last executing test programs: 9.401648348s ago: executing program 0 (id=215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (fail_nth: 7) 9.249273861s ago: executing program 0 (id=219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0}) 9.187514399s ago: executing program 0 (id=224): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000680)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x7}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 9.125835854s ago: executing program 0 (id=226): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0xffff1000, 0xf3, &(0x7f0000000140)=""/243}, {0xd000, 0x7c, &(0x7f0000000040)=""/124}, {0x3000, 0x76, &(0x7f0000000240)=""/118}, {0x6000, 0x81, &(0x7f0000000340)=""/129}, {0x8000000, 0x29, &(0x7f00000000c0)=""/41}]}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0xc4, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_EMATCHES={0x88, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x44, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x100}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xdf, 0x1}, {0x278e, 0x81}}}, @TCA_EM_META_RVALUE={0xfffffffffffffefa, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1, 0x2}, {0xffff, 0x8, 0x1}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xf1, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xe637, 0x2, 0xb}, {0xc, 0x7, 0x1, "84925975b9f517"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 9.026153168s ago: executing program 0 (id=229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_mount_image$bcachefs(&(0x7f00000059c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES16, @ANYRESDEC], 0x1, 0x59ba, &(0x7f0000005a80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x101100, 0x80) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x4070bc0a, &(0x7f0000000340)={0x4, 0x10001, 0x6012aef9, 0x1, 0x10002}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0}) 8.510179982s ago: executing program 0 (id=236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000680)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x7}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5.219939918s ago: executing program 2 (id=290): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x20000000}, 0x10) 5.070748102s ago: executing program 2 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 5.070395015s ago: executing program 2 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (fail_nth: 9) 5.017680714s ago: executing program 2 (id=293): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) 4.153635653s ago: executing program 2 (id=300): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0xfd, 0x0, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000001006f9595d6538c6dc80804fa586226a23d71aafd23663ae6610952721f71faa0f9bbbf412166404116aa2b81a0443a169f41457a94c3cc54fe08aab15e489617968f5436df3a99f504fa0088e8b1448974a9b93c6085171af52ad83dc1a0d9db61bc4258ff449644dd8c597ebbcbc361f54e298ca8e5d80a5f64c515683dc72d205fc8529a6f849ee1806cc8d60ce55bbc50c1742c19f75d4d0081b6e6ccfb837bb993d2e941da721d6d88c6ecc94d80a1e22bd8e625"], 0x3, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) unlinkat(0xffffffffffffffff, 0x0, 0x200) syz_read_part_table(0x1090, &(0x7f00000010c0)="$eJzs0D1O61AQBeDj+MU/SvGkbCDboIPdsA2no2IXiJaatbAPQEIMMnYC9Eg031f4zpFnPNYNf6vaDLk6p1R1SZOkTdInm+Ph4efA/OiStlnylOeqeqnF25B6fc90O4evoX49h2RcqiaZqjm92yW5vpm/fhiTffqu7i/umvP4NtnkMv/WvMm67rNjrYfx1L5djn21ydNj1p3T7tvvHJP8/607BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBDo4BCAAgAAP//m4E0sg==") 4.121186894s ago: executing program 2 (id=302): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x2000000) 3.341444736s ago: executing program 3 (id=311): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x50) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r1 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) (async) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x3) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000500)={0x1, 0x10, '\x00', 0x1, &(0x7f00000004c0)=[0x0, 0x0]}) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000530000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0xab, &(0x7f0000000800)=""/171, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$key(0xf, 0x3, 0x2) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="0100deffffff07000000030000004800018044000400200001000a00000400ed8c61b079a7b141f78c948958a434000002ff010000007f2c9f7ee112137500000100000000200002000a0000d38b"], 0x5c}, 0x1, 0x0, 0x0, 0x20000410}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000600)={0x4, 0x7, 0xfff, 0x1}, 0x8) (async) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000600)={0x4, 0x7, 0xfff, 0x1}, 0x8) close(r7) (async) close(r7) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7789e72b6d19df00"/28, @ANYRESHEX=r7, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7789e72b6d19df00"/28, @ANYRESHEX=r7, @ANYBLOB=',\x00']) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xa89b, 0x9}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={r8, 0x81}, 0x8) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={r8, 0x81}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0deaa05046c4ccfe971f33c6845fdbc6c98a7666c13c521a593a3ae3ac9e794cc96ba8145763c38541409a559902f161a9083f0c425188714a814de5779abde22556929810e1ec2e0fdbf19a41222ba14bd2ac5fdb545c83f80185ded55bba6264e6b3b29bbd352a60fe", @ANYRES16=r4, @ANYRESHEX=r2, @ANYRES32=r1], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r9, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004021}, 0xc042) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) 3.070241865s ago: executing program 3 (id=313): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0xa, 0x2, {0x2, 0x11}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f00000000c0), 