last executing test programs: 2m58.023324295s ago: executing program 3 (id=81): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000980)={0x5, 0x4, 0x54000, 0x2000, &(0x7f000000a000/0x2000)=nil, 0xff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) 2m56.878585534s ago: executing program 3 (id=84): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc55e6ba4e", 0x6}], 0x2}, 0x810) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200012, &(0x7f0000000600), 0x4, 0x5a4, &(0x7f0000000640)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x451, &(0x7f0000000f80)="$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") ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', r1, 0x10, 0x7800, 0x7b, 0x100, {{0x28, 0x4, 0x2, 0x1f, 0xa0, 0x67, 0x0, 0x3, 0x3c8c385c86df3da5, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x10, 0xb2, 0x0, 0x4, [0x8, 0x80, 0x5]}, @cipso={0x86, 0x34, 0x3, [{0x0, 0xb, "c661b7f129913c44a3"}, {0x0, 0xe, "b67810e200ea78fb33e41324"}, {0x7, 0x9, "fa7e3599027dbf"}, {0x2, 0xc, "c73bb05ddd29e3db8de2"}]}, @generic={0x82, 0x2}, @timestamp_prespec={0x44, 0x44, 0x1d, 0x3, 0x3, [{@multicast2, 0x5}, {@rand_addr=0x64010101, 0xff}, {@loopback, 0x2}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast2, 0x9}, {@multicast2, 0x10}, {@multicast1, 0x10}]}]}}}}}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x0, 0x100a, 0x1, @discrete={0xfffffffe, 0x7fff}}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r2) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) ptrace(0xffffffffffffffff, r2) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000005c0)={0xb, @pix_mp={0x6, 0x4, 0x34343459, 0x2, 0xc, [{0x0, 0x7}, {0x6, 0xc}, {0x2, 0x3}, {0x3, 0x8}, {0x1, 0x8000}, {0xa, 0xb09}, {0x10001, 0x8}, {0x200, 0x7f}], 0xd, 0xf, 0x7, 0x0, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) sendto(r5, &(0x7f0000000040)="6ceb9eb23124ac4a0c34b2a538a87c83377a26929553aaaf8a8754", 0x1b, 0x20000040, &(0x7f0000000100)=@in6={0xa, 0x4e23, 0x6a5, @loopback, 0x6}, 0x80) 2m53.21589456s ago: executing program 3 (id=93): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2) 2m52.515295493s ago: executing program 3 (id=98): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e31, @loopback}, 0x10) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000001940)=ANY=[@ANYRES64=0x0, @ANYBLOB="4565cbe75331e72cb8a8b870d7cbd8e3fe12609e486f", @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffd92000000000000001d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f15b45ccae88", @ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32], 0x0, 0xa7a, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x11, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m49.768045117s ago: executing program 3 (id=101): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x200840, &(0x7f0000000140)={[{@nogrpid}, {@ikeep}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd25, 0x25dfdbfe, {0xa, 0x40, 0x20}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x50, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x14, 0x4, @local}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x804) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x726) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r4, 0x0, 0x0, 0x100, 0x0, 0x64) sendmmsg$unix(r6, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) 2m44.217158891s ago: executing program 3 (id=116): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf8, 0x6, &(0x7f0000000580)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='trans=fd,', &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000040), 0x0, 0x4e2, &(0x7f0000000300)="$eJzs3UFvI1cdAPD/TOI0u03rlHJoK1GqtihbwdpJQ9uIQ1skBKdKQLmHkDhRFCeOEqfdRCuUFR8ACSFA4sRpL0h8ACS0HwEhrQR3BCsQgl04cACMPB6HbGJvvOB4luT3k2bnvXkz+f+fJT97PG9nAri0XomI9yNiLCLeiIhyvn0iItKIWGxXDjv7Pbh/c7m9JNFqffjnJJJ8W/dvJfn66c4hMRkRX/9KxLeSXpEPNpbq9dpOXqs2N7eru/sH19c3l9Zqa7Wt+fm5txfeWXhrYXbwzqT9m6Yj4t0v3fvBd29/+d1ffO7j3y7+8dq322lN5e3H+zFMna6Xsteiazwids4jWEHGsx4CAPD/4PmI+EREvJp9/y/HWPZtbqLotAAAAIAhar03Ff9IIloDejUG3xcAAAB4MqTZHNgkreTTZ6ciTSuVzhzeT8bVtN7YbX52tbG3tdJpn45Surper83mc4Wno5S063P5HNtu/c0T9fmIeC4ivl++ktUry436StE/fgAAAMAl8fSJ8/+/lTvn/7cf/g+d24UlCAAAAAzHdNEJAAAAAOfO+T8AAABcfM7/AQAA4EL76gcftJdW9/nXKx/t7200Prq+UtvdqGzuLVeWGzvblbVGYy27Z9/mWX+v3mhsfz629m5Um7XdZnV3/2Bxs7G31Vxcf+gR2AAAAMAIPffpO79JIuLwC1eype3FopMCRiJ9nJ1/f355AKM3VnQCQGHGi04AKEyp6ASAwiVntD/br+GXw88FAAA4HzMvnr7+Xy46KWAkHuv6PwBwIbj+D5dXyQxAuPSePWMc6HvzjlPX/9/rs2Or9V+kBQAADNFUtiRpJb8WOBVpWqlEPJM9FqCUrK7Xa7P5/N9fl0tPtetz2ZHJmXOGAQAAAAAAAAAAAAAAAAAAAAAAAICOViuJFgAAAHChRaR/SLK7+UfMlF+fOvn7wETy93K2joiPf/zhD28sNZs7c+3tfzna3vxRvv3NIn7BAAAAgEvi3uBP4uuep3fP4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgmB7cv7ncXUYZ909fjIjpXvHHYzJbT0YpIq7+NYnxY8clETE2hPiHtyLihV7xk3ZaMZ1n0Sv+lZHHT46OS4cQGy67O+3x5/1e7780XsnWvd//4/nyv+o//qVH499Yn/HnmQFjvHT3Z9W+8W9FvDTee/zpxk+yaKfjvzZg/G9+4+DgWPWp422tn0TM9Pz8SR6KVW1ubld39w+ur28urdXWalvz83NvL7yz8NbCbHV1vV7L/+0Z/3uf+vm/HtX/q33iTx/1v/fr//qA/f/n3Rv3n+8US73iX3ut9+fvC33ip/ln32fycrt9pls+7JSPe/mnv3r5Uf1f6dP/yTP6f23A/r/xte/8bsBdAYAR2N0/2Fiq12s7CgoFFCbiiUhD4VSh6JEJAAAYtv986S86EwAAAAAAAAAAAAAAAAAAALi8RnE7sZMxD4vpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/07AAD//yfQ0Mw=") map_shadow_stack(&(0x7f0000adc000/0x3000)=nil, 0x3000, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = dup2(r5, r4) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) 2m28.584816288s ago: executing program 32 (id=116): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf8, 0x6, &(0x7f0000000580)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='trans=fd,', &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000040), 0x0, 0x4e2, &(0x7f0000000300)="$eJzs3UFvI1cdAPD/TOI0u03rlHJoK1GqtihbwdpJQ9uIQ1skBKdKQLmHkDhRFCeOEqfdRCuUFR8ACSFA4sRpL0h8ACS0HwEhrQR3BCsQgl04cACMPB6HbGJvvOB4luT3k2bnvXkz+f+fJT97PG9nAri0XomI9yNiLCLeiIhyvn0iItKIWGxXDjv7Pbh/c7m9JNFqffjnJJJ8W/dvJfn66c4hMRkRX/9KxLeSXpEPNpbq9dpOXqs2N7eru/sH19c3l9Zqa7Wt+fm5txfeWXhrYXbwzqT9m6Yj4t0v3fvBd29/+d1ffO7j3y7+8dq322lN5e3H+zFMna6Xsteiazwids4jWEHGsx4CAPD/4PmI+EREvJp9/y/HWPZtbqLotAAAAIAhar03Ff9IIloDejUG3xcAAAB4MqTZHNgkreTTZ6ciTSuVzhzeT8bVtN7YbX52tbG3tdJpn45Surper83mc4Wno5S063P5HNtu/c0T9fmIeC4ivl++ktUry436StE/fgAAAMAl8fSJ8/+/lTvn/7cf/g+d24UlCAAAAAzHdNEJAAAAAOfO+T8AAABcfM7/AQAA4EL76gcftJdW9/nXKx/t7200Prq+UtvdqGzuLVeWGzvblbVGYy27Z9/mWX+v3mhsfz629m5Um7XdZnV3/2Bxs7G31Vxcf+gR2AAAAMAIPffpO79JIuLwC1eype3FopMCRiJ9nJ1/f355AKM3VnQCQGHGi04AKEyp6ASAwiVntD/br+GXw88FAAA4HzMvnr7+Xy46KWAkHuv6PwBwIbj+D5dXyQxAuPSePWMc6HvzjlPX/9/rs2Or9V+kBQAADNFUtiRpJb8WOBVpWqlEPJM9FqCUrK7Xa7P5/N9fl0tPtetz2ZHJmXOGAQAAAAAAAAAAAAAAAAAAAAAAAICOViuJFgAAAHChRaR/SLK7+UfMlF+fOvn7wETy93K2joiPf/zhD28sNZs7c+3tfzna3vxRvv3NIn7BAAAAgEvi3uBP4uuep3fP4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgmB7cv7ncXUYZ909fjIjpXvHHYzJbT0YpIq7+NYnxY8clETE2hPiHtyLihV7xk3ZaMZ1n0Sv+lZHHT46OS4cQGy67O+3x5/1e7780XsnWvd//4/nyv+o//qVH499Yn/HnmQFjvHT3Z9W+8W9FvDTee/zpxk+yaKfjvzZg/G9+4+DgWPWp422tn0TM9Pz8SR6KVW1ubld39w+ur28urdXWalvz83NvL7yz8NbCbHV1vV7L/+0Z/3uf+vm/HtX/q33iTx/1v/fr//qA/f/n3Rv3n+8US73iX3ut9+fvC33ip/ln32fycrt9pls+7JSPe/mnv3r5Uf1f6dP/yTP6f23A/r/xte/8bsBdAYAR2N0/2Fiq12s7CgoFFCbiiUhD4VSh6JEJAAAYtv986S86EwAAAAAAAAAAAAAAAAAAALi8RnE7sZMxD4vpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/07AAD//yfQ0Mw=") map_shadow_stack(&(0x7f0000adc000/0x3000)=nil, 0x3000, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = dup2(r5, r4) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) 14.485895431s ago: executing program 2 (id=412): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380), 0x3, r4, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r6, r5, r5], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3f, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008, 0x7}) r7 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x2881, 0x2, 0x0, 0x59}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x25, &(0x7f0000000000)="01", 0x1) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000011}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r12, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0x2}, {0x0, 0x0, 0x10, 0xa0c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x6, 0xa}, {&(0x7f0000000100)=[{0x9, 0x10, 0x1ff, 0xa47a, 0xfffeffff}], 0x1, 0x28, 0x6, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) 14.481045311s ago: executing program 0 (id=413): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000440)='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^c\xfe|\xba\xe0\xc0\xb6\x92\xf5\x102\x14\xca;\x912\xde\x1a\x05\xbc=?\x9b$\xadu\x91\xf5\xb2\xe6\xe4\xbaKYQs\xdf\f\xea\rQ\nkjD\x8a[\x15}{=c3\xe0\x1et\xc9`L\xe2\x00\x7fC\x89\t\xe1\r\'\xe4@\xbd0Tus\xa7[\xdf\xfeQ\xbe$\xe0g\x82\\Pa\xc6p\xd1\xee[\xd3\xce\xb3\x06\x90)\xb2L\xcc\x85\xc4A\xb0\xea\xadL\r\x86e\x19\x98\x114\xb8\x8aLV7\xf2\xc6\x03\x17\x1d\xf6\f\x0ep\xe5\x8e[\xab\xd6\xb6\xe8\x8bA\x80|1\x93\xfd\xaai\x85\x97T\x84\x80\xa53\xb8R=\x1aysc\xe6\x01\x80\xf1p\x11]\xdf\x8c&\xf3K\xbd\xc1b*\x9f\xc5\bD\xfa\x84J\x1f$\x90\x88\xa3\xe6\xa5\xc2\x8e\xb6\x0eK`\xa9I\x9e\xba\x8c\xd7\xa0\x11}\xd0\xacv\xb8\x1fs*\x95{v+2!AM\xd9u\xea\x12\xa1\x1c\xe4\xcb\xb1OC\xf3#\x9e\x8e\x17\x814\xf1~\xdd\xdc\x15D\b852\x8d\xff\xb1\xfc~~\xa7ol\x0fL\x9c\xa5_\xf7\xb4\xf8n*\xfc\"\xd4Yn\xdf\xbc&\x04\xa2L^\xb9\xf3&\xe5l\xa9\x03I\xcf\"\x15\xcc\xe6\xacTQ\x1b\xfeu\x93\x8b\xa9\x14JQ\xb4\x9b\xcb\xaa\xe7\x85f.}n~\xa3?\x9a,a\r\xd5\x9a\a\xd0\xcc?\xcbq\x95\xfe\x9bm\xae\x9e\xeay\xd5\x96\xaf\x1c c\xe4\x93\n\x06\xa7\xa7\x9b:\x01\xdcb\xa9\xa1\xecxC\xa5&_Y\x94\x01\x1du\x9cs\x93\xe6 \x01\xb9\x02}r\a\x1dZT\x9egq', 0x3) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 13.835031032s ago: executing program 5 (id=416): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x4986, 0xff}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@debug}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) 13.35661243s ago: executing program 1 (id=419): writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001a80)}], 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x100007}) 13.27905055s ago: executing program 1 (id=420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) pwritev2(r1, &(0x7f00000008c0)=[{&(0x7f0000000800)="1811ad5a49bb94647815cbe6b9025777ddef24d81d95459dd9fc978c90bb3a5a5969dd9e8a34e1cb3eef23393aba2c145aab57539001b1a6a0d61b7a1825d9ed588ac3ff67419fcfd34e34c2842310b67eed3a6ff9476785ac156d248ade980747bf157a713ad2bdfbcbfd5f504da559c05aa4c2c08ef8432f62755bb29bc249b7bcef6cc92d763a4b4b88fb6e0a3bf2fa22cf5623ce5880079445aa252688431b", 0xa1}], 0x1, 0x7ff, 0xe, 0x15) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0xfc, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r3 = syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x638, &(0x7f0000000ac0)="$eJzs3c1rHOcdB/DvrGRZssFRGttxSyAihrRU1NYLSqte6pZSVAglpIeehS1j4bWTSkpRQmnUN3rtIX9AetCtp0IvhYIgPbe3XHUMFHrJST1tmdlZvVjydjdeeWXn8zEz8zzzzDzze347L7trxAb40lqazuhOiixNv7lZ1ne355u72/MPOuUk55M0ktH2IsXDpPgkuZX2lK+WK+vuiscd56PVxbc//Xz3s3ZttJ6q7Rvd9uvNVj1lKslIvRxUf7efuL9if4Rlwq53EgfDdi5J64ifXz1o6e7CE1+3wFlQtJ+b+1r1lT1ZXeYZr98HtJ+K7Wf2M21r2AEAAADAoI0fX/XCXvaymUvDCAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeVfXv/1e/+j++vyrFVIrO7/+PddqTXBxiqN2N9bbZTuO0AwEAAAAAAACA0/fqXvaymUudeqtII8lrVeVyNb+Y97KelazlRjaznI1sZC2zSSYPdTS2ubyxsTbbw55zJ+4512PAE08+ZgAAAAAAAAB4Dv0mSwf//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdBkYy0F9V0uVOeTGM0yXiSsXK7reRfnfKzbGfYAQAAAMBT8MJe9rKZS516q6g+81+tPveP5708zEZWs5FmVnKn+i6g/am/sbs939zdnn9QTsf7/f5/+gqj6jHt7x5OPvK1aouJ3M1qteZGbuedNHMnjWrP0rVOPCfH9esypuJ7tR4ju1Mvy5H/sV6evpEetpmsMnJuPyMzdWxlNl7snomjr85Wv0eaTWP/m5/Lp5DzC/WySC7++KnlvBd1Jl5NnYm5Q2ff1e6ZSL7+1z//7F7z4f17d9enz86Q+nC+1Wp1yo+eE/OHMvHyc5+Jw2aqTFzZry/lR/lppjOVt7KW1fwiy9nISqbyw6q0XJ/P5Xyye6ZuHam9Vc0nHh/JWP26tO8e/cX0WrXvpazmJ3knd7KSN6p/c5nNt7OQhSweeoWv9HDVN/q76q9/oy6UA/xD94E+ZWVeX6zz+mFy5J47WbUdXnOQpRQZ9L1x9Gt1oTzGb+vl2fBoJmYPZeKl7ufLn6rbynrz4f21e8vv9ni81+tleR39/kw9Jcrz5Svli1XVjp4dZdtLJ7bNVm2X99sax9qu7Lf9vyt1rH4Pd7ynuart5RPb5qu2a4faTnq/BcCZd+GbF8Ym/j3xz4mPJ343cW/izfEfnP/O+VfGcu4f5747OjPyeuOV4i/5OL86+PwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8cevvf3B/udlcWXuk0Gq1PnxM0xctjKSfvf7+t0EevfN7RAMczmAL4/1s3DobMfdT+G+r1RpIh1tdTtqBFVq1M5G6IRWGfGMCTt3NjQfv3lx//4NvrXYekQsLizOLC2/M37y72lyZac+HHCRwKg4e+sOOBAAAAAAAAAAAAOjV0/hzgmGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHi2LU1ndCdFZmduzJT13e35Zjl1ygdbjiZpJCl+mRSfJLfSnjJ5qLvi+BF2qvlHq4tvf/r57mcHfY12tm+cvF8/tuopU0lG6uWg+rv9xP0V+yMsE3a9kzgYtv8FAAD//ywaEHk=") mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200084, &(0x7f0000001f80)=ANY=[@ANYBLOB="6469725f756d6e736b3d30303030303030303030303030303030303030303030372c63726561746f723dfddb3dde2c637279d45a7970d68153b0812c7569643d", @ANYRESHEX=r5, @ANYBLOB=',part=0x0000000000000009,uid=', @ANYRESHEX=0x0, @ANYBLOB=',quiet,codepage=cp869,part=0x0000000000000007,file_umask=00000000000000000000007,uid=', @ANYRESDEC=r5, @ANYBLOB=',dont_hash,fowner=', @ANYRESDEC=r5, @ANYBLOB=',subj_role=,mask=^MAY_APPEND,hash,\x00'], 0x2, 0x376, &(0x7f0000000480)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f646f74732c747070712c6e6f646feef74d2400006500"/41], 0x0, 0x1eb, &(0x7f0000000280)="$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") mkdir(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000380)={0x0, 0x5, 0x80, 0x5, 0x7ae8f3c7, 0x2, 0x100000000, 0x20000000000000, 0x2, 0xe8b, 0x6}) mount(0x0, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340)='smb3\x00', 0x4050, &(0x7f0000000380)='nocase') r9 = dup3(0xffffffffffffffff, r3, 0x0) r10 = openat(r9, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r10, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0x2}, {0x0, 0x0, 0x10, 0xa0c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x6, 0x2}, {&(0x7f00000004c0)=[{0x3fc, 0x6, 0xffffffffffffffff, 0x7f, 0xfffffff6}], 0x1, 0x28, 0x6, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) ptrace$ARCH_SET_CPUID(0x1e, r4, 0x1, 0x1012) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 11.393844818s ago: executing program 0 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffb}]}}]}, 0x40}}, 0x0) 11.390975426s ago: executing program 1 (id=422): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', 0x60082, 0x131) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001480)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, r3, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @usage=0x40, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xa9, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0x10000000ff3, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x2, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000002600)={0x6, 0x80000, r1}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r6, 0x7, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x4040) openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r8, &(0x7f0000001fc0)=""/184, 0x20002078) msync(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r9, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11.367974689s ago: executing program 2 (id=423): syz_read_part_table(0x1060, &(0x7f0000001080)="$eJzsz7FxwjAYBeCns53YVbJBMkY2SJE6EzCIgXFYgYKeEZiFO3G2gRGA4vuKX3dPT9IpPNVQkjTtT0nqOAWf78tGm828NvPssj+2ZZ18ZUytc6dfioe/rk/9aPqk5PQ7bIfr1W/TONfV7amyJN/lfjT/u0f9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe2SUAAP//QVgOmw==") (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x0, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) (async) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x4800000, [0x46f, 0x678c, 0x6, 0x7ffffffffffffffe, 0x3ff, 0x10]}) r4 = accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES16=r5, @ANYBLOB="00022dbd7000fbdbdf25030000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 11.240787729s ago: executing program 5 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffb}]}}]}, 0x40}}, 0x0) (fail_nth: 2) 11.240501535s ago: executing program 4 (id=425): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r0, 0x0, 0x40c00) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x41, &(0x7f00000000c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @broadcast, @loopback}, "050000"}}}}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x6, &(0x7f0000000240)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="a900"], 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) 10.985091493s ago: executing program 0 (id=426): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000980), &(0x7f0000000a00)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa84, &(0x7f0000001380)="$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") 10.459304053s ago: executing program 5 (id=427): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d0b939d60a53067d50000200006241a000000090581030002000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000880)={{0x62, @broadcast, 0x4e21, 0x1, 'lblcr\x00', 0x20, 0x9, 0x5f}, {@private=0x9, 0x4e24, 0x3, 0x2, 0xd7, 0x3}}, 0x44) unshare(0x64000600) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r3 = eventfd(0xffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/237, &(0x7f0000000780)=""/88, &(0x7f0000000800)=""/90, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) getdents64(r5, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 7.122167941s ago: executing program 0 (id=428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x4008804}, 0x24048880) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r2, 0x8925, &(0x7f00000000c0)={0x0, 0x770000, 0x8, 0x0, 0x19, "bb5dee0403081c012083d08600"}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000200", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf2509000000300003801400020062726964676530000000000000000000080003000000000008000100020000000600040075030000"], 0x44}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x40040, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 6.986908023s ago: executing program 4 (id=429): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_gettime(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f5, &(0x7f00000000c0)="$eJzs3U9oHOfZAPBnFMmWFfAX8n3kM8ZxxnZKbeoqu1KiVOSQbFYjeRJpV+yuik0pSYhtMJaTEBPS+NDEl6QtLaWnHtNcQy6FHgo9lPbQFgqF5tBLD4VATiWFFkpLCajM7K71x1pJTmQrTX8/Eb2z7zzzzjOz43l2NtrZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiqc9UKtXkYEQsnU0Hq8+0mgtbzO+P9/N1zRbrjUiK/2J0NA51uw793+rs+4pfx+NI99GRGC2a0bh29333PPa/w0P95bdI6JM6tsO4JOKNIqnLzw1F3I5E7qDv/OyWF/nnSvF7Lmvk7Wa+UJvL0rzdTKenpioPnZltp7P5fNY+1+5kC2m9ldU6zVZ6sn4qrU5PT6bZ+LnmUmNupjaf9Tsf/fJEpTKVPjW+mNVa7WbjoafG2/Uz+fx83pgrYyYqr0YR82hxID6dd9JOVltI04uXli9MbpdqEVRd17N/3fN15MF7Pnzlg79dulAckIMGSXoH5kS1OjFRnXpk+pFHK5XhicrE+o7KBnEjIoYiiojbctDyWXdg9SSxeydv+JSGuvU/Yj7yaMRSnI000hgqf6/+jMRozEQrmrFQPP7DyIb5N9X/Lzz0l99ttd6yfr9VFPXRG1X+0Orsw1HW/6PdR0cH1P/ipLwxj539HLjVJa78NuK9bjZr+6/Ga3EtLsdzsRzLcSFevjHnk+d2W3+Gdhg32n8mto6biywakUc7mpHHQtTKnrTXk8Z0TMVUVOKZOBOz0Y40ZiOP+ciiHeeiHZ3IyiOqHq3IohadaEYr0jgZ9TgVaVRjOqZjMtLIYjzORTOWohFzMRO1cpSLcanc75Mb8rrvm88mb/z+w7eL6RtB1S02JClezBVBf13Xvf446RXzB2JH9f9Abw+uj0giHd7jWsSu6v9T2Wn8Lpy1YXeslPV/eK/TAAAAAG6jpHz3PYmIkbi/nJrN57Ov7XVaAAAAwC4q/675SNGMFFP3R1Jc/1c2iXz/jucGAAAA7I6k/IxdEhFj8UB3qv9xqc3eBAAAAAD+A5X///9o0YxFvF52uP4HAACAz5lvDbrH/gf7evfYby/uT+7qRS+efTC5Uiumald6fb3mqzdG7MweTg72BimbqeFrdycRMVzPjiT9u19+vL/bflSOcHj1BoSD7vWftFojyfXBCcTWCZSP4rtxrBtz7Hy3Pd+f013L2Gw+n43Xm/OPVZPemyOdV1649I2IYu3fbiwcTOLipeUL48+/uHy+zOV6Mcr1K73bwye3kMtKbw/E/Ztv8Uj5QYzeese6662s3f6h7uJDW68zWbvON+N4N+b4WLcdW7/9o8U6q+OPVaNWOzjUyc52XllZs/W9LKqfcsvfjBPdmBMnT3SbTbKYWJfFCzdnMbE2i53tiy2zKPSzePvY62f//qtmkk1ul8Xkp8wCYK9cLO/6s1qFDpRV6F8rXUX931B3+3c13/Qs98Wf9M6hG85yF1dfZfSXX1PrhmN3qvubcbIM+cXJ7uuJ4cPr6soTZV2pbHJGf+nSS7/undEffveHP/r60d/8eLW6bThHP9F9VTA4i3fjVDey18S9v7ypuhVDVMs9+70NVfWdYol3BlbV9vxEMlLs+f+5Mbt8niJiYnKq8nCl8shEjJQvFXrN4Ez37/woAeDzZtvv2NnBt/A8vPlVdfQr3r03/qRgPJ6PF2M5zsfp8tMGEfHA5qOOrfkzhNPbXLWOrfmGl9PbXFuuxk5sjN1/IokBsZNr9tj//6Bs/nH7nhMAuN2Ob1OHd1L/T/euu2Pz6+4NtfxU94tz+1fHMbiWb+Yrt3uHAMB/gaz1UTLWeStptfLFZ6rT09Va50yWtpr1p9NWPjOXpXmjk7XqZ2qNuSxdbDU7zXr/DfGZrJ22lxYXmx930tlmK11stvOz5Te/p72vfm9nC7XGq1FvL85ntXaW1puNTq3eSWfydj1dXHpyPm+fyVrlwu3FrJ7P5vVaJ2820nZzqVXPxtO0nWVrAvOZrNHJZ/NispEutvKFWut6RMwvLWTpTNaut/LFTrM7YH9deWO22VqoDdj8P9/BXQ0AnxlXX7t2+bnl5Qsvr59YSTb2bD7xxx3EXI1Y2evNBADWWFulAQAAAAAAAAAAAACAz6abP65X9G77kb61EyNxC8EbJvbHJ1nq8zvxpfe6T8tuDLjJOPu2XOqu1Z4D657Tfb2DZe/3zy1PPPv445cHxTz5+qEzf8oith9n838pV+++6eiNtw5G7Pvp97s9T9ypLX0/ulsRw7e0+EqyRcyenZIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKB/BwAA//8J+U2N") stat(&(0x7f0000000a40)='./file1\x00', &(0x7f0000000a80)) fchdir(0xffffffffffffffff) fchmodat(0xffffffffffffffff, 0x0, 0x18) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f00000008c0)='./file1\x00', &(0x7f0000000b00)={[&(0x7f0000000900)='syz1\x00', &(0x7f0000000940)='iso9660\x00', &(0x7f0000000980)='iso9660\x00', &(0x7f00000009c0)='syz1\x00', &(0x7f0000000a00)='syz1\x00']}, &(0x7f0000000c00)={[&(0x7f0000000b40)='iso9660\x00', &(0x7f0000000b80)='iso9660\x00', &(0x7f0000000bc0)='iso9660\x00']}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000c0a010100060900020073797a31000000000900010073797a310000000030000000021c0000800c00018006000100d10300000c000440000000001af31ab3040000801400000011000100000000000999dfe42ea04a03000000000000000000000100000a00"/136], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1508a1a9b469814b}, 0x4048084) 6.470576932s ago: executing program 2 (id=430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) 6.469662463s ago: executing program 1 (id=431): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000440)='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^c\xfe|\xba\xe0\xc0\xb6\x92\xf5\x102\x14\xca;\x912\xde\x1a\x05\xbc=?