last executing test programs: 10.07748528s ago: executing program 1 (id=213): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000000c0)={0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) 9.396380699s ago: executing program 1 (id=214): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000000c0)={0x8, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}, {@version_9p2000}, {@loose}, {@msize={'msize', 0x3d, 0xad3f}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@ignoreqv}], [{@dont_hash}, {@dont_hash}]}}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f0000003880)={0x18, 0x0, r5, {0x3a}}, 0x18) mknod$loop(&(0x7f00000038c0)='./file0\x00', 0x6000, 0x1) syz_io_uring_setup(0x4352, &(0x7f0000003900)={0x0, 0xd51d, 0x8, 0x1, 0x19b, 0x0, r1}, &(0x7f0000003980)=0x0, &(0x7f00000039c0)) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000001, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000003a00)=@IORING_OP_MADVISE={0x19, 0x28, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x7e}) r9 = dup(r0) mount$fuse(0x0, &(0x7f0000003a40)='./file0\x00', &(0x7f0000003a80), 0x144001, &(0x7f0000003ac0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x22bf}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}], [{@flag='nolazytime'}, {@fowner_eq={'fowner', 0x3d, r6}}, {@audit}, {@subj_user}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) chmod(&(0x7f0000003c00)='./file0\x00', 0x5) listxattr(&(0x7f00000041c0)='./file0\x00', &(0x7f0000004200)=""/14, 0xe) 9.202437638s ago: executing program 1 (id=216): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.009197765s ago: executing program 1 (id=217): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') write$khugepaged_scan(r2, 0x0, 0x2d) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r1, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x204440, &(0x7f0000000500)=ANY=[], 0x2, 0x1cc, &(0x7f0000000540)="$eJzsmb2vEkEUxc/MLh8SY7SxsLEQI0ZZdhc1NBSY2JvgZyeRlaALGFgTILEgNjaWFia2/gMWFlQWdna2WqiJiYWU1mtmGHfHBXzwXrPJu7+E2TMzd+7cGeAUAIIgDi3fv/3++uJq7cZFAEdRRE6N/zTiGK7Ff3n15MLL+rXXbz+/+dA/9nSezMcAhOH2+5sA3jcMBKofhv+uLqrncfBI3wTHeaVvg+Gs0vfAcUtpDwx3lX6o6cERJXzPuj/w2w+6vmeLxhGNK5pqsr7FjKENIK/qY9r8aDJ91PJ9b5gUmfDvPitTu4q97m/R4Khr9yferzvPn81E31LjtnZ/DjgcpatgaCpdQw6WZcVXop3/lBnnN7Y5fxrEiXIqyiCRLsGSI+ILHY2cXMw/rq76kZbi9yGkcQFYmfpUOFjmrDKBtTGxPzETOKf5kwkz8o9K0HtcGU2m5W6v1fE6Xt91q1fsS7Z92a1II1q2//G/vPSngpY/syE2y7IYt4Jg6IyBYOhEfXfZao7bfDf4Jddw6X8cpTPLHOKjIo+dW78HUy8un0KVjI3FEwRBEARBEARBEARBEARB7MRpMPkrqPqjKtyAe11G/wkAAP//s9lpBQ==") r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) syz_usb_connect(0x0, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000042ebf04021046c022f1f0000000109024000010000000009040000000202ff00052406000005240000000d240f010000000000000000000524"], 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4004550c, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shmctl$SHM_LOCK(0x0, 0xb) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_vhci(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 8.975095038s ago: executing program 3 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00"], 0x64}}, 0x0) 8.657633887s ago: executing program 3 (id=220): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a824008100020186dd600c0a350014060000000000000000000000000000000000fe80aa00004e22a08c686872f29d877b86d70c21b83a50ebd6bb755b12f155ad6943d8642cbbf2c37f7adc37108808142fced5bdb3b63f670b8b564be89e1429837c0db1f458a01814019029f0068131ad4ff058db83dded46b2cbd28883c6f63302fcc246e02179402f3737e1cc487de0a44fbd5bdb25c0bcac3877668ced9de31904f918500d1536bd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000000)='./file1\x00', 0x2278052, &(0x7f0000000880)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYBLOB="6b82446695546d2bf310453ff50e45499e9350d30eb531ab622f98e5bdc30d5846babd98825152b92015ac2738835861976ab56d9712b18a8ce10aa8f670b57da2ca91060bf800db737ea9c5ff6414fc1ddd0b681a80d2a0d4c5062a888a4f0cec5595dbab04a6dcb9d9e0652b65e0decb57f511c359f8320bed081377"], 0x4, 0xf9e, &(0x7f000000a280)="$eJzs3U9sHNUZAPA36/W/2MRroGCghBSKCBTskERqegsC9VIJcekdFBIaYShqaCWiQEwPiEqIIiFOFQcQF0qlFKlIoEoV6qntqVVvRapQL1SqUimohxYpdhX7zXp3vC9er3dnd72/n/Tt85s3O9838caeGc++DcDIqqw/Hju2kIXw1idvPvLik9lHV5fdUV/j4PpjFnu1EMJ4Qz8rbO/zuODK5fMnW7VZOLL+mPfDo5fqz50JIayEg+HTUAsfLC1/+f7bDx/68JWpm14/9/RLPdr9uuJ+AADAXnTxT8t/u/eff7x//quLB06Eyfry/Pi8Fvsz8bj/cDxQzo+XK6G5nzVEo4nCemMxKoX1xgrrVQt5qol844XtjCfWm9gm31jDslb7CQAAAMMoP6+thayy2NSvVBYXN877r/p8biJbfPbM8umzfSoUAAAA6Nh/LqzfdDvEMTUANYhiTOcvsJ0974Pv7fw5u4pKyfmqJecbmejs9SaEEEII0b1wPCKGINbmSrzYAAAAANBivrAtVro7U1d9a7X28l96qNL6+dAFhdff1mknuvz6v3b+qa0rlJq/hd7nH+9z/o28ifzvvewnDgAAndurR5P5fuXH0/k8BsV5BMeanjUzttPzj0phO9Ud1pmaV3BY5htM1TlWch2dStW/0+9jv6TqL86HOahS9Rfn6RxUqfonS66jU6n6W1z5CYP43zpV/3TJdXQqVf++kuvoVKr+mZLr6FSq/tmS6+hUqv7rSq6jU6n695dcR6dS9Q/LbbWp+msl19GpVP3zG83AH0ak6r++5Do6lar/hpLr6FSq/htLrqNfbo9t/u9wILHeTIuDv4E7GAQAAABa+t/Qz/83olEdgBqEEGLo4+WNX4bNy6daLBO7isoA1NCrmG71GhJCiJGMz/w8HPi40L9LDwAAAMCAyN8XkL/rfS3Kx8e2jH/27tXHfLzaOD61uYF8fHyb7U9sMz65zTgAAAAQwm9fPX3LG9nmfHfF9/TvdD68fN6o6fDRauhgHqPifIQ7zb/bec92m7/1hCPDMhsbAAAAe1X23U9X73vknefnv7p44ETD2e9qPN/N5wGtxmsDH8d+fl/AbKGf5efQJ5rzVBLrFa8PXJfa3mO73FEAAAAYYfn5ey1klcWG8+5aqFQWFzfPxxfCeHb6zPKpw7Gffz7LH+bGJ68uf7DkugEAAID2bZ7vtz7/zz/HdyFMZIvPnlk+fXajP1tfPl5pvC4wt7k8a7wuUCssP5JYfjT24+d3hh/MTa8vXzz5w+Unu73zAAAAMCLOvnDu6SeWl0/9aHS+qIYQdrWdMAh74Qtf9PSLfv9kAgAAuu2LL94c//HR2d9tvP9/c/671fjFwdivxbn9/hyX5/cJ5O8D2PJ+/ceb88yl1nuueb1aYb2xGJOFuqcathPW5xtsft58Kl+teTsTiXwzhXyzhXzFeQqqhfWzFnMJhhYzAebrzRWWF+dhrBZyZIX8d7bIBQAAALml5595bunsC+ceOPPME0+deurUs0ePHP/O8eOHH/z2g0vr9/UvNd7dDwAAAAyjzZt++10JAAAAAAAAAAAAAAAAAAAAjK4yPk6s3/sIAAAAo+7fF0IIK6nIrjEmRiLyDxjsdx3DHtkA1NC7WJvsfw17O4L/h0IIIYTYZVzzvK/nMeVYZjBiba34SfMAAAAAvXXl8vmTje0WK1lX89W3VttoVmPevJ194K/zVyNf7dJDzddL9nW1GkZd2a9/+Qc1/2TL8fde7m7+9Qvxtc3+9j//Ks0bOLH+WI296Xbz3rP0y4V6/hDCrdU28xf3/7F2MzY7VMh/T2gv/9o7hfyPN/Uq7ea/t5B/X5v5t+z/c6kMU9fMf1/MvxD7h+5qN3/zLk4WsrX7AvhWYf+fDO3mL+x/rc2EBffH/AAwiuq/zdcu9LeQLsuPEvLj6ZnYz/c3P2At3v2w0+P/SmE71V1X3rzd/Djo5tivH9WtNOfN7bT+/N9lNrbXdVhn0bDcVZKqv1vfx15L1T9ech2dStU/UXIdnUrV3/rsffCk6r/22ePgSNXf9oWIPkvVPyzXlVP1z5RcR6dS9c+WXEenUvXv9Pd4v6Tq319yHZ1K1T9Xch2dStXf4WW10qXqny+5jk6l6r++5Do6lar/hpLr6FSq/htLrqNfbott6nw4P/+ci2OrlzfPjMYaxidb/Fu2/ccQAAAAoKf+1d95IBLRcOWg77UIIYQoPS7f7XeA2HGMDUANQgxz/HdtQ7/rEEL0LtbW+nbpgQGQDdG94gB0T29ns2DQ+f6PNt//0eb7z7Xkf4nPCv3c2Dbj1W3Gx7cZnyiMZ4UnTqbGoxsK213Lr2tGN24z/rW4B6nx/YXn/6QwfvM221/YZvyWbcZvje3fz1cnW43fts3zAQAAGA03xdb5IQAAAOxdL/7q49d+c8/jl+e/unjgRJjYMu/84difjH9bfzX2i/Pe58bj3/x/Gvvvxvb3sf1HYX33nwAAAEDv5Z8T4+//AAAAsHfln1Pq/B8AAAD2rvnYOv8HAACAvev62Dr/BwAAgD0sm2q9OLb5dYE7Y9vuvH4AwOD7emxvj+2B2N4R22/ENj8OuCu23yypPgCge37x/Z8dfyPbnO//aGH8Slyet1usbFwpyCrNM/lPx3ZfbO9us57i5wG0mz+3v808vco/t8v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeUVl/PHZsIQvhrU/efOTnE6/95eqyO+prHFx/zGKvFkIYrz8vH93s/zqueOXy+ZON7Wpss3AkZCGrLw+PXqpnmgkhrISD4dNQCx8sLX/5/tsPH/rwlambXj/39Es9/Cdo2j8AAADYi/4fAAD//91mFgs=") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffff, 0xf5f}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x3, 0x9}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000002c0)={r7, 0x20a9ad}, &(0x7f0000000300)=0x8) 7.750252128s ago: executing program 4 (id=221): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000140)) syz_read_part_table(0x61c, &(0x7f0000000000)="$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") ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', r5, 0x20, 0x8, 0x8, 0xff, {{0x15, 0x4, 0x1, 0xb, 0x54, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x1f, 0x10, [@local, @local, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010100, @private=0xa010101]}, @timestamp={0x44, 0x8, 0xcc, 0x0, 0xb, [0x7f]}, @cipso={0x86, 0x17, 0x0, [{0x5, 0x8, "9700b95c7346"}, {0x7, 0x9, "c18824b67088bd"}]}]}}}}}) 7.225938361s ago: executing program 3 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x6c}}, 0x840) 6.895655365s ago: executing program 3 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r0, 0x82081fc) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) semget$private(0x0, 0x6, 0x583) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0xffe, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) ftruncate(r4, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x800000) 5.109483105s ago: executing program 1 (id=227): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f00000013c0)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,nointegrity,iocharset=cp1251,integrity,nodiscard,noquota,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c00c38b4986bd7086e58f5d7fd70ab0f8e8bb0e5f5b35be555a19034ea00aa5cc6053411b1c187a24d1f68a37ecec3d26f9ba8207f6ce22b0a47e28485c69c14dc952b0c5e5f1ffe29eb2ce10e7e2a59e32a5a7ea7d8a6fa0b5e90476f3fa2cb4fcba14a881906678b3f96174c0ea0e4edc3068e37fec09729df129bb3e5b9490df2879472cb2e2"], 0x24, 0x621a, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) ioctl$EVIOCRMFF(r1, 0x40085507, 0x0) getdents64(r0, &(0x7f0000000040)=""/52, 0x34) getdents64(r0, 0xfffffffffffffffe, 0x29) 5.041743703s ago: executing program 0 (id=228): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.569110694s ago: executing program 4 (id=229): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@bh}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES16, @ANYBLOB='\x00\x00\x00\x00'], 0x2c}}, 0x885) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r4], 0x4}}, 0x0) sendfile(r7, r5, 0x0, 0x100000000) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 4.440405879s ago: executing program 3 (id=230): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x4f, 0x21, 0x85, 0x8, 0x16d6, 0x1, 0xb2cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x50, 0x9, [{{0x9, 0x4, 0xf4, 0x0, 0x0, 0x1c, 0xb9, 0xfb, 0x6}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 4.328723026s ago: executing program 0 (id=231): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000002c00002c00000009000000040000000000000e0400000000000000060000000000000f0100000009000000000000000f03000000e104180000002e616130610000"], &(0x7f0000000900)=""/179, 0x4d, 0xb3, 0x1}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.913887195s ago: executing program 4 (id=232): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x4f, 0x21, 0x85, 0x8, 0x16d6, 0x1, 0xb2cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x50, 0x9, [{{0x9, 0x4, 0xf4, 0x0, 0x0, 0x1c, 0xb9, 0xfb, 0x6}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) socket$igmp(0x2, 0x3, 0x2) 3.181909189s ago: executing program 0 (id=233): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x900, 0x0, 0x36314247}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x8000, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 2.976045537s ago: executing program 0 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (fail_nth: 1) 2.890161753s ago: executing program 2 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 2.662073055s ago: executing program 2 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004140)={0x1ba8, 0x3b, 0x107, 0x0, 0x0, {0x1f, 0x7c}, [@nested={0x2a1, 0x13f, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @pid}, @generic="0237287bd28baa3c25836198c7a7edc42fbfe660d02f9ab7a18b5ff0c5fc54dfd19ce70b16030800d8664f5246a8180592d1253614ad98f8cdd795ee51591586ded47c32755f73403facd6c68c95f64aa6137f43e1cb128772550075e2b0cc2126f42f8875925de6f8d747f47526b476b3a74e3d8167c62dc18f9e63c35dcc3ac9bf7c883b10c5b98f9c95b37ee32a7dc51650011726bc2fa32db32b5b63a896b05f5c03e91c30f3daa93024633e7c20a55e275107daf15dc6168d59dffe1d0c95183bbfd7ebb33767fd8676b9572b9ad48af711593a668ebe71", @generic="e6f590d431097cd41328bd318637ce11a4f5784872299533a87122e536808c78c5aeba44817b7ef674617e0a77b7fd766885ffe346c7b4bb24654e24b2001a8960401bfee92c86ae9f8ede0dafa08e8dafdfc601dec8aee2ca924d196505204b9e161a3814497cfc91c11b095bc8b59dfc9a242543c06ad5fdb2d93de90773d6c1e2d81095a803dfeaf9a59fe108e43968732ef67665f34c9140ebbef1d351f15dc916b9755da900aebd5dd4ddf360cc9ac199228cea6e", @nested={0xf6, 0xe5, 0x0, 0x1, [@generic="ac8303a36c474b0431325d528660733d9d75ccb34f9621a4605c2a9dd8a5eccb01ee0ec3550ee1229c2758bd6b16ec33bb24f77d5b7b69d0caa3a365462eb60fe8604bdd3919911796f5f2fea1a568999c780d88d92956977cb828c9f3b5b2b8814da3991766a5b9090319906612c1d5738c53d069fc0a545c27440834d3495b07a24c1b9e08f2a1b0ae6e0916973bef4555c0a184cfb39df3d813f2238de77d86937e023b8e7ced05a7afd64828ed450101", @generic="756d83479c9abdf908f2d79c5c4dbe93f5803ad85c9e82ce1bc4851297f7f6793279a19b30ffd1cee08d4845cadd817bf6549219", @typed={0xb, 0xa, 0x0, 0x0, @str='&*,{-(\x00'}]}, @typed={0x4, 0x112}, @typed={0x8, 0x61, 0x0, 0x0, @fd}]}, @generic="bcd40fe42bc5bb81c9e326fc7ba17fb86b412360663956e3295833d5feb14df460d6c1bac4a81e59044dfe49fbd41171f6594a7125e94d2d3232d35ee075f5a0f257037f", @typed={0x8, 0x7, 0x0, 0x0, @pid}, @generic="919a5d74d86e816022c9a9c0fd8ccbc4765f3d7697f771cf790fe203c7825fc6f9bc1335e3009ed33b273b4e0ed7a8", @nested={0x1794, 0xb8, 0x0, 0x1, [@nested={0x3c, 0xc0, 0x0, 0x1, [@generic="0279b75bce5f8a5cb90b2f5bdf84fbc37ea518c058af4ad18e5f7dc0544924928c644688", @typed={0x14, 0x112, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}]}, @nested={0x4, 0x13e}, @typed={0x4, 0x22}, @typed={0x8, 0x8a, 0x0, 0x0, @uid}, @nested={0x173b, 0x13e, 0x0, 0x1, [@nested={0xf0, 0xc6, 0x0, 0x1, [@generic="71168bcfb495a9eba6e9a3f810d85a80e2da315da5ea17391739467f3a914f73adc68d328a7ba1be94c80af540995501cf390e6071349928093e621e8b85386d49686ac62822a030b7d25dbdf88baa90ca0e16f519c871177752c3f47966960e926c3288061900992469c159c1a062cbfb099e3706dee8bdc7172e904054dee6f832926a5f4303c4680e97ec1ea1104ff7a4452015d83dce3b0d9e1f9c2880b663b10147209b515a2b4c43938e88637abffb41c075d28418b9f0e42f520f3575ae43c4a248fc9062cb4bbd4415ecc759c1a3b68da6ccd9b943c7112f38d80ca08b26be3eb3fce0b77abfc4be"]}, @generic="d3f1c138d09c1b1ad41486a15ff00345ec4c5e9bab3b9232b73c4a0577dfefb81881ab6639f18d861ae1fb0916271dc4d89e197a3b411bf72d141a3a3351e2bfafdc9e80b556d08f02cca698e750aed1d2ed2829ac6b72db8cc654f8b2ca7b64932f8ff5af3a3525a6df99581e05f0c876ee1d016a9a923d2aa09ed25c520e3be05b4e87f29d30f822770f26ad4954cfd7b5ec5c8e1ccb98743ef831db", @generic="443a7b3f99dea162f23fdd63ade86729f1427c7f87cd23ade80bf5636de44f6ef65f31c438ef9ad9b54794967eba1d38d50ea0681cdc0e8d3f04172be9a74d802c595070832a6f6294ce3188ee193ae774ac43cc81f738aa8e02b35429802467c2134feb4f4dd90b71eb2cf04a0903748966677f1b97", @generic="79c5aa4f5492559da85fbfbe94a4ee60aa0b78e872275b772b10fd3c3232de1574a70e3ea73764a5f7ca36976a733875a1ae2cd517e130b301b55f3b4e510e65bb386993567684eefef8aea5", @nested={0x1e0, 0xca, 0x0, 0x1, [@typed={0xc, 0x53, 0x0, 0x0, @u64=0x100000001}, @typed={0xf1, 0x3b, 0x0, 0x0, @binary="460a189b6d6ad7ef4587663bee621065287d82633049e98584975b2eb6ffc4309f25f9273d6d5c1b7050b1fe20eaca88f377f67e1e0b0aed96fe20e6a161728b72005082f7fd78325e5c595b3277e7f7627ac4bb6fdcec8826e3f43d1e8058f612e2dae0ea8b9c5434ec39074fb37042d8e6be7f088a85809bbd04d6ca2a2a330b8d3125afe3afa0457a991d9eff74906a09044534fe38eb97d488b2e59f88fa20fd9856f7e6a4ef2289df61337696d2d1a916dee81df8e9b77ffa440d4e4cb3afcacdf6a258f3abee112a38f73e6477792cb5b522743a86fb56682623eb5c985a969c62d14d99a3ea37bfe635"}, @generic="f987e0afff2a6edb3eba18c1ce1bf7c5b8c040971476577801edd79f663f29c9c7780ceb8c461616680895fbf8b5d64e5550597396f1f773e7f40af877fa1a8a8d57cc630b56a57557deb943e88de4406d6d3c0c7488293c4b873f34cfdd803b30dd45846bcf8e557cd3429d9540b64a9b705c387ba5f17c687c16b13486cf591e1a66cb3632d64f2b462c171d2a400fb0c284090c4dbf6aede2bf8e98175afb2884e0a7e790e0534f643396f34a8741da53d46755c8a662c7b6fdcb72a26d7ec4b04856281991eb743065ff85ec0c918a8b2bea79e1ef2a8846c1a2"]}, @nested={0x12ff, 0x7d, 0x0, 