0x0}, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a0001002cbd70000000000002000000000000000000000006001d00fffe000008001e80"], 0x2c}}, 0x0) 1.509759992s ago: executing program 1 (id=335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec00000a2100390d0000000000000000fe8000000000000000000000000000aae000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac141415000000000000000000000000ac141400000000000000000000000000000000000002000011000200ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) 1.5093116s ago: executing program 1 (id=336): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x3, {0x0, 0xff, 0x2}, 0xfe}, 0x18, &(0x7f00000000c0)={&(0x7f0000000140)="0745baf0d1b65af3e3378423ba1828bbad4a090736eaabf06f4526c27e184bebad583d16712fb73e6371483a889b3e2bf015c3a1e1a93be312af7ae8bb6eb775337738a0ceeb41fde6ff3755b1dd178868d5b4f44431955d0293f931af0633d668b77784525a2a07895f7d963b", 0x6d}, 0x1, 0x0, 0x0, 0xc000}, 0x240400c5) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="2b05f86a12c5b7fa675cc571fe68c16a50", 0x11}, {&(0x7f0000000240)="593128cb2932e36c436027c5458d1ad303004d30d57c04a8fc7c4181c7e202c4f7a9eb7dbc87", 0x26}, {&(0x7f0000000280)="4f1ff911ec46fc5457b1c704cae9675256ce120fe99c00da53cd8f9b80b6e16a52b5d415a9ced6293879717efdbacc48894acafc6c85b902415e90ae0c599fc78e2519b0673cd0130275103cce08b36257eeba8a93ec32d5e07c9c161aace40b09c061bfa1505f03502b5d0b32c4f2fc1499601e6ef6e73b85e3f41bb8e10c587c18f518735be4443ab0b52a48ced28f8f51243204e03d99", 0x98}, {&(0x7f00000003c0)="e6a119ed3d66527c394b3235551f988254208229f30025a4e24b6b23ad8f2717c4f1eb00554d191be8dfd26141effce1b1f23b5d419bd71b7658f2daa148501cb2e4126b5617bf20bcfaab23e83570c67eabeb225b4c50399a61914a60173f17176acb90390c1654065265cb729d867f28a91a39da743915d990008edf96d4632b85dbd52e0ba5142620f0a9922ea5c0e6b3ae130f7e3a4b278256e283bf5139859426ad8aec88f4279ca9e07fdcf32ecf499305b95a51b1b46adfa88912513bc6c311736c5b075007716cf8681100b8af", 0xd1}, {&(0x7f0000000580)="9708861f9b409a5c36f930d847afded5476d7375de724eaf8c36ae313bf82109500cea203ad2632d9b9f2d94ecaf6b88ebb84afe6f3c0c172745d32b160d639706885100d47661a4640d5dfb", 0x4c}, {&(0x7f0000000600)="0ac5312b15b9a6ed4dcce87339c73ed9a76f0cc24c922080a04d82ece2e1e847ec3b59233ff12b4d370b37a652afac16c1718aed28d8337efd7d133dfa26fc41266c61331af86e139fa8f7a4303756e0b53fa9a2a6c42ac2d216c9", 0x5b}, {&(0x7f0000000680)="785ab1815cef9280c2f04aeb54275258ecad4555570ef1d805464adbbbfacff3ca20f174364480d941565ae3d0ef27b58a3d232acc6d50d72a60a0896b59b0b5a6ab2c54d953639efa6633ff3bda5506af2b63c93a6d1639a472464b35a09c38666f699e4ddc9cc86a16c495af6baed6017b265e923870e2642b50f1ea", 0x7d}, {&(0x7f00000004c0)="9597e89775269a8877a3772f10b06a62f562cde0d972d5925b6ee1f7a3e2e946c3f16fa0c6ea10a125d665f48f6a682eb88e581e5e924a83b08d28d3b0dd", 0x3e}], 0x8}}], 0x1, 0x8810) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r2, &(0x7f0000000340), 0x2d}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2) 1.465346904s ago: executing program 1 (id=337): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc, 0x20ffe000, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0}) 1.436988174s ago: executing program 1 (id=338): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, 0x0, 0x0) 1.361395202s ago: executing program 1 (id=339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0xfd, 0x0, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000001006f9595d6538c6dc80804fa586226a23d71aafd23663ae6610952721f71faa0f9bbbf412166404116aa2b81a0443a169f41457a94c3cc54fe08aab15e489617968f5436df3a99f504fa0088e8b1448974a9b93c6085171af52ad83dc1a0d9db61bc4258ff449644dd8c597ebbcbc361f54e298ca8e5d80a5f64c515683dc72d205fc8529a6f849ee1806cc8d60ce55bbc50c1742c19f75d4d0081b6e6ccfb837bb993d2e941da721d6d88c6ecc94d80a1e22bd8e625"], 0x3, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @pix={0x6, 0x4, 0x50323234, 0x0, 0x6, 0x80000000, 0x0, 0x7fffffff, 0x0, 0x0, 0x2, 0x3}}) read$FUSE(r1, &(0x7f0000003440)={0x2020}, 0x2020) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newchain={0x34, 0x64, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xe}, {0xb, 0xd}, {0xa, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x81}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 1.334289123s ago: executing program 1 (id=340): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@prjquota}]}, 0x1, 0x97eb, &(0x7f0000012f40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x5e24, @broadcast}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3504, 0x2, 0x2, 0x6, 0x0, 0x1}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x5, 0x7ff, 0x401, 0x5}]}]}, 0x1ec}}, 0x0) setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)=@sha1={0x1, "4525f685a6ffff00000000000000000000000023"}, 0x15, 0x0) setxattr$security_ima(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f0000000080)=@md5={0x1, "d7436baf8fac8a9e91f8993fc732acfc"}, 0x1001, 0x2) 10.019948ms ago: executing program 4 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000900)=""/136, 0x88}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x7, 0x0, 0x0) 9.049087ms ago: executing program 4 (id=351): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0xc4, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_EMATCHES={0x88, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x44, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x100}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xdf, 0x1}, {0x278e, 0x81}}}, @TCA_EM_META_RVALUE={0xfffffffffffffefa, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1, 0x2}, {0xffff, 0x8, 0x1}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xf1, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xe637, 0x2, 0xb}, {0xc, 0x7, 0x1, "84925975b9f517"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 8.413813ms ago: executing program 3 (id=352): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2b05", 0x2}], 0x1}}], 0x1, 0x8800) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, 0x0}]) 8.058891ms ago: executing program 4 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x2, 0x200, 0x7}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 6.428498ms ago: executing program 4 (id=354): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000680)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x68, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5.696107ms ago: executing program 3 (id=355): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (fail_nth: 11) 5.378352ms ago: executing program 4 (id=356): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x14720000, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.817512ms ago: executing program 4 (id=357): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000000c0)=0x200, 0x4) sendmmsg$inet(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)='\'', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x4000000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff0000000062d931b916ef6a20795c783d2eebc225a982d7c22eee9d353931225be969307023a5201053c1b7804ca5983ee96d8c588ec1e081ca0cdf87119e23b767a703", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r9, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r9, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x7fff800000000002}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f00000001c0)={0x28, 0x2, r10, r9, 0x1000, 0x1ff, 0x9}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 835.525µs ago: executing program 3 (id=358): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x24, r3, 0x5cfe9b9de6b8c055, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) r5 = signalfd4(r0, &(0x7f0000000080), 0x8, 0x80000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [""]}, 0x14}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="780000001c00b5f52abd7000fedbdf2502000000", @ANYRES32=r0, @ANYBLOB="0000050308000b003f78e60008000a000000000008000f0001000000080001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 3 (id=359): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r1}, 0x1) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xf}, 0x8) shutdown(r0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20) syz_mount_image$bcachefs(&(0x7f00000003c0), &(0x7f0000000000)='./file1\x00', 0x1a1c8c0, &(0x7f0000000280)=ANY=[@ANYBLOB='data_Thecksum=crc64,str_hash=crc64,metadata_replicas_required=0x0000000000000003,move_ios_in_fli000000221,fsck_memory_usage_percent=0x000000000000003b,noexcl,background_compression=gzip,reconstruct_alloc,prjquota,erasure_code,data_checksum=xxhash,very_degraded,discard,degraded,no_splitbrain_check,subj_role=[,\x00', @ANYRES16=r0], 0xfd, 0x595b, &(0x7f0000000880)="$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") rt_sigprocmask(0x0, &(0x7f00000000c0), 0xfffffffffffffffe, 0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0xff, 0x5a02, &(0x7f000000bc00)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x20500, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000000000000000f784000000310000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x6}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0x8, 0x8, 0x5, 0x0, 0x1000}) kernel console output (not intermixed with test programs): 0x41c/0x594 [ 37.035411][ T7028] should_fail+0x14/0x24 [ 37.035417][ T7028] should_fail_usercopy+0x20/0x30 [ 37.035424][ T7028] _copy_to_iter+0x198/0x139c [ 37.035431][ T7028] tun_do_read+0xf30/0x1888 [ 37.035438][ T7028] tun_chr_read_iter+0x114/0x25c [ 37.035443][ T7028] do_iter_readv_writev+0x4c0/0x724 [ 37.035451][ T7028] vfs_readv+0x210/0x6d0 [ 37.035457][ T7028] do_readv+0x128/0x290 [ 37.035464][ T7028] __arm64_sys_readv+0x80/0x94 [ 37.035470][ T7028] invoke_syscall+0x98/0x254 [ 37.035476][ T7028] el0_svc_common+0x130/0x23c [ 37.035481][ T7028] do_el0_svc+0x48/0x58 [ 37.035486][ T7028] el0_svc+0x5c/0x254 [ 37.035494][ T7028] el0t_64_sync_handler+0x84/0x12c [ 37.035500][ T7028] el0t_64_sync+0x198/0x19c [ 37.056365][ T6997] XFS (loop0): Ending clean mount [ 37.069832][ T6997] XFS (loop0): Quotacheck needed: Please wait. [ 37.086924][ T6530] ocfs2: Unmounting device (7,1) on (node local) [ 37.095200][ T6997] XFS (loop0): Quotacheck: Done. [ 37.168975][ T7048] FAULT_INJECTION: forcing a failure. [ 37.168975][ T7048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.169015][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.1.77 Not tainted syzkaller #0 PREEMPT [ 37.169025][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 37.169029][ T7048] Call trace: [ 37.169032][ T7048] show_stack+0x2c/0x3c (C) [ 37.169044][ T7048] __dump_stack+0x30/0x40 [ 37.169051][ T7048] dump_stack_lvl+0xd8/0x12c [ 37.169056][ T7048] dump_stack+0x1c/0x28 [ 37.169060][ T7048] should_fail_ex+0x41c/0x594 [ 37.169070][ T7048] should_fail+0x14/0x24 [ 37.169076][ T7048] should_fail_usercopy+0x20/0x30 [ 37.169083][ T7048] _copy_from_iter+0x194/0x12c0 [ 37.169091][ T7048] netlink_sendmsg+0x548/0x930 [ 37.169099][ T7048] ____sys_sendmsg+0x490/0x7b8 [ 37.169107][ T7048] ___sys_sendmsg+0x204/0x278 [ 37.169114][ T7048] __arm64_sys_sendmsg+0x184/0x238 [ 37.169121][ T7048] invoke_syscall+0x98/0x254 [ 37.169127][ T7048] el0_svc_common+0x130/0x23c [ 37.169132][ T7048] do_el0_svc+0x48/0x58 [ 37.169137][ T7048] el0_svc+0x5c/0x254 [ 37.169145][ T7048] el0t_64_sync_handler+0x84/0x12c [ 37.169152][ T7048] el0t_64_sync+0x198/0x19c [ 37.177021][ T7047] binder: 7045:7047 tried to acquire reference to desc 0, got 1 instead [ 37.240307][ T7051] binder: 7050:7051 tried to acquire reference to desc 0, got 1 instead [ 37.244362][ T7051] binder_alloc: 7050: pid 7050 spamming oneway? 