\x9b$\xadu\x91\xf5\xb2\xe6\xe4\xbaKYQs\xdf\f\xea\rQ\nkjD\x8a[\x15}{=c3\xe0\x1et\xc9`L\xe2\x00\x7fC\x89\t\xe1\r\'\xe4@\xbd0Tus\xa7[\xdf\xfeQ\xbe$\xe0g\x82\\Pa\xc6p\xd1\xee[\xd3\xce\xb3\x06\x90)\xb2L\xcc\x85\xc4A\xb0\xea\xadL\r\x86e\x19\x98\x114\xb8\x8aLV7\xf2\xc6\x03\x17\x1d\xf6\f\x0ep\xe5\x8e[\xab\xd6\xb6\xe8\x8bA\x80|1\x93\xfd\xaai\x85\x97T\x84\x80\xa53\xb8R=\x1aysc\xe6\x01\x80\xf1p\x11]\xdf\x8c&\xf3K\xbd\xc1b*\x9f\xc5\bD\xfa\x84J\x1f$\x90\x88\xa3\xe6\xa5\xc2\x8e\xb6\x0eK`\xa9I\x9e\xba\x8c\xd7\xa0\x11}\xd0\xacv\xb8\x1fs*\x95{v+2!AM\xd9u\xea\x12\xa1\x1c\xe4\xcb\xb1OC\xf3#\x9e\x8e\x17\x814\xf1~\xdd\xdc\x15D\b852\x8d\xff\xb1\xfc~~\xa7ol\x0fL\x9c\xa5_\xf7\xb4\xf8n*\xfc\"\xd4Yn\xdf\xbc&\x04\xa2L^\xb9\xf3&\xe5l\xa9\x03I\xcf\"\x15\xcc\xe6\xacTQ\x1b\xfeu\x93\x8b\xa9\x14JQ\xb4\x9b\xcb\xaa\xe7\x85f.}n~\xa3?\x9a,a\r\xd5\x9a\a\xd0\xcc?\xcbq\x95\xfe\x9bm\xae\x9e\xeay\xd5\x96\xaf\x1c c\xe4\x93\n\x06\xa7\xa7\x9b:\x01\xdcb\xa9\xa1\xecxC\xa5&_Y\x94\x01\x1du\x9cs\x93\xe6 \x01\xb9\x02}r\a\x1dZT\x9egq', 0x3) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.254393451s ago: executing program 2 (id=432): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x20, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x7ffffdfd}]}) r8 = dup2(r5, r7) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) 6.024039254s ago: executing program 5 (id=433): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) pwritev2(r1, &(0x7f00000008c0)=[{&(0x7f0000000800)="1811ad5a49bb94647815cbe6b9025777ddef24d81d95459dd9fc978c90bb3a5a5969dd9e8a34e1cb3eef23393aba2c145aab57539001b1a6a0d61b7a1825d9ed588ac3ff67419fcfd34e34c2842310b67eed3a6ff9476785ac156d248ade980747bf157a713ad2bdfbcbfd5f504da559c05aa4c2c08ef8432f62755bb29bc249b7bcef6cc92d763a4b4b88fb6e0a3bf2fa22cf5623ce5880079445aa252688431b", 0xa1}], 0x1, 0x7ff, 0xe, 0x15) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0xfc, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r3 = syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x638, &(0x7f0000000ac0)="$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") mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200084, &(0x7f0000001f80)=ANY=[@ANYBLOB="6469725f756d6e736b3d30303030303030303030303030303030303030303030372c63726561746f723dfddb3dde2c637279d45a7970d68153b0812c7569643d", @ANYRESHEX=r5, @ANYBLOB=',part=0x0000000000000009,uid=', @ANYRESHEX=0x0, @ANYBLOB=',quiet,codepage=cp869,part=0x0000000000000007,file_umask=00000000000000000000007,uid=', @ANYRESDEC=r5, @ANYBLOB=',dont_hash,fowner=', @ANYRESDEC=r5, @ANYBLOB=',subj_role=,mask=^MAY_APPEND,hash,\x00'], 0x2, 0x376, &(0x7f0000000480)="$eJzs3U1P1EwAB/D/dN8fCE8f4AnGm6iJJ7LgQWNMNIabX8CDISIsCaFiApgo0YAePBnjzcTEozfPRr+CXoxfQE8ciCe9bIihZqbT7WyZ6e7yUiD8fwlLt533aacddHdARCfWjcnv7y5uyB9RAlAAcAXwAFSBIoD/MVJ9sLgyvxI0ZrMSKqgY8kcgiil2hJlZbNiiyngqhubLd0X0m/voYIRhGP7oGOpXLmWhwyOia38HD6joq1Mdr+Zesl1Z7yJAJZ+iHCFGD4smmvYeJyKik0Tf/z19l+jXz++eB5zXz+HH6f4fM2cQbXe7JvD43/zLc2So+//DpDdDIdtHtYhI5ntqCifb0Itniba0VCql1M4wae4yojOrrQOEZVbZ9kSmyuLV5uaDxti6SuAZrmlGsGH1OhudujFXacvRr1HL3DRDVt2z9ak6lGQdSo7yD/Wc46dNvLZnN/Wl3LlM4rP4KqaEjzeYxYDeWQyFbBwV3QdqenfcpvNBo+5OUdXSV7Wst9Uyufr+U5mcjnvg4/ukljVXu1ZRkGWxkamI9PO7LgHwytEKavdg+6Cge2fcXTsVa8gaa6L1fssaazgdqzZXChpjM/eD6KQP19zZ7gfr8714KW6JUfzEB0y2+l92dUEO9Y4rMz3yCxUyaoV6qz42RRXS0Y9t1Ml2r6crk7D1J4zo9+lx2M7HC9zFZQwsP1pdmA6CxlJuG3K0sB6KL5Wcy+PaiE5EfTrKPfK3EQZVuSGbe98y3Q7D0HqoaG+xeMPrKotyXFRXmaNT59LbVpXVMKv/lLK3CmI9akPj0HV34GTYVHXXesxURV9rxZJ3i16i/45yl/1uDSOSEi6VD+48bBoX7XQQnGp1XAGVrq6U2i4yvflkYTrY1WhEx8zy8zN6zMHI7c2rh10cyp987hLR/M+Yr9TVACdf/IzZSNgpcSPFcccMaFC9/pPMNoT++33GnKvPPYPrizeCxkTWnOvsBeCcsVPm5iHO8Wk6WR/xw/oR/FfJiq1YtfSOVWNbTOIb7hjP/0REREREREREREREREREREREREREdCwk/+nf3+PHCbb155Dsn8RIbJzAL94gIiIiIiIiIiIiIiIiIiIiIiIiIiIiItobY/1foKBWjCnv+/q/8Rd771z/N1m4xFz/t9DF+r+i4xKfRNTB3wAAAP//gDxmoA==") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f646f74732c747070712c6e6f646feef74d2400006500"/41], 0x0, 0x1eb, &(0x7f0000000280)="$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") mkdir(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000380)={0x0, 0x5, 0x80, 0x5, 0x7ae8f3c7, 0x2, 0x100000000, 0x20000000000000, 0x2, 0xe8b, 0x6}) mount(0x0, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340)='smb3\x00', 0x4050, &(0x7f0000000380)='nocase') r9 = dup3(0xffffffffffffffff, r3, 0x0) r10 = openat(r9, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r10, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0x2}, {0x0, 0x0, 0x10, 0xa0c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x6, 0x2}, {&(0x7f00000004c0)=[{0x3fc, 0x6, 0xffffffffffffffff, 0x7f, 0xfffffff6}], 0x1, 0x28, 0x6, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) ptrace$ARCH_SET_CPUID(0x1e, r4, 0x1, 0x1012) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 5.73014948s ago: executing program 4 (id=434): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.461106401s ago: executing program 4 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mount$9p_tcp(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) 5.365365997s ago: executing program 0 (id=436): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r0, 0x0, 0x40c00) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x41, &(0x7f00000000c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @broadcast, @loopback}, "050000"}}}}}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x6, &(0x7f0000000240)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="a900"], 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) 4.451950429s ago: executing program 5 (id=437): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'veth0_to_hsr\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r4, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0}) fcntl$lock(r5, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0x7f, 0xa313, r6}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000180)=""/178, 0xb2}], 0x1, 0xfe, 0x9) 4.364273216s ago: executing program 4 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1553, &(0x7f0000001900)="$eJzs3AucTVX7OPDnWWvtMSbpNMllWGs9m5NcFkkSSZJLkiRJkltC0iSvJCSG3JKGJCSXIbkMIblMTBr3+/2S0CRpkiQkt2T9P8Lf21v93lvv6/N55/l+PudjPWftZ+2159lnzt7rOPNt5yE1GtWs2oCI4N+CF/5JAoBYABgAANcAQAAA5eLLxd927N8bnv0nPJx6pWfAriSuf/bG9c/euP7ZG9c/e+P6Z29c/+yN65+9cf0Zy842TStwLT+y7+O/tf5/vj+nxKQ/5aRlfxJ+//8fklVqzJdrSl3fBSDmH03h+mdvXP//WcE/shHX/39A3L+eyvXPrmKv9ATYn2nWv5bGr//sIMcf9nD9szeuP2PZ2S/rwDnhiq9DX6kHRLL3ZyBX+vxjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY9nPKXKQC41L7S82KMMcYYY4wxxtifx+e40jNgjDHGGGOMMcbYfx6CAAkKAoiBHBALOSEOBABcDbnhGojAtRAP10EeuB7yQj7IDwUgAQpCIdBgwAJBCIWhCEThBigKN0IxKA4loCQ4KAWl4SYoAzdDWbgFysGtUB5ugwpQEW6HSnAHVIY7oQrcBVXhbqgG1aEG1IR7oBbcC7XhPqgD90NdeADqwYNQHx6CBvAwNIRHoBE8Co3hMWgCTaEZNIcW/1L+i9AdXoIe0BOSoBf0hpehD/SFftAfBsArMBBehUHwGiTDYBgCr8NQeAOGwZswHEbASHgLRsHbMBrGwFgYBykwHibAOzAR3oVJMBmmwFRIhWkwHd6DGTATZsH7MBs+gDkwF+bBfEiDD2EBLIR0+AgWwceQAYthCSyFZbAcVsBKWAWrYQ2s/akPrIcNsBE2wWbYAlthG2yHHfAJ7IRPYRfsfmMuAGTC53+UD+t+N//kpXzYA59BJnRBQECBAhUqjMEYjMVYjMM4zIW5MDfmxghGMB7jMQ/mwbyYF/NjfkzABCyEhdCgQULCwlgYoxjFolgUi2ExLIEl0KHD0lgay+DNWBbLYjksh+WxPFbAilgRK2ElrIyVsQpWwapYFathNayBNfAevAd7YW2sjXWwDtbFupeWp7ABNsCG2BAbYSNsjI2xCTbBZtgMW2ALbIktsRW2wjbYBttiW2yH7TARE7E9tscO2AE7YkfshJ2wM3bGLtgVu2a9mAPwJXwJe2I10Qt7Y2/sg8k5+mF/7I+v4EB8FV/F1zAZB+MQfB1fxzdwGJ7A4TgCR+JIrCzextE4BkmMwxRMwQk4ASfiRJyEk3EyTsVUnIbTcTrOwJk4E9/H2fgBfoBzcS7OxzRMwwW4ENMxHRfhSczAxbgEl+IyXI7LcCWuwpW4BtfiGlyP63EjbsTNuBm34lbcjtvxE1QA+Cnuxt2YjJmYiXtxL+7Dfbgf92MWZuEBPIAH8SAewkN4GA/jETyKx/AoHsfjeAJP4ik8hWfwDJ7F5xO+bvhJ8dXJIM5TQokYESNiRayIE3Eil8glcovcIiIiIl7Eizwij8gr8or8Ir9IEAmikCgkjDCCRBgDACIqoqKoKCqKiWKihCghnHCitCgtyogyoqwoK8qJW0V5cZuoICqK1q6SqCQqizauirhLVBVVRTVRXdQQNUVNUUvUErVFbVFH1BF1RV1RTzwo6ote2A8fFucr00gMxsZiCDYRTYW8+BuspRiGrURr0UY8KUbgcGwnWrpE8YxoL0ZjB/EXMQafE53EOOwsXhBdRFfRTbwouotWrofoKSZhL9FbTMU+oq/oJ/qLGVhdvI+zc9YQr4lkMVgMEa+L+fiGGCbeFMPFCDFSvCVGibfFaDFGjBXjRIoYLyaId8RE8a6YJCaLKWKqSBXTxHTxnpghZopZ4n0xW3wg5oi5Yp6YL9LEh2KBWCjSxUdikfhYZIjFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih/hE7BSfil1it9gjPhOZ4nOxV3wh9okvxX7xlcgSX4sD4htxUHwrDonvxGHxvTgijopj4gdxXPwoToiT4pQ4Lc6In8RZ8bM4J7wAiVJIKZUMZIzMIWNlThknr5K5ZHDxp3utjJfXyTzyeplX5pP5ZQGZIAvKQlJLI60kGcrCsoiMyhtkUXmjLCaLyxKypHSylCwtb5Jl5M2yrLxFlpO3yvLyNllBVpS3y0ryDllZ3ikhcmEf1WR1WUPWlPfIJLhX1pb3yTryfllXPiDryQdlffmQbCAflg3lI7KRfFQ2lo/JJrKpbCabyxbycdlSPiFbydayjXxStpVPyXbyaZkon5Htpb94ijwnO8nnZWf5guwiu8pu8md5TnrZQ/aU0Atkb/my7CP7yn6yvxwgX5ED5atykHxNJsvBcoh8XQ6Vb8hh8k05XI6QI+VbcpR8W46WY+RYOU6myPFygnxHTpTvyklyspwip8pUOU32uzjSLCn/bv47v5M/6Je9b5Sb5Ga5RW6V2+R2uUN+InfKnXKX3CX3yD0yU2bKvXKv3Cf3yf1yv8ySWfKAPCAPyoPykDwkD8vD8og8Kk/LH+Rx+aM8IU/Kk/K0PCPPyLMXfwagUAkllVKBilE5VKzKqeLUVSqXulrlVteoiLpWxavrVB51vcqr8qn8qoBKUAVVIaWVUVaRClVhVURF1Q148YRRJVRJ5VQpVVrd9M/kq6LqRlVMFf9V/qX5Jf3B/FqoFqqlaqlaqVaqjWqj2qq2qp1qpxJVomqv2qsOqoPqqDqqTqqT6qw6qy6qi+qmuqnuqrvqoXqoJJWkequXVR/VV/VT/dUA9YoaqAaqQWqQSlbJaogaooaqoWqYGqaGq+FqpBqpRqlRarQarcaqsSpFpagJaoKaqCaqSWqSmqKmqFSVqqar6WqGmqFmqVlqtpqt5qg5ap6ap9JUmlqgFqh0la4WqUUqQy1Wi9VStVQtV8vVSrVSrVar1Vq1Vq1X61WG2qQ2qS1qi9qmtqkdaofaqXaqXWqX2qP2qEyVqfaqvWqf2qf2q/0qS2WpA+qAOqgOqkPqkDqsDqsj6og6po6p4+q4OqFOqFPqlDqjzqiz6qw6p86dv+wLRCACFaggJogJYoPYIC6IC3IFuYLcQe4gEkSC+CA+yBNcH+QN8gX5gwJBQlAwKBTowAQ2EBeLHg1uCIoGNwbFguJBiaBk4IJSQemYi53BLUG54NagfHBbUCGoGNweVAruCCoHdwZVgruCqsHdQbWgelAjqBncE9QK7g1qB/cFdYL7g7rBA0G94MGgfvBQ0CB4OGgYPBI0Ch4NGgePBU2CpkGzoHnQIrg5KPunje/9iXxPuB66p07SvXRv/bLuo/vqfrq/HqBf0QP1q3qQfk0n68F6iH5dD9Vv6GH6TT1cj9Aj9Vt6lH5bj9Zj9Fg9Tqfo8XqCfkdP1O/qSXqynqKn6lQ9TU/X7+kZeqaepd/Xs/UHeo6eq+fp+TpNf6gX6IU6XX+kF+mPdYZerJfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+hP9E79qd6ld+s9+jOdqT/Xe/UXep/+Uu/XX+ks/bU+oL/RB/W3PQ/p7/Rh/b0+oo/qY/oHfVz/qE/ok/qUPq3P6J/0Wf2zPqf9+Yv782/vRhllYkyMiTWxJs7EmVwml8ltcpuIiZh4E2/ymDwmr8lr8pv8JsEkmEKmkDmPDJnCprCJmqgpaoqaYqaYKWFKGGecKW1KmzKmjCmbEwBMOVPelDcVTAVzu7nd3GHuMHeaO81d5i5zt7nbVDfVTU1T09QytUxtU9vUMXVMXVPX1DP1TH1T3zQwDUxD09A0Mo1MY9PYNDFNTDPTzLQwLUxL09K0Mq1MG9PGtDVtTTvTziSaRNPetDcdTAfT0XQ0nUwn09l0Nl1MF9PNdDPdTXfTw/QwSSbJ9Da9TR/Tx/Qz/cwAM8AMNAPNIDPIJJtkM8QMMUPNUDPMDDPDzQgz8vyFqnnbjDZjzFgzzqSYFDPBTDATzUQzyUwyU8wUk2pSzXQz3cwwM8wsM8vMNrPNHDPHzDPzTJpJMwvMApNu0s0is8hkmAyzxCwxy8wys8KsMKvMKrPGrDHrYJ3ZYDaYTWaT2WK2mG1mm9lhdpidZqfZZXaZPWaPyTSZZq/Za/aZfWa/2W+yTJY5YA6Yg+agOWQOmcPmsDlijphj5pg5bo6bE+aEOWVOmTMm38X3S29ibU4bZ6+yuezVNre9xv5tnN8WsAm2oC1ktc1r8/0qNtbaYra4LWFLWmdL2dL2pt/EFWxFe7utZO+wle2dtspv4lr2Xlvb3mfr2PttTXvPr+K69gFbzz5q6yMC2Ka2oW1uG9lHbWP7mG1im9pmtrlta5+y7ezTNtE+Y9vbZ38TL7AL7Sq72q6xa+0uu9uesqftQfutPWN/sj1sTzvAvmIH2lftIPuaTbaDfxOPtG/ZUfZtO9qOsWPtuN/EU+xUm2qn2en2PTvDzvxNnGY/tLNtup1j59p5dv4v8fk5pduP7CL7sc2wASyxS+0yu9yusCv//1yX2vV2g91od9pP7Ra71W6z2+2OSxfCdrfdYz+zmfZze8B+Y/fZL+1+e8hm2a9/ic8f3yH7nT1sv7dH7FF7zP5gj9sf1aXs88f+g/3ZnrPeAiEBSVIUUAzloFjKSXF0FeWiqyk3XUMRupbi6TrKQ9dTXspH+akAJVBBKkSaDFkiCqkwFaEo3UCXpleCSpKjUlSabqIydDOVpVuoHN1K5ek2qkAV6RhVojuoMt1JVeguqkp3UzWqTjWoJt1Dteheqk33UR26n+rSA1SPHqT69BA1oIepIT1CjehRakyPURNqSs2oObWgx6klPUGtqDW1oSepLT1F7ehpSqRnqD09Sx3oL9SRnqNO9Dx1pheoC3WlbvQidaeXqAf1pCTqRb3pZepDfakf9acB9AoNpFdpEL1GyTSYhtDrNJTeoGH0Jg2nETSS3qJR9DaNpjE0lsZRCo2nCfQOTaR3aRJNpik0lVJpGk2n92gGzaRZ9D7Npg9oDs2leTSf0uhDWkALKZ0+okX0MWXQYlpCS2kZLacVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttpx30Ce2kT2kX7aY99Bll0ue0l76gffQl7aevKIu+pgP0DR2kb+kQfed70vd0hI7SMfqBjtOPdIJO0ik6TWfoJzpLP9M58gQhhiKUoQqDMCbMEcaGOcO48KowV3h1mDu8JoyE14bx4XVhnvD6MG+YL8wfFggTwoJhoVCHJrQhhWFYOCwSRsMbwqLhjWGxsHhYIiwZurBUWDq8KSwT3hyWDW8Jy4W3huXD28IKYcXw0fsrhXeElcM7wyrhXWHV8O6wWlg9rBHWDO8Ja4X3hrXD+8I64f1h2fCBsF74YFg/fChsED4cNgwfCRuFj4aNw8fCJmHTsFnYPGwRPh62DJ8IW4Wtwzbhk2Hb8KmwXfh0mBg+E7YPn/2l/4GFf9yfFPYKe4cvhy+H3t8n50XnR9OiH0YXRBdG06MfRRdFP45mRBdHl0SXRpdFl0dXRFdGV0VXR9dE10bXRddHN0Q3Rr2vmQMcOuGkUy5wMS6Hi3U5XZy7yuVyV7vc7hoXcde6eHedy+Oud3ldPpffFXAJrqAr5LQzzjpyoSvsiriou8EVdTe6Yq64K+FKOudKudKuuWvhWriW7gnXyrV2bdyT7kn3lHvKPe2eds+49u5Z18H9xXV0z7lO7nn3vHvBdXFdXTf3ouvuxue+8JpMcr1db9fH9XH9XD83wA1wA91AN8gNcsku2Q1xQ9xQN9QNc8PccDfcjXQj3Sg3yo12o91YN9aluBQ3wU1wE91EN8lNclPcFJfqUt10N93NcDNc5ZkX9jLHzXHz3DyX5tLcAnf+mjHdLXKLXIbLcEvcErfMLXMr3Aq3yq1ya9wat86tcxvcBrfJbXJb3Ba3zW1zO9wOt9PtdLv8NRcGdZlur9vr9rl9br/7ymW5r90B94076L51h9x37rD73h1xR90x94M77n50J9xJd8qddmfcT+6s+9mdc96lRMZHJkTeiUyMvBuZFJkcmRKZGkmNTItMj7wXmRGZGZkVeT8yO/JBZE5kbmReZH4kLfJhZEFkYSQ98lFkUeTjSEZkcWRJZGlkWWR5xPuCW0Jf2BfxUX+DL+pv9MV8cV/Cl/TOl/Kl/U2+jL/Zl/W3+HL+Vl/e3+Yr+Ir+dv+Yb+Kb+ma+uW/hH/ct/RO+lW/t2/gnfVv/lG/nn/aJ/hnf3j/rO/i/+I7+Od/JP+87+xd8F9/Vd/Mv+u7+Jd/D9/RJvpfv7V/2fXxf38/39wP8K36gf9UP8q/5ZD/YD/Gv+6H+DT/Mv+mH+xF+ZMxbftSlW2QY51P8eD/Bv+Mn+nf9JD/ZT/FTfaqf5qf79/wMP9PP8u/72f4DP8fP9fP8fJ/mP/QL/EKf7j/yi/zHPsMvvrSo7Ff4lX6VX+3X+LV+nV/vN/iNfpPf7Lf4rX6b3+53+E/8Tv+p3+V3+z3+M5/pP/d7/Rd+n//S7/df+Sz/tT/gv/EH/bf+kP/OH/bf+yP+qD/mf/DH/Y/+hD/pT/nT/oz/yZ/1P/tz/J01xhhjjLF/yPjLTfHrngvL+b1+J0f81ca9AeDqrQWy/rr//BXlurwX2n1FQtsIADzTs/PDlx7VqiUlJV3cNkNCUGQuwKVPgs77Zdn4YrwY2sBTkAitoczvzr+v6HqG/s740VsB4v4qJxYux5fH/wIAk35n/MefHLmgfHgq/v8Yfy5AsSKXc3LC5XgxtPllfaU1lP2D+edr+Xfmn/PLFIBWf5WTCy7Hl+dfGp6AZyHxV1syxhhjjDHGGGMX9BW3d7x0/3npf3z+3v15grqckwMux3/v/pwxxhhjjDHGGGNX3nNduz39+KVv7j2emNi64y/P/CONKv/Mxv98ozH8p0bmxu82vAe49IwCgH9zQIDzDfnfPIrN/5V9JV98tfxt17LTPoBuRS9+6fHP22nsv1+Lf6VxpX4jMcYYY4wxxv5TLl/0//p5daUmxBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZUP/jT8ndqWPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/l8AAAD//4TB+2c=") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$rds(r6, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) 4.281121189s ago: executing program 1 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1553, &(0x7f0000001900)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$rds(r6, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) 4.14125192s ago: executing program 2 (id=440): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x6, 0x1, {0x0, 0x4}}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1818c12, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0], 0x7, 0x211, &(0x7f0000000480)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FBxDiQ1TEjsOzNLtafaus7ZdHvpkTy+2l3o5nGSaD9I/QFHZoYSEGsKC1z8538IUAHzGFlArlCByoUyMDFoQtnhjIwMqlB2AgMTQxiUncrAyBAJZWchsfNhDsxJ1UvOz0lJy8xJNQARhiDCCEQYI7sP5KK3jYwMKdAwAbmJEUm+uLIqOzEnJ7UIncH6H2YPhhSpDHzhB3afIxODLZQPch8oviI6mhtBfD2ouAFS+BkyMDEYQtnGDIwMwVC2BQM7g56eHiJIkPwvxYIwnxkpmin1GxKj04OBAYsUM4TxCy7CzkBsyArqUsVhVGQwo4u8g3qGxrZzMwy830ljcCBimY3KjmdEFwFlaLiI2NtdpzF1PSXRLsYGiPORpBipn2WIY8AK88QcUHZGkrrEhV87LKfhUsMGlceqHVE+gUpvdaTyiYUBUc7rl+QW6BdXVulm5iamp/5nZ2AwMjYzMDEwMDXSBxdEEBKj3PsDL/84wOUTF5L5rDiqITZGNoaKxJKSIsMKBoaSIkM436iCCdUnDMHb8t+ABZjA5R8Tg4YyRAEoEsHeZsdmA0SeEaqPEczSYIbJMWPXMgpGwSgYBaNgFIyCUTAKRsEoGAWjYBSMglEwCkbBKBgFuAAbKleegZEBOnnGCB0QxQaMAsCqAQEAAP//2HtQSw==") 1.839267588s ago: executing program 5 (id=441): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000000b404a1bc00000000000109022400010000a090090400040103000000092107000201222900090581032000000400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000008000000009000000700000004400000", @ANYRES32=0x1, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000400000004000000000000000000080000000000"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) getpid() (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) (async) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) 1.076157746s ago: executing program 4 (id=442): prlimit64(0x0, 0x4, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380), 0x3, r4, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r6, r5, r5], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3f, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008, 0x7}) r7 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x2881, 0x2, 0x0, 0x59}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x25, &(0x7f0000000000)="01", 0x1) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000011}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r12, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0x2}, {0x0, 0x0, 0x10, 0xa0c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x6, 0xa}, {&(0x7f0000000100)=[{0x9, 0x10, 0x1ff, 0xa47a, 0xfffeffff}], 0x1, 0x28, 0x6, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) 236.131542ms ago: executing program 2 (id=443): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d0b939d60a53067d50000200006241a000000090581030002000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000880)={{0x62, @broadcast, 0x4e21, 0x1, 'lblcr\x00', 0x20, 0x9, 0x5f}, {@private=0x9, 0x4e24, 0x3, 0x2, 0xd7, 0x3}}, 0x44) unshare(0x64000600) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r3 = eventfd(0xffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/237, &(0x7f0000000780)=""/88, &(0x7f0000000800)=""/90, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) getdents64(r5, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 118.067251ms ago: executing program 1 (id=444): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2000c0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) syz_open_dev$dri(0x0, 0xa, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x802) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x40040c4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(r0, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x100002, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/31, 0xfffffffffffffee0}, 0x8}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000240)=0xfbfffc01, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) socket$inet6(0xa, 0x2, 0x0) 0s ago: executing program 0 (id=445): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): ng read with raw_refcnt=0x0, refcnt=1 [ 260.080159][ T7178] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 260.082463][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.097041][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.097093][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.099859][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.103183][ T187] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.153856][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.177714][ T187] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.177877][ T187] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 260.177930][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 260.177957][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 260.177978][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 260.185328][ T2463] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 260.185403][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.194026][ T2463] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 260.203215][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.204838][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.216224][ T7178] EXT4-fs (loop0): 1 truncate cleaned up [ 260.219875][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 260.220013][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 260.224293][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 260.238535][ T1270] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 260.255997][ T7178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.366182][ T7173] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000008f) [ 260.366209][ T7173] FAT-fs (loop5): Filesystem has been set read-only [ 260.366228][ T7173] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000008f) [ 260.366248][ T7173] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000008f) [ 260.366268][ T7173] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000008f) [ 260.366288][ T7173] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000008f) [ 260.366308][ T7173] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000008f) [ 260.366354][ T7173] syz.5.319: attempt to access beyond end of device [ 260.366354][ T7173] loop5: rw=0, sector=148, nr_sectors = 1 limit=128 [ 260.366524][ T7173] Buffer I/O error on dev loop5, logical block 148, async page read [ 260.366707][ T7173] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000008f) [ 260.367517][ T7173] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000008f) [ 260.367545][ T7173] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000008f) [ 260.367567][ T7173] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000008f) [ 260.441894][ T37] usb 3-1: USB disconnect, device number 11 [ 260.514948][ T38] audit: type=1800 audit(1778517782.005:14): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.319" name="file1" dev="loop5" ino=1048614 res=0 errno=0 [ 260.579837][ T2463] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 260.673597][ T3018] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 260.673661][ T3018] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 260.793086][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.795505][ T1284] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 261.157295][ T5809] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 261.282198][ T5841] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 261.397845][ T7187] loop0: detected capacity change from 0 to 2048 [ 261.438907][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.439568][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.439703][ T7187] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 261.439998][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.440249][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.440505][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.440742][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.441104][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.441338][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.441576][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.441833][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.442176][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.442410][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.442679][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.442931][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.443303][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.443549][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.444019][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.444310][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.445035][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.445138][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657507][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657560][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657585][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657608][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657650][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657672][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657694][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657717][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657738][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657759][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657779][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657799][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657821][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.657858][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.762488][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.762597][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.762631][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.765158][ T1270] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.777877][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.778305][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.778605][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.780003][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.783302][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.792527][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.897275][ T2463] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.897334][ T2463] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.974705][ T7197] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.997264][ T2463] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 261.997449][ T7187] syz.0.323: attempt to access beyond end of device [ 261.997449][ T7187] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 262.020867][ T1284] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 262.030251][ T187] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 262.042807][ T187] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 262.044700][ T187] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 262.077975][ T3018] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 262.081987][ T3018] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 262.104005][ T3018] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 262.104060][ T3018] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 262.104084][ T3018] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 264.785437][ T187] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 264.785982][ T187] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 264.855233][ T5617] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 265.077867][ T7217] loop5: detected capacity change from 0 to 1024 [ 265.086257][ T7217] hfsplus: Unknown parameter './binderfs/binder0' [ 265.086688][ T7217] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 265.153969][ T7217] loop5: detected capacity change from 0 to 64 [ 265.154954][ T7217] hfs: Unknown parameter 'dir_umnsk' [ 265.200557][ T5841] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 265.244934][ T7223] CIFS mount error: No usable UNC path provided in device string! [ 265.244934][ T7223] [ 265.244956][ T7223] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 265.325388][ T7223] loop5: detected capacity change from 0 to 4096 [ 265.336178][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.336834][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.338463][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.338503][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.338527][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.338550][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.338573][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.338598][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.338620][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.338643][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.338665][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.439083][ T7220] FAULT_INJECTION: forcing a failure. [ 265.439083][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 265.439116][ T7220] CPU: 1 UID: 0 PID: 7220 Comm: syz.0.330 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 265.439137][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.439149][ T7220] Call Trace: [ 265.439156][ T7220] [ 265.439164][ T7220] dump_stack_lvl+0xe8/0x150 [ 265.439193][ T7220] should_fail_ex+0x46b/0x600 [ 265.439220][ T7220] should_failslab+0xa8/0x100 [ 265.439248][ T7220] __kmalloc_noprof+0xdf/0x7b0 [ 265.439273][ T7220] ? kfree+0x4d/0x6c0 [ 265.439295][ T7220] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 265.439321][ T7220] tomoyo_realpath_from_path+0xe3/0x5d0 [ 265.439346][ T7220] ? tomoyo_domain+0xd7/0x130 [ 265.439370][ T7220] ? tomoyo_path_number_perm+0x219/0x630 [ 265.439396][ T7220] tomoyo_path_number_perm+0x246/0x630 [ 265.439423][ T7220] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 265.439447][ T7220] ? __lock_acquire+0x6b5/0x2d10 [ 265.439469][ T7220] ? do_raw_spin_lock+0x12b/0x2f0 [ 265.439524][ T7220] ? __fget_files+0x2a/0x420 [ 265.439555][ T7220] ? __fget_files+0x2a/0x420 [ 265.439576][ T7220] ? __fget_files+0x3a6/0x420 [ 265.439597][ T7220] ? __fget_files+0x2a/0x420 [ 265.439623][ T7220] security_file_ioctl+0xc3/0x2a0 [ 265.439649][ T7220] __se_sys_ioctl+0x47/0x170 [ 265.439677][ T7220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.439703][ T7220] do_syscall_64+0x15f/0xf80 [ 265.439726][ T7220] ? trace_irq_disable+0x3b/0x140 [ 265.439752][ T7220] ? clear_bhb_loop+0x40/0x90 [ 265.439775][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.439794][ T7220] RIP: 0033:0x7f299ddfcdd9 [ 265.439812][ T7220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.439828][ T7220] RSP: 002b:00007f299c02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.439846][ T7220] RAX: ffffffffffffffda RBX: 00007f299e076090 RCX: 00007f299ddfcdd9 [ 265.439860][ T7220] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 265.439872][ T7220] RBP: 00007f299c02d090 R08: 0000000000000000 R09: 0000000000000000 [ 265.439884][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.439895][ T7220] R13: 00007f299e076128 R14: 00007f299e076090 R15: 00007ffc597ad3e8 [ 265.439925][ T7220] [ 265.493080][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493124][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493161][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493184][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493207][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493229][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493251][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493273][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493296][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493317][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493339][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493360][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493383][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493405][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493426][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493448][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493470][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493491][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493513][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493534][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493557][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493577][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493599][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493621][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493644][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493666][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493695][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493718][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493740][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493762][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493783][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493806][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493828][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493849][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493870][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493891][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493914][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493936][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493958][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.493980][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494002][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494023][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494045][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494124][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494148][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494170][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494191][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494213][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494236][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494257][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.494280][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.587692][ T7220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.596908][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.598491][ T3018] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.615984][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.616028][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.616051][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.618054][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.620835][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.621045][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.622551][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.640729][ T3018] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.674208][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.676718][ T1284] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.685358][ T3018] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.699406][ T2972] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.699464][ T2972] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.699488][ T2972] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.699522][ T2972] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.708976][ T7227] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.727331][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.741630][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.742714][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.743693][ T2972] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 265.744513][ T2972] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.747964][ T2972] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.814495][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 265.819252][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 265.971043][ T2955] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.253819][ T91] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.261706][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.372306][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.472471][ T2463] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.553915][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.556146][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.598140][ T2463] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.604512][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.669711][ T2463] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.680185][ T2955] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.681196][ T2955] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 266.683305][ T91] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 267.087761][ T91] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 267.132142][ T2955] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 267.137111][ T2955] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 267.137613][ T2955] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 267.211956][ T1270] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 267.224501][ T1270] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 267.465519][ T7240] FAULT_INJECTION: forcing a failure. [ 267.465519][ T7240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.465553][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.4.338 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 267.465575][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.465587][ T7240] Call Trace: [ 267.465594][ T7240] [ 267.465603][ T7240] dump_stack_lvl+0xe8/0x150 [ 267.465633][ T7240] should_fail_ex+0x46b/0x600 [ 267.465660][ T7240] strncpy_from_user+0x36/0x2b0 [ 267.465685][ T7240] do_getname+0x77/0x250 [ 267.465709][ T7240] do_sys_openat2+0xca/0x200 [ 267.465736][ T7240] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.465760][ T7240] ? ksys_write+0x248/0x270 [ 267.465789][ T7240] ? __pfx_ksys_write+0x10/0x10 [ 267.465820][ T7240] __x64_sys_openat+0x138/0x170 [ 267.465846][ T7240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.465866][ T7240] do_syscall_64+0x15f/0xf80 [ 267.465891][ T7240] ? clear_bhb_loop+0x40/0x90 [ 267.465914][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.465981][ T7240] RIP: 0033:0x7f3bd2a4cdd9 [ 267.466002][ T7240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.466018][ T7240] RSP: 002b:00007f3bd0ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.466039][ T7240] RAX: ffffffffffffffda RBX: 00007f3bd2cc5fa0 RCX: 00007f3bd2a4cdd9 [ 267.466053][ T7240] RDX: 000000000008417f RSI: 0000200000000140 RDI: ffffffffffffff9c [ 267.466067][ T7240] RBP: 00007f3bd0ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.466078][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.466090][ T7240] R13: 00007f3bd2cc6038 R14: 00007f3bd2cc5fa0 R15: 00007fff518ee1f8 [ 267.466121][ T7240] [ 267.469118][ T7236] loop0: detected capacity change from 0 to 40427 [ 267.530445][ T91] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.543442][ T2972] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.550557][ T2972] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.551228][ T2972] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.553078][ T2972] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.553205][ T7236] F2FS-fs (loop0): invalid crc value [ 267.597025][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.597095][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.597728][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.598384][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.608160][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.691913][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.701790][ T7236] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 267.721700][ T2972] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.728412][ T1284] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.750036][ T5602] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 267.758955][ T2972] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.765547][ T91] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 267.771552][ T7236] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 267.777392][ T1284] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.052776][ T1430] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.054566][ T5602] usb 6-1: unable to get BOS descriptor or descriptor too short [ 268.055724][ T5602] usb 6-1: config 114 has an invalid interface number: 240 but max is 0 [ 268.055749][ T5602] usb 6-1: config 114 has no interface number 0 [ 268.055792][ T5602] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 268.055817][ T5602] usb 6-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 268.055843][ T5602] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 268.055866][ T5602] usb 6-1: config 114 interface 240 has no altsetting 0 [ 268.063617][ T91] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.072095][ T2955] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.075007][ T2955] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.095368][ T2955] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.099005][ T2955] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.775778][ T1310] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.785795][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.788836][ T3018] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.789773][ T3018] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.812427][ T187] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.821992][ T5602] usb 6-1: string descriptor 0 read error: -22 [ 268.822074][ T5602] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 268.822087][ T5602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.949144][ T7238] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 268.949278][ T7238] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 268.970105][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 268.990455][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.003752][ T3018] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.004542][ T3018] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.009479][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.010154][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.016937][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.017700][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.020559][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.025105][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.029732][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.030937][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.036200][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.036247][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.038581][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.038649][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.048845][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 269.149636][ T5602] ir_usb 6-1:114.240: IR Dongle converter detected [ 269.251156][ T5809] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 270.394251][ T5617] syz-executor: attempt to access beyond end of device [ 270.394251][ T5617] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 270.394646][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 270.394670][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.394682][ T5617] Call Trace: [ 270.394689][ T5617] [ 270.394698][ T5617] dump_stack_lvl+0xe8/0x150 [ 270.394729][ T5617] f2fs_stop_checkpoint+0x383/0x540 [ 270.394758][ T5617] f2fs_write_end_io+0x1274/0x1740 [ 270.394807][ T5617] __submit_merged_bio+0x256/0x6a0 [ 270.394843][ T5617] __submit_merged_write_cond+0x3c9/0x4e0 [ 270.394876][ T5617] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 270.394923][ T5617] f2fs_write_data_pages+0x287e/0x34f0 [ 270.394986][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 270.395058][ T5617] ? do_raw_spin_lock+0x12b/0x2f0 [ 270.395098][ T5617] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 270.395119][ T5617] ? lockdep_hardirqs_on+0x7a/0x110 [ 270.395138][ T5617] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 270.395157][ T5617] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 270.395183][ T5617] ? reacquire_held_locks+0x104/0x190 [ 270.395204][ T5617] ? rt_spin_lock+0x1e0/0x400 [ 270.395236][ T5617] ? rt_spin_unlock+0x14f/0x200 [ 270.395267][ T5617] ? rt_spin_unlock+0x160/0x200 [ 270.395294][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 270.395322][ T5617] do_writepages+0x32e/0x550 [ 270.395347][ T5617] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 270.395394][ T5617] ? rt_spin_unlock+0x14f/0x200 [ 270.395432][ T5617] filemap_fdatawrite+0x1ec/0x2f0 [ 270.395460][ T5617] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 270.395483][ T5617] ? __lock_acquire+0x6b5/0x2d10 [ 270.395538][ T5617] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 270.395580][ T5617] ? rt_spin_unlock+0x160/0x200 [ 270.395611][ T5617] f2fs_sync_dirty_inodes+0x30e/0x830 [ 270.395654][ T5617] f2fs_write_checkpoint+0x9df/0x26a0 [ 270.395696][ T5617] ? __lock_acquire+0x6b5/0x2d10 [ 270.395744][ T5617] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 270.395824][ T5617] kill_f2fs_super+0x314/0x730 [ 270.395858][ T5617] ? __pfx_kill_f2fs_super+0x10/0x10 [ 270.395898][ T5617] ? lockdep_hardirqs_on+0x7a/0x110 [ 270.395933][ T5617] deactivate_locked_super+0xbc/0x130 [ 270.395962][ T5617] cleanup_mnt+0x437/0x4d0 [ 270.395987][ T5617] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.396011][ T5617] task_work_run+0x1d9/0x270 [ 270.396036][ T5617] ? __pfx_task_work_run+0x10/0x10 [ 270.396069][ T5617] exit_to_user_mode_loop+0xf3/0x4d0 [ 270.396088][ T5617] ? rcu_is_watching+0x15/0xb0 [ 270.396110][ T5617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.396131][ T5617] do_syscall_64+0x33e/0xf80 [ 270.396153][ T5617] ? trace_irq_disable+0x3b/0x140 [ 270.396181][ T5617] ? clear_bhb_loop+0x40/0x90 [ 270.396205][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.396224][ T5617] RIP: 0033:0x7f299ddfe017 [ 270.396243][ T5617] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 270.396259][ T5617] RSP: 002b:00007ffc597ac658 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 270.396281][ T5617] RAX: 0000000000000000 RBX: 00007f299de92120 RCX: 00007f299ddfe017 [ 270.396294][ T5617] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc597ac710 [ 270.396307][ T5617] RBP: 00007ffc597ac710 R08: 00007ffc597ad710 R09: 00000000ffffffff [ 270.396319][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc597ad7a0 [ 270.396332][ T5617] R13: 00007f299de92120 R14: 00000000000418d1 R15: 00007ffc597ad7e0 [ 270.396370][ T5617] [ 270.521198][ T7255] FAULT_INJECTION: forcing a failure. [ 270.521198][ T7255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.521232][ T7255] CPU: 0 UID: 0 PID: 7255 Comm: syz.4.339 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 270.521253][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.521265][ T7255] Call Trace: [ 270.521272][ T7255] [ 270.521280][ T7255] dump_stack_lvl+0xe8/0x150 [ 270.521308][ T7255] should_fail_ex+0x46b/0x600 [ 270.521335][ T7255] _copy_from_user+0x2d/0xb0 [ 270.521371][ T7255] __sys_bpf+0x229/0x950 [ 270.521392][ T7255] ? __pfx___sys_bpf+0x10/0x10 [ 270.521407][ T7255] ? kmem_cache_free+0x187/0x6c0 [ 270.521449][ T7255] ? ksys_write+0x202/0x270 [ 270.521479][ T7255] ? __pfx_ksys_write+0x10/0x10 [ 270.521509][ T7255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.521529][ T7255] __x64_sys_bpf+0x7c/0x90 [ 270.521556][ T7255] do_syscall_64+0x15f/0xf80 [ 270.521578][ T7255] ? trace_irq_disable+0x3b/0x140 [ 270.521604][ T7255] ? clear_bhb_loop+0x40/0x90 [ 270.521627][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.521649][ T7255] RIP: 0033:0x7f3bd2a4cdd9 [ 270.521667][ T7255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.521683][ T7255] RSP: 002b:00007f3bd0ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.521702][ T7255] RAX: ffffffffffffffda RBX: 00007f3bd2cc5fa0 RCX: 00007f3bd2a4cdd9 [ 270.521715][ T7255] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000008 [ 270.521727][ T7255] RBP: 00007f3bd0ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.521739][ T7255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.521751][ T7255] R13: 00007f3bd2cc6038 R14: 00007f3bd2cc5fa0 R15: 00007fff518ee1f8 [ 270.521781][ T7255] [ 270.525928][ T5617] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 270.647916][ T1284] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 270.702261][ T2955] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 270.731350][ T5602] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 271.543762][ T5623] usb 6-1: USB disconnect, device number 8 [ 271.585986][ T5623] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 271.587611][ T5623] ir_usb 6-1:114.240: device disconnected [ 271.629673][ T5617] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 271.750012][ T7266] loop1: detected capacity change from 0 to 256 [ 271.750699][ T7266] exfat: Deprecated parameter 'utf8' [ 271.751191][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 271.751313][ T7266] exFAT-fs (loop1): bogus number of FAT structure [ 271.751324][ T7266] exFAT-fs (loop1): failed to read boot sector [ 271.751333][ T7266] exFAT-fs (loop1): failed to recognize exfat type [ 271.751893][ T7266] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 272.033512][ T7268] loop4: detected capacity change from 0 to 4096 [ 272.121415][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.272797][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280170][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280217][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280241][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280265][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280295][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280318][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280341][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280362][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280423][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280446][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280469][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280492][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280514][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280537][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280559][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280581][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280604][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280627][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280648][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280670][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280692][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280715][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280738][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280760][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280782][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280806][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280828][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280851][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280873][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280896][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280918][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280940][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280959][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.280979][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281000][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281023][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281044][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281067][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281089][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281112][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281134][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281157][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281179][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281202][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281225][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281248][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281271][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281301][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281324][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281347][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281370][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281393][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281415][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281437][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281459][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281481][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281503][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281526][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281549][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.281572][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.322775][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.323241][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.323505][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.780378][ T1310] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.847253][ T7275] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.848488][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.848538][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.848562][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.934455][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 272.969763][ T1310] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 273.082983][ T1284] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 273.101626][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 273.101739][ T7268] NILFS (loop4): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 273.101779][ T7268] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 273.113194][ T187] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 273.127857][ T187] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 273.127996][ T7268] Remounting filesystem read-only [ 273.128007][ T7268] NILFS (loop4): error -5 preparing GC: cannot mark copying blocks dirty [ 274.555269][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.638009][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.649851][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.649906][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.649930][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.654418][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.656344][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.656648][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.662226][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.664850][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.700492][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.705129][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.712810][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.714386][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.717614][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.727106][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.729270][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.733067][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.734596][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.748149][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.835795][ T7274] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 274.931782][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.937041][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.962947][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.963707][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.965500][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.042901][ T5862] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 275.126505][ T7285] loop5: detected capacity change from 0 to 512 [ 275.155778][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.157286][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.160955][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.161004][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.168204][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.177059][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.177109][ T1270] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.181482][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.189321][ T1270] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 275.189451][ T7285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 275.189575][ T7285] System zones: 1-12 [ 275.196523][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.201745][ T7285] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.347: missing EA_INODE flag [ 275.201771][ T7285] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 275.201938][ T1284] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 275.207134][ T7285] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.347: error while reading EA inode 12 err=-117 [ 275.207169][ T7285] loop5: lost filesystem error report for type 5 error -117 [ 275.209833][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 275.209854][ C1] EXT4-fs (loop5): initial error at time 1778517796: ext4_xattr_inode_iget:441: inode 12 [ 275.209880][ C1] EXT4-fs (loop5): last error at time 1778517796: ext4_xattr_inode_iget:446 [ 275.246096][ T7292] sg_write: data in/out 16646278/4076 bytes for SCSI command 0x14-- guessing data in; [ 275.246096][ T7292] program syz.0.340 not setting count and/or reply_len properly [ 275.365043][ T187] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 275.365300][ T7285] EXT4-fs (loop5): 1 orphan inode deleted [ 275.367181][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.367962][ T7285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.381530][ T1284] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.414489][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.427632][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.445410][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.446719][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 275.804895][ T7295] overlayfs: failed to resolve './file0': -2 [ 276.442889][ T7288] loop4: detected capacity change from 0 to 2048 [ 276.445492][ T1270] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 276.541274][ T1310] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.542518][ T1310] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.543671][ T38] audit: type=1800 audit(1778517797.435:15): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.347" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 276.544394][ T1270] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 276.544692][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.553480][ T1310] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.568213][ T1310] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.572996][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.600268][ T1310] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.913777][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.913828][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.918345][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.939751][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.939795][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.939814][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.969258][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.969755][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.975592][ T7288] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 276.976817][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.976863][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.976887][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.976909][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.976938][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.976959][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.976980][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.977001][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.977022][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.977045][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.977080][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.977101][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.977124][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.977147][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.977168][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.977190][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987651][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987707][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987731][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987753][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987775][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987798][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987819][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987841][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987863][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987885][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987907][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.987936][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.988451][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.988476][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.988498][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.988520][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.008685][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.040695][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.077465][ T1270] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 277.077556][ T1270] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 277.077601][ T1270] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 277.080420][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.080756][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.089411][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.092289][ T1270] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.139876][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.139933][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.139957][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.200755][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.222292][ T6481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.262877][ T3018] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 277.279801][ T7288] syz.4.346: attempt to access beyond end of device [ 277.279801][ T7288] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 277.300284][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.309127][ T7301] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.471955][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.488281][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.494408][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.515763][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.566858][ T7303] netlink: 'syz.5.350': attribute type 1 has an invalid length. [ 277.596716][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 277.630811][ T5841] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 277.699588][ T67] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 277.702668][ T67] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 277.920880][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.353'. [ 278.876510][ T7313] warning: `syz.5.353' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 278.955552][ T7310] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 282.568627][ T1310] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 282.588731][ T91] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 282.909122][ T5613] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 283.492754][ T7334] netlink: 3 bytes leftover after parsing attributes in process `syz.4.356'. [ 283.719569][ T7339] CIFS mount error: No usable UNC path provided in device string! [ 283.719569][ T7339] [ 283.719591][ T7339] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 283.877876][ T7341] loop5: detected capacity change from 0 to 512 [ 283.890333][ T7341] EXT4-fs: Ignoring removed nobh option [ 283.893180][ T1284] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 283.893390][ T7341] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 283.893834][ T1284] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 283.921168][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 283.921247][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 