0x1, [@generic="232eaf807ca03f1b89f4561ec90db5a0e996acececec3a0a300c57378e261f90415ebd46", @generic="2597deeb325c4cf1b26127ff76525b6aaf8a772e7fe990eea29b04757e21597cc92d6c27da98257b2340ff8f4e2b5a3d534807182320ef0eb7527ddd9bdb21bfd51c0544607a7e930f96ad1ce96d06668a467148", @generic="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", @generic="a6aa45a3e729c6f8e720278771785b9693498b0b077aa843c419c432b3cf510732d98db1231d747126c0039e45050178f92a09224e9bf5d8433834fcb9dcc5790d7b7974f0b0cae0ccd59dabefb5042f9afc51945c2a6b74fa21c7bca8d41cb85931db5240919f8c3ed47be2fbe020f9c49dad9d13abc0bcdec7e9414aede4030e7e870a6f44d28338a22462240d030ac5e7dabca014ba89163565ee12c95bfcf2ffabcd054681850dbbbbefc8fd9ff97c3f47b72a2466f2d8f4679e46b5ef4e747368fdd6a37ddcd8d96eac0df7b0717cb919f66521306f859bed06fb100720345589c5808d2d67f56c", @typed={0x8, 0xb4, 0x0, 0x0, @pid}, @nested={0x4}, @nested={0x4, 0xf5}, @generic="5bcb8397c9adf923918043820c1d7141704d74b0f25a5912832ed3ed706e114051bee3c4acf31f2792b354576798bfaee3f97c0a3cc7d594916be8fe203909f07c1a1ba6d01bd01ec7c3494dc272c3e84d90a3b89737d1a693b4222db40a434ae5e40097119fdca88ff69127d436c5599af938a3c59099fb66653e14d8871ddd8e54863aa564b25e6e0fe5cbc7cba86921bf539860ab16c674051178e3383222523719d0513b009c739acfacec975856ffe083cb9e6891539e", @typed={0xcc, 0x32, 0x0, 0x0, @binary="47867202f91b5dbeae940abf129e995c8b7846ee63bc6e3c3eb006f895c9c6194685f4006d94a09060e902722bec0f052e8fa1992956476690e4cc286f8392ae9793eeda706310a685588365ff10ceb62d43c859389f1510ea9e30370be708c181ebc112cb410c0cdf3e718909e07c27eef5c2c9f4fd954500411d41d0a55aa7266e7fda355312c419212918038b930166ae1aa9d3cbc3f60637ddac8044720a9f6aab3444d840a22530044e84290599899806b1b1452c1cad7afe8e96b214693e9d1574da56efde"}, @nested={0x4, 0x58}]}, @nested={0x8, 0x22, 0x0, 0x1, [@nested={0x4, 0xc}]}]}, @typed={0x8, 0x12a, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="8cdfd53d3a26eea803e78427d8e07fd09e75a20dc74c7c63aef00bfb21d33b583130832e1e6a4c92062ad610164c8352b38a7ea9bc5bab2b55aaf0a346af0672d78a95a8090e087060c145059ae5ee96505a44fff8133cbdd69416f7a4db9aa365e78f5700ce629be029d241ceee11432ed8529872447c68a7627ff6261718789c75dd764fe2eb2b76950c856617b33bd7e653d3b60a0e79b343a8cf94db7efcc9a2f813c5b53cacb299f9c4314a8acacb854e32cb4297480efb962c76028f70528ba085eeb8041761fb9b1de4998aa0b691", @typed={0xc, 0xd7, 0x0, 0x0, @u64=0xfffffffffffffffd}]}, 0x1ba8}}, 0x84) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0xf, 0x79, 0x4, 0x14, @local, @mcast2, 0x8, 0x80, 0x4c4, 0x6}}) socket(0x10, 0x803, 0x0) timerfd_create(0x7, 0x0) clock_adjtime(0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) 2.522290906s ago: executing program 0 (id=237): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) io_uring_setup(0x7bda, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.161837197s ago: executing program 0 (id=238): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x10, '\x00', @a}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==") symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsetxattr(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='osx./d'], 0x0, 0x0, 0x3) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x123) fallocate(r0, 0x0, 0x0, 0x2000402) lseek(r0, 0x0, 0x3) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r1, 0x0, 0x0) 990.974838ms ago: executing program 1 (id=239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000140)) syz_read_part_table(0x61c, &(0x7f0000000000)="$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") ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', r5, 0x20, 0x8, 0x8, 0xff, {{0x15, 0x4, 0x1, 0xb, 0x54, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x1f, 0x10, [@local, @local, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010100, @private=0xa010101]}, @timestamp={0x44, 0x8, 0xcc, 0x0, 0xb, [0x7f]}, @cipso={0x86, 0x17, 0x0, [{0x5, 0x8, "9700b95c7346"}, {0x7, 0x9, "c18824b67088bd"}]}]}}}}}) 928.197414ms ago: executing program 3 (id=240): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) inotify_init1(0x0) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xa8a, &(0x7f0000001880)="$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") r1 = syz_open_dev$vivid(0x0, 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000047c0)={0x4, 0xc, 0x6, 0x0, 0x6}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r2, 0x0, 0xfffe80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) umount2(&(0x7f0000000080)='./file0\x00', 0xa) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fddbdf252800000005002e000500000005002b00030000000c002d000203aaaaaaaaaaaa0a0001207770616e30000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 926.35939ms ago: executing program 2 (id=241): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 708.118226ms ago: executing program 4 (id=242): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xc101, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x20, &(0x7f00000004c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8496}}], &(0x7f00000005c0)='GPL\x00', 0xe, 0x6e, &(0x7f0000000600)=""/110, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xc, 0x0, 0xce}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0x1], &(0x7f0000000740)=[{0x5, 0x2, 0xd, 0x4}, {0x1, 0x4, 0x6, 0x3}, {0x2, 0x1, 0xc, 0x9}, {0x1, 0x5, 0x2, 0x4}, {0x5, 0x5, 0x5}, {0x5, 0x4, 0x2, 0x4}], 0x10, 0x10000}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x7, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000c208000000000000ff0f000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b700000083000000bf09000000000000550901000000000095000000000000001800000009000000000000000900000018430000060000000000000000000000180000000f000000000000001220000018460000fcffffff0000000000000000d5342000fcffffff95000000000000001839078def0000000000000000100000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0xd, 0x62, &(0x7f00000003c0)=""/98, 0x0, 0x0, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000440)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x2, 0x9, 0x4}, 0x10, 0x114a4, r2, 0x2, &(0x7f0000000980)=[r3, 0x1, r4, r5], &(0x7f00000009c0)=[{0x0, 0x5, 0xd, 0xc}, {0x0, 0x2, 0xb, 0x6}], 0x10, 0x873}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@empty, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0xfffb, 0x2007, 0xbf6, 0x4}}}}}, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 634.803077ms ago: executing program 2 (id=243): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 405.134358ms ago: executing program 2 (id=244): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x240081, 0x0) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast, 0x3}, 0x10) r1 = socket$inet6(0x2d, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0x89e0, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_del_from_accept_list={{0x2012, 0x7}, {0x9, @none}}}, 0xb) 226.870541ms ago: executing program 4 (id=245): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000000c0)={0x8, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}, {@version_9p2000}, {@loose}, {@msize={'msize', 0x3d, 0xad3f}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@ignoreqv}], [{@dont_hash}, {@dont_hash}]}}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f0000003880)={0x18, 0x0, r5, {0x3a}}, 0x18) mknod$loop(&(0x7f00000038c0)='./file0\x00', 0x6000, 0x1) syz_io_uring_setup(0x4352, &(0x7f0000003900)={0x0, 0xd51d, 0x8, 0x1, 0x19b, 0x0, r1}, &(0x7f0000003980)=0x0, &(0x7f00000039c0)) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000001, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000003a00)=@IORING_OP_MADVISE={0x19, 0x28, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x7e}) r9 = dup(r0) mount$fuse(0x0, &(0x7f0000003a40)='./file0\x00', &(0x7f0000003a80), 0x144001, &(0x7f0000003ac0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x22bf}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}], [{@flag='nolazytime'}, {@fowner_eq={'fowner', 0x3d, r6}}, {@audit}, {@subj_user}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) chmod(&(0x7f0000003c00)='./file0\x00', 0x5) listxattr(&(0x7f00000041c0)='./file0\x00', &(0x7f0000004200)=""/14, 0xe) 77.510087ms ago: executing program 2 (id=246): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) unshare(0x6a040000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x301000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x2, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x4, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0xb, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000004b80)=[{{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)="44b194f176ffa00383d9da76963ede4dea2d50bfd96e8bd4931367439c3579d5208ac5a57238a0cf04341537c83a710bfc142c4ea92b755c7a51b928d15d1a170c729637614fefc7ed0960062292191c5c0e69e402b22e563b567032c5ef21697dd29fff305b39eab096be5e4bd55070f3b7c4808a55ef4958e59e2b4da73f459a639b6533926d8f04c051bc24d1ba261adc9b24885e655a45e77241704c6574aebb2f0eb99ace28786650732253964a9fc02924c706e0f5f74791af1f3112", 0xbf}, {&(0x7f0000000040)="74095c94dfb45557b7aca2d8a2a1924900daaaaa93e74f1d95cc7e3b8b4c9a1ef63279449f5818ca1fd822f2383fc6295a49d59fbae015b1d25dcc52f1ab16", 0x3f}, {&(0x7f0000000e40)="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", 0x1000}], 0x3, &(0x7f0000000740), 0x0, 0x1}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001e40)=[{&(0x7f00000008c0)="2ef3e3f7ee30b487677c27cdd682c00dadb029e10d3168a2c8d754118f8f638fe1659feda60be9ccfd3a3eaa60c36456dc4e0a39a03ec6d16ae3d0079e9ddce698130875bc9370ab5ef7c24a20baed0a32bc0770f9b60a97b33922864361c0420012e5494e37cffa0f52d91f7a7cae45a6dbafed0f6d44b8098a9c1a5ea35fe6c2b1df55e7bdbe022af4c5808d9530cc977bde9b710b3a64f651ad9a54dad9ac9be6ae2baafa8077dd6d2459d83d17c678d3130d112a5ee9d400a7e1d468a190c33b4d22553629595f96a574e1de0afdf695534e2f9e", 0xd6}, {&(0x7f00000009c0)="14cf6f57072ab8c98eb8c26f2f02df8f8ef5e1359fb1a1a0e1585ffd462fcf8b30a42f9540424b9da649fabaf89359a7cb9a4e547f66548a6fb741ee669fd6de56939b9e1bb18d43abccd7c2ac8273eb635ca7aabc8148ec2967ed50455dc4ee634e5277aae12913c0ced3f2602eb0b9cd6e8a3abbe7a18ba05aba0cd304e30a4c01b6d0b97fa4441f5c85f48149763f680c44749ba07ee14cc98ddd53bf4609b745f1fda766a7528fb5e123a51335964be467", 0xb3}, {&(0x7f0000000a80)="0b3322bf796b58e552796c3f928cc6b01566d28f20f99894153e8ead8c130dce641de8c9687297a2c7076f30838704bbcba504b29de71293c03737f7c742cd8b92e2d304e595d9df27ef35367b0cbfd022b2906531bc50c99feb7d8b6704ccff6506f20d1202d431928a6c582f5a12fb37a130e25f0366000871bbe632e856e47ac714eea88f970e4281b3ad0a6296a42a333f6fd3f87a1ccfc3218cac3b4ba202b08507a4d745a3963fdb7b813a26663b3acd4bb38fef9f17c16e9faafcfe169a0444938dd13d43f7bec550f06ce691", 0xd0}, {&(0x7f0000000800)="9749ebc05a6b603219d83890c62d556d0169b75c2399c720bc804804a5b561fe42f65cc9561fea767d1967538304ba31691e3b1501102e03434a3bb6604c7ad0e3d16d4389d7042f474f601408eed350cf77023217a04291b21ae08eaa00364a62696a46f4cdce26de3c", 0x6a}, {&(0x7f0000000b80)="c10b2bcb9c4bd352556aa2b34d43c128eca253db0a1bb5b6c3113c8b689d902bd63df7b4c0f09818e041dd789b4cb51db80d834c0e00afc6316c71d8730bb43ef389624fd409189dba9a8ae6a8b5153643dfb9f16dd827288ee86c939bbf878d9f716668d0e49390e3b466036c91694776d4da24322534bcb120ebc8061d932d49f9bfbe2a48669e35eb3f4ab3414d3f4d856596eac25814a56fd33a1b844cb086af8a9739c1f4cdb8f3e91e0ad92245c31639d00f75aa3b2457552018ab4b6e8ab5f78b0f20ce9ada4f978b1203c530bbb64e9a304b87f18d3eeb5cbc0979f6a44f11c00e904cf28719cc1e15032ef3370b", 0xf2}, {&(0x7f0000000c80)="af5ba5898b8e52311b40900f6b5f889a695fd28b5266de9df15c3616661e6162e82f3a30a03bade770023b944487a655775b474389c251f23a2db1256ed10df24e9d242ced0f429584151e904fb04b547e31324e36283d7e78bd5225061d22870b00dfe087261cc87bb9facc1dbe", 0x6e}, {&(0x7f0000000d00)="0ea3344eb98e452b24b849ef3b05534d70fa94b0b3cb0a5e9e7c4a4b056daf9f7d6317c31b236937fff230aff9c82fe62e99868ccfba11c730f6cfe594a7189d6f62763b14fd6e5af41fa900cc595b5a4da0090396eccf90e1c61d08b9d00feaf12b754abe905be5f7fefe79550e4d7ec07897d965318f57965301f9fa4559f69b775e73cf00f12ba1c2e164aa7c2140aa252b18e0fa74820497aa942f32c80229f779", 0xa3}], 0x7, &(0x7f00000021c0)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100000018000000000000000100000001000000", @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES8=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32], 0xc8, 0x1}}, {{&(0x7f0000004a00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000004a80)="1a42b587254cf21657ca131aa464f77c2e5ecc7cd3a87d24cef15e0de821b106dded60eafbcf2d6ff791cef0fb8fed1a", 0x30}, {&(0x7f0000004ac0)="6e2e8010cf8aad16e61b6cea7fc376aa0e1c1a6581b9fd597ca49382dc83", 0x1e}], 0x2, &(0x7f0000004b40), 0x0, 0x4800}}], 0x3, 0x40010) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000100)='::,:/', 0x0) socket(0x10, 0x803, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xfffffffffffffff4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f}}, 0x20) 0s ago: executing program 4 (id=247): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffff5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r5, 0x0, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, 0x140f, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4040084) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r9, {0xfff2}, {}, {0x9}}}, 0x24}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x544, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x190, 0x8, 0x0, 0x1, [{0x180, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x35c, 0x8, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1ccb6d8873eabd1d5c1a6468d35b5f44e7b4063d893f9612dfee89e13c875068"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @private0, 0x8}}]}, {0x1a8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x7}, 0x1000}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "126440527b6eef84346fbcb988e1012211371804176016e264ca9d3df81454c2"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c74337fc965e2158f19c2c2fbadd9f2d1051e6bdc6565e3a86cd952408bf5389"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x544}, 0x1, 0x0, 0x0, 0x805}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 73.256061][ T5817] cgroup: Unknown subsys name 'net' [ 73.369814][ T5817] cgroup: Unknown subsys name 'cpuset' [ 73.378539][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.793986][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.830342][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.838956][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.847246][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.867445][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.875528][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.889423][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.897125][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.905291][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.913064][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.921376][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.929263][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.936561][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.938883][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.951830][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.952432][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.967276][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.975714][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.984052][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.994140][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.997578][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.001840][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.009404][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.018679][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.032159][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.050559][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.736741][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 79.763075][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 79.830501][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 