1 buffers allocated for a total size of 4096 [ 37.295144][ T7056] binder_alloc: 7050: pid 7050 spamming oneway? 2 buffers allocated for a total size of 5120 [ 37.330443][ T7054] loop1: detected capacity change from 0 to 32768 [ 37.364441][ T7054] jfs_mount: dbMount failed w/rc = -22 [ 37.364691][ T7054] Mount JFS Failure: -22 [ 37.364718][ T7054] jfs_mount failed w/return code = -22 [ 37.365428][ T26] binder: undelivered TRANSACTION_COMPLETE [ 37.365449][ T26] binder: undelivered TRANSACTION_COMPLETE [ 37.366061][ T26] binder: undelivered TRANSACTION_COMPLETE [ 37.372070][ T7059] loop3: detected capacity change from 0 to 256 [ 37.390512][ T7059] FAT-fs (loop3): Directory bread(block 64) failed [ 37.390557][ T7059] FAT-fs (loop3): Directory bread(block 65) failed [ 37.392799][ T7059] FAT-fs (loop3): Directory bread(block 66) failed [ 37.392828][ T7059] FAT-fs (loop3): Directory bread(block 67) failed [ 37.392854][ T7059] FAT-fs (loop3): Directory bread(block 68) failed [ 37.392866][ T7059] FAT-fs (loop3): Directory bread(block 69) failed [ 37.392887][ T7059] FAT-fs (loop3): Directory bread(block 70) failed [ 37.392898][ T7059] FAT-fs (loop3): Directory bread(block 71) failed [ 37.393165][ T7059] FAT-fs (loop3): Directory bread(block 72) failed [ 37.393176][ T7059] FAT-fs (loop3): Directory bread(block 73) failed [ 37.405712][ T6649] binder: undelivered transaction 33, process died. [ 37.405750][ T6649] binder: undelivered transaction 34, process died. [ 37.405778][ T6649] binder: undelivered transaction 32, process died. [ 37.435092][ T6539] Bluetooth: hci3: Malformed LE Event: 0x1b [ 37.460130][ T7062] binder: 7060:7062 tried to acquire reference to desc 0, got 1 instead [ 37.462104][ T7062] binder_alloc: 7060: pid 7060 spamming oneway? 1 buffers allocated for a total size of 4096 [ 37.464238][ T6649] binder: undelivered TRANSACTION_COMPLETE [ 37.524725][ T7066] binder: 7064:7066 tried to acquire reference to desc 0, got 1 instead [ 37.524922][ T7066] binder_alloc: 7064: pid 7064 spamming oneway? 1 buffers allocated for a total size of 4096 [ 37.525197][ T7066] FAULT_INJECTION: forcing a failure. [ 37.525197][ T7066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.525214][ T7066] CPU: 0 UID: 0 PID: 7066 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT [ 37.525225][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 37.525231][ T7066] Call trace: [ 37.525234][ T7066] show_stack+0x2c/0x3c (C) [ 37.525247][ T7066] __dump_stack+0x30/0x40 [ 37.525254][ T7066] dump_stack_lvl+0xd8/0x12c [ 37.525259][ T7066] dump_stack+0x1c/0x28 [ 37.525264][ T7066] should_fail_ex+0x41c/0x594 [ 37.525273][ T7066] should_fail+0x14/0x24 [ 37.525279][ T7066] should_fail_usercopy+0x20/0x30 [ 37.525286][ T7066] _inline_copy_from_user+0x40/0x180 [ 37.525294][ T7066] binder_ioctl_write_read+0xb58/0x9f58 [ 37.525300][ T7066] binder_ioctl+0x420/0x19a4 [ 37.525306][ T7066] __arm64_sys_ioctl+0x14c/0x1c4 [ 37.525313][ T7066] invoke_syscall+0x98/0x254 [ 37.525319][ T7066] el0_svc_common+0x130/0x23c [ 37.525324][ T7066] do_el0_svc+0x48/0x58 [ 37.525329][ T7066] el0_svc+0x5c/0x254 [ 37.525336][ T7066] el0t_64_sync_handler+0x84/0x12c [ 37.525343][ T7066] el0t_64_sync+0x198/0x19c [ 37.525355][ T7066] binder: 7064:7066 ioctl c0306201 20000c00 returned -14 [ 37.626626][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 37.823085][ T6529] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 37.830849][ T7073] FAULT_INJECTION: forcing a failure. [ 37.830849][ T7073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.830890][ T7073] CPU: 0 UID: 0 PID: 7073 Comm: syz.2.85 Not tainted syzkaller #0 PREEMPT [ 37.830902][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 37.830909][ T7073] Call trace: [ 37.830912][ T7073] show_stack+0x2c/0x3c (C) [ 37.830926][ T7073] __dump_stack+0x30/0x40 [ 37.830933][ T7073] dump_stack_lvl+0xd8/0x12c [ 37.830938][ T7073] dump_stack+0x1c/0x28 [ 37.830943][ T7073] should_fail_ex+0x41c/0x594 [ 37.830951][ T7073] should_fail+0x14/0x24 [ 37.830958][ T7073] should_fail_usercopy+0x20/0x30 [ 37.830964][ T7073] _copy_from_iter+0x194/0x12c0 [ 37.830971][ T7073] netlink_sendmsg+0x548/0x930 [ 37.830983][ T7073] ____sys_sendmsg+0x490/0x7b8 [ 37.830990][ T7073] ___sys_sendmsg+0x204/0x278 [ 37.830997][ T7073] __arm64_sys_sendmsg+0x184/0x238 [ 37.831004][ T7073] invoke_syscall+0x98/0x254 [ 37.831010][ T7073] el0_svc_common+0x130/0x23c [ 37.831015][ T7073] do_el0_svc+0x48/0x58 [ 37.831020][ T7073] el0_svc+0x5c/0x254 [ 37.831028][ T7073] el0t_64_sync_handler+0x84/0x12c [ 37.831034][ T7073] el0t_64_sync+0x198/0x19c [ 37.951725][ T7076] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20003 [ 38.048269][ T7083] loop0: detected capacity change from 0 to 1024 [ 38.052426][ T7083] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.054755][ T7083] EXT4-fs: Ignoring removed oldalloc option [ 38.055071][ T7083] EXT4-fs: Ignoring removed orlov option [ 38.055087][ T7083] EXT4-fs: Ignoring removed oldalloc option [ 38.055101][ T7083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.068857][ T7083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.083226][ T7083] EXT4-fs error (device loop0): ext4_xattr_set_entry:1660: inode #13: comm syz.0.87: corrupted xattr entries [ 38.100838][ T6529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.137485][ T7089] binder: tried to use weak ref as strong ref [ 38.137523][ T7089] binder: 7087:7089 Acquire 1 refcount change on invalid ref 0 ret -22 [ 38.159199][ T7090] binder_alloc: 7088: pid 7088 spamming oneway? 1 buffers allocated for a total size of 4096 [ 38.159479][ T7090] binder_alloc: 7088: pid 7088 spamming oneway? 