283.938766][ T1284] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 283.938814][ T1284] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 283.938993][ T1284] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 283.939993][ T1284] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 283.945640][ T7317] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 283.961073][ T1310] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 283.963359][ T1310] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 283.967840][ T1310] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 284.091128][ T7349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.155679][ T7317] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 284.164763][ T7317] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 284.165526][ T7317] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 284.313876][ T7335] loop4: detected capacity change from 0 to 4096 [ 284.338219][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.357944][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.405358][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.409053][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.410158][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.433290][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.466192][ T7341] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 284.466467][ T187] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 284.466985][ T187] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 284.467156][ T7341] EXT4-fs (loop5): 1 truncate cleaned up [ 284.477697][ T7341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.564902][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.565824][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.567562][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.567763][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.568395][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.568514][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.568838][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.568877][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.568896][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.570427][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.570554][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.571148][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.571392][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.571489][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.571839][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574175][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574219][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574242][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574266][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574288][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574309][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574331][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574353][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574375][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574403][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574425][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574447][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574469][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574491][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574513][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574535][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574558][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574579][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574601][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574623][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574646][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574667][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574689][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574711][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574732][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574754][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574776][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574798][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574820][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574841][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574863][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574885][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574906][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.574927][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.584869][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.592537][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626116][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626174][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626199][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626222][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626253][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626275][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626297][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626319][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626739][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626764][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626786][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626807][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626830][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626853][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626875][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626897][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.626918][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.640180][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.643251][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.666533][ T1310] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.683853][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.691605][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.701174][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.718123][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.735901][ T1310] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.745035][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.766263][ T1284] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.770852][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.782391][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.785335][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.785764][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.785793][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.790603][ T7317] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.916173][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 284.962292][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 285.031587][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 285.079977][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 285.161620][ T1284] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 285.429261][ T7361] loop1: detected capacity change from 0 to 16 [ 285.455614][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 285.516485][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 285.531502][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 285.552910][ T7363] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.584629][ T7316] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 285.585641][ T7316] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 285.635968][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 285.637695][ T7361] erofs (device loop1): mounted with root inode @ nid 36. [ 285.714790][ T7361] syz.1.364: attempt to access beyond end of device [ 285.714790][ T7361] loop1: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 285.715024][ T7361] syz.1.364: attempt to access beyond end of device [ 285.715024][ T7361] loop1: rw=0, sector=46, nr_sectors = 1 limit=16 [ 285.718601][ T7316] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 285.718663][ T7316] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 285.724216][ T67] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 285.799870][ T7316] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 285.829888][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 285.920877][ T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 285.921874][ T7335] NILFS (loop4): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 285.921922][ T7335] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 285.924842][ T67] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 285.934281][ T67] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 286.081420][ T7335] Remounting filesystem read-only [ 286.081437][ T7335] NILFS (loop4): error -5 preparing GC: cannot mark copying blocks dirty [ 286.096118][ T7361] erofs (device loop1): read error -5 @ 0 of nid 36 [ 286.293540][ T5616] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 286.343851][ T5623] IPVS: starting estimator thread 0... [ 286.445916][ T7373] IPVS: using max 8 ests per chain, 19200 per kthread [ 286.480292][ T7375] FAULT_INJECTION: forcing a failure. [ 286.480292][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 286.480335][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.1.367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.480357][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.480368][ T7375] Call Trace: [ 286.480375][ T7375] [ 286.480383][ T7375] dump_stack_lvl+0xe8/0x150 [ 286.480413][ T7375] should_fail_ex+0x46b/0x600 [ 286.480438][ T7375] should_failslab+0xa8/0x100 [ 286.480466][ T7375] kmem_cache_alloc_noprof+0x87/0x680 [ 286.480496][ T7375] ? prepare_creds+0x30/0x820 [ 286.480521][ T7375] prepare_creds+0x30/0x820 [ 286.480542][ T7375] ? get_ruleset_from_fd+0x1ae/0x230 [ 286.480568][ T7375] __se_sys_landlock_restrict_self+0x19f/0x810 [ 286.480599][ T7375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.480619][ T7375] do_syscall_64+0x15f/0xf80 [ 286.480641][ T7375] ? trace_irq_disable+0x3b/0x140 [ 286.480670][ T7375] ? clear_bhb_loop+0x40/0x90 [ 286.480693][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.480712][ T7375] RIP: 0033:0x7f28f619cdd9 [ 286.480730][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.480747][ T7375] RSP: 002b:00007f28f43ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 286.480768][ T7375] RAX: ffffffffffffffda RBX: 00007f28f6415fa0 RCX: 00007f28f619cdd9 [ 286.480792][ T7375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 286.480804][ T7375] RBP: 00007f28f43ee090 R08: 0000000000000000 R09: 0000000000000000 [ 286.480817][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.480829][ T7375] R13: 00007f28f6416038 R14: 00007f28f6415fa0 R15: 00007fff50e6f778 [ 286.480862][ T7375] [ 286.726260][ T57] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 286.841696][ T6481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.890631][ T2972] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 286.999480][ T6481] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 287.556406][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.368'. [ 287.765963][ T5613] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 288.223475][ T7398] loop0: detected capacity change from 0 to 16 [ 288.317797][ T2972] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 288.336055][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 288.336146][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 288.336188][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 288.336229][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 288.336269][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 288.336524][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 288.336588][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 288.337781][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 288.355714][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 288.432738][ T7398] erofs (device loop0): mounted with root inode @ nid 36. [ 288.802311][ T7407] overlayfs: failed to resolve './file0': -2 [ 289.696201][ T7398] syz.0.371: attempt to access beyond end of device [ 289.696201][ T7398] loop0: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 290.052624][ T7412] loop5: detected capacity change from 0 to 1024 [ 290.056726][ T7412] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.056764][ T7412] EXT4-fs: inline encryption not supported [ 290.080621][ T1430] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 290.085002][ T1430] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 290.085374][ T7412] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 290.095284][ T7316] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 290.095354][ T7316] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 290.104864][ T7316] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 290.174512][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 290.174577][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 290.178413][ T1430] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 290.178772][ T7412] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.373: bad orphan inode 11 [ 290.178796][ T7412] loop5: lost filesystem error report for type 5 error -117 [ 290.182191][ T1430] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 290.188795][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 290.188816][ C1] EXT4-fs (loop5): initial error at time 1778517811: ext4_orphan_get:1423 [ 290.188835][ C1] EXT4-fs (loop5): last error at time 1778517811: ext4_orphan_get:1423 [ 290.216099][ T1430] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 290.216145][ T1430] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 290.216240][ T7412] EXT4-fs (loop5): Remounting filesystem read-only [ 290.216254][ T7412] ext4_test_bit(bit=10, block=4) = 1 [ 290.216266][ T7412] is_bad_inode(inode)=0 [ 290.216273][ T7412] NEXT_ORPHAN(inode)=3254779904 [ 290.216281][ T7412] max_ino=32 [ 290.216288][ T7412] i_nlink=0 [ 290.222779][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 290.222968][ T7412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.229863][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 291.290427][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 291.319387][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 291.326039][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 291.349908][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 291.361099][ T7398] syz.0.371: attempt to access beyond end of device [ 291.361099][ T7398] loop0: rw=0, sector=46, nr_sectors = 1 limit=16 [ 291.370782][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 291.385053][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 291.608485][ T7398] erofs (device loop0): read error -5 @ 0 of nid 36 [ 291.793822][ T5617] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 292.366504][ T6481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.419793][ T6481] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 292.486316][ T7418] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 293.366330][ T7431] tap0: tun_chr_ioctl cmd 1074025675 [ 293.366345][ T7431] tap0: persist disabled [ 293.895153][ T7444] FAULT_INJECTION: forcing a failure. [ 293.895153][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 293.895181][ T7444] CPU: 0 UID: 0 PID: 7444 Comm: syz.1.379 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 293.895197][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.895206][ T7444] Call Trace: [ 293.895212][ T7444] [ 293.895219][ T7444] dump_stack_lvl+0xe8/0x150 [ 293.895242][ T7444] should_fail_ex+0x46b/0x600 [ 293.895263][ T7444] should_failslab+0xa8/0x100 [ 293.895286][ T7444] __kmalloc_noprof+0xdf/0x7b0 [ 293.895306][ T7444] ? tomoyo_encode+0x28b/0x550 [ 293.895325][ T7444] tomoyo_encode+0x28b/0x550 [ 293.895343][ T7444] tomoyo_realpath_from_path+0x58d/0x5d0 [ 293.895360][ T7444] ? tomoyo_domain+0xd7/0x130 [ 293.895380][ T7444] ? tomoyo_path_number_perm+0x219/0x630 [ 293.895399][ T7444] tomoyo_path_number_perm+0x246/0x630 [ 293.895420][ T7444] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 293.895443][ T7444] ? __lock_acquire+0x6b5/0x2d10 [ 293.895461][ T7444] ? __seccomp_filter+0xaf7/0x1ef0 [ 293.895515][ T7444] ? __fget_files+0x2a/0x420 [ 293.895536][ T7444] ? __fget_files+0x2a/0x420 [ 293.895552][ T7444] ? __fget_files+0x3a6/0x420 [ 293.895568][ T7444] ? __fget_files+0x2a/0x420 [ 293.895588][ T7444] security_file_ioctl+0xc3/0x2a0 [ 293.895609][ T7444] __se_sys_ioctl+0x47/0x170 [ 293.895631][ T7444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.895647][ T7444] do_syscall_64+0x15f/0xf80 [ 293.895664][ T7444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.895678][ T7444] ? clear_bhb_loop+0x40/0x90 [ 293.895695][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.895711][ T7444] RIP: 0033:0x7f28f619cdd9 [ 293.895727][ T7444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.895740][ T7444] RSP: 002b:00007f28f43ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.895765][ T7444] RAX: ffffffffffffffda RBX: 00007f28f6415fa0 RCX: 00007f28f619cdd9 [ 293.895776][ T7444] RDX: 0000200000000180 RSI: 00000000000089e3 RDI: 0000000000000001 [ 293.895785][ T7444] RBP: 00007f28f43ee090 R08: 0000000000000000 R09: 0000000000000000 [ 293.895794][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.895802][ T7444] R13: 00007f28f6416038 R14: 00007f28f6415fa0 R15: 00007fff50e6f778 [ 293.895829][ T7444] [ 293.895973][ T7444] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.331371][ T7448] netlink: 3 bytes leftover after parsing attributes in process `syz.1.380'. [ 294.576226][ T7451] loop1: detected capacity change from 0 to 4096 [ 294.623097][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.626625][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.650670][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665132][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665183][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665207][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665229][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665252][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665275][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665297][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665318][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665340][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665361][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665383][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665404][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665426][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665448][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665479][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665501][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665523][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665545][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665567][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665589][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665610][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665632][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665653][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665675][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665696][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665718][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665740][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665761][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665783][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665805][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665827][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665849][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665871][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665893][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665914][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665936][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665958][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.665980][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666002][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666023][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666045][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666067][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666090][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666111][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666133][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666155][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666177][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666199][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666227][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666250][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666271][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666294][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666315][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666338][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666359][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666381][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.666402][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.675980][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.676034][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.676058][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.689017][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.690433][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.699190][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.705313][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.710940][ T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.710987][ T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.711224][ T7454] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.717261][ T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.720560][ T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.721614][ T2972] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 294.726367][ T2972] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 294.733027][ T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 294.740053][ T7451] NILFS (loop1): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 294.740108][ T7451] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 294.750576][ T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 294.770468][ T1430] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 294.770608][ T7451] Remounting filesystem read-only [ 294.770619][ T7451] NILFS (loop1): error -5 preparing GC: cannot mark copying blocks dirty [ 295.066546][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.111177][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.111224][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.111247][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.269010][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.269068][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.269091][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.297792][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.318943][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.327699][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.337955][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.339531][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.350001][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.355347][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.364845][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.365602][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.370996][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.371711][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.374125][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.397590][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.428578][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.454531][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.479003][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.482262][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 295.578292][ T7455] loop4: detected capacity change from 0 to 2048 [ 295.742488][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.815526][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.815699][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.815794][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.818392][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.877922][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.881560][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.882434][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.883125][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.883772][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.891688][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.896421][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.902607][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.902676][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.902702][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.902726][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.902747][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.902769][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.902792][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.902814][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.902834][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.929810][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944259][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944304][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944328][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944350][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944372][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944394][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944417][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944438][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944460][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944484][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944506][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944527][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944549][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944572][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944594][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944615][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944636][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944664][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944686][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.944707][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.961323][ T5841] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 295.986449][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 295.994511][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.012680][ T7459] sctp: [Deprecated]: syz.5.382 (pid 7459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.012680][ T7459] Use struct sctp_sack_info instead [ 296.018590][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.022490][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.062864][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.062922][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.062946][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.062968][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.126016][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.126063][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.126087][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.136593][ T7462] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.155024][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 296.161101][ T3018] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 296.163603][ T3018] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 296.191604][ T7461] loop1: detected capacity change from 0 to 512 [ 296.198552][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 296.288842][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 296.292525][ T7461] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 296.501479][ T7461] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 296.885881][ T7466] loop1: detected capacity change from 0 to 512 [ 296.899983][ T7466] ext4: Unknown parameter 'nouser_xattr' [ 296.904336][ T7466] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 296.963423][ T7466] FAULT_INJECTION: forcing a failure. [ 296.963423][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 296.963478][ T7466] CPU: 1 UID: 0 PID: 7466 Comm: syz.1.383 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 296.963501][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.963513][ T7466] Call Trace: [ 296.963521][ T7466] [ 296.963530][ T7466] dump_stack_lvl+0xe8/0x150 [ 296.963558][ T7466] should_fail_ex+0x46b/0x600 [ 296.963587][ T7466] should_failslab+0xa8/0x100 [ 296.963617][ T7466] __kmalloc_cache_noprof+0x84/0x690 [ 296.963644][ T7466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.963663][ T7466] ? __se_sys_memfd_create+0x227/0x420 [ 296.963692][ T7466] __se_sys_memfd_create+0x227/0x420 [ 296.963717][ T7466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.963738][ T7466] do_syscall_64+0x15f/0xf80 [ 296.963763][ T7466] ? clear_bhb_loop+0x40/0x90 [ 296.963786][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.963805][ T7466] RIP: 0033:0x7f28f619cdd9 [ 296.963823][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.963840][ T7466] RSP: 002b:00007f28f43abe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 296.963861][ T7466] RAX: ffffffffffffffda RBX: 0000000000000560 RCX: 00007f28f619cdd9 [ 296.963875][ T7466] RDX: 00007f28f43abee0 RSI: 0000000000000000 RDI: 00007f28f6232f49 [ 296.963888][ T7466] RBP: 0000200000000440 R08: 00000000ffffffff R09: ffffffffffffffff [ 296.963902][ T7466] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000180 [ 296.963915][ T7466] R13: 00007f28f43abee0 R14: 00007f28f43abea0 R15: 00002000000000c0 [ 296.963945][ T7466] [ 297.276492][ T7455] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5613] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[7455] [ 297.378821][ T7455] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002 [ 297.592101][ T37] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 297.672178][ T7470] loop1: detected capacity change from 0 to 512 [ 297.698311][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.698662][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.753949][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.753982][ T37] usb 6-1: device descriptor read/64, error -71 [ 297.753999][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.756955][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.758833][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.768974][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.777628][ T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.780755][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.789028][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.800592][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.803067][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 297.852298][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 297.990403][ T37] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 298.129615][ T37] usb 6-1: device descriptor read/64, error -71 [ 298.174687][ T1310] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 298.186720][ T7455] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 298.196772][ T7470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 298.196858][ T7470] System zones: 1-12 [ 298.260291][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 298.260351][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 298.262076][ T37] usb usb6-port1: attempt power cycle [ 298.264892][ T7470] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.384: missing EA_INODE flag [ 298.264919][ T7470] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 298.265580][ T2972] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 298.272092][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 298.272115][ C0] EXT4-fs (loop1): initial error at time 1778517819: ext4_xattr_inode_iget:441: inode 12 [ 298.272142][ C0] EXT4-fs (loop1): last error at time 1778517819: ext4_xattr_inode_iget:441: inode 12 [ 298.378945][ T7470] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.384: error while reading EA inode 12 err=-117 [ 298.378979][ T7470] loop1: lost filesystem error report for type 5 error -117 [ 298.382858][ T2972] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 298.392407][ T7470] EXT4-fs (loop1): 1 orphan inode deleted [ 298.402030][ T7470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.431040][ T1430] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 298.813425][ T7476] overlayfs: failed to resolve './file0': -2 [ 299.648491][ T38] audit: type=1800 audit(1778517820.445:16): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.384" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 299.660761][ T7317] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 299.660892][ T7317] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 299.863116][ T2972] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 299.903029][ T7455] Remounting filesystem read-only [ 300.052919][ T3018] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 300.053267][ T3018] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 300.053427][ T3018] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 300.144793][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.215557][ T2972] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 300.252727][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 300.262145][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 300.278618][ T5613] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 300.291490][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 300.303215][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 300.306019][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 300.308379][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 300.310750][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 300.318899][ T3018] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 300.322375][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 300.468424][ T5809] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 300.709634][ T37] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 300.732214][ T37] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.732252][ T37] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 300.732280][ T37] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.734090][ T37] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.734108][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.734119][ T37] usb 6-1: Product: syz [ 300.734127][ T37] usb 6-1: Manufacturer: syz [ 300.734135][ T37] usb 6-1: SerialNumber: syz [ 300.874114][ T37] cdc_ncm 6-1:1.0: skipping garbage [ 300.874137][ T37] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 300.874179][ T37] cdc_ncm 6-1:1.0: bind() failure [ 301.103604][ T7480] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20001 [ 302.209841][ T5752] usb 6-1: USB disconnect, device number 11 [ 302.569626][ T7500] trusted_key: encrypted_key: insufficient parameters specified [ 303.500544][ T7512] FAULT_INJECTION: forcing a failure. [ 303.500544][ T7512] name failslab, interval 1, probability 0, space 0, times 0 [ 303.500575][ T7512] CPU: 1 UID: 0 PID: 7512 Comm: syz.5.398 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 303.500596][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.500608][ T7512] Call Trace: [ 303.500616][ T7512] [ 303.500624][ T7512] dump_stack_lvl+0xe8/0x150 [ 303.500655][ T7512] should_fail_ex+0x46b/0x600 [ 303.500679][ T7512] should_failslab+0xa8/0x100 [ 303.500707][ T7512] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 303.500730][ T7512] ? __alloc_skb+0x1d0/0x7d0 [ 303.500744][ T7512] ? lockdep_hardirqs_on+0x7a/0x110 [ 303.500765][ T7512] __alloc_skb+0x1d0/0x7d0 [ 303.500781][ T7512] alloc_skb_with_frags+0xc8/0x760 [ 303.500795][ T7512] ? __lock_acquire+0x6b5/0x2d10 [ 303.500818][ T7512] sock_alloc_send_pskb+0x884/0x9a0 [ 303.500848][ T7512] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 303.500876][ T7512] hci_sock_sendmsg+0x208/0xf40 [ 303.500896][ T7512] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 303.500912][ T7512] ? __pfx_aa_file_perm+0x10/0x10 [ 303.500927][ T7512] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 303.500947][ T7512] ? aa_sock_msg_perm+0x122/0x200 [ 303.500969][ T7512] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 303.500982][ T7512] sock_sendmsg_nosec+0x112/0x150 [ 303.501003][ T7512] sock_write_iter+0x308/0x410 [ 303.501022][ T7512] ? __pfx_sock_write_iter+0x10/0x10 [ 303.501054][ T7512] vfs_write+0x629/0xba0 [ 303.501080][ T7512] ? __pfx_vfs_write+0x10/0x10 [ 303.501106][ T7512] ? __fget_files+0x2a/0x420 [ 303.501136][ T7512] ksys_write+0x156/0x270 [ 303.501157][ T7512] ? __pfx_ksys_write+0x10/0x10 [ 303.501182][ T7512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.501197][ T7512] do_syscall_64+0x15f/0xf80 [ 303.501213][ T7512] ? trace_irq_disable+0x3b/0x140 [ 303.501233][ T7512] ? clear_bhb_loop+0x40/0x90 [ 303.501250][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.501264][ T7512] RIP: 0033:0x7fb2df5acdd9 [ 303.501278][ T7512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.501290][ T7512] RSP: 002b:00007fb2dd7fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 303.501306][ T7512] RAX: ffffffffffffffda RBX: 00007fb2df825fa0 RCX: 00007fb2df5acdd9 [ 303.501317][ T7512] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 0000000000000004 [ 303.501325][ T7512] RBP: 00007fb2dd7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 303.501334][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.501343][ T7512] R13: 00007fb2df826038 R14: 00007fb2df825fa0 R15: 00007ffd9369a438 [ 303.501365][ T7512] [ 303.644510][ T7514] loop4: detected capacity change from 0 to 512 [ 303.851309][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 303.888957][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 303.898108][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 303.898236][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 303.914043][ T3018] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 303.962007][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 303.962872][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 303.966829][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 303.967784][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 303.968389][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 304.015614][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 304.016402][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 304.226515][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 304.231701][ T7514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 304.231833][ T7514] System zones: 1-12 [ 304.280604][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 304.280656][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 304.313577][ T7514] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.399: missing EA_INODE flag [ 304.313598][ T7514] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 304.313791][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 304.330517][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 304.330538][ C0] EXT4-fs (loop4): initial error at time 1778517825: ext4_xattr_inode_iget:441: inode 12 [ 304.330564][ C0] EXT4-fs (loop4): last error at time 1778517825: ext4_xattr_inode_iget:441: inode 12 [ 304.334519][ T7514] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.399: error while reading EA inode 12 err=-117 [ 304.334557][ T7514] loop4: lost filesystem error report for type 5 error -117 [ 304.334708][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 304.335015][ T7514] EXT4-fs (loop4): 1 orphan inode deleted [ 304.505611][ T7514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.831406][ T7527] overlayfs: failed to resolve './file0': -2 [ 305.014939][ T38] audit: type=1800 audit(1778517826.465:17): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.399" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 305.680678][ T3018] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 305.680952][ T3018] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 306.331052][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 306.357047][ T67] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 306.357126][ T67] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 306.357160][ T67] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 306.388176][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.437266][ T7535] loop0: detected capacity change from 0 to 1024 [ 306.438354][ T7535] hfsplus: Unknown parameter './binderfs/binder0' [ 306.454080][ T7535] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 306.469871][ T3018] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 306.474647][ T7535] loop0: detected capacity change from 0 to 64 [ 306.475778][ T7535] hfs: Unknown parameter 'dir_umnsk' [ 306.510976][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 306.515789][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 306.515861][ T5613] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 306.520939][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 306.521606][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 