79.953265][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 79.978849][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 80.122690][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.130033][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.138223][ T5829] bridge_slave_0: entered allmulticast mode [ 80.145287][ T5829] bridge_slave_0: entered promiscuous mode [ 80.165922][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.173431][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.181035][ T5827] bridge_slave_0: entered allmulticast mode [ 80.189196][ T5827] bridge_slave_0: entered promiscuous mode [ 80.196379][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.203550][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.211023][ T5842] bridge_slave_0: entered allmulticast mode [ 80.218466][ T5842] bridge_slave_0: entered promiscuous mode [ 80.237015][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.244118][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.251380][ T5829] bridge_slave_1: entered allmulticast mode [ 80.259542][ T5829] bridge_slave_1: entered promiscuous mode [ 80.286040][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.293251][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.300912][ T5827] bridge_slave_1: entered allmulticast mode [ 80.309340][ T5827] bridge_slave_1: entered promiscuous mode [ 80.329938][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.337264][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.344436][ T5842] bridge_slave_1: entered allmulticast mode [ 80.351637][ T5842] bridge_slave_1: entered promiscuous mode [ 80.438798][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.445898][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.453668][ T5828] bridge_slave_0: entered allmulticast mode [ 80.460930][ T5828] bridge_slave_0: entered promiscuous mode [ 80.471645][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.484406][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.523769][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.535291][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.548729][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.558928][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.566026][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.573535][ T5828] bridge_slave_1: entered allmulticast mode [ 80.580999][ T5828] bridge_slave_1: entered promiscuous mode [ 80.625485][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.632881][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.640704][ T5830] bridge_slave_0: entered allmulticast mode [ 80.648544][ T5830] bridge_slave_0: entered promiscuous mode [ 80.658406][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.732341][ T5829] team0: Port device team_slave_0 added [ 80.739323][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.747198][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.754364][ T5830] bridge_slave_1: entered allmulticast mode [ 80.761908][ T5830] bridge_slave_1: entered promiscuous mode [ 80.782513][ T5827] team0: Port device team_slave_0 added [ 80.804396][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.816025][ T5829] team0: Port device team_slave_1 added [ 80.854672][ T5827] team0: Port device team_slave_1 added [ 80.873690][ T5842] team0: Port device team_slave_0 added [ 80.882154][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.919064][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.942172][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.949946][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.977467][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.992439][ T5842] team0: Port device team_slave_1 added [ 81.024930][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.034763][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.041813][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.068500][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.093638][ T5828] team0: Port device team_slave_0 added [ 81.103775][ T5828] team0: Port device team_slave_1 added [ 81.110513][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.118163][ T5849] Bluetooth: hci0: command tx timeout [ 81.118402][ T5849] Bluetooth: hci2: command tx timeout [ 81.123828][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.130297][ T5849] Bluetooth: hci4: command tx timeout [ 81.155193][ T5835] Bluetooth: hci1: command tx timeout [ 81.160627][ T5150] Bluetooth: hci3: command tx timeout [ 81.169994][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.225438][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.232713][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.258752][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.285685][ T5830] team0: Port device team_slave_0 added [ 81.294689][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.301700][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.327895][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.341589][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.349205][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.375719][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.422834][ T5830] team0: Port device team_slave_1 added [ 81.441402][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.448645][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.474632][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.487365][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.494330][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.520803][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.570462][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.577484][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.603807][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.672251][ T5827] hsr_slave_0: entered promiscuous mode [ 81.679080][ T5827] hsr_slave_1: entered promiscuous mode [ 81.718414][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.725387][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.757512][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.820860][ T5842] hsr_slave_0: entered promiscuous mode [ 81.827832][ T5842] hsr_slave_1: entered promiscuous mode [ 81.834294][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.844106][ T5842] Cannot create hsr debugfs directory [ 81.864790][ T5829] hsr_slave_0: entered promiscuous mode [ 81.872364][ T5829] hsr_slave_1: entered promiscuous mode [ 81.879070][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.886797][ T5829] Cannot create hsr debugfs directory [ 81.898755][ T5828] hsr_slave_0: entered promiscuous mode [ 81.905935][ T5828] hsr_slave_1: entered promiscuous mode [ 81.913091][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.920906][ T5828] Cannot create hsr debugfs directory [ 82.084144][ T5830] hsr_slave_0: entered promiscuous mode [ 82.090461][ T5830] hsr_slave_1: entered promiscuous mode [ 82.096707][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.104265][ T5830] Cannot create hsr debugfs directory [ 82.555501][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.570344][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.590395][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.610324][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.650730][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.662664][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.682909][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.693777][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.790407][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.818982][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.830915][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.858003][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.936982][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.973900][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.983864][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.997744][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.015593][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.100934][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.115840][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.132069][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.142948][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.171160][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.196529][ T5849] Bluetooth: hci4: command tx timeout [ 83.201972][ T5849] Bluetooth: hci3: command tx timeout [ 83.207827][ T5150] Bluetooth: hci1: command tx timeout [ 83.207846][ T5832] Bluetooth: hci2: command tx timeout [ 83.213236][ T5150] Bluetooth: hci0: command tx timeout [ 83.245126][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.257126][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.264332][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.303329][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.310516][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.355329][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.405256][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.415403][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.422748][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.442688][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.449862][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.530428][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.654220][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.661491][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.706594][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.713765][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.763717][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.850570][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.863752][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.912809][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.920083][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.950072][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.957259][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.018524][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.060683][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.103916][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.111110][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.153090][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.160286][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.251351][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.358702][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.578923][ T5829] veth0_vlan: entered promiscuous mode [ 84.625449][ T5842] veth0_vlan: entered promiscuous mode [ 84.662265][ T5829] veth1_vlan: entered promiscuous mode [ 84.704367][ T5842] veth1_vlan: entered promiscuous mode [ 84.774463][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.790584][ T5827] veth0_vlan: entered promiscuous mode [ 84.825229][ T5842] veth0_macvtap: entered promiscuous mode [ 84.841485][ T5842] veth1_macvtap: entered promiscuous mode [ 84.854121][ T5827] veth1_vlan: entered promiscuous mode [ 84.865830][ T5829] veth0_macvtap: entered promiscuous mode [ 84.885527][ T5829] veth1_macvtap: entered promiscuous mode [ 84.917107][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.955625][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.969278][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.994014][ T5828] veth0_vlan: entered promiscuous mode [ 85.035267][ T5827] veth0_macvtap: entered promiscuous mode [ 85.044863][ T1091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.055479][ T1091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.074318][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.085503][ T1091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.095377][ T1091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.106107][ T5828] veth1_vlan: entered promiscuous mode [ 85.122457][ T5827] veth1_macvtap: entered promiscuous mode [ 85.151702][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.188662][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.199861][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.209010][ T1113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.237827][ T1113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.277875][ T5150] Bluetooth: hci2: command tx timeout [ 85.283294][ T5150] Bluetooth: hci0: command tx timeout [ 85.290363][ T5849] Bluetooth: hci1: command tx timeout [ 85.290382][ T5832] Bluetooth: hci3: command tx timeout [ 85.295976][ T5849] Bluetooth: hci4: command tx timeout [ 85.310468][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.361856][ T5828] veth0_macvtap: entered promiscuous mode [ 85.385212][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.399204][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.407265][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.428186][ T5830] veth0_vlan: entered promiscuous mode [ 85.435769][ T5828] veth1_macvtap: entered promiscuous mode [ 85.464082][ T1113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.484016][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.488342][ T1113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.496101][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.502857][ T1113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.539281][ T1113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.551041][ T5830] veth1_vlan: entered promiscuous mode [ 85.568631][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.608510][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.651335][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.660214][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.667852][ T1113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.678172][ T1113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.696708][ T1113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.707749][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.720345][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.739392][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.856100][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.893435][ T5830] veth0_macvtap: entered promiscuous mode [ 85.937495][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.945668][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.954723][ T5830] veth1_macvtap: entered promiscuous mode [ 86.084965][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.107207][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.223957][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.243366][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.254213][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.294806][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.501358][ T5959] evm: overlay not supported [ 86.763568][ T43] cfg80211: failed to load regulatory.db [ 86.866449][ T1113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.921839][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.936556][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.046028][ T1113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.071123][ T1113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.139194][ T1113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.141167][ T5962] FAULT_INJECTION: forcing a failure. [ 87.141167][ T5962] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.219246][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.1.6 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 87.219274][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.219292][ T5962] Call Trace: [ 87.219299][ T5962] [ 87.219307][ T5962] dump_stack_lvl+0x189/0x250 [ 87.219345][ T5962] ? __pfx____ratelimit+0x10/0x10 [ 87.219368][ T5962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.219395][ T5962] ? __pfx__printk+0x10/0x10 [ 87.219415][ T5962] ? __might_fault+0xb0/0x130 [ 87.219449][ T5962] should_fail_ex+0x414/0x560 [ 87.219480][ T5962] _copy_from_user+0x2d/0xb0 [ 87.219506][ T5962] __sys_bpf+0x1ed/0x860 [ 87.219530][ T5962] ? __pfx___sys_bpf+0x10/0x10 [ 87.219563][ T5962] ? ksys_write+0x22a/0x250 [ 87.219591][ T5962] ? __pfx_ksys_write+0x10/0x10 [ 87.219623][ T5962] __x64_sys_bpf+0x7c/0x90 [ 87.219641][ T5962] do_syscall_64+0xfa/0x3b0 [ 87.219665][ T5962] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.219686][ T5962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.219704][ T5962] ? clear_bhb_loop+0x60/0xb0 [ 87.219727][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.219745][ T5962] RIP: 0033:0x7fed48d8e929 [ 87.219766][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.219782][ T5962] RSP: 002b:00007fed49c7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.219808][ T5962] RAX: ffffffffffffffda RBX: 00007fed48fb5fa0 RCX: 00007fed48d8e929 [ 87.219821][ T5962] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 87.219833][ T5962] RBP: 00007fed49c7d090 R08: 0000000000000000 R09: 0000000000000000 [ 87.219844][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.219855][ T5962] R13: 0000000000000001 R14: 00007fed48fb5fa0 R15: 00007ffe40594968 [ 87.219884][ T5962] [ 87.391709][ T5849] Bluetooth: hci3: command tx timeout [ 87.391753][ T5849] Bluetooth: hci1: command tx timeout [ 87.430570][ T5849] Bluetooth: hci2: command tx timeout [ 87.431298][ T5150] Bluetooth: hci4: command tx timeout [ 87.439703][ T5832] Bluetooth: hci0: command tx timeout [ 87.566833][ T5970] loop1: detected capacity change from 0 to 512 [ 87.639780][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.796518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.805606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.850988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.073248][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.207205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.211744][ T5970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.236686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.265896][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.293322][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.335225][ T5970] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.772563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.876843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 88.937575][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 89.846119][ T5991] loop1: detected capacity change from 0 to 1024 [ 89.943086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 90.034903][ T5991] syz.1.10: attempt to access beyond end of device [ 90.034903][ T5991] loop1: rw=0, sector=393222, nr_sectors = 2 limit=1024 [ 90.092819][ T5995] netlink: 'syz.2.11': attribute type 16 has an invalid length. [ 90.726594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.734597][ T5996] syz.1.10: attempt to access beyond end of device [ 90.734597][ T5996] loop1: rw=2049, sector=8556385938, nr_sectors = 2 limit=1024 [ 90.832544][ T5996] Buffer I/O error on dev loop1, logical block 4278192969, lost async page write [ 90.865945][ T5996] syz.1.10: attempt to access beyond end of device [ 90.865945][ T5996] loop1: rw=2049, sector=393216, nr_sectors = 2 limit=1024 [ 90.924371][ T5996] Buffer I/O error on dev loop1, logical block 196608, lost async page write [ 90.933748][ T6000] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.986467][ T5996] syz.1.10: attempt to access beyond end of device [ 90.986467][ T5996] loop1: rw=2049, sector=393218, nr_sectors = 2 limit=1024 [ 91.036506][ T5996] Buffer I/O error on dev loop1, logical block 196609, lost async page write [ 91.046779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.151387][ T5996] syz.1.10: attempt to access beyond end of device [ 91.151387][ T5996] loop1: rw=2049, sector=393220, nr_sectors = 2 limit=1024 [ 91.305228][ T5996] Buffer I/O error on dev loop1, logical block 196610, lost async page write [ 91.351605][ T6007] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.373999][ T6006] loop4: detected capacity change from 0 to 16 [ 91.402114][ T6006] ======================================================= [ 91.402114][ T6006] WARNING: The mand mount option has been deprecated and [ 91.402114][ T6006] and is ignored by this kernel. Remove the mand [ 91.402114][ T6006] option from the mount to silence this warning. [ 91.402114][ T6006] ======================================================= [ 91.756042][ T6006] erofs (device loop4): mounted with root inode @ nid 36. [ 92.207232][ T5922] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.283176][ T6013] loop3: detected capacity change from 0 to 4096 [ 92.322542][ T6013] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 92.330748][ T6013] UDF-fs: Scanning with blocksize 512 failed [ 92.391001][ T5922] usb 5-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 92.425718][ T5922] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 92.429752][ T6013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.480443][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.815393][ T6018] loop2: detected capacity change from 0 to 40427 [ 92.830973][ T5922] usb 5-1: config 0 descriptor?? [ 92.878049][ T6018] F2FS-fs (loop2): invalid crc value [ 93.118065][ T6018] F2FS-fs (loop2): Start checkpoint disabled! [ 93.506207][ T5922] usb 5-1: bad CDC descriptors [ 93.508230][ T6018] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 93.589611][ T6025] netlink: 168 bytes leftover after parsing attributes in process `syz.3.22'. [ 94.024163][ T6034] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 94.873752][ T5837] usb 5-1: USB disconnect, device number 2 [ 95.089680][ T6029] mmap: syz.3.22 (6029) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.442693][ T49] kworker/u8:3: attempt to access beyond end of device [ 96.442693][ T49] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.530071][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 96.530099][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.530112][ T49] Workqueue: writeback wb_workfn (flush-7:2) [ 96.530141][ T49] Call Trace: [ 96.530149][ T49] [ 96.530157][ T49] dump_stack_lvl+0x189/0x250 [ 96.530189][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.530211][ T49] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 96.530231][ T49] ? __pfx_queue_work_on+0x10/0x10 [ 96.530257][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 96.530276][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 96.530297][ T49] ? f2fs_hw_is_readonly+0x39b/0x470 [ 96.530324][ T49] f2fs_handle_critical_error+0x37c/0x540 [ 96.530353][ T49] f2fs_write_end_io+0x495/0x810 [ 96.530377][ T49] ? blkg_put+0x22/0x240 [ 96.530416][ T49] __submit_merged_bio+0x27a/0x6a0 [ 96.530443][ T49] __submit_merged_write_cond+0x255/0x530 [ 96.530471][ T49] f2fs_write_data_pages+0x261d/0x3000 [ 96.530538][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.530641][ T49] ? f2fs_write_meta_pages+0x357/0x450 [ 96.530676][ T49] ? __lock_acquire+0xab9/0xd20 [ 96.530705][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.530732][ T49] do_writepages+0x32b/0x550 [ 96.530762][ T49] ? reacquire_held_locks+0x127/0x1d0 [ 96.530786][ T49] ? writeback_sb_inodes+0x384/0x1010 [ 96.530817][ T49] __writeback_single_inode+0x145/0xff0 [ 96.530842][ T49] ? do_raw_spin_unlock+0x122/0x240 [ 96.530866][ T49] writeback_sb_inodes+0x6c7/0x1010 [ 96.530919][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 96.530984][ T49] ? rcu_is_watching+0x15/0xb0 [ 96.531021][ T49] wb_writeback+0x43b/0xaf0 [ 96.531051][ T49] ? queue_io+0x351/0x590 [ 96.531076][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 96.531110][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.531134][ T49] wb_workfn+0x409/0xef0 [ 96.531171][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 96.531197][ T49] ? __lock_acquire+0xab9/0xd20 [ 96.531232][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 96.531264][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 96.531288][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 96.531316][ T49] process_scheduled_works+0xade/0x17b0 [ 96.531372][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.531416][ T49] worker_thread+0x8a0/0xda0 [ 96.531445][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 96.531473][ T49] ? __kthread_parkme+0x7b/0x200 [ 96.531518][ T49] kthread+0x711/0x8a0 [ 96.531541][ T49] ? __pfx_worker_thread+0x10/0x10 [ 96.531567][ T49] ? __pfx_kthread+0x10/0x10 [ 96.531588][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.531608][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.531630][ T49] ? __pfx_kthread+0x10/0x10 [ 96.531650][ T49] ret_from_fork+0x3fc/0x770 [ 96.531680][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 96.531711][ T49] ? __switch_to_asm+0x39/0x70 [ 96.531728][ T49] ? __switch_to_asm+0x33/0x70 [ 96.531745][ T49] ? __pfx_kthread+0x10/0x10 [ 96.531765][ T49] ret_from_fork_asm+0x1a/0x30 [ 96.531801][ T49] [ 96.531809][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 96.551183][ T6052] loop4: detected capacity change from 0 to 2048 [ 97.078393][ T6060] loop3: detected capacity change from 0 to 40427 [ 97.117723][ T6060] F2FS-fs (loop3): invalid crc value [ 97.286830][ T6060] F2FS-fs (loop3): Start checkpoint disabled! [ 97.304784][ T6060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 97.314445][ T6067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.374475][ T6068] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.614725][ T6069] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 97.832158][ T1342] kworker/u8:8: attempt to access beyond end of device [ 97.832158][ T1342] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.878669][ T30] audit: type=1800 audit(1750792619.854:2): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.24" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 97.908509][ T1342] CPU: 0 UID: 0 PID: 1342 Comm: kworker/u8:8 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 97.908535][ T1342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.908548][ T1342] Workqueue: writeback wb_workfn (flush-7:3) [ 97.908578][ T1342] Call Trace: [ 97.908585][ T1342] [ 97.908594][ T1342] dump_stack_lvl+0x189/0x250 [ 97.908629][ T1342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.908654][ T1342] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 97.908677][ T1342] ? __pfx_queue_work_on+0x10/0x10 [ 97.908706][ T1342] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 97.908727][ T1342] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.908750][ T1342] ? f2fs_hw_is_readonly+0x39b/0x470 [ 97.908781][ T1342] f2fs_handle_critical_error+0x37c/0x540 [ 97.908814][ T1342] f2fs_write_end_io+0x495/0x810 [ 97.908841][ T1342] ? blkg_put+0x22/0x240 [ 97.908884][ T1342] __submit_merged_bio+0x27a/0x6a0 [ 97.908916][ T1342] __submit_merged_write_cond+0x255/0x530 [ 97.908947][ T1342] f2fs_write_data_pages+0x261d/0x3000 [ 97.909015][ T1342] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 97.909135][ T1342] ? f2fs_write_meta_pages+0x357/0x450 [ 97.909188][ T1342] ? __lock_acquire+0xab9/0xd20 [ 97.909218][ T1342] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 97.909247][ T1342] do_writepages+0x32b/0x550 [ 97.909282][ T1342] ? reacquire_held_locks+0x127/0x1d0 [ 97.909309][ T1342] ? writeback_sb_inodes+0x384/0x1010 [ 97.909345][ T1342] __writeback_single_inode+0x145/0xff0 [ 97.909371][ T1342] ? do_raw_spin_unlock+0x122/0x240 [ 97.909397][ T1342] writeback_sb_inodes+0x6c7/0x1010 [ 97.909455][ T1342] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 97.909541][ T1342] ? rcu_is_watching+0x15/0xb0 [ 97.909580][ T1342] wb_writeback+0x43b/0xaf0 [ 97.909616][ T1342] ? queue_io+0x351/0x590 [ 97.909645][ T1342] ? __pfx_wb_writeback+0x10/0x10 [ 97.909682][ T1342] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.909710][ T1342] wb_workfn+0x409/0xef0 [ 97.909751][ T1342] ? __pfx_wb_workfn+0x10/0x10 [ 97.909779][ T1342] ? __lock_acquire+0xab9/0xd20 [ 97.909818][ T1342] ? process_scheduled_works+0x9ef/0x17b0 [ 97.909852][ T1342] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.909871][ T1342] ? process_scheduled_works+0x9ef/0x17b0 [ 97.909892][ T1342] ? process_scheduled_works+0x9ef/0x17b0 [ 97.909920][ T1342] process_scheduled_works+0xade/0x17b0 [ 97.909984][ T1342] ? __pfx_process_scheduled_works+0x10/0x10 [ 97.910033][ T1342] worker_thread+0x8a0/0xda0 [ 97.910064][ T1342] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.910096][ T1342] ? __kthread_parkme+0x7b/0x200 [ 97.910138][ T1342] kthread+0x711/0x8a0 [ 97.910168][ T1342] ? __pfx_worker_thread+0x10/0x10 [ 97.910194][ T1342] ? __pfx_kthread+0x10/0x10 [ 97.910215][ T1342] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.910236][ T1342] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.910257][ T1342] ? __pfx_kthread+0x10/0x10 [ 97.910278][ T1342] ret_from_fork+0x3fc/0x770 [ 97.910305][ T1342] ? __pfx_ret_from_fork+0x10/0x10 [ 97.910336][ T1342] ? __switch_to_asm+0x39/0x70 [ 97.910351][ T1342] ? __switch_to_asm+0x33/0x70 [ 97.910365][ T1342] ? __pfx_kthread+0x10/0x10 [ 97.910384][ T1342] ret_from_fork_asm+0x1a/0x30 [ 97.910419][ T1342] [ 98.233858][ T6052] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 98.257388][ T1342] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 98.356858][ T6052] Remounting filesystem read-only [ 98.544613][ T5827] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 99.723467][ T6091] loop4: detected capacity change from 0 to 512 [ 100.330056][ T6091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.357581][ T6096] loop2: detected capacity change from 0 to 512 [ 100.376435][ T6091] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.411104][ T6096] udf: Unknown parameter 'l#íP‚Çßt§ÐÿD´ü^ŒüÑY…ÊoôkuÉXÛ`xíVNhÄøôQ“‘:ûlªÆK‰·9 *ÑB' [ 100.539742][ T6101] FAULT_INJECTION: forcing a failure. [ 100.539742][ T6101] name failslab, interval 1, probability 0, space 0, times 1 [ 100.589688][ T6101] CPU: 1 UID: 0 PID: 6101 Comm: syz.4.38 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 100.589720][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.589732][ T6101] Call Trace: [ 100.589740][ T6101] [ 100.589748][ T6101] dump_stack_lvl+0x189/0x250 [ 100.589781][ T6101] ? __pfx____ratelimit+0x10/0x10 [ 100.589804][ T6101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.589832][ T6101] ? __pfx__printk+0x10/0x10 [ 100.589858][ T6101] ? __pfx___might_resched+0x10/0x10 [ 100.589889][ T6101] should_fail_ex+0x414/0x560 [ 100.589919][ T6101] should_failslab+0xa8/0x100 [ 100.589949][ T6101] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 100.589985][ T6101] ? __alloc_skb+0x112/0x2d0 [ 100.590007][ T6101] __alloc_skb+0x112/0x2d0 [ 100.590028][ T6101] netlink_sendmsg+0x5c6/0xb30 [ 100.590066][ T6101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.590097][ T6101] ? aa_sock_msg_perm+0xf1/0x1d0 [ 100.590127][ T6101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.590148][ T6101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.590177][ T6101] __sock_sendmsg+0x219/0x270 [ 100.590206][ T6101] ____sys_sendmsg+0x505/0x830 [ 100.590231][ T6101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.590261][ T6101] ? import_iovec+0x74/0xa0 [ 100.590289][ T6101] ___sys_sendmsg+0x21f/0x2a0 [ 100.590312][ T6101] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.590367][ T6101] ? __fget_files+0x2a/0x420 [ 100.590384][ T6101] ? __fget_files+0x3a0/0x420 [ 100.590412][ T6101] __x64_sys_sendmsg+0x19b/0x260 [ 100.590436][ T6101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.590465][ T6101] ? __pfx_ksys_write+0x10/0x10 [ 100.590487][ T6101] ? rcu_is_watching+0x15/0xb0 [ 100.590520][ T6101] ? do_syscall_64+0xbe/0x3b0 [ 100.590549][ T6101] do_syscall_64+0xfa/0x3b0 [ 100.590572][ T6101] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.590595][ T6101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.590614][ T6101] ? clear_bhb_loop+0x60/0xb0 [ 100.590638][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.590656][ T6101] RIP: 0033:0x7ff878f8e929 [ 100.590673][ T6101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.590690][ T6101] RSP: 002b:00007ff879dfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.590711][ T6101] RAX: ffffffffffffffda RBX: 00007ff8791b6080 RCX: 00007ff878f8e929 [ 100.590725][ T6101] RDX: 000000002000c040 RSI: 0000200000000000 RDI: 0000000000000005 [ 100.590738][ T6101] RBP: 00007ff879dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 100.590749][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.590761][ T6101] R13: 0000000000000000 R14: 00007ff8791b6080 R15: 00007ffead3759c8 [ 100.590790][ T6101] [ 101.081865][ T6109] loop2: detected capacity change from 0 to 1024 [ 101.115912][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.144667][ T6109] EXT4-fs: Ignoring removed oldalloc option [ 101.168165][ T6109] EXT4-fs: Ignoring removed orlov option [ 101.237362][ T6109] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 101.340029][ T6109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.401047][ T6106] loop0: detected capacity change from 0 to 4096 [ 101.523331][ T6109] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 103.586175][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.088448][ T6135] loop4: detected capacity change from 0 to 64 [ 104.489248][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 105.114300][ T30] audit: type=1800 audit(1750792627.124:3): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.49" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 105.377955][ T6149] FAULT_INJECTION: forcing a failure. [ 105.377955][ T6149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.392635][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.0.53 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 105.392672][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.392689][ T6149] Call Trace: [ 105.392696][ T6149] [ 105.392704][ T6149] dump_stack_lvl+0x189/0x250 [ 105.392737][ T6149] ? __pfx____ratelimit+0x10/0x10 [ 105.392760][ T6149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.392786][ T6149] ? __pfx__printk+0x10/0x10 [ 105.392804][ T6149] ? __might_fault+0xb0/0x130 [ 105.392848][ T6149] should_fail_ex+0x414/0x560 [ 105.392876][ T6149] _copy_from_user+0x2d/0xb0 [ 105.392907][ T6149] ___sys_sendmsg+0x158/0x2a0 [ 105.392931][ T6149] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.392983][ T6149] ? __fget_files+0x2a/0x420 [ 105.392998][ T6149] ? __fget_files+0x3a0/0x420 [ 105.393024][ T6149] __sys_sendmmsg+0x227/0x430 [ 105.393048][ T6149] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.393065][ T6149] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 105.393112][ T6149] ? ksys_write+0x22a/0x250 [ 105.393139][ T6149] ? __pfx_ksys_write+0x10/0x10 [ 105.393160][ T6149] ? rcu_is_watching+0x15/0xb0 [ 105.393204][ T6149] __x64_sys_sendmmsg+0xa0/0xc0 [ 105.393225][ T6149] do_syscall_64+0xfa/0x3b0 [ 105.393248][ T6149] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.393268][ T6149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.393287][ T6149] ? clear_bhb_loop+0x60/0xb0 [ 105.393308][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.393325][ T6149] RIP: 0033:0x7fa90f98e929 [ 105.393340][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.393356][ T6149] RSP: 002b:00007fa910730038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.393375][ T6149] RAX: ffffffffffffffda RBX: 00007fa90fbb5fa0 RCX: 00007fa90f98e929 [ 105.393389][ T6149] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 105.393401][ T6149] RBP: 00007fa910730090 R08: 0000000000000000 R09: 0000000000000000 [ 105.393413][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.393424][ T6149] R13: 0000000000000000 R14: 00007fa90fbb5fa0 R15: 00007ffdda1cf5a8 [ 105.393453][ T6149] [ 105.624183][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 105.743830][ T6155] netlink: 10 bytes leftover after parsing attributes in process `syz.4.55'. [ 105.838486][ T6157] loop3: detected capacity change from 0 to 4096 [ 105.913777][ T6153] loop2: detected capacity change from 0 to 1024 [ 106.040324][ T6153] program syz.2.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.126173][ T6162] loop0: detected capacity change from 0 to 2048 [ 106.208845][ T6160] loop1: detected capacity change from 0 to 4096 [ 106.213574][ T6163] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.345299][ T6162] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 106.369353][ T6162] Remounting filesystem read-only [ 106.619716][ T6169] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 107.146950][ T6177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.260305][ T6179] loop0: detected capacity change from 0 to 256 [ 107.282806][ T6180] loop2: detected capacity change from 0 to 1024 [ 107.293979][ T6179] exfat: Deprecated parameter 'namecase' [ 107.323527][ T6180] EXT4-fs: Ignoring removed orlov option [ 107.353387][ T6179] exfat: Deprecated parameter 'namecase' [ 107.431311][ T6179] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 107.508105][ T6180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.697386][ T6173] loop1: detected capacity change from 0 to 2048 [ 108.551399][ T5888] Dev loop1: RDB in block 1 has bad checksum [ 108.571261][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.602158][ T6173] Dev loop1: RDB in block 1 has bad checksum [ 109.161172][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 111.400441][ T6216] FAULT_INJECTION: forcing a failure. [ 111.400441][ T6216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.461386][ T6219] loop2: detected capacity change from 0 to 512 [ 111.477315][ T6216] CPU: 1 UID: 0 PID: 6216 Comm: syz.0.71 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 111.477341][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.477352][ T6216] Call Trace: [ 111.477359][ T6216] [ 111.477365][ T6216] dump_stack_lvl+0x189/0x250 [ 111.477391][ T6216] ? __pfx____ratelimit+0x10/0x10 [ 111.477409][ T6216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.477429][ T6216] ? __pfx__printk+0x10/0x10 [ 111.477445][ T6216] ? __might_fault+0xb0/0x130 [ 111.477477][ T6216] should_fail_ex+0x414/0x560 [ 111.477500][ T6216] _copy_from_user+0x2d/0xb0 [ 111.477521][ T6216] ___sys_sendmsg+0x158/0x2a0 [ 111.477540][ T6216] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.477584][ T6216] ? __fget_files+0x2a/0x420 [ 111.477599][ T6216] ? __fget_files+0x3a0/0x420 [ 111.477619][ T6216] __sys_sendmmsg+0x227/0x430 [ 111.477638][ T6216] ? __pfx___sys_sendmmsg+0x10/0x10 [ 111.477650][ T6216] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 111.477689][ T6216] ? ksys_write+0x22a/0x250 [ 111.477709][ T6216] ? __pfx_ksys_write+0x10/0x10 [ 111.477726][ T6216] ? rcu_is_watching+0x15/0xb0 [ 111.477751][ T6216] __x64_sys_sendmmsg+0xa0/0xc0 [ 111.477770][ T6216] do_syscall_64+0xfa/0x3b0 [ 111.477789][ T6216] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.477807][ T6216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.477821][ T6216] ? clear_bhb_loop+0x60/0xb0 [ 111.477838][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.477853][ T6216] RIP: 0033:0x7fa90f98e929 [ 111.477867][ T6216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.477881][ T6216] RSP: 002b:00007fa910730038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 111.477897][ T6216] RAX: ffffffffffffffda RBX: 00007fa90fbb5fa0 RCX: 00007fa90f98e929 [ 111.477908][ T6216] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 111.477917][ T6216] RBP: 00007fa910730090 R08: 0000000000000000 R09: 0000000000000000 [ 111.477927][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.477936][ T6216] R13: 0000000000000000 R14: 00007fa90fbb5fa0 R15: 00007ffdda1cf5a8 [ 111.477960][ T6216] [ 111.701570][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.741695][ T6220] loop3: detected capacity change from 0 to 512 [ 111.749076][ T6220] EXT4-fs: Ignoring removed bh option [ 111.837316][ T6220] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.987082][ T6220] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.997532][ T6219] EXT4-fs: Mount option(s) incompatible with ext2 [ 112.610541][ T6220] EXT4-fs (loop3): 1 truncate cleaned up [ 112.726669][ T6220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.155226][ T6238] loop1: detected capacity change from 0 to 128 [ 113.182487][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.243091][ T6238] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.329048][ T6226] loop4: detected capacity change from 0 to 2048 [ 113.366872][ T6238] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.470840][ T5888] Dev loop4: RDB in block 1 has bad checksum [ 113.508181][ T6226] Dev loop4: RDB in block 1 has bad checksum [ 114.150488][ T6252] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 114.286278][ T6256] netlink: 10 bytes leftover after parsing attributes in process `syz.4.81'. [ 114.531095][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.827159][ T6266] loop0: detected capacity change from 0 to 64 [ 114.931868][ T6266] hfs: unable to locate alternate MDB [ 115.099004][ T6270] loop1: detected capacity change from 0 to 2048 [ 115.110530][ T6270] nilfs2: Unknown parameter 'ÿÿ' [ 115.279378][ T6266] hfs: continuing without an alternate MDB [ 115.279945][ T6267] loop1: detected capacity change from 0 to 4096 [ 115.335124][ T6274] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.753287][ T6282] loop1: detected capacity change from 0 to 1024 [ 116.772957][ T6271] loop3: detected capacity change from 0 to 2048 [ 116.790529][ T6279] loop2: detected capacity change from 0 to 4096 [ 116.862343][ T6271] Dev loop3: RDB in block 1 has bad checksum [ 117.111706][ T6279] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 117.302583][ T6282] syz.1.87: attempt to access beyond end of device [ 117.302583][ T6282] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 117.430614][ T6282] Buffer I/O error on dev loop1, logical block 2889, async page read [ 117.463130][ T6282] syz.1.87: attempt to access beyond end of device [ 117.463130][ T6282] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 118.296358][ T6282] Buffer I/O error on dev loop1, logical block 2889, async page read [ 118.368693][ T6282] hfsplus: can't free extent [ 118.396427][ T30] audit: type=1800 audit(1750792640.404:4): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.87" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 118.503777][ T6294] netlink: 'syz.3.91': attribute type 32 has an invalid length. [ 118.696441][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 118.780413][ T6299] process 'syz.2.90' launched '/dev/fd/7' with NULL argv: empty string added [ 119.090742][ T6299] loop2: detected capacity change from 0 to 4096 [ 119.115348][ T6299] EXT4-fs: Invalid want_extra_isize 13973 [ 119.314639][ T6294] (unnamed net_device) (uninitialized): option coupled_control: invalid value (47) [ 119.625581][ T6304] loop1: detected capacity change from 0 to 256 [ 119.680485][ T6304] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.738914][ T6307] loop2: detected capacity change from 0 to 512 [ 119.761958][ T6304] netlink: 56 bytes leftover after parsing attributes in process `syz.1.93'. [ 119.791237][ T6307] EXT4-fs: Ignoring removed bh option [ 119.812003][ T6304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.93'. [ 119.823436][ T6307] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.947587][ T6307] EXT4-fs (loop2): 1 truncate cleaned up [ 119.958003][ T6307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.237077][ T6317] loop1: detected capacity change from 0 to 4096 [ 120.355511][ T6319] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.775931][ T6323] loop4: detected capacity change from 0 to 1024 [ 120.899012][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.933157][ T6325] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.074019][ T6317] syz.1.98 (6317) used greatest stack depth: 19624 bytes left [ 121.170797][ T6323] syz.4.99: attempt to access beyond end of device [ 121.170797][ T6323] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 121.199765][ T6329] loop2: detected capacity change from 0 to 16 [ 121.204983][ T6323] Buffer I/O error on dev loop4, logical block 2889, async page read [ 121.225950][ T6329] erofs (device loop2): mounted with root inode @ nid 36. [ 121.244930][ T6323] syz.4.99: attempt to access beyond end of device [ 121.244930][ T6323] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 121.284314][ T6323] Buffer I/O error on dev loop4, logical block 2889, async page read [ 121.303167][ T30] audit: type=1800 audit(1750792643.334:5): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.99" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 121.303545][ T6323] hfsplus: can't free extent [ 121.430028][ T6331] loop1: detected capacity change from 0 to 1024 [ 121.527188][ T5922] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.671320][ T6335] loop4: detected capacity change from 0 to 1024 [ 121.731946][ T5922] usb 3-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 121.770473][ T5922] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 121.780713][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.798772][ T5922] usb 3-1: config 0 descriptor?? [ 121.820194][ T5922] usb 3-1: bad CDC descriptors [ 122.753761][ T6345] netlink: 10 bytes leftover after parsing attributes in process `syz.3.107'. [ 122.911791][ T6347] loop4: detected capacity change from 0 to 2048 [ 123.166988][ T6353] Zero length message leads to an empty skb [ 123.747636][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.783222][ T6357] capability: warning: `syz.0.110' uses deprecated v2 capabilities in a way that may be insecure [ 123.938179][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.983939][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.003767][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.009851][ T6363] loop0: detected capacity change from 0 to 64 [ 124.045581][ T6365] loop1: detected capacity change from 0 to 16 [ 124.209578][ T5950] usb 3-1: USB disconnect, device number 2 [ 124.275914][ T6365] erofs (device loop1): mounted with root inode @ nid 36. [ 124.292182][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.311219][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.388386][ T6367] loop2: detected capacity change from 0 to 512 [ 124.418413][ T24] usb 5-1: config 0 descriptor?? [ 124.545322][ T30] audit: type=1800 audit(1750792646.574:6): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.111" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 124.561181][ T6367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.606892][ T6367] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.991369][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 125.024498][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.524984][ T6385] loop1: detected capacity change from 0 to 40427 [ 125.560480][ T6385] F2FS-fs (loop1): invalid crc value [ 125.646873][ T6385] F2FS-fs (loop1): Start checkpoint disabled! [ 125.664965][ T6385] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 126.383825][ T6392] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 