2 buffers allocated for a total size of 5120 [ 38.159578][ T7090] binder: 7088:7090 ioctl c0306201 0 returned -14 [ 38.200359][ T7094] binder_alloc: 7093: binder_alloc_buf, no vma [ 38.315484][ T7099] FAULT_INJECTION: forcing a failure. [ 38.315484][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 38.315520][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT [ 38.315531][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 38.315536][ T7099] Call trace: [ 38.315540][ T7099] show_stack+0x2c/0x3c (C) [ 38.315553][ T7099] __dump_stack+0x30/0x40 [ 38.315559][ T7099] dump_stack_lvl+0xd8/0x12c [ 38.315565][ T7099] dump_stack+0x1c/0x28 [ 38.315570][ T7099] should_fail_ex+0x41c/0x594 [ 38.315578][ T7099] should_failslab+0xc0/0x128 [ 38.315585][ T7099] __kmalloc_noprof+0xf4/0x4c8 [ 38.315593][ T7099] iter_file_splice_write+0x168/0xd7c [ 38.315601][ T7099] direct_splice_actor+0xec/0x14c [ 38.315608][ T7099] splice_direct_to_actor+0x414/0x994 [ 38.315615][ T7099] do_splice_direct+0x130/0x210 [ 38.315621][ T7099] do_sendfile+0x3cc/0x658 [ 38.315628][ T7099] __arm64_sys_sendfile64+0x1b4/0x274 [ 38.315635][ T7099] invoke_syscall+0x98/0x254 [ 38.315641][ T7099] el0_svc_common+0x130/0x23c [ 38.315646][ T7099] do_el0_svc+0x48/0x58 [ 38.315651][ T7099] el0_svc+0x5c/0x254 [ 38.315659][ T7099] el0t_64_sync_handler+0x84/0x12c [ 38.315666][ T7099] el0t_64_sync+0x198/0x19c [ 38.435889][ T7030] loop4: detected capacity change from 0 to 262144 [ 38.438656][ T7030] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.76 (7030) [ 38.441762][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 38.446671][ T7030] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 38.448592][ T7030] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 38.472241][ T7030] BTRFS info (device loop4): enabling ssd optimizations [ 38.474496][ T7030] BTRFS info (device loop4): turning on sync discard [ 38.476850][ T7030] BTRFS info (device loop4): enabling free space tree [ 38.497317][ T7030] BTRFS info (device loop4): balance: start -d -m -s [ 38.498876][ T7030] BTRFS info (device loop4): unable to make block group 30408704 ro [ 38.498907][ T7030] BTRFS info (device loop4): space_info METADATA (sub-group id 0) has 27590656 free, is not full [ 38.498923][ T7030] BTRFS info (device loop4): space_info total=33554432, used=131072, pinned=0, reserved=0, may_use=5767168, readonly=65536 zone_unusable=0 [ 38.498943][ T7030] BTRFS info (device loop4): global_block_rsv: size 5767168 reserved 5767168 [ 38.498956][ T7030] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 38.498968][ T7030] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 38.498982][ T7030] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 38.498995][ T7030] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 38.503788][ T7030] BTRFS info (device loop4): relocating block group 30408704 flags metadata|dup [ 38.525846][ T6603] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.546017][ T6603] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.548657][ T7128] loop3: detected capacity change from 0 to 2048 [ 38.573533][ T7135] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 38.585767][ T7030] BTRFS info (device loop4): found 3 extents, stage: move data extents [ 38.619197][ T7030] BTRFS info (device loop4): left=0, need=393216, flags=34 [ 38.621907][ T7030] BTRFS info (device loop4): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 38.621951][ T7030] BTRFS info (device loop4): space_info total=8388608, used=16384, pinned=0, reserved=16384, may_use=0, readonly=8355840 zone_unusable=0 [ 38.621973][ T7030] BTRFS info (device loop4): global_block_rsv: size 5767168 reserved 5750784 [ 38.621989][ T7030] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 38.622002][ T7030] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 38.622014][ T7030] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 38.622024][ T7030] BTRFS info (device loop4): delayed_refs_rsv: size 5242880 reserved 4947968 [ 38.661931][ T7030] BTRFS info (device loop4): relocating block group 22020096 flags system|dup [ 38.710173][ T7138] binder: BINDER_SET_CONTEXT_MGR already set [ 38.710201][ T7138] binder: 7137:7138 ioctl 4018620d 20000680 returned -16 [ 38.754026][ T7140] binder_alloc: 7139: pid 7139 spamming oneway? 1 buffers allocated for a total size of 4096 [ 38.754229][ T7140] binder_alloc: 7139: pid 7139 spamming oneway? 2 buffers allocated for a total size of 5120 [ 38.792402][ T7142] netlink: 88 bytes leftover after parsing attributes in process `syz.1.104'. [ 38.805870][ T7030] BTRFS info (device loop4): found 1 extents, stage: move data extents [ 38.821102][ T7142] loop1: detected capacity change from 0 to 4096 [ 38.826486][ T7142] ntfs3(loop1): It is recommened to use chkdsk. [ 38.826954][ T7142] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 38.826969][ T7142] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 38.826981][ T7142] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 38.827006][ T7142] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 38.827018][ T7142] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00 [ 38.827030][ T7142] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00 [ 38.827042][ T7142] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00 [ 38.827060][ T7142] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00 [ 38.827071][ T7142] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00 [ 38.851935][ T7131] BTRFS info (device loop4): scrub: started on devid 1 [ 38.855821][ T7131] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 38.861255][ T7030] BTRFS info (device loop4): relocating block group 13631488 flags data [ 38.925897][ T7030] BTRFS info (device loop4): found 1 extents, stage: move data extents [ 38.966548][ T7030] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 38.993291][ T7030] BTRFS info (device loop4): balance: ended with status: 0 [ 39.007609][ T7155] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 39.018396][ T6543] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 39.020536][ T7155] team0: Port device dummy0 added [ 39.021279][ T7155] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 39.038010][ T7155] team0: Port device dummy0 removed [ 39.042158][ T7155] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 39.187281][ T7160] loop1: detected capacity change from 0 to 164 [ 39.439714][ T7160] rock: directory entry would overflow storage [ 39.439745][ T7160] rock: sig=0x4f50, size=4, remaining=3 [ 39.440297][ T7160] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 39.483531][ T7168] binder_user_error: 7 callbacks suppressed [ 39.484749][ T7168] binder: 7167:7168 tried to acquire reference to desc 0, got 1 instead [ 39.486630][ T7168] binder_alloc: 7167: binder_alloc_buf, no vma [ 39.488857][ T7168] binder_debug: 28 callbacks suppressed [ 39.488922][ T7168] binder: cannot allocate buffer: vma cleared, target dead or dying [ 39.488972][ T7168] binder: 7167:7168 transaction async to 7167:0 failed 76/29189/-3, code 0 size 104-24 line 3335 [ 39.494546][ T9] binder: undelivered TRANSACTION_ERROR: 29189 [ 39.495888][ T7170] binder: BINDER_SET_CONTEXT_MGR already set [ 39.495920][ T7170] binder: 7169:7170 ioctl 4018620d 20000040 returned -16 [ 39.496188][ T7170] binder: 7169:7170 got transaction to invalid handle, 1 [ 39.496201][ T7170] binder: 7169:7170 cannot find target node [ 39.496212][ T7170] binder: 7169:7170 transaction async to 0:0 failed 79/29201/-22, code 0 size 0-0 line 3151 [ 39.497410][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.565071][ T7172] bond0: entered promiscuous mode [ 39.566210][ T7172] bond_slave_0: entered promiscuous mode [ 39.567416][ T7172] bond_slave_1: entered promiscuous mode [ 39.590942][ T7178] FAULT_INJECTION: forcing a failure. [ 39.590942][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.590972][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: syz.2.118 Not tainted syzkaller #0 PREEMPT [ 39.590981][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 39.590985][ T7178] Call trace: [ 39.590993][ T7178] show_stack+0x2c/0x3c (C) [ 39.591007][ T7178] __dump_stack+0x30/0x40 [ 39.591015][ T7178] dump_stack_lvl+0xd8/0x12c [ 39.591021][ T7178] dump_stack+0x1c/0x28 [ 39.591027][ T7178] should_fail_ex+0x41c/0x594 [ 39.591035][ T7178] should_fail+0x14/0x24 [ 39.591042][ T7178] should_fail_usercopy+0x20/0x30 [ 39.591048][ T7178] _copy_from_iter+0x194/0x12c0 [ 39.591056][ T7178] netlink_sendmsg+0x548/0x930 [ 39.591063][ T7178] ____sys_sendmsg+0x490/0x7b8 [ 39.591071][ T7178] ___sys_sendmsg+0x204/0x278 [ 39.591078][ T7178] __sys_sendmmsg+0x1f4/0x548 [ 39.591082][ T7178] __arm64_sys_sendmmsg+0xa0/0xbc [ 39.591087][ T7178] invoke_syscall+0x98/0x254 [ 39.591093][ T7178] el0_svc_common+0x130/0x23c [ 39.591098][ T7178] do_el0_svc+0x48/0x58 [ 39.591103][ T7178] el0_svc+0x5c/0x254 [ 39.591111][ T7178] el0t_64_sync_handler+0x84/0x12c [ 39.591118][ T7178] el0t_64_sync+0x198/0x19c [ 39.637919][ T7144] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 39.716784][ T7187] binder: 7186:7187 tried to acquire reference to desc 0, got 1 instead [ 39.719563][ T7187] binder: 7186:7187 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.721970][ T7187] binder: 7187 RLIMIT_NICE not set [ 39.723316][ T7187] binder: undelivered transaction 84, copy_to_user failed [ 39.724685][ T7187] binder: 7186:7187 ioctl c0306201 20000440 returned -14 [ 39.727287][ T10] binder: undelivered TRANSACTION_COMPLETE [ 39.897202][ T7199] binder: 7198:7199 tried to acquire reference to desc 0, got 1 instead [ 39.901107][ T7199] binder_alloc: 7198: pid 7198 spamming oneway? 1 buffers allocated for a total size of 4096 [ 39.907663][ T7199] binder_alloc: 7198: pid 7198 spamming oneway? 2 buffers allocated for a total size of 5120 [ 39.910046][ T10] binder: undelivered TRANSACTION_COMPLETE [ 39.911329][ T10] binder: undelivered TRANSACTION_COMPLETE [ 39.912958][ T7195] FAULT_INJECTION: forcing a failure. [ 39.912958][ T7195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 39.913002][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.1.125 Not tainted syzkaller #0 PREEMPT [ 39.913012][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 39.913016][ T7195] Call trace: [ 39.913019][ T7195] show_stack+0x2c/0x3c (C) [ 39.913033][ T7195] __dump_stack+0x30/0x40 [ 39.913039][ T7195] dump_stack_lvl+0xd8/0x12c [ 39.913045][ T7195] dump_stack+0x1c/0x28 [ 39.913050][ T7195] should_fail_ex+0x41c/0x594 [ 39.913058][ T7195] should_fail_alloc_page+0xec/0x10c [ 39.913066][ T7195] prepare_alloc_pages+0x1c8/0x50c [ 39.913072][ T7195] __alloc_frozen_pages_noprof+0x134/0x318 [ 39.913077][ T7195] alloc_pages_mpol+0x1e4/0x460 [ 39.913084][ T7195] folio_alloc_mpol_noprof+0x4c/0x24c [ 39.913091][ T7195] shmem_alloc_and_add_folio+0x328/0x10b0 [ 39.913097][ T7195] shmem_get_folio_gfp+0x4d4/0x159c [ 39.913105][ T7195] shmem_fault+0x15c/0x32c [ 39.913110][ T7195] __do_fault+0x1fc/0x4cc [ 39.913115][ T7195] handle_mm_fault+0x19fc/0x4d34 [ 39.913123][ T7195] do_page_fault+0x57c/0x13cc [ 39.913128][ T7195] do_translation_fault+0xc4/0x114 [ 39.913133][ T7195] do_mem_abort+0x70/0x194 [ 39.913140][ T7195] el1_abort+0x40/0x64 [ 39.913148][ T7195] el1h_64_sync_handler+0x50/0xfc [ 39.913155][ T7195] el1h_64_sync+0x6c/0x70 [ 39.913161][ T7195] __arch_clear_user+0x30/0xc0 (P) [ 39.913167][ T7195] tun_do_read+0xf58/0x1888 [ 39.913174][ T7195] tun_chr_read_iter+0x114/0x25c [ 39.913180][ T7195] do_iter_readv_writev+0x4c0/0x724 [ 39.913187][ T7195] vfs_readv+0x210/0x6d0 [ 39.913193][ T7195] do_readv+0x128/0x290 [ 39.913200][ T7195] __arm64_sys_readv+0x80/0x94 [ 39.913206][ T7195] invoke_syscall+0x98/0x254 [ 39.913212][ T7195] el0_svc_common+0x130/0x23c [ 