306.595786][ T5809] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 306.644384][ T7537] CIFS mount error: No usable UNC path provided in device string! [ 306.644384][ T7537] [ 306.644405][ T7537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 306.890526][ T7542] loop4: detected capacity change from 0 to 8 [ 306.915847][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 306.973212][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 307.055377][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 307.226693][ T7542] SQUASHFS error: Unable to read inode 0x11f [ 307.425084][ T7542] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 308.021152][ T7559] FAULT_INJECTION: forcing a failure. [ 308.021152][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 308.021189][ T7559] CPU: 1 UID: 0 PID: 7559 Comm: syz.1.411 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 308.021212][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.021224][ T7559] Call Trace: [ 308.021231][ T7559] [ 308.021240][ T7559] dump_stack_lvl+0xe8/0x150 [ 308.021274][ T7559] should_fail_ex+0x46b/0x600 [ 308.021302][ T7559] should_failslab+0xa8/0x100 [ 308.021333][ T7559] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 308.021361][ T7559] ? __alloc_skb+0x1d0/0x7d0 [ 308.021379][ T7559] ? lockdep_hardirqs_on+0x7a/0x110 [ 308.021407][ T7559] __alloc_skb+0x1d0/0x7d0 [ 308.021431][ T7559] alloc_skb_with_frags+0xc8/0x760 [ 308.021452][ T7559] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 308.021483][ T7559] sock_alloc_send_pskb+0x884/0x9a0 [ 308.021524][ T7559] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 308.021557][ T7559] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 308.021588][ T7559] unix_dgram_sendmsg+0x460/0x18d0 [ 308.021611][ T7559] ? __lock_acquire+0x6b5/0x2d10 [ 308.021639][ T7559] ? __lock_acquire+0x6b5/0x2d10 [ 308.021675][ T7559] ? unwind_next_frame+0xa6/0x2550 [ 308.021704][ T7559] ? __lock_acquire+0x6b5/0x2d10 [ 308.021724][ T7559] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 308.021757][ T7559] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 308.021783][ T7559] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 308.021806][ T7559] sock_sendmsg_nosec+0x112/0x150 [ 308.021834][ T7559] ____sys_sendmsg+0x55c/0x870 [ 308.021861][ T7559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.021896][ T7559] ? import_iovec+0x73/0xa0 [ 308.021927][ T7559] ___sys_sendmsg+0x2a5/0x360 [ 308.021947][ T7559] ? __lock_acquire+0x6b5/0x2d10 [ 308.021971][ T7559] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.022003][ T7559] ? kstrtouint+0x6e/0xe0 [ 308.022049][ T7559] ? __fget_files+0x2a/0x420 [ 308.022072][ T7559] ? __fget_files+0x3a6/0x420 [ 308.022105][ T7559] __sys_sendmmsg+0x282/0x4e0 [ 308.022132][ T7559] ? __pfx___sys_sendmmsg+0x10/0x10 [ 308.022162][ T7559] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 308.022204][ T7559] ? ksys_write+0x248/0x270 [ 308.022233][ T7559] ? __pfx_ksys_write+0x10/0x10 [ 308.022266][ T7559] __x64_sys_sendmmsg+0xa0/0xc0 [ 308.022288][ T7559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.022309][ T7559] do_syscall_64+0x15f/0xf80 [ 308.022333][ T7559] ? clear_bhb_loop+0x40/0x90 [ 308.022356][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.022376][ T7559] RIP: 0033:0x7f28f619cdd9 [ 308.022394][ T7559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.022410][ T7559] RSP: 002b:00007f28f43ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 308.022430][ T7559] RAX: ffffffffffffffda RBX: 00007f28f6415fa0 RCX: 00007f28f619cdd9 [ 308.022449][ T7559] RDX: 0000000000000001 RSI: 0000200000001780 RDI: 0000000000000003 [ 308.022462][ T7559] RBP: 00007f28f43ee090 R08: 0000000000000000 R09: 0000000000000000 [ 308.022474][ T7559] R10: 0000000020004010 R11: 0000000000000246 R12: 0000000000000001 [ 308.022486][ T7559] R13: 00007f28f6416038 R14: 00007f28f6415fa0 R15: 00007fff50e6f778 [ 308.022517][ T7559] [ 308.684226][ T7571] netlink: 3 bytes leftover after parsing attributes in process `syz.2.412'. [ 309.262931][ T7583] loop5: detected capacity change from 0 to 512 [ 309.279485][ T1430] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.279810][ T1430] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.367850][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.367902][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.578723][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.579613][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.580161][ T187] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 309.580346][ T7583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 309.580473][ T7583] System zones: 1-12 [ 309.650568][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.650622][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.651760][ T187] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.652246][ T7583] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.416: missing EA_INODE flag [ 309.652270][ T7583] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 309.652479][ T2972] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 309.652726][ T7583] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.416: error while reading EA inode 12 err=-117 [ 309.652751][ T7583] loop5: lost filesystem error report for type 5 error -117 [ 309.652887][ T57] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 309.653930][ T2972] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.654283][ T7583] EXT4-fs (loop5): 1 orphan inode deleted [ 309.657873][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.658658][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.661804][ T7583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.662749][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.671834][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.673450][ T57] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.829134][ T7598] loop1: detected capacity change from 0 to 1024 [ 309.830399][ T7598] hfsplus: Unknown parameter './binderfs/binder0' [ 309.940278][ T7600] CIFS mount error: No usable UNC path provided in device string! [ 309.940278][ T7600] [ 309.940300][ T7600] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 310.065970][ T7601] overlayfs: failed to resolve './file0': -2 [ 310.611260][ T5841] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 310.905646][ T38] audit: type=1800 audit(1778517831.795:18): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.416" name="file1" dev="loop5" ino=19 res=0 errno=0 [ 310.931439][ T187] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 310.931732][ T187] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 310.931800][ T187] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 311.763920][ T3018] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 311.764347][ T3018] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 311.764627][ T3018] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 311.768541][ T6481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.794244][ T187] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 311.875757][ T6481] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 312.005858][ T7615] FAULT_INJECTION: forcing a failure. [ 312.005858][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 312.005889][ T7615] CPU: 0 UID: 0 PID: 7615 Comm: syz.5.424 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.005914][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.005925][ T7615] Call Trace: [ 312.005932][ T7615] [ 312.005940][ T7615] dump_stack_lvl+0xe8/0x150 [ 312.005968][ T7615] should_fail_ex+0x46b/0x600 [ 312.005995][ T7615] should_failslab+0xa8/0x100 [ 312.006024][ T7615] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 312.006052][ T7615] ? __alloc_skb+0x1d0/0x7d0 [ 312.006068][ T7615] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.006095][ T7615] __alloc_skb+0x1d0/0x7d0 [ 312.006118][ T7615] netlink_sendmsg+0x5d4/0xb40 [ 312.006147][ T7615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.006169][ T7615] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 312.006195][ T7615] ? aa_sock_msg_perm+0x122/0x200 [ 312.006224][ T7615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.006243][ T7615] sock_sendmsg_nosec+0x112/0x150 [ 312.006270][ T7615] ____sys_sendmsg+0x55c/0x870 [ 312.006297][ T7615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.006325][ T7615] ? import_iovec+0x73/0xa0 [ 312.006361][ T7615] ___sys_sendmsg+0x2a5/0x360 [ 312.006380][ T7615] ? __lock_acquire+0x6b5/0x2d10 [ 312.006404][ T7615] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.006455][ T7615] ? __fget_files+0x2a/0x420 [ 312.006476][ T7615] ? __fget_files+0x3a6/0x420 [ 312.006506][ T7615] __x64_sys_sendmsg+0x1c3/0x2a0 [ 312.006531][ T7615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.006561][ T7615] ? __pfx_ksys_write+0x10/0x10 [ 312.006596][ T7615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.006617][ T7615] do_syscall_64+0x15f/0xf80 [ 312.006639][ T7615] ? trace_irq_disable+0x3b/0x140 [ 312.006666][ T7615] ? clear_bhb_loop+0x40/0x90 [ 312.006690][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.006708][ T7615] RIP: 0033:0x7fb2df5acdd9 [ 312.006726][ T7615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.006742][ T7615] RSP: 002b:00007fb2dd7fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.006762][ T7615] RAX: ffffffffffffffda RBX: 00007fb2df825fa0 RCX: 00007fb2df5acdd9 [ 312.006775][ T7615] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 312.006787][ T7615] RBP: 00007fb2dd7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 312.006799][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.006811][ T7615] R13: 00007fb2df826038 R14: 00007fb2df825fa0 R15: 00007ffd9369a438 [ 312.006839][ T7615] [ 312.560415][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 312.742183][ T10] usb 3-1: device descriptor read/64, error -71 [ 312.750251][ T7609] loop1: detected capacity change from 0 to 1024 [ 312.989368][ T67] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.062035][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.108987][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 313.375734][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.399057][ T10] usb 3-1: device descriptor read/64, error -71 [ 313.527676][ T10] usb usb3-port1: attempt power cycle [ 313.621774][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.621874][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.621932][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.621999][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.622054][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.631728][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.631802][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.631857][ T2972] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.772170][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.940319][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.948030][ T1270] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.948143][ T1270] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.948215][ T1270] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.948284][ T1270] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.948350][ T1270] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.948407][ T1270] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.948560][ T1270] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.948639][ T1270] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 313.980975][ T1430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.009020][ T7316] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.081264][ T1284] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.149897][ T7319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.153152][ T7319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.153290][ T7319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.153345][ T7319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.153417][ T7319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.153495][ T7319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.153551][ T7319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.153630][ T7319] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.203567][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.203722][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.203795][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.203852][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.203875][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.203935][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.203996][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.204051][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.377899][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.377992][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.378052][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.378107][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.378168][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.378243][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.378342][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.378415][ T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 314.516104][ T67] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 315.048590][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 315.059239][ T1270] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 315.062225][ T1310] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 315.069764][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 315.089993][ T7317] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 315.219211][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 315.552751][ T1330] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 316.186693][ T10] usb 3-1: device descriptor read/8, error -71 [ 316.485835][ T7627] loop4: detected capacity change from 0 to 764 [ 316.489226][ T5750] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 316.526524][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.526803][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.592536][ T1284] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 316.627441][ T187] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 316.648653][ T5616] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 316.673395][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.678202][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.699754][ T2955] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.700562][ T2955] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.729252][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.740129][ T2955] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.742961][ T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.745224][ T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.745884][ T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.746567][ T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.772903][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.774808][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.783849][ T2955] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.797105][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.809961][ T187] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 316.828859][ T5750] usb 6-1: device not accepting address 12, error -71 [ 316.838561][ T7627] Symlink component flag not implemented [ 316.838669][ T7627] Symlink component flag not implemented (15) [ 316.874698][ T7627] netlink: 72 bytes leftover after parsing attributes in process `syz.4.429'. [ 317.150921][ T7647] loop5: detected capacity change from 0 to 1024 [ 317.153181][ T7647] hfsplus: Unknown parameter './binderfs/binder0' [ 317.153611][ T7647] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 317.227197][ T7647] loop5: detected capacity change from 0 to 64 [ 317.228175][ T7647] hfs: Unknown parameter 'dir_umnsk' [ 317.242664][ T5613] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 317.322165][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.322379][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.381790][ T7654] CIFS mount error: No usable UNC path provided in device string! [ 317.381790][ T7654] [ 317.381814][ T7654] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 317.424304][ T5809] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 317.879881][ T7663] 9pnet_virtio: no channels available for device 127.0.0.1 [ 318.698901][ T7668] loop4: detected capacity change from 0 to 256 [ 318.699988][ T7668] exfat: Deprecated parameter 'utf8' [ 318.701239][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 318.701386][ T7668] exFAT-fs (loop4): bogus number of FAT structure [ 318.701399][ T7668] exFAT-fs (loop4): failed to read boot sector [ 318.701409][ T7668] exFAT-fs (loop4): failed to recognize exfat type [ 318.702268][ T7668] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 318.859097][ T5750] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 319.718523][ T7681] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 321.007547][ T7678] loop1: detected capacity change from 0 to 256 [ 321.037324][ T7678] exfat: Deprecated parameter 'utf8' [ 321.043211][ T7680] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 321.050021][ T7680] mmap: syz.2.440 (7680) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 321.377594][ T1284] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 321.390727][ T7678] exFAT-fs (loop1): bogus number of FAT structure [ 321.390743][ T7678] exFAT-fs (loop1): failed to read boot sector [ 321.390753][ T7678] exFAT-fs (loop1): failed to recognize exfat type [ 321.392477][ T7678] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 321.498427][ T5750] usb 1-1: Using ep0 maxpacket: 32 [ 321.963723][ T7687] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 322.788507][ T5750] usb 1-1: device descriptor read/all, error -71 [ 322.966261][ T7692] netlink: 3 bytes leftover after parsing attributes in process `syz.4.442'. [ 323.079377][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 323.231142][ T10] usb 6-1: device descriptor read/64, error -71 [ 323.245175][ T39] INFO: task syz.3.116:6324 blocked for more than 143 seconds. [ 323.245201][ T39] Not tainted syzkaller #0 [ 323.245212][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 323.245221][ T39] task:syz.3.116 state:D stack:25952 pid:6324 tgid:6323 ppid:5615 task_flags:0x400640 flags:0x00080002 [ 323.245279][ T39] Call Trace: [ 323.245286][ T39] [ 323.245299][ T39] __schedule+0x16f9/0x5500 [ 323.245356][ T39] ? __pfx___schedule+0x10/0x10 [ 323.245387][ T39] ? schedule+0x90/0x360 [ 323.245410][ T39] schedule+0x164/0x360 [ 323.245433][ T39] schedule_timeout+0xc3/0x2c0 [ 323.245456][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 323.245478][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.245515][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.245541][ T39] __wait_for_common+0x3c0/0x690 [ 323.245561][ T39] ? preempt_schedule_common+0x82/0xd0 [ 323.245596][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 323.245616][ T39] ? __pfx___wait_for_common+0x10/0x10 [ 323.245642][ T39] ? __rcu_read_unlock+0x83/0xe0 [ 323.245684][ T39] wait_for_completion_state+0x1c/0x40 [ 323.245706][ T39] vfs_coredump+0x9d0/0x4540 [ 323.245740][ T39] ? unwind_next_frame+0xa6/0x2550 [ 323.245771][ T39] ? __pfx_vfs_coredump+0x10/0x10 [ 323.245789][ T39] ? unwind_next_frame+0xa6/0x2550 [ 323.245816][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 323.245842][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 323.245866][ T39] ? __lock[ 323.245866][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 323.245892][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 323.245914][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 323.245943][ T39] ? unwind_next_frame+0xa6/0x2550 [ 323.245975][ T39] ? unwind_next_frame+0xa6/0x2550 [ 323.246003][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 323.246028][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 323.246051][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 323.246076][ T39] ? is_bpf_text_address+0x292/0x2b0 [ 323.246095][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 323.246119][ T39] ? kernel_text_address+0xa5/0xe0 [ 323.246146][ T39] ? stack_depot_save_flags+0x290/0x810 [ 323.246167][ T39] ? lock_acquire+0x106/0x350 [ 323.246198][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 323.246221][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 323.246248][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 323.246270][ T39] ? kasan_save_track+0x4f/0x80 [ 323.246294][ T39] ? kasan_save_track+0x3e/0x80 [ 323.246317][ T39] ? kasan_save_free_info+0x46/0x50 [ 323.246337][ T39] ? __kasan_slab_free+0x5c/0x80 [ 323.246361][ T39] ? kmem_cache_free+0x187/0x6c0 [ 323.246388][ T39] ? get_signal+0xa4a/0x1330 [ 323.246412][ T39] ? arch_do_signal_or_restart+0xbc/0x840 [ 323.246461][ T39] ? exit_to_user_mode_loop+0x8c/0x4d0 [ 323.246480][ T39] ? do_syscall_64+0x33e/0xf80 [ 323.246502][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.246535][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.246594][ T39] ? rt_spin_unlock+0x14f/0x200 [ 323.246627][ T39] ? rt_spin_unlock+0x160/0x200 [ 323.246662][ T39] get_signal+0x1107/0x1330 [ 323.246708][ T39] arch_do_signal_or_restart+0xbc/0x840 [ 323.246728][ T39] ? force_sig_info_to_task+0x392/0x4b0 [ 323.246754][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 323.246794][ T39] exit_to_user_mode_loop+0x8c/0x4d0 [ 323.246813][ T39] ? rcu_is_watching+0x15/0xb0 [ 323.246837][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.246857][ T39] do_syscall_64+0x33e/0xf80 [ 323.246879][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.246899][ T39] ? clear_bhb_loop+0x40/0x90 [ 323.246921][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.246941][ T39] RIP: 0033:0x7fa3312acdd9 [ 323.246958][ T39] RSP: 002b:00007fa32f4fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 323.246979][ T39] RAX: ffffffffffffffda RBX: 00007fa331525fa8 RCX: 00007fa3312acdd9 [ 323.246993][ T39] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa331525fac [ 323.247006][ T39] RBP: 00007fa331525fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 323.247019][ T39] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 323.247040][ T39] R13: 00007fa331526038 R14: 00007ffcf530b5e0 R15: 00007ffcf530b6c8 [ 323.247072][ T39] [ 323.247109][ T39] [ 323.247109][ T39] Showing all locks held in the system: [ 323.247118][ T39] 5 locks held by kworker/0:1/10: [ 323.247129][ T39] #0: ffff8880226d1938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.247178][ T39] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.247227][ T39] #2: ffff888029652210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 323.247277][ T39] #3: ffff888029660658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 323.247328][ T39] #4: ffff8880284ad858 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 323.247379][ T39] 2 locks held by kworker/u8:1/13: [ 323.247389][ T39] #0: ffff8880203db938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.247437][ T39] #1: ffffc90000127c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.247489][ T39] 4 locks held by pr/legacy/17: [ 323.247499][ T39] #0: ffffffff8dfba4e0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 323.247541][ T39] #1: ffffffff8dea1dd8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 323.247583][ T39] #2: ffffffff99b6ead8 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90 [ 323.247635][ T39] #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 323.247694][ T39] 7 locks held by kworker/1:1/37: [ 323.247705][ T39] #0: ffff88813fe43938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.247754][ T39] #1: ffffc90000ac7c40 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.247803][ T39] #2: ffffffff8e054af8 (pack_mutex){+.