126.808060][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 127.129281][ T1163] kworker/u8:7: attempt to access beyond end of device [ 127.129281][ T1163] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.214013][ T1163] CPU: 0 UID: 0 PID: 1163 Comm: kworker/u8:7 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 127.214040][ T1163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.214062][ T1163] Workqueue: writeback wb_workfn (flush-7:1) [ 127.214092][ T1163] Call Trace: [ 127.214100][ T1163] [ 127.214108][ T1163] dump_stack_lvl+0x189/0x250 [ 127.214143][ T1163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.214168][ T1163] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 127.214195][ T1163] ? __pfx_queue_work_on+0x10/0x10 [ 127.214224][ T1163] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 127.214246][ T1163] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 127.214269][ T1163] ? f2fs_hw_is_readonly+0x39b/0x470 [ 127.214300][ T1163] f2fs_handle_critical_error+0x37c/0x540 [ 127.214331][ T1163] f2fs_write_end_io+0x495/0x810 [ 127.214358][ T1163] ? blkg_put+0x22/0x240 [ 127.214399][ T1163] __submit_merged_bio+0x27a/0x6a0 [ 127.214431][ T1163] __submit_merged_write_cond+0x255/0x530 [ 127.214463][ T1163] f2fs_write_data_pages+0x261d/0x3000 [ 127.214527][ T1163] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 127.214641][ T1163] ? f2fs_write_meta_pages+0x357/0x450 [ 127.214679][ T1163] ? __lock_acquire+0xab9/0xd20 [ 127.214708][ T1163] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 127.214737][ T1163] do_writepages+0x32b/0x550 [ 127.214773][ T1163] ? reacquire_held_locks+0x127/0x1d0 [ 127.214804][ T1163] ? writeback_sb_inodes+0x384/0x1010 [ 127.214839][ T1163] __writeback_single_inode+0x145/0xff0 [ 127.214864][ T1163] ? do_raw_spin_unlock+0x122/0x240 [ 127.214890][ T1163] writeback_sb_inodes+0x6c7/0x1010 [ 127.214943][ T1163] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 127.215017][ T1163] ? rcu_is_watching+0x15/0xb0 [ 127.215055][ T1163] wb_writeback+0x43b/0xaf0 [ 127.215094][ T1163] ? queue_io+0x351/0x590 [ 127.215122][ T1163] ? __pfx_wb_writeback+0x10/0x10 [ 127.215156][ T1163] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.215183][ T1163] wb_workfn+0x409/0xef0 [ 127.215221][ T1163] ? __pfx_wb_workfn+0x10/0x10 [ 127.215247][ T1163] ? __lock_acquire+0xab9/0xd20 [ 127.215282][ T1163] ? process_scheduled_works+0x9ef/0x17b0 [ 127.215314][ T1163] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.215334][ T1163] ? process_scheduled_works+0x9ef/0x17b0 [ 127.215358][ T1163] ? process_scheduled_works+0x9ef/0x17b0 [ 127.215385][ T1163] process_scheduled_works+0xade/0x17b0 [ 127.215443][ T1163] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.215489][ T1163] worker_thread+0x8a0/0xda0 [ 127.215519][ T1163] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 127.215549][ T1163] ? __kthread_parkme+0x7b/0x200 [ 127.215588][ T1163] kthread+0x711/0x8a0 [ 127.215611][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 127.215636][ T1163] ? __pfx_kthread+0x10/0x10 [ 127.215658][ T1163] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.215679][ T1163] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.215700][ T1163] ? __pfx_kthread+0x10/0x10 [ 127.215721][ T1163] ret_from_fork+0x3fc/0x770 [ 127.215749][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 127.215781][ T1163] ? __switch_to_asm+0x39/0x70 [ 127.215799][ T1163] ? __switch_to_asm+0x33/0x70 [ 127.215815][ T1163] ? __pfx_kthread+0x10/0x10 [ 127.215836][ T1163] ret_from_fork_asm+0x1a/0x30 [ 127.215873][ T1163] [ 127.215882][ T1163] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 127.377263][ T6395] loop0: detected capacity change from 0 to 512 [ 127.399336][ T6398] loop3: detected capacity change from 0 to 2048 [ 127.589119][ T6400] loop2: detected capacity change from 0 to 4096 [ 127.597379][ T6400] EXT4-fs: Invalid want_extra_isize 13973 [ 127.805306][ T6403] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.906268][ T30] audit: type=1800 audit(1750792649.924:7): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.123" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 127.934168][ T6398] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 128.009533][ T6398] Remounting filesystem read-only [ 128.014730][ T43] usb 5-1: USB disconnect, device number 3 [ 128.037601][ T6406] loop2: detected capacity change from 0 to 64 [ 128.211253][ T6409] team0: Device ipip0 is of different type [ 128.276155][ T30] audit: type=1800 audit(1750792650.304:8): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.125" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 128.371668][ T5828] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 128.506117][ T6413] loop1: detected capacity change from 0 to 512 [ 128.528483][ T6413] EXT4-fs: Ignoring removed bh option [ 128.619215][ T6413] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.758208][ T6413] EXT4-fs (loop1): 1 truncate cleaned up [ 128.765951][ T6413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.834479][ T6415] loop2: detected capacity change from 0 to 40427 [ 128.846095][ T6415] F2FS-fs (loop2): invalid crc value [ 128.917524][ T6415] F2FS-fs (loop2): Start checkpoint disabled! [ 129.006353][ T6415] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 129.037417][ T5908] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 129.389502][ T6428] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 129.821207][ T5908] usb 4-1: config 5 has an invalid interface number: 244 but max is 0 [ 129.830185][ T5908] usb 4-1: config 5 has no interface number 0 [ 129.844012][ T5908] usb 4-1: New USB device found, idVendor=16d6, idProduct=0001, bcdDevice=b2.cd [ 129.853202][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.861601][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.876655][ T5908] usb 4-1: Product: syz [ 129.880850][ T5908] usb 4-1: Manufacturer: syz [ 129.885461][ T5908] usb 4-1: SerialNumber: syz [ 129.938588][ T6212] kworker/u8:10: attempt to access beyond end of device [ 129.938588][ T6212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.992549][ T6212] CPU: 1 UID: 0 PID: 6212 Comm: kworker/u8:10 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 129.992578][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.992590][ T6212] Workqueue: writeback wb_workfn (flush-7:2) [ 129.992620][ T6212] Call Trace: [ 129.992627][ T6212] [ 129.992635][ T6212] dump_stack_lvl+0x189/0x250 [ 129.992668][ T6212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.992693][ T6212] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 129.992715][ T6212] ? __pfx_queue_work_on+0x10/0x10 [ 129.992743][ T6212] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.992764][ T6212] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.992787][ T6212] ? f2fs_hw_is_readonly+0x39b/0x470 [ 129.992817][ T6212] f2fs_handle_critical_error+0x37c/0x540 [ 129.992849][ T6212] f2fs_write_end_io+0x495/0x810 [ 129.992874][ T6212] ? blkg_put+0x22/0x240 [ 129.992914][ T6212] __submit_merged_bio+0x27a/0x6a0 [ 129.992945][ T6212] __submit_merged_write_cond+0x255/0x530 [ 129.992975][ T6212] f2fs_write_data_pages+0x261d/0x3000 [ 129.993042][ T6212] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 129.993172][ T6212] ? f2fs_write_meta_pages+0x357/0x450 [ 129.993212][ T6212] ? __lock_acquire+0xab9/0xd20 [ 129.993242][ T6212] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 129.993270][ T6212] do_writepages+0x32b/0x550 [ 129.993303][ T6212] ? reacquire_held_locks+0x127/0x1d0 [ 129.993330][ T6212] ? writeback_sb_inodes+0x384/0x1010 [ 129.993367][ T6212] __writeback_single_inode+0x145/0xff0 [ 129.993392][ T6212] ? do_raw_spin_unlock+0x122/0x240 [ 129.993418][ T6212] writeback_sb_inodes+0x6c7/0x1010 [ 129.993478][ T6212] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 129.993557][ T6212] ? rcu_is_watching+0x15/0xb0 [ 129.993600][ T6212] wb_writeback+0x43b/0xaf0 [ 129.993636][ T6212] ? queue_io+0x351/0x590 [ 129.993666][ T6212] ? __pfx_wb_writeback+0x10/0x10 [ 129.993703][ T6212] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.993730][ T6212] wb_workfn+0x409/0xef0 [ 129.993772][ T6212] ? __pfx_wb_workfn+0x10/0x10 [ 129.993800][ T6212] ? __lock_acquire+0xab9/0xd20 [ 129.993836][ T6212] ? process_scheduled_works+0x9ef/0x17b0 [ 129.993871][ T6212] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.993890][ T6212] ? process_scheduled_works+0x9ef/0x17b0 [ 129.993914][ T6212] ? process_scheduled_works+0x9ef/0x17b0 [ 129.993943][ T6212] process_scheduled_works+0xade/0x17b0 [ 129.994006][ T6212] ? __pfx_process_scheduled_works+0x10/0x10 [ 129.994054][ T6212] worker_thread+0x8a0/0xda0 [ 129.994085][ T6212] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.994117][ T6212] ? __kthread_parkme+0x7b/0x200 [ 129.994164][ T6212] kthread+0x711/0x8a0 [ 129.994188][ T6212] ? __pfx_worker_thread+0x10/0x10 [ 129.994214][ T6212] ? __pfx_kthread+0x10/0x10 [ 129.994236][ T6212] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.994257][ T6212] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.994278][ T6212] ? __pfx_kthread+0x10/0x10 [ 129.994299][ T6212] ret_from_fork+0x3fc/0x770 [ 129.994329][ T6212] ? __pfx_ret_from_fork+0x10/0x10 [ 129.994363][ T6212] ? __switch_to_asm+0x39/0x70 [ 129.994380][ T6212] ? __switch_to_asm+0x33/0x70 [ 129.994397][ T6212] ? __pfx_kthread+0x10/0x10 [ 129.994418][ T6212] ret_from_fork_asm+0x1a/0x30 [ 129.994457][ T6212] [ 129.994847][ T6212] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 130.170162][ T6435] netlink: 10 bytes leftover after parsing attributes in process `syz.1.133'. [ 130.236382][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 130.272906][ T5908] cp210x 4-1:5.244: cp210x converter detected [ 130.344277][ T5908] cp210x 4-1:5.244: failed to get vendor val 0x370b size 1: -71 [ 130.386320][ T5908] cp210x 4-1:5.244: querying part number failed [ 130.429989][ T5908] usb 4-1: cp210x converter now attached to ttyUSB0 [ 130.459877][ T5908] usb 4-1: USB disconnect, device number 2 [ 130.473589][ T6436] loop0: detected capacity change from 0 to 4096 [ 130.497518][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 130.516353][ T24] usb 5-1: config 5 has an invalid interface number: 244 but max is 0 [ 130.538717][ T6436] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 130.540595][ T24] usb 5-1: config 5 has no interface number 0 [ 130.564022][ T5908] cp210x 4-1:5.244: device disconnected [ 130.576414][ T6436] UDF-fs: Scanning with blocksize 512 failed [ 130.592021][ T24] usb 5-1: New USB device found, idVendor=16d6, idProduct=0001, bcdDevice=b2.cd [ 130.621773][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.650227][ T6436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.660490][ T24] usb 5-1: Product: syz [ 130.664683][ T24] usb 5-1: Manufacturer: syz [ 130.691496][ T24] usb 5-1: SerialNumber: syz [ 131.049708][ T24] cp210x 5-1:5.244: cp210x converter detected [ 131.106914][ T24] cp210x 5-1:5.244: failed to get vendor val 0x370b size 1: -71 [ 131.124363][ T24] cp210x 5-1:5.244: querying part number failed [ 131.185008][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 131.219698][ T24] usb 5-1: USB disconnect, device number 4 [ 131.389902][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 131.404837][ T24] cp210x 5-1:5.244: device disconnected [ 132.264027][ T6449] loop0: detected capacity change from 0 to 64 [ 132.274729][ T6451] loop3: detected capacity change from 0 to 64 [ 132.488602][ T6454] loop2: detected capacity change from 0 to 8 [ 132.505140][ T6454] SQUASHFS error: Failed to read block 0x6e6: -5 [ 132.511810][ T6454] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 132.519132][ T6454] SQUASHFS error: Unable to read directory block [6e4:0] [ 132.683475][ T30] audit: type=1800 audit(1750792654.714:9): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.137" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 132.757452][ T30] audit: type=1800 audit(1750792654.744:10): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.136" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 132.790860][ T6461] loop4: detected capacity change from 0 to 512 [ 132.810151][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.822312][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.857511][ T6461] ext4: Unknown parameter 'dioreadD' [ 133.286507][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 134.213046][ T9] usb 4-1: config 5 has an invalid interface number: 244 but max is 0 [ 134.246316][ T9] usb 4-1: config 5 has no interface number 0 [ 134.291189][ T9] usb 4-1: New USB device found, idVendor=16d6, idProduct=0001, bcdDevice=b2.cd [ 134.302628][ T6469] loop2: detected capacity change from 0 to 1024 [ 134.326782][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.343156][ T6469] hfsplus: Unknown parameter '000000000000000000030x000000000000000018446744073709551615' [ 134.374478][ T9] usb 4-1: Product: syz [ 134.384346][ T9] usb 4-1: Manufacturer: syz [ 135.093034][ T30] audit: type=1326 audit(1750792657.124:11): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 135.133764][ T9] usb 4-1: SerialNumber: syz [ 135.276986][ T30] audit: type=1326 audit(1750792657.124:12): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 135.522854][ T9] cp210x 4-1:5.244: cp210x converter detected [ 135.549447][ T9] cp210x 4-1:5.244: failed to get vendor val 0x370b size 1: -71 [ 135.761309][ T9] cp210x 4-1:5.244: querying part number failed [ 135.833707][ T6492] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 136.219531][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.146'. [ 136.228563][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 136.235982][ T6494] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 136.261356][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 136.306818][ T9] usb 4-1: USB disconnect, device number 3 [ 136.594651][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 136.618294][ T9] cp210x 4-1:5.244: device disconnected [ 136.851419][ T6507] netlink: 10 bytes leftover after parsing attributes in process `syz.4.155'. [ 138.056576][ T30] audit: type=1326 audit(1750792659.754:13): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 138.079127][ T30] audit: type=1326 audit(1750792659.764:14): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 138.393037][ T30] audit: type=1326 audit(1750792659.764:15): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 138.415699][ T30] audit: type=1326 audit(1750792659.764:16): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 138.459537][ T30] audit: type=1326 audit(1750792659.764:17): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 138.613181][ T30] audit: type=1326 audit(1750792659.764:18): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 138.734244][ T30] audit: type=1326 audit(1750792659.764:19): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 138.889844][ T30] audit: type=1326 audit(1750792659.764:20): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 138.892005][ T6530] netlink: 44 bytes leftover after parsing attributes in process `syz.2.161'. [ 138.955969][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 139.105815][ T30] audit: type=1326 audit(1750792659.764:21): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa90f98e929 code=0x7ffc0000 [ 139.244049][ T6539] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.666809][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.716361][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.745518][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.771300][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.958389][ T6524] loop0: detected capacity change from 