39.913217][ T7195] do_el0_svc+0x48/0x58 [ 39.913222][ T7195] el0_svc+0x5c/0x254 [ 39.913228][ T7195] el0t_64_sync_handler+0x84/0x12c [ 39.913235][ T7195] el0t_64_sync+0x198/0x19c [ 39.979871][ T7204] binder: 7203:7204 tried to acquire reference to desc 0, got 1 instead [ 39.980093][ T7204] binder_alloc: 7203: binder_alloc_buf, no vma [ 40.002450][ T7206] binder: BINDER_SET_CONTEXT_MGR already set [ 40.002480][ T7206] binder: 7205:7206 ioctl 4018620d 20000680 returned -16 [ 40.046952][ T7208] FAULT_INJECTION: forcing a failure. [ 40.046952][ T7208] name failslab, interval 1, probability 0, space 0, times 0 [ 40.046996][ T7208] CPU: 1 UID: 0 PID: 7208 Comm: syz.3.130 Not tainted syzkaller #0 PREEMPT [ 40.047005][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 40.047010][ T7208] Call trace: [ 40.047013][ T7208] show_stack+0x2c/0x3c (C) [ 40.047026][ T7208] __dump_stack+0x30/0x40 [ 40.047032][ T7208] dump_stack_lvl+0xd8/0x12c [ 40.047038][ T7208] dump_stack+0x1c/0x28 [ 40.047043][ T7208] should_fail_ex+0x41c/0x594 [ 40.047051][ T7208] should_failslab+0xc0/0x128 [ 40.047059][ T7208] kmem_cache_alloc_noprof+0x80/0x3e8 [ 40.047067][ T7208] skb_clone+0x1b4/0x328 [ 40.047073][ T7208] __netlink_deliver_tap+0x36c/0x708 [ 40.047080][ T7208] netlink_deliver_tap+0x1ac/0x1b0 [ 40.047086][ T7208] netlink_unicast+0x660/0x8c4 [ 40.047091][ T7208] netlink_sendmsg+0x648/0x930 [ 40.047097][ T7208] ____sys_sendmsg+0x490/0x7b8 [ 40.047104][ T7208] ___sys_sendmsg+0x204/0x278 [ 40.047111][ T7208] __arm64_sys_sendmsg+0x184/0x238 [ 40.047118][ T7208] invoke_syscall+0x98/0x254 [ 40.047124][ T7208] el0_svc_common+0x130/0x23c [ 40.047129][ T7208] do_el0_svc+0x48/0x58 [ 40.047134][ T7208] el0_svc+0x5c/0x254 [ 40.047142][ T7208] el0t_64_sync_handler+0x84/0x12c [ 40.047149][ T7208] el0t_64_sync+0x198/0x19c [ 40.147673][ T7214] loop0: detected capacity change from 0 to 32768 [ 40.149311][ T7214] btrfs: Deprecated parameter 'usebackuproot' [ 40.150411][ T7214] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 40.164093][ T7214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.132 (7214) [ 40.171830][ T7218] __nla_validate_parse: 2 callbacks suppressed [ 40.171883][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 40.176682][ T7214] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 40.176742][ T7214] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 40.176773][ T7214] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 40.418012][ T7233] capability: warning: `syz.3.134' uses 32-bit capabilities (legacy support in use) [ 40.454560][ T7231] can0: slcan on ttyS3. [ 40.487524][ T7023] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 40.487645][ T7214] BTRFS error (device loop0): failed to load root extent [ 40.487663][ T7214] BTRFS warning (device loop0): try to load backup roots slot 1 [ 40.487769][ T7023] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 40.487811][ T7214] BTRFS warning (device loop0): couldn't read tree root [ 40.487818][ T7214] BTRFS warning (device loop0): try to load backup roots slot 2 [ 40.487901][ T7023] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 40.487935][ T7214] BTRFS warning (device loop0): couldn't read tree root [ 40.487942][ T7214] BTRFS warning (device loop0): try to load backup roots slot 3 [ 40.498535][ T7214] BTRFS info (device loop0): rebuilding free space tree [ 40.523418][ T7232] can0 (unregistered): slcan off ttyS3. [ 40.526741][ T7233] can0: slcan on ttyS3. [ 40.556837][ T7214] BTRFS info (device loop0): disabling free space tree [ 40.556897][ T7214] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 40.556922][ T7214] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 40.564349][ T7214] BTRFS info (device loop0): setting nodatasum [ 40.564382][ T7214] BTRFS info (device loop0): setting nodatacow [ 40.564390][ T7214] BTRFS info (device loop0): enabling ssd optimizations [ 40.564398][ T7214] BTRFS info (device loop0): turning off barriers [ 40.564405][ T7214] BTRFS info (device loop0): turning on sync discard [ 40.564411][ T7214] BTRFS info (device loop0): enabling disk space caching [ 40.564416][ T7214] BTRFS info (device loop0): force clearing of disk cache [ 40.564422][ T7214] BTRFS info (device loop0): enabling auto defrag [ 40.564428][ T7214] BTRFS info (device loop0): trying to use backup root at mount time [ 40.564434][ T7214] BTRFS info (device loop0): max_inline set to 0 [ 40.780635][ T7262] binder: BINDER_SET_CONTEXT_MGR already set [ 40.782766][ T7262] binder: 7260:7262 ioctl 4018620d 20000040 returned -16 [ 40.784374][ T7262] binder: tried to use weak ref as strong ref [ 40.785540][ T7262] binder: 7260:7262 Acquire 1 refcount change on invalid ref 0 ret -22 [ 40.787314][ T7262] binder: 7260:7262 got transaction to invalid handle, 1 [ 40.840158][ T7244] loop1: detected capacity change from 0 to 32768 [ 40.921087][ T6529] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 40.946433][ T7215] can0 (unregistered): slcan off ttyS3. [ 41.014164][ T7290] binder: BINDER_SET_CONTEXT_MGR already set [ 41.014194][ T7290] binder: 7288:7290 ioctl 4018620d 20000040 returned -16 [ 41.052442][ T7244] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=/dev/loop1,noinodes_use_key_cache,fsck,fix_errors=yes,norecovery,nojournal_transaction_names [ 41.052480][ T7244] allowing incompatible features above 0.0: (unknown version) [ 41.052490][ T7244] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 41.052506][ T7244] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 41.065326][ T7295] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 41.079206][ T7244] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 41.079363][ T7244] bcachefs (loop1): Version upgrade required: [ 41.079363][ T7244] Version upgrade from 