 0x0406 tx timeout [ 1379.378157][T12480] Bluetooth: hci9: command 0x0409 tx timeout [ 1380.071390][ T28] INFO: task dhcpcd:3966 blocked for more than 144 seconds. [ 1380.328881][ T28] Tainted: G W 6.1.122-syzkaller #0 [ 1380.348477][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.351101][ T28] task:dhcpcd state:D stack:0 pid:3966 ppid:3965 flags:0x0000000c [ 1380.352993][ T28] Call trace: [ 1380.353676][ T28] __switch_to+0x308/0x598 [ 1380.354538][ T28] __schedule+0xef4/0x1d44 [ 1380.355436][ T28] schedule+0xc4/0x170 [ 1380.356252][ T28] schedule_preempt_disabled+0x18/0x2c [ 1380.357353][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 1380.358402][ T28] mutex_lock_nested+0x38/0x44 [ 1380.359370][ T28] rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.371502][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 1380.372609][ T28] rtnetlink_rcv+0x28/0x38 [ 1380.373456][ T28] netlink_unicast+0x65c/0x898 [ 1380.374349][ T28] netlink_sendmsg+0x834/0xb18 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1380.405042][ T28] ____sys_sendmsg+0x55c/0x848 [ 1380.406046][ T28] __sys_sendmsg+0x26c/0x33c [ 1380.407007][ T28] __arm64_sys_sendmsg+0x80/0x94 [ 1380.407961][ T28] invoke_syscall+0x98/0x2bc [ 1380.408825][ T28] el0_svc_common+0x138/0x258 [ 1380.409844][ T28] do_el0_svc+0x58/0x13c [ 1380.412260][ T28] el0_svc+0x58/0x168 [ 1380.413129][ T28] el0t_64_sync_handler+0x84/0xf0 [ 1380.414129][ T28] el0t_64_sync+0x18c/0x190 [ 1380.425449][ T28] INFO: task kworker/0:5:4342 blocked for more than 144 seconds. [ 1380.427021][ T28] Tainted: G W 6.1.122-syzkaller #0 [ 1380.428364][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.429929][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.430012][ T28] task:kworker/0:5 state:D stack:0 pid:4342 ppid:2 flags:0x00000008 [ 1380.444079][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 1380.447694][ T28] Call trace: [ 1380.448422][ T28] __switch_to+0x308/0x598 [ 1380.449290][ T28] __schedule+0xef4/0x1d44 [ 1380.451682][ T28] schedule+0xc4/0x170 [ 1380.452493][ T28] schedule_preempt_disabled+0x18/0x2c [ 1380.453544][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 1380.454569][ T28] mutex_lock_nested+0x38/0x44 [ 1380.455628][ T28] rtnl_lock+0x20/0x2c [ 1380.456443][ T28] addrconf_dad_work+0xd0/0x1390 [ 1380.457437][ T28] process_one_work+0x7ac/0x1404 [ 1380.458673][ T28] worker_thread+0x8e4/0xfec [ 1380.459587][ T28] kthread+0x250/0x2d8 [ 1380.461334][ T28] ret_from_fork+0x10/0x20 [ 1380.462333][ T28] INFO: task kworker/1:5:4345 blocked for more than 144 seconds. [ 1380.463934][ T28] Tainted: G W 6.1.122-syzkaller #0 [ 1380.466406][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.468271][ T28] task:kworker/1:5 state:D stack:0 pid:4345 ppid:2 flags:0x00000008 [ 1380.470736][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 1380.471966][ T28] Call trace: [ 1380.472593][ T28] __switch_to+0x308/0x598 [ 1380.473436][ T28] __schedule+0xef4/0x1d44 [ 1380.477068][ T28] schedule+0xc4/0x170 [ 1380.528510][ T28] schedule_preempt_disabled+0x18/0x2c [ 1380.529713][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 1380.540287][ T28] mutex_lock_nested+0x38/0x44 [ 1380.541305][ T28] rtnl_lock+0x20/0x2c [ 1380.542159][ T28] addrconf_dad_work+0xd0/0x1390 [ 1380.543152][ T28] process_one_work+0x7ac/0x1404 [ 1380.544132][ T28] worker_thread+0x8e4/0xfec [ 1380.545048][ T28] kthread+0x250/0x2d8 [ 1380.545857][ T28] ret_from_fork+0x10/0x20 [ 1380.559403][ T28] INFO: task kworker/u4:18:4832 blocked for more than 144 seconds. [ 1380.610273][ T28] Tainted: G W 6.1.122-syzkaller #0 [ 1380.611774][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.613456][ T28] task:kworker/u4:18 state:D stack:0 pid:4832 ppid:2 flags:0x00000008 [ 1380.644823][ T28] Workqueue: events_unbound linkwatch_event [ 1380.646076][ T28] Call trace: [ 1380.646733][ T28] __switch_to+0x308/0x598 [ 1380.647605][ T28] __schedule+0xef4/0x1d44 [ 1380.648444][ T28] schedule+0xc4/0x170 [ 1380.649239][ T28] schedule_preempt_disabled+0x18/0x2c [ 1380.669934][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 1380.671395][ T28] mutex_lock_nested+0x38/0x44 [ 1380.672385][ T28] rtnl_lock+0x20/0x2c [ 1380.673170][ T28] linkwatch_event+0x14/0x68 [ 1380.674095][ T28] process_one_work+0x7ac/0x1404 [ 1380.675024][ T28] worker_thread+0x8e4/0xfec [ 1380.675985][ T28] kthread+0x250/0x2d8 [ 1380.676814][ T28] ret_from_fork+0x10/0x20 [ 1380.710277][ T28] INFO: task kworker/0:14:10531 blocked for more than 144 seconds. [ 1380.711922][ T28] Tainted: G W 6.1.122-syzkaller #0 [ 1380.713334][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.715123][ T28] task:kworker/0:14 state:D stack:0 pid:10531 ppid:2 flags:0x00000008 [ 1380.716951][ T28] Workqueue: events switchdev_deferred_process_work [ 1380.718275][ T28] Call trace: [ 1380.718909][ T28] __switch_to+0x308/0x598 [ 1380.719776][ T28] __schedule+0xef4/0x1d44 [ 1380.729099][ T28] schedule+0xc4/0x170 [ 1380.729943][ T28] schedule_preempt_disabled+0x18/0x2c [ 1380.737832][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 1380.738914][ T28] mutex_lock_nested+0x38/0x44 [ 1380.739855][ T28] rtnl_lock+0x20/0x2c [ 1380.749845][ T28] switchdev_deferred_process_work+0x14/0x28 [ 1380.751204][ T28] process_one_work+0x7ac/0x1404 [ 1380.752172][ T28] worker_thread+0x8e4/0xfec [ 1380.753059][ T28] kthread+0x250/0x2d8 [ 1380.753795][ T28] ret_from_fork+0x10/0x20 [ 1380.754627][ T28] INFO: task syz-executor:12854 blocked for more than 144 seconds. [ 1380.756117][ T28] Tainted: G W 6.1.122-syzkaller #0 [ 1380.757478][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.759167][ T28] task:syz-executor state:D stack:0 pid:12854 ppid:1 flags:0x00000001 [ 1380.761678][ T28] Call trace: [ 1380.762361][ T28] __switch_to+0x308/0x598 [ 1380.763223][ T28] __schedule+0xef4/0x1d44 [ 1380.764116][ T28] schedule+0xc4/0x170 [ 1380.764915][ T28] schedule_preempt_disabled+0x18/0x2c [ 1380.765986][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 1380.767097][ T28] mutex_lock_nested+0x38/0x44 [ 1380.768094][ T28] rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.769107][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 1380.770197][ T28] rtnetlink_rcv+0x28/0x38 [ 1380.771945][ T28] netlink_unicast+0x65c/0x898 [ 1380.773171][ T28] netlink_sendmsg+0x834/0xb18 [ 1380.774200][ T28] __sys_sendto+0x3b8/0x508 [ 1380.775125][ T28] __arm64_sys_sendto+0xd8/0xf8 [ 1380.776052][ T28] invoke_syscall+0x98/0x2bc [ 1380.776941][ T28] el0_svc_common+0x138/0x258 [ 1380.777833][ T28] do_el0_svc+0x58/0x13c [ 1380.778680][ T28] el0_svc+0x58/0x168 [ 1380.779451][ T28] el0t_64_sync_handler+0x84/0xf0 [ 1380.780626][ T28] el0t_64_sync+0x18c/0x190 [ 1380.781481][ T28] INFO: task syz-executor:13190 blocked for more than 144 seconds. [ 1380.782950][ T28] Tainted: G W 6.1.122-syzkaller #0 [ 1380.784278][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.785929][ T28] task:syz-executor state:D stack:0 pid:13190 ppid:1 