0 to 32768 [ 141.456809][ T30] audit: type=1326 audit(1750792663.234:22): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6554 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b38e929 code=0x7ffc0000 [ 141.781457][ T6524] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 142.335066][ T6575] loop1: detected capacity change from 0 to 2048 [ 143.068140][ T6583] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 145.427098][ T6600] netlink: 10 bytes leftover after parsing attributes in process `syz.4.183'. [ 146.007506][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 146.007525][ T30] audit: type=1326 audit(1750792667.634:28): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3b38e929 code=0x7ffc0000 [ 146.085985][ T30] audit: type=1326 audit(1750792667.634:29): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e3b38e929 code=0x7ffc0000 [ 146.127580][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.171221][ T30] audit: type=1326 audit(1750792667.634:30): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3b38e929 code=0x7ffc0000 [ 146.249957][ T30] audit: type=1326 audit(1750792667.634:31): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e3b38e929 code=0x7ffc0000 [ 146.284690][ T30] audit: type=1326 audit(1750792667.634:32): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3b38e929 code=0x7ffc0000 [ 146.314380][ T30] audit: type=1326 audit(1750792667.644:33): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8e3b38e929 code=0x7ffc0000 [ 146.362015][ T9] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 146.413682][ T9] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 146.470004][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 146.606344][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 146.619569][ T30] audit: type=1326 audit(1750792668.094:34): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3b38e929 code=0x7ffc0000 [ 146.663404][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 146.689411][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.262375][ T30] audit: type=1326 audit(1750792668.094:35): auid=4294967295 uid=32768 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3b38e929 code=0x7ffc0000 [ 147.501925][ T6598] loop3: detected capacity change from 0 to 8 [ 147.658581][ T6598] SQUASHFS error: xz decompression failed, data probably corrupt [ 147.670925][ T6619] capability: warning: `syz.2.187' uses 32-bit capabilities (legacy support in use) [ 147.690700][ T6598] SQUASHFS error: Failed to read block 0x108: -5 [ 147.703671][ T6619] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.749141][ T6598] SQUASHFS error: Unable to read metadata cache entry [106] [ 147.787451][ T6598] SQUASHFS error: Unable to read inode 0x11f [ 147.795469][ T6620] FAULT_INJECTION: forcing a failure. [ 147.795469][ T6620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.866885][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.2.187 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 147.866920][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.866935][ T6620] Call Trace: [ 147.866943][ T6620] [ 147.866951][ T6620] dump_stack_lvl+0x189/0x250 [ 147.866985][ T6620] ? __pfx____ratelimit+0x10/0x10 [ 147.867010][ T6620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.867038][ T6620] ? __pfx__printk+0x10/0x10 [ 147.867059][ T6620] ? __might_fault+0xb0/0x130 [ 147.867098][ T6620] should_fail_ex+0x414/0x560 [ 147.867130][ T6620] _copy_from_user+0x2d/0xb0 [ 147.867157][ T6620] kstrtouint_from_user+0xc4/0x170 [ 147.867181][ T6620] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 147.867221][ T6620] proc_fail_nth_write+0x88/0x240 [ 147.867241][ T6620] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 147.867267][ T6620] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 147.867289][ T6620] vfs_write+0x27e/0xa90 [ 147.867325][ T6620] ? __pfx_vfs_write+0x10/0x10 [ 147.867352][ T6620] ? __fget_files+0x2a/0x420 [ 147.867375][ T6620] ? __fget_files+0x3a0/0x420 [ 147.867391][ T6620] ? __fget_files+0x2a/0x420 [ 147.867418][ T6620] ksys_write+0x145/0x250 [ 147.867442][ T6620] ? __fget_files+0x3a0/0x420 [ 147.867461][ T6620] ? __pfx_ksys_write+0x10/0x10 [ 147.867492][ T6620] ? do_syscall_64+0xbe/0x3b0 [ 147.867522][ T6620] do_syscall_64+0xfa/0x3b0 [ 147.867545][ T6620] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.867567][ T6620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.867586][ T6620] ? clear_bhb_loop+0x60/0xb0 [ 147.867610][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.867628][ T6620] RIP: 0033:0x7f8e3b38d3df [ 147.867644][ T6620] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 147.867660][ T6620] RSP: 002b:00007f8e391d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 147.867681][ T6620] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e3b38d3df [ 147.867694][ T6620] RDX: 0000000000000001 RSI: 00007f8e391d50a0 RDI: 0000000000000003 [ 147.867706][ T6620] RBP: 00007f8e391d5090 R08: 0000000000000000 R09: 0000000000000000 [ 147.867718][ T6620] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 147.867729][ T6620] R13: 0000000000000001 R14: 00007f8e3b5b6080 R15: 00007fff827a1648 [ 147.867760][ T6620] [ 148.282413][ T6628] loop0: detected capacity change from 0 to 4096 [ 148.307935][ T9] ath6kl: Failed to submit usb control message: -71 [ 148.314678][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 148.322199][ T9] ath6kl: Unable to send get target info: -71 [ 148.330554][ T9] ath6kl: Failed to init ath6kl core: -71 [ 148.338479][ T9] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 148.351443][ T9] usb 4-1: USB disconnect, device number 4 [ 148.399324][ T6628] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 148.580431][ T6632] loop1: detected capacity change from 0 to 128 [ 148.594085][ T6632] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.618368][ T6632] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.147295][ T6630] loop2: detected capacity change from 0 to 1024 [ 149.526812][ T6634] loop1: detected capacity change from 0 to 40427 [ 149.569900][ T6634] F2FS-fs (loop1): invalid crc value [ 149.630654][ T6634] F2FS-fs (loop1): Start checkpoint disabled! [ 149.679162][ T6634] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 149.968162][ T6641] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 150.296624][ T36] kworker/u8:2: attempt to access beyond end of device [ 150.296624][ T36] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.317278][ T6636] can: request_module (can-proto-0) failed. [ 150.339986][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 150.340013][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.340026][ T36] Workqueue: writeback wb_workfn (flush-7:1) [ 150.340057][ T36] Call Trace: [ 150.340064][ T36] [ 150.340072][ T36] dump_stack_lvl+0x189/0x250 [ 150.340108][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.340133][ T36] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 150.340156][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 150.340187][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 150.340209][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 150.340233][ T36] ? f2fs_hw_is_readonly+0x39b/0x470 [ 150.340265][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 150.340300][ T36] f2fs_write_end_io+0x495/0x810 [ 150.340326][ T36] ? blkg_put+0x22/0x240 [ 150.340372][ T36] __submit_merged_bio+0x27a/0x6a0 [ 150.340406][ T36] __submit_merged_write_cond+0x255/0x530 [ 150.340447][ T36] f2fs_write_data_pages+0x261d/0x3000 [ 150.340517][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 150.340646][ T36] ? f2fs_write_meta_pages+0x357/0x450 [ 150.340686][ T36] ? __lock_acquire+0xab9/0xd20 [ 150.340717][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 150.340746][ T36] do_writepages+0x32b/0x550 [ 150.340780][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 150.340807][ T36] ? writeback_sb_inodes+0x384/0x1010 [ 150.340842][ T36] __writeback_single_inode+0x145/0xff0 [ 150.340866][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 150.340892][ T36] writeback_sb_inodes+0x6c7/0x1010 [ 150.340951][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 150.341030][ T36] ? rcu_is_watching+0x15/0xb0 [ 150.341070][ T36] wb_writeback+0x43b/0xaf0 [ 150.341107][ T36] ? queue_io+0x351/0x590 [ 150.341136][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 150.341173][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.341201][ T36] wb_workfn+0x409/0xef0 [ 150.341243][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 150.341271][ T36] ? __lock_acquire+0xab9/0xd20 [ 150.341310][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 150.341345][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.341365][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 150.341390][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 150.341419][ T36] process_scheduled_works+0xade/0x17b0 [ 150.341489][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 150.341538][ T36] worker_thread+0x8a0/0xda0 [ 150.341569][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 150.341602][ T36] ? __kthread_parkme+0x7b/0x200 [ 150.341644][ T36] kthread+0x711/0x8a0 [ 150.341669][ T36] ? __pfx_worker_thread+0x10/0x10 [ 150.341694][ T36] ? __pfx_kthread+0x10/0x10 [ 150.341717][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.341738][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.341760][ T36] ? __pfx_kthread+0x10/0x10 [ 150.341782][ T36] ret_from_fork+0x3fc/0x770 [ 150.341812][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 150.341846][ T36] ? __switch_to_asm+0x39/0x70 [ 150.341864][ T36] ? __switch_to_asm+0x33/0x70 [ 150.341881][ T36] ? __pfx_kthread+0x10/0x10 [ 150.341903][ T36] ret_from_fork_asm+0x1a/0x30 [ 150.341944][ T36] [ 150.341952][ T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 150.376176][ T6645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.196'. [ 150.544419][ T6647] loop2: detected capacity change from 0 to 8 [ 150.792402][ T6647] team0: No ports can be present during mode change [ 152.394830][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 152.867511][ T6659] loop3: detected capacity change from 0 to 2048 [ 152.886083][ T6659] /dev/loop3: Can't open blockdev [ 153.445276][ T6676] loop4: detected capacity change from 0 to 128 [ 154.064035][ T6676] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.106774][ T6676] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.433928][ T6690] netlink: 44 bytes leftover after parsing attributes in process `syz.3.208'. [ 154.707615][ T6694] loop3: detected capacity change from 0 to 4096 [ 154.992718][ T5827] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.108799][ T6701] loop3: detected capacity change from 0 to 512 [ 155.118600][ T6701] EXT4-fs: Ignoring removed bh option [ 155.145813][ T6701] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 155.261132][ T6701] EXT4-fs (loop3): 1 truncate cleaned up [ 155.288524][ T6701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.310061][ T6705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.928461][ T6709] loop4: detected capacity change from 0 to 512 [ 155.984403][ T6701] EXT4-fs: Ignoring removed orlov option [ 156.085464][ T6709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.114551][ T6701] EXT4-fs (loop3): can't enable nombcache during remount [ 156.120866][ T6709] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.147642][ T6701] EXT4-fs: Ignoring removed orlov option [ 156.164249][ T6701] EXT4-fs (loop3): can't enable nombcache during remount [ 156.192231][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.203895][ T6701] batadv_slave_0: entered promiscuous mode [ 156.334042][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.349455][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.363800][ T6719] loop1: detected capacity change from 0 to 16 [ 156.371840][ T6719] erofs (device loop1): mounted with root inode @ nid 36. [ 156.386132][ T6715] loop2: detected capacity change from 0 to 4096 [ 156.493986][ T6721] netlink: 44 bytes leftover after parsing attributes in process `syz.3.219'. [ 156.676312][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 156.750000][ T6725] loop3: detected capacity change from 0 to 4096 [ 157.506153][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 157.543536][ T5908] usb 2-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 157.564551][ T5908] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 157.630999][ T6733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.988846][ T6740] loop0: detected capacity change from 0 to 128 [ 158.058402][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.080959][ T6740] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.087362][ T5908] usb 2-1: config 0 descriptor?? [ 158.114559][ T5908] usb 2-1: bad CDC descriptors [ 158.143219][ T6740] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.497377][ T5908] usb 2-1: USB disconnect, device number 2 [ 158.604328][ T6752] tmpfs: Unknown parameter './file0' [ 158.795731][ T6751] loop2: detected capacity change from 0 to 40427 [ 158.830912][ T6751] F2FS-fs (loop2): invalid crc value [ 158.876087][ T6751] F2FS-fs (loop2): Start checkpoint disabled! [ 158.884622][ T6751] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 159.296739][ T6758] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 160.037132][ T30] audit: type=1800 audit(1750792682.074:36): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.225" name="bus" dev="tmpfs" ino=285 res=0 errno=0 [ 160.140661][ T49] kworker/u8:3: attempt to access beyond end of device [ 160.140661][ T49] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.187948][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 160.187975][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.187988][ T49] Workqueue: writeback wb_workfn (flush-7:2) [ 160.188018][ T49] Call Trace: [ 160.188026][ T49] [ 160.188035][ T49] dump_stack_lvl+0x189/0x250 [ 160.188071][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.188104][ T49] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 160.188127][ T49] ? __pfx_queue_work_on+0x10/0x10 [ 160.188156][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 160.188178][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 160.188201][ T49] ? f2fs_hw_is_readonly+0x39b/0x470 [ 160.188234][ T49] f2fs_handle_critical_error+0x37c/0x540 [ 160.188269][ T49] f2fs_write_end_io+0x495/0x810 [ 160.188296][ T49] ? blkg_put+0x22/0x240 [ 160.188342][ T49] __submit_merged_bio+0x27a/0x6a0 [ 160.188375][ T49] __submit_merged_write_cond+0x255/0x530 [ 160.188408][ T49] f2fs_write_data_pages+0x261d/0x3000 [ 160.188478][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 160.188608][ T49] ? f2fs_write_meta_pages+0x357/0x450 [ 160.188648][ T49] ? __lock_acquire+0xab9/0xd20 [ 160.188679][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 160.188709][ T49] do_writepages+0x32b/0x550 [ 160.188744][ T49] ? reacquire_held_locks+0x127/0x1d0 [ 160.188771][ T49] ? writeback_sb_inodes+0x384/0x1010 [ 160.188807][ T49] __writeback_single_inode+0x145/0xff0 [ 160.188832][ T49] ? do_raw_spin_unlock+0x122/0x240 [ 160.188857][ T49] writeback_sb_inodes+0x6c7/0x1010 [ 160.188915][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 160.188996][ T49] ? rcu_is_watching+0x15/0xb0 [ 160.189035][ T49] wb_writeback+0x43b/0xaf0 [ 160.189071][ T49] ? queue_io+0x351/0x590 [ 160.189111][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 160.189149][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 160.189177][ T49] wb_workfn+0x409/0xef0 [ 160.189219][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 160.189247][ T49] ? __lock_acquire+0xab9/0xd20 [ 160.189284][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 