+.}-{4:4}, at: bpf_prog_pack_free+0x35/0x420 [ 323.247849][ T39] #3: ffffffff8de6e318 (text_mutex){+.+.}-{4:4}, at: text_poke_set+0xa3/0x180 [ 323.247890][ T39] #4: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 323.247938][ T39] #5: ffff88813fe67c58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 323.247991][ T39] #6: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 323.248041][ T39] 1 lock held by khungtaskd/39: [ 323.248052][ T39] #0: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 323.248112][ T39] 2 locks held by kworker/u8:2/44: [ 323.248122][ T39] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.248172][ T39] #1: ffffc90000b67c40 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.248223][ T39] 2 locks held by kworker/u8:3/57: [ 323.248233][ T39] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.248282][ T39] #1: ffffc9000123fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.248331][ T39] 5 locks held by kworker/u8:5/91: [ 323.248342][ T39] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.248391][ T39] #1: ffffc9000154fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.248441][ T39] #2: ffff888026bf0310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 323.248490][ T39] #3: ffff8880286cdd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 323.248536][ T39] #4: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 323.248595][ T39] 6 locks held by kworker/u8:9/1284: [ 323.248606][ T39] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.248660][ T39] #1: ffffc90004bffc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.248892][ T39] #2: ffff888039e78310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 323.248941][ T39] #3: ffff888037945120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 323.248986][ T39] #4: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 323.249036][ T39] #5: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 323.249087][ T39] 5 locks held by kworker/u8:12/1430: [ 323.249098][ T39] #0: ffff8880316c2138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.249147][ T39] #1: ffffc900050afc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.249197][ T39] #2: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 323.249248][ T39] #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 323.249297][ T39] #4: ffff88805d351758 (&hash->list_locks[i]){+...}-{3:3}, at: __batadv_dat_purge+0x131/0x400 [ 323.249353][ T39] 5 locks held by kworker/u8:16/3018: [ 323.249363][ T39] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.249406][ T39] #1: ffffc9000c297c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.249450][ T39] #2: ffffffff8de57d10 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 323.249494][ T39] #3: ffffffff8e09bc98 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 323.249537][ T39] #4: ffffffff8de6e318 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_queue+0x5f/0x110 [ 323.249581][ T39] 1 lock held by syslogd/4959: [ 323.249590][ T39] #0: ffff888031821518 (&si->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbe/0x1e0 [ 323.249635][ T39] 1 lock held by udevd/4977: [ 323.249644][ T39] #0: ffffffff8e6ea4f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 323.249699][ T39] 3 locks held by dhcpcd/5272: [ 323.249708][ T39] #0: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 323.249750][ T39] #1: ffff888031821518 (&si->socket.wq.wait){+.+.}-{3:3}, at: __wake_up_common_lock+0x2f/0x1e0 [ 323.249788][ T39] #2: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 323.249834][ T39] 2 locks held by getty/5369: [ 323.249843][ T39] #0: ffff888034fa90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 323.249887][ T39] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 323.249936][ T39] 6 locks held by kworker/0:5/5750: [ 323.249946][ T39] #0: ffff8880226d1938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.249990][ T39] #1: ffffc900051afc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.250041][ T39] #2: ffff8880295dc210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 323.250085][ T39] #3: ffff8880295d7658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 323.250128][ T39] #4: ffff8880288c4f58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 323.250172][ T39] #5: ffffffff8ec1a7c0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 323.250217][ T39] 5 locks held by kworker/1:5/5751: [ 323.250227][ T39] #0: ffff88813fe43938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.250271][ T39] #1: ffffc900051bfc40 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.250314][ T39] #2: ffff88803b34d510 (&sb->s_type->i_lock_key){+.+.}-{3:3}, at: free_unref_folios+0x11a2/0x1980 [ 323.270343][ T39] #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 323.270398][ T39] #4: ffff8880b873b820 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 323.270453][ T39] 3 locks held by kworker/1:6/5752: [ 323.270464][ T39] #0: ffff88813fe43938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.270517][ T39] #1: ffffc900051cfc40 ((work_completion)(&mm->async_put_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.270568][ T39] #2: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 323.270619][ T39] 1 lock held by udevd/5809: [ 323.270630][ T39] #0: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 323.270688][ T39] 3 locks held by udevd/5841: [ 323.270699][ T39] #0: ffff88802c377090 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 323.270740][ T39] #1: ffff88803af7c878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 323.270786][ T39] #2: ffff888029f3a4b8 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 323.270832][ T39] 3 locks held by kworker/0:6/5847: [ 323.270843][ T39] #0: ffff88813fe42938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.270891][ T39] #1: ffffc9000544fc40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.270940][ T39] #2: ffff88802962a210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 323.270991][ T39] 7 locks held by kworker/1:7/6244: [ 323.271003][ T39] #0: ffff88813fe43938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.271053][ T39] #1: ffffc90003bafc40 ((work_completion)(&mm->async_put_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.271109][ T39] #2: ffff8880308a10b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 323.271159][ T39] #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 323.271207][ T39] #4: ffff88802dfcea18 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 323.271261][ T39] #5: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 323.271312][ T39] #6: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x4f0 [ 323.271364][ T39] 4 locks held by kworker/1:8/6696: [ 323.271375][ T39] #0: ffff88813fe43938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 323.271425][ T39] #1: ffffc9000535fc40 (drain_vmap_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 323.271474][ T39] #2: ffffffff8e0ed538 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 323.271515][ T39] #3: ffff88813fffbb98 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 323.271569][ T39] 1 lock held by syz.1.444/7697: [ 323.271580][ T39] #0: ffff88803f55f578 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 323.271635][ T39] 5 locks held by syz.0.445/7702: [ 323.271646][ T39] #0: ffff888034ba90b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 323.271702][ T39] #1: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 323.271764][ T39] #2: ffff888032915898 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 323.275833][ T39] #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 323.275873][ T39] #4: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x4f0 [ 323.275922][ T39] [ 323.275926][ T39] ============================================= [ 323.275926][ T39] [ 323.275947][ T39] NMI backtrace for cpu 0 [ 323.275959][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 323.275975][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.275984][ T39] Call Trace: [ 323.275990][ T39] [ 323.275996][ T39] dump_stack_lvl+0xe8/0x150 [ 323.276020][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 323.276041][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 323.276060][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 323.276083][ T39] sys_info+0x135/0x170 [ 323.276102][ T39] watchdog+0xfd3/0x1030 [ 323.276127][ T39] ? watchdog+0x1c9/0x1030 [ 323.276150][ T39] kthread+0x388/0x470 [ 323.276165][ T39] ? __pfx_watchdog+0x10/0x10 [ 323.276183][ T39] ? __pfx_kthread+0x10/0x10 [ 323.276197][ T39] ret_from_fork+0x514/0xb70 [ 323.276216][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 323.276232][ T39] ? __switch_to+0xc79/0x1410 [ 323.276248][ T39] ? __pfx_kthread+0x10/0x10 [ 323.276263][ T39] ret_from_fork_asm+0x1a/0x30 [ 323.276291][ T39] [ 323.276308][ T39] Sending NMI from CPU 0 to CPUs 1: [ 323.276335][ C1] NMI backtrace for cpu 1 [ 323.276349][ C1] CPU: 1 UID: 0 PID: 6244 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 323.276368][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.276378][ C1] Workqueue: events mmput_async_fn [ 323.276400][ C1] RIP: 0010:__lock_acquire+0x1821/0x2d10 [ 323.276419][ C1] Code: 00 0f 83 8a 01 00 00 4e 8b 24 fd 60 58 78 95 ff c0 25 ff 0f 00 00 89 05 2d 57 d8 13 4d 85 e4 0f 84 b2 01 00 00 49 8b 44 24 10 <48> 85 c0 0f 84 3c 0d 00 00 8b 0d 18 57 d8 13 39 48 5c 0f 84 67 ff [ 323.276432][ C1] RSP: 0018:ffffc90003bae950 EFLAGS: 00000086 [ 323.276445][ C1] RAX: ffffffff9321eed0 RBX: 00000000000003cd RCX: ffffffff96198f78 [ 323.276457][ C1] RDX: ffffffff9628b428 RSI: ffff88802f8eca40 RDI: 00000000000003cd [ 323.276469][ C1] RBP: d019cdd6c13b4f31 R08: ffffc90003bae918 R09: 0000000000000020 [ 323.276480][ C1] R10: dffffc0000000000 R11: ffffffff81a0d3b0 R12: ffffffff96198f78 [ 323.276491][ C1] R13: ffff88802f8eca40 R14: ffff88802f8ebd80 R15: 000000000000002b [ 323.276502][ C1] FS: 0000000000000000(0000) GS:ffff88812601f000(0000) knlGS:0000000000000000 [ 323.276515][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.276526][ C1] CR2: 00007f3bd0c84ff8 CR3: 00000000389b8000 CR4: 00000000003526f0 [ 323.276540][ C1] Call Trace: [ 323.276546][ C1] [ 323.276562][ C1] ? psi_account_irqtime+0x1e2/0x6f0 [ 323.276582][ C1] lock_acquire+0x106/0x350 [ 323.276597][ C1] ? psi_account_irqtime+0x1e2/0x6f0 [ 323.276622][ C1] psi_write_begin+0xab/0x160 [ 323.276640][ C1] ? psi_account_irqtime+0x1e2/0x6f0 [ 323.276666][ C1] psi_account_irqtime+0x1e2/0x6f0 [ 323.276689][ C1] __schedule+0x955/0x5500 [ 323.276710][ C1] ? lockdep_unlock+0x5d/0xd0 [ 323.276729][ C1] ? __pfx___schedule+0x10/0x10 [ 323.276744][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 323.276761][ C1] ? rcu_is_watching+0x15/0xb0 [ 323.276782][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 323.276798][ C1] preempt_schedule_common+0x82/0xd0 [ 323.276814][ C1] preempt_schedule_thunk+0x16/0x40 [ 323.276831][ C1] rt_spin_lock+0x316/0x400 [ 323.276852][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 323.276870][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 323.276894][ C1] free_one_page+0x43/0x250 [ 323.276926][ C1] free_unref_folios+0x138d/0x1980 [ 323.276951][ C1] folios_put_refs+0x7dd/0x8f0 [ 323.276973][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 323.276991][ C1] ? free_swap_cache+0x109/0x300 [ 323.277010][ C1] free_pages_and_swap_cache+0x2b9/0x490 [ 323.277031][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 323.277066][ C1] ? __zap_vma_range+0x3a75/0x4840 [ 323.277084][ C1] tlb_flush_mmu+0x6b4/0xa10 [ 323.277100][ C1] ? __zap_vma_range+0x3a75/0x4840 [ 323.277116][ C1] ? __zap_vma_range+0x3a75/0x4840 [ 323.277133][ C1] __zap_vma_range+0x3aa0/0x4840 [ 323.277178][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 323.277198][ C1] ? mas_find+0xb0e/0xd30 [ 323.277215][ C1] ? unmap_vmas+0x1bd/0x530 [ 323.277232][ C1] unmap_vmas+0x379/0x530 [ 323.277251][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 323.277276][ C1] exit_mmap+0x280/0x9e0 [ 323.277298][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 323.277316][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.277343][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 323.277363][ C1] ? __pfx_exit_aio+0x10/0x10 [ 323.277388][ C1] ? uprobe_clear_state+0x2bf/0x3f0 [ 323.277405][ C1] ? process_one_work+0x8be/0x1630 [ 323.277424][ C1] __mmput+0xcb/0x3e0 [ 323.277444][ C1] ? process_one_work+0x8be/0x1630 [ 323.277462][ C1] process_one_work+0x98b/0x1630 [ 323.277489][ C1] ? __pfx_process_one_work+0x10/0x10 [ 323.277508][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.277534][ C1] worker_thread+0xb49/0x1140 [ 323.277557][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 323.277579][ C1] kthread+0x388/0x470 [ 323.277594][ C1] ? __pfx_worker_thread+0x10/0x10 [ 323.277614][ C1] ? __pfx_kthread+0x10/0x10 [ 323.277629][ C1] ret_from_fork+0x514/0xb70 [ 323.277647][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 323.277739][ C1] ? __switch_to+0xc79/0x1410 [ 323.277757][ C1] ? __pfx_kthread+0x10/0x10 [ 323.277774][ C1] ret_from_fork_asm+0x1a/0x30 [ 323.277800][ C1] [ 323.375849][ T7703] loop4: detected capacity change from 0 to 4096 [ 323.379964][ T1430] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.388001][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394592][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394634][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394654][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394671][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394688][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394705][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394722][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394740][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394757][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394776][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394794][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394811][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394828][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394858][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394876][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394894][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394910][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394927][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394944][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394962][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394982][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.394999][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395016][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395032][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395049][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395066][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395083][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395099][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395116][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395133][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395150][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395166][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395183][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395201][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395219][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395236][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395253][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395271][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395289][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395307][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395326][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395345][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395364][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395381][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395398][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395416][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395433][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395450][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395468][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395485][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395501][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395536][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395555][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395572][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395589][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395607][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395624][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395642][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395659][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.395677][ T2972] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 323.459770][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 323.459797][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 323.459815][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.459824][ T39] Call Trace: [ 323.459831][ T39] [ 323.459838][ T39] vpanic+0x56c/0xa60 [ 323.459862][ T39] ? __pfx___schedule+0x10/0x10 [ 323.459878][ T39] ? __pfx_vpanic+0x10/0x10 [ 323.459903][ T39] panic+0xc5/0xd0 [ 323.459920][ T39] ? __pfx_panic+0x10/0x10 [ 323.459938][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 323.459955][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 323.459978][ T39] watchdog+0x102c/0x1030 [ 323.460003][ T39] ? watchdog+0x1c9/0x1030 [ 323.460025][ T39] kthread+0x388/0x470 [ 323.460040][ T39] ? __pfx_watchdog+0x10/0x10 [ 323.460058][ T39] ? __pfx_kthread+0x10/0x10 [ 323.460078][ T39] ret_from_fork+0x514/0xb70 [ 323.460097][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 323.460112][ T39] ? __switch_to+0xc79/0x1410 [ 323.460128][ T39] ? __pfx_kthread+0x10/0x10 [ 323.460143][ T39] ret_from_fork_asm+0x1a/0x30 [ 323.460171][ T39] [ 323.464283][ T39] Kernel Offset: disabled