flags:0x00000001 [ 1380.787736][ T28] Call trace: [ 1380.788358][ T28] __switch_to+0x308/0x598 [ 1380.789323][ T28] __schedule+0xef4/0x1d44 [ 1380.790256][ T28] schedule+0xc4/0x170 [ 1380.791101][ T28] schedule_preempt_disabled+0x18/0x2c [ 1380.792133][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 1380.793205][ T28] mutex_lock_nested+0x38/0x44 [ 1380.794157][ T28] rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.795123][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 1380.796085][ T28] rtnetlink_rcv+0x28/0x38 [ 1380.796963][ T28] netlink_unicast+0x65c/0x898 [ 1380.797947][ T28] netlink_sendmsg+0x834/0xb18 [ 1380.798917][ T28] __sys_sendto+0x3b8/0x508 [ 1380.799806][ T28] __arm64_sys_sendto+0xd8/0xf8 [ 1380.800888][ T28] invoke_syscall+0x98/0x2bc [ 1380.801783][ T28] el0_svc_common+0x138/0x258 [ 1380.802685][ T28] do_el0_svc+0x58/0x13c [ 1380.803503][ T28] el0_svc+0x58/0x168 [ 1380.804302][ T28] el0t_64_sync_handler+0x84/0xf0 [ 1380.805281][ T28] el0t_64_sync+0x18c/0x190 [ 1380.820138][ T28] [ 1380.820138][ T28] Showing all locks held in the system: [ 1380.821773][ T28] 4 locks held by kworker/u4:0/9: [ 1380.822843][ T28] #0: ffff0000c03dd138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 1380.824957][ T28] #1: ffff80001d1e7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 1380.826936][ T28] #2: ffff8000180b8710 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0xa18 [ 1380.828800][ T28] #3: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1380.851539][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1380.852679][ T28] #0: ffff800015c65570 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xd10 [ 1380.854756][ T28] 1 lock held by rcu_tasks_trace/13: [ 1380.855785][ T28] #0: ffff800015c65d90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xd10 [ 1380.857970][ T28] 2 locks held by kworker/1:1/24: [ 1380.858949][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 1380.870744][ T28] #1: ffff80001d2e7c20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 1380.872718][ T28] 1 lock held by khungtaskd/28: [ 1380.873658][ T28] #0: ffff800015c653a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 1380.875785][ T28] 1 lock held by dhcpcd/3966: [ 1380.876724][ T28] #0: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.878570][ T28] 2 locks held by getty/4051: [ 1380.879470][ T28] #0: ffff0000d6187098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 1380.890152][ T28] #1: ffff80001d8202f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 1380.892265][ T28] 2 locks held by syz-executor/4296: [ 1380.893289][ T28] #0: ffff0000d98bd0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1f8/0x4c4 [ 1380.895272][ T28] #1: ffff0000d98bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x39c/0xf1c [ 1380.897165][ T28] 3 locks held by kworker/0:5/4342: [ 1380.898160][ T28] #0: ffff0000d5e03538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 1380.910158][ T28] #1: ffff800021207c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 1380.912693][ T28] #2: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1380.914446][ T28] 3 locks held by kworker/1:5/4345: [ 1380.915503][ T28] #0: ffff0000d5e03538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 1380.917707][ T28] #1: ffff800021527c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 1380.937369][ T28] #2: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1380.939174][ T28] 3 locks held by kworker/u4:9/4435: [ 1380.940285][ T28] #0: ffff0000c002a138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 1380.942593][ T28] #1: ffff8000215c7c20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 1380.944656][ T28] #2: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1380.946409][ T28] 3 locks held by kworker/u4:18/4832: [ 1380.947490][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 1380.949744][ T28] #1: ffff8000217a7c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 1380.960007][ T28] #2: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1380.963058][ T28] 2 locks held by kworker/u4:20/5316: [ 1380.964133][ T28] 3 locks held by kworker/0:14/10531: [ 1380.965164][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 1380.967222][ T28] #1: ffff800022167c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 1380.969272][ T28] #2: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 1380.971170][ T28] 3 locks held by syz-executor/12777: [ 1380.972247][ T28] #0: ffff0000d34450b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1f8/0x4c4 [ 1380.974227][ T28] #1: ffff0000d3444078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x39c/0xf1c [ 1380.976198][ T28] #2: ffff800018211fa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb0/0x27c [ 1380.978426][ T28] 1 lock held by syz-executor/12854: [ 1380.979458][ T28] #0: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.981412][ T28] 1 lock held by syz-executor/13190: [ 1380.982421][ T28] #0: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.984275][ T28] 1 lock held by syz-executor/13363: [ 1380.985302][ T28] #0: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.987209][ T28] 1 lock held by syz-executor/13540: [ 1380.988252][ T28] #0: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.990284][ T28] 1 lock held by syz-executor/13740: [ 1380.991320][ T28] #0: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.993188][ T28] 1 lock held by syz-executor/13936: [ 1380.994214][ T28] #0: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.996058][ T28] 1 lock held by syz-executor/14106: [ 1380.997073][ T28] #0: ffff8000180c4648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 1380.998936][ T28] 3 locks held by syz.6.1715/14129: [ 1380.999927][ T28] #0: ffff0000d14290b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1f8/0x4c4 [ 1381.001951][ T28] #1: ffff0000d1428078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x39c/0xf1c [ 1381.003828][ T28] #2: ffff800018211fa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb0/0x27c [ 1381.005859][ T28] [ 1381.006316][ T28] ============================================= [ 1381.006316][ T28] [ 1381.007922][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1381.009241][ T28] CPU: 1 PID: 28 Comm: khungtaskd Tainted: G W 6.1.122-syzkaller #0 [ 1381.011064][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1381.013065][ T28] Call trace: [ 1381.013707][ T28] dump_backtrace+0x1c8/0x1f4 [ 1381.014634][ T28] show_stack+0x2c/0x3c [ 1381.015459][ T28] dump_stack_lvl+0x108/0x170 [ 1381.016417][ T28] dump_stack+0x1c/0x58 [ 1381.017283][ T28] panic+0x300/0x804 [ 1381.018086][ T28] hung_task_panic+0x0/0x2c [ 1381.018958][ T28] kthread+0x250/0x2d8 [ 1381.019767][ T28] ret_from_fork+0x10/0x20 [ 1381.020634][ T28] SMP: stopping secondary CPUs [ 1381.021609][ T28] Kernel Offset: disabled [ 1381.022465][ T28] CPU features: 0x080000,02070084,26017203 [ 1381.023611][ T28] Memory Limit: none [ 1381.723629][ T28] Rebooting in 86400 seconds..