160.189318][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 160.189338][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 160.189363][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 160.189393][ T49] process_scheduled_works+0xade/0x17b0 [ 160.189458][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 160.189506][ T49] worker_thread+0x8a0/0xda0 [ 160.189537][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 160.189570][ T49] ? __kthread_parkme+0x7b/0x200 [ 160.189612][ T49] kthread+0x711/0x8a0 [ 160.189637][ T49] ? __pfx_worker_thread+0x10/0x10 [ 160.189664][ T49] ? __pfx_kthread+0x10/0x10 [ 160.189686][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 160.189706][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.189727][ T49] ? __pfx_kthread+0x10/0x10 [ 160.189748][ T49] ret_from_fork+0x3fc/0x770 [ 160.189778][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 160.189813][ T49] ? __switch_to_asm+0x39/0x70 [ 160.189830][ T49] ? __switch_to_asm+0x33/0x70 [ 160.189848][ T49] ? __pfx_kthread+0x10/0x10 [ 160.189869][ T49] ret_from_fork_asm+0x1a/0x30 [ 160.189904][ T49] [ 160.189912][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 160.583360][ T5842] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.774906][ T6762] loop4: detected capacity change from 0 to 512 [ 160.810979][ T6762] EXT4-fs: Ignoring removed bh option [ 160.882266][ T6762] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.913342][ T6762] EXT4-fs (loop4): 1 truncate cleaned up [ 160.921160][ T6762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.401179][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.457379][ T5837] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 161.895652][ T5837] usb 4-1: config 5 has an invalid interface number: 244 but max is 0 [ 162.082272][ T5837] usb 4-1: config 5 has no interface number 0 [ 162.098964][ T5837] usb 4-1: New USB device found, idVendor=16d6, idProduct=0001, bcdDevice=b2.cd [ 162.108403][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.120189][ T5837] usb 4-1: Product: syz [ 162.124444][ T5837] usb 4-1: Manufacturer: syz [ 162.129460][ T5837] usb 4-1: SerialNumber: syz [ 162.316587][ T55] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 162.359443][ T6780] FAULT_INJECTION: forcing a failure. [ 162.359443][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 162.394478][ T6760] loop1: detected capacity change from 0 to 32768 [ 162.400946][ T5837] cp210x 4-1:5.244: cp210x converter detected [ 162.406524][ T5837] cp210x 4-1:5.244: failed to get vendor val 0x370b size 1: -71 [ 162.417019][ T6780] CPU: 1 UID: 0 PID: 6780 Comm: syz.0.234 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 162.417045][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.417056][ T6780] Call Trace: [ 162.417064][ T6780] [ 162.417072][ T6780] dump_stack_lvl+0x189/0x250 [ 162.417105][ T6780] ? __pfx____ratelimit+0x10/0x10 [ 162.417129][ T6780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.417157][ T6780] ? __pfx__printk+0x10/0x10 [ 162.417183][ T6780] ? __pfx___might_resched+0x10/0x10 [ 162.417208][ T6780] ? fs_reclaim_acquire+0x7d/0x100 [ 162.417232][ T6780] should_fail_ex+0x414/0x560 [ 162.417263][ T6780] should_failslab+0xa8/0x100 [ 162.417293][ T6780] __kmalloc_noprof+0xcb/0x4f0 [ 162.417317][ T6780] ? kfree+0x4d/0x440 [ 162.417339][ T6780] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 162.417372][ T6780] tomoyo_realpath_from_path+0xe3/0x5d0 [ 162.417403][ T6780] ? tomoyo_domain+0xd9/0x130 [ 162.417426][ T6780] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 162.417450][ T6780] tomoyo_path_number_perm+0x1e8/0x5a0 [ 162.417477][ T6780] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.417518][ T6780] ? __lock_acquire+0xab9/0xd20 [ 162.417563][ T6780] ? __fget_files+0x2a/0x420 [ 162.417583][ T6780] ? __fget_files+0x2a/0x420 [ 162.417598][ T6780] ? __fget_files+0x3a0/0x420 [ 162.417614][ T6780] ? __fget_files+0x2a/0x420 [ 162.417636][ T6780] security_file_ioctl+0xcb/0x2d0 [ 162.417661][ T6780] __se_sys_ioctl+0x47/0x170 [ 162.417688][ T6780] do_syscall_64+0xfa/0x3b0 [ 162.417711][ T6780] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.417732][ T6780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.417751][ T6780] ? clear_bhb_loop+0x60/0xb0 [ 162.417773][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.417791][ T6780] RIP: 0033:0x7fa90f98e929 [ 162.417807][ T6780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.417822][ T6780] RSP: 002b:00007fa910730038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.417849][ T6780] RAX: ffffffffffffffda RBX: 00007fa90fbb5fa0 RCX: 00007fa90f98e929 [ 162.417863][ T6780] RDX: 0000200000000000 RSI: 0000000000008b37 RDI: 0000000000000003 [ 162.417875][ T6780] RBP: 00007fa910730090 R08: 0000000000000000 R09: 0000000000000000 [ 162.417887][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.417897][ T6780] R13: 0000000000000000 R14: 00007fa90fbb5fa0 R15: 00007ffdda1cf5a8 [ 162.417927][ T6780] [ 162.417944][ T6780] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.528940][ T55] usb 5-1: config 5 has an invalid interface number: 244 but max is 0 [ 162.542421][ T5837] cp210x 4-1:5.244: querying part number failed [ 162.578772][ T55] usb 5-1: config 5 has no interface number 0 [ 162.613129][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.633072][ T5837] usb 4-1: cp210x converter now attached to ttyUSB0 [ 162.663231][ T55] usb 5-1: New USB device found, idVendor=16d6, idProduct=0001, bcdDevice=b2.cd [ 162.732274][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.744202][ T55] usb 5-1: Product: syz [ 162.751049][ T55] usb 5-1: Manufacturer: syz [ 162.755849][ T55] usb 5-1: SerialNumber: syz [ 162.787184][ T6784] netlink: 168 bytes leftover after parsing attributes in process `syz.2.236'. [ 162.794437][ T5837] usb 4-1: USB disconnect, device number 5 [ 162.844141][ T6027] udevd[6027]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 162.858914][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 163.096108][ T5837] cp210x 4-1:5.244: device disconnected [ 163.676795][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 164.107203][ T55] cp210x 5-1:5.244: cp210x converter detected [ 164.136532][ T55] cp210x 5-1:5.244: failed to get vendor val 0x370b size 1: -71 [ 164.213620][ T55] cp210x 5-1:5.244: querying part number failed [ 164.263789][ T55] usb 5-1: cp210x converter now attached to ttyUSB0 [ 164.288438][ T6798] loop0: detected capacity change from 0 to 128 [ 164.319849][ T55] usb 5-1: USB disconnect, device number 5 [ 164.348315][ T55] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.366990][ T6798] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.403671][ T55] cp210x 5-1:5.244: device disconnected [ 164.414575][ T6798] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.594657][ T6802] loop3: detected capacity change from 0 to 2048 [ 164.720818][ T6805] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.775240][ T30] audit: type=1800 audit(1750792686.804:37): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.240" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 164.844136][ T6802] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 164.883261][ T6802] Remounting filesystem read-only [ 165.302826][ T6816] page: refcount:515 mapcount:0 mapping:ffff888078ce5150 index:0x0 pfn:0x51200 [ 165.312449][ T6816] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 165.320974][ T6816] aops:hugetlbfs_aops ino:298a dentry name(?):"anon_hugepage" [ 165.328461][ T6816] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 165.336644][ T6816] page_type: f4(hugetlb) [ 165.340904][ T6816] raw: 00fff00000000041 ffffc9001a99fe10 ffffc9001a99fe10 ffff888078ce5150 [ 165.349480][ T6816] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 165.358057][ T6816] head: 00fff00000000041 ffffc9001a99fe10 ffffc9001a99fe10 ffff888078ce5150 [ 165.366719][ T6816] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 165.375387][ T6816] head: 00fff00000000009 ffffea0001448001 0000000000000000 0000000000000000 [ 165.384050][ T6816] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 165.392705][ T6816] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 165.399971][ T6816] page_owner tracks the page as allocated [ 165.406074][ T6816] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 6792, tgid 6786 (syz.0.237), ts 163281768264, free_ts 22159656545 [ 165.426482][ T6816] post_alloc_hook+0x240/0x2a0 [ 165.431347][ T6816] get_page_from_freelist+0x21e4/0x22c0 [ 165.436885][ T6816] __alloc_frozen_pages_noprof+0x181/0x370 [ 165.442684][ T6816] alloc_buddy_hugetlb_folio+0xdf/0x1c0 [ 165.448219][ T6816] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 165.454188][ T6816] alloc_surplus_hugetlb_folio+0x103/0x430 [ 165.459987][ T6816] hugetlb_acct_memory+0x59f/0x1050 [ 165.465179][ T6816] hugetlb_reserve_pages+0x831/0xec0 [ 165.470465][ T6816] hugetlbfs_file_mmap+0x490/0x680 [ 165.475832][ T6816] mmap_region+0x18ae/0x20c0 [ 165.480498][ T6816] do_mmap+0xc45/0x10d0 [ 165.484661][ T6816] __se_sys_remap_file_pages+0x77c/0x840 [ 165.490305][ T6816] do_syscall_64+0xfa/0x3b0 [ 165.494812][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.500700][ T6816] page last free pid 1 tgid 1 stack trace: [ 165.506494][ T6816] __free_frozen_pages+0xb80/0xd80 [ 165.511609][ T6816] free_contig_range+0x1bd/0x4a0 [ 165.516538][ T6816] destroy_args+0x7e/0x5d0 [ 165.520946][ T6816] debug_vm_pgtable+0x3fa/0x430 [ 165.525797][ T6816] do_one_initcall+0x233/0x820 [ 165.530571][ T6816] do_initcall_level+0x137/0x1f0 [ 165.535513][ T6816] do_initcalls+0x69/0xd0 [ 165.539844][ T6816] kernel_init_freeable+0x3d9/0x570 [ 165.545039][ T6816] kernel_init+0x1d/0x1d0 [ 165.549370][ T6816] ret_from_fork+0x3fc/0x770 [ 165.553957][ T6816] ret_from_fork_asm+0x1a/0x30 [ 165.558863][ T6816] ------------[ cut here ]------------ [ 165.564301][ T6816] kernel BUG at mm/filemap.c:154! [ 165.569338][ T6816] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 165.575572][ T6816] CPU: 0 UID: 0 PID: 6816 Comm: syz.1.239 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 165.586931][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.596973][ T6816] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 165.603213][ T6816] Code: f7 c8 ff 48 89 df 48 c7 c6 00 3e 94 8b e8 93 02 11 00 90 0f 0b e8 0b f7 c8 ff 48 89 df 48 c7 c6 e0 3c 94 8b e8 7c 02 11 00 90 <0f> 0b e8 f4 f6 c8 ff 48 89 df 48 c7 c6 00 3e 94 8b e8 65 02 11 00 [ 165.622812][ T6816] RSP: 0018:ffffc9000cc26fe0 EFLAGS: 00010046 [ 165.628875][ T6816] RAX: a548924031310b00 RBX: ffffea0001448000 RCX: a548924031310b00 [ 165.636834][ T6816] RDX: 0000000000000005 RSI: ffffffff8db7f60f RDI: ffff88802da11e00 [ 165.644791][ T6816] RBP: 0000000000000001 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 165.652755][ T6816] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 165.660715][ T6816] R13: 1ffffd4000289000 R14: 1ffffd4000289001 R15: ffffea0001448008 [ 165.668670][ T6816] FS: 00007fed49c3b6c0(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000 [ 165.677586][ T6816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.684154][ T6816] CR2: 000000110c33fcce CR3: 000000007505a000 CR4: 00000000003526f0 [ 165.692112][ T6816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.700067][ T6816] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.708024][ T6816] Call Trace: [ 165.711287][ T6816] [ 165.714206][ T6816] __filemap_remove_folio+0xc3/0x500 [ 165.719489][ T6816] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 165.724846][ T6816] ? __pfx___filemap_remove_folio+0x10/0x10 [ 165.730728][ T6816] ? _raw_spin_lock_irq+0xae/0xf0 [ 165.735740][ T6816] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 165.741278][ T6816] filemap_remove_folio+0xe6/0x1f0 [ 165.746387][ T6816] remove_inode_hugepages+0x594/0x1100 [ 165.751837][ T6816] ? preempt_schedule_common+0x83/0xd0 [ 165.757290][ T6816] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 165.763186][ T6816] ? preempt_schedule_thunk+0x16/0x30 [ 165.768551][ T6816] ? up_write+0x1f2/0x420 [ 165.772865][ T6816] hugetlbfs_fallocate+0xbc7/0x1100 [ 165.778053][ T6816] ? aa_file_perm+0x13e/0x11b0 [ 165.782820][ T6816] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 165.788438][ T6816] ? preempt_schedule_irq+0xb5/0x150 [ 165.793719][ T6816] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 165.799607][ T6816] vfs_fallocate+0x6a0/0x830 [ 165.804198][ T6816] ? __pfx_vfs_fallocate+0x10/0x10 [ 165.809303][ T6816] madvise_vma_behavior+0x23ad/0x2a20 [ 165.814668][ T6816] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 165.820383][ T6816] ? css_rstat_updated+0x24f/0x4e0 [ 165.825488][ T6816] ? __switch_to+0xd74/0x1600 [ 165.830161][ T6816] ? mas_prev_slot+0xb31/0xbe0 [ 165.834915][ T6816] ? find_vma_prev+0xfc/0x170 [ 165.839582][ T6816] ? __pfx_find_vma_prev+0x10/0x10 [ 165.844685][ T6816] ? __schedule+0x1713/0x4d00 [ 165.849352][ T6816] ? blk_start_plug+0x6f/0x1b0 [ 165.854104][ T6816] madvise_do_behavior+0x6a9/0xad0 [ 165.859215][ T6816] ? __pfx_madvise_do_behavior+0x10/0x10 [ 165.864861][ T6816] ? down_read+0x1ad/0x2e0 [ 165.869284][ T6816] do_madvise+0x189/0x240 [ 165.873620][ T6816] ? __pfx_do_madvise+0x10/0x10 [ 165.878476][ T6816] ? irqentry_exit+0x74/0x90 [ 165.883067][ T6816] __x64_sys_madvise+0xa7/0xc0 [ 165.887827][ T6816] do_syscall_64+0xfa/0x3b0 [ 165.892326][ T6816] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.897512][ T6816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.903564][ T6816] ? clear_bhb_loop+0x60/0xb0 [ 165.908242][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.914121][ T6816] RIP: 0033:0x7fed48d8e929 [ 165.918532][ T6816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.938127][ T6816] RSP: 002b:00007fed49c3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 165.946531][ T6816] RAX: ffffffffffffffda RBX: 00007fed48fb6160 RCX: 00007fed48d8e929 [ 165.954487][ T6816] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 165.962444][ T6816] RBP: 00007fed48e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 165.970398][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.978354][ T6816] R13: 0000000000000000 R14: 00007fed48fb6160 R15: 00007ffe40594968 [ 165.986406][ T6816] [ 165.989409][ T6816] Modules linked in: [ 165.993321][ T6816] ---[ end trace 0000000000000000 ]--- [ 165.998775][ T6816] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 166.005028][ T6816] Code: f7 c8 ff 48 89 df 48 c7 c6 00 3e 94 8b e8 93 02 11 00 90 0f 0b e8 0b f7 c8 ff 48 89 df 48 c7 c6 e0 3c 94 8b e8 7c 02 11 00 90 <0f> 0b e8 f4 f6 c8 ff 48 89 df 48 c7 c6 00 3e 94 8b e8 65 02 11 00 [ 166.024632][ T6816] RSP: 0018:ffffc9000cc26fe0 EFLAGS: 00010046 [ 166.030692][ T6816] RAX: a548924031310b00 RBX: ffffea0001448000 RCX: a548924031310b00 [ 166.038652][ T6816] RDX: 0000000000000005 RSI: ffffffff8db7f60f RDI: ffff88802da11e00 [ 166.046700][ T6816] RBP: 0000000000000001 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 166.054737][ T6816] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 166.062712][ T6816] R13: 1ffffd4000289000 R14: 1ffffd4000289001 R15: ffffea0001448008 [ 166.070695][ T6816] FS: 00007fed49c3b6c0(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000 [ 166.079616][ T6816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.086451][ T6816] CR2: 000000110c33fcce CR3: 000000007505a000 CR4: 00000000003526f0 [ 166.094426][ T6816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.102390][ T6816] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.110349][ T6816] Kernel panic - not syncing: Fatal exception [ 166.116623][ T6816] Kernel Offset: disabled [ 166.120937][ T6816] Rebooting in 86400 seconds..