0.32: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 41.079363][ T7244] Doing incompatible version upgrade from 0.32: (unknown version) to 1.28: inode_has_case_insensitive [ 41.079363][ T7244] running recovery passes: check_allocations,check_extents_to_backpointers,check_snapshots,check_subvols,check_inodes,check_dirents,set_fs_needs_rebalance [ 41.106785][ T7244] bcachefs (loop1): btree node read error at btree alloc level 0/0 [ 41.106821][ T7244] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1818ce08861e3527 written 40 min_key 0:8:0 durability: 1 ptr: 0:26:0 gen 0 [ 41.106843][ T7244] loop1 node offset 0/40: incorrect min_key: got POS_MIN should be 0:8:0 [ 41.106847][ T7244] loop1 btree validate error [ 41.106851][ T7244] flagging btree alloc lost data [ 41.106854][ T7244] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 41.106858][ T7244] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 41.106861][ T7244] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 41.106865][ T7244] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 41.106868][ T7244] ret btree_node_read_err_bad_node [ 41.106963][ T7244] bcachefs (loop1): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 41.117698][ T7244] bcachefs (loop1): btree node read error at btree lru level 0/0 [ 41.117708][ T7244] u64s 11 type btree_ptr_v2 18446744073692774400:201326591:U32_MAX len 0 ver 0: seq 93dda84068e88b3f written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 41.117714][ T7244] loop1 node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 41.117717][ T7244] loop1 btree validate error [ 41.117721][ T7244] flagging btree lru lost data [ 41.117724][ T7244] ret btree_node_read_err_bad_node [ 41.117770][ T7244] bcachefs (loop1): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 41.152235][ T7244] bcachefs (loop1): check_topology... done [ 41.152549][ T7244] bcachefs (loop1): accounting_read... [ 41.168524][ T7303] FAULT_INJECTION: forcing a failure. [ 41.168524][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 41.168562][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.0.147 Not tainted syzkaller #0 PREEMPT [ 41.168572][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 41.168578][ T7303] Call trace: [ 41.168581][ T7303] show_stack+0x2c/0x3c (C) [ 41.168596][ T7303] __dump_stack+0x30/0x40 [ 41.168603][ T7303] dump_stack_lvl+0xd8/0x12c [ 41.168611][ T7303] dump_stack+0x1c/0x28 [ 41.168617][ T7303] should_fail_ex+0x41c/0x594 [ 41.168625][ T7303] should_failslab+0xc0/0x128 [ 41.168633][ T7303] kmem_cache_alloc_noprof+0x80/0x3e8 [ 41.168641][ T7303] skb_clone+0x1b4/0x328 [ 41.168647][ T7303] __netlink_deliver_tap+0x36c/0x708 [ 41.168654][ T7303] netlink_deliver_tap+0x1ac/0x1b0 [ 41.168659][ T7303] netlink_unicast+0x660/0x8c4 [ 41.168664][ T7303] netlink_sendmsg+0x648/0x930 [ 41.168670][ T7303] ____sys_sendmsg+0x490/0x7b8 [ 41.168677][ T7303] ___sys_sendmsg+0x204/0x278 [ 41.168683][ T7303] __arm64_sys_sendmsg+0x184/0x238 [ 41.168690][ T7303] invoke_syscall+0x98/0x254 [ 41.168696][ T7303] el0_svc_common+0x130/0x23c [ 41.168700][ T7303] do_el0_svc+0x48/0x58 [ 41.168705][ T7303] el0_svc+0x5c/0x254 [ 41.168713][ T7303] el0t_64_sync_handler+0x84/0x12c [ 41.168720][ T7303] el0t_64_sync+0x198/0x19c [ 41.174908][ T7244] done [ 41.174918][ T7244] bcachefs (loop1): alloc_read... done [ 41.175014][ T7244] bcachefs (loop1): snapshots_read... done [ 41.175138][ T7244] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 41.175221][ T7244] bcachefs (loop1): done starting filesystem [ 41.263896][ T7189] loop2: detected capacity change from 0 to 262144 [ 41.272754][ T7189] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.121 (7189) [ 41.282504][ T7189] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 41.283197][ T7189] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 41.342527][ T7189] BTRFS info (device loop2): enabling ssd optimizations [ 41.342840][ T7189] BTRFS info (device loop2): turning on sync discard [ 41.342862][ T7189] BTRFS info (device loop2): enabling free space tree [ 41.379157][ T7189] BTRFS info (device loop2): balance: start -d -m -s [ 41.380000][ T7189] BTRFS info (device loop2): unable to make block group 30408704 ro [ 41.380014][ T7189] BTRFS info (device loop2): space_info METADATA (sub-group id 0) has 27590656 free, is not full [ 41.380023][ T7189] BTRFS info (device loop2): space_info total=33554432, used=131072, pinned=0, reserved=0, may_use=5767168, readonly=65536 zone_unusable=0 [ 41.380035][ T7189] BTRFS info (device loop2): global_block_rsv: size 5767168 reserved 5767168 [ 41.380042][ T7189] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 41.380049][ T7189] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 41.380056][ T7189] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 41.380063][ T7189] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 41.395942][ T7189] BTRFS info (device loop2): relocating block group 30408704 flags metadata|dup [ 41.444672][ T7334] FAULT_INJECTION: forcing a failure. [ 41.444672][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 41.444807][ T7334] CPU: 0 UID: 0 PID: 7334 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT [ 41.444815][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 41.444819][ T7334] Call trace: [ 41.444822][ T7334] show_stack+0x2c/0x3c (C) [ 41.444835][ T7334] __dump_stack+0x30/0x40 [ 41.444842][ T7334] dump_stack_lvl+0xd8/0x12c [ 41.444847][ T7334] dump_stack+0x1c/0x28 [ 41.444851][ T7334] should_fail_ex+0x41c/0x594 [ 41.444860][ T7334] should_failslab+0xc0/0x128 [ 41.444867][ T7334] kmem_cache_alloc_noprof+0x80/0x3e8 [ 41.444875][ T7334] skb_clone+0x1b4/0x328 [ 41.444881][ T7334] __netlink_deliver_tap+0x36c/0x708 [ 41.444887][ T7334] netlink_deliver_tap+0x1ac/0x1b0 [ 41.444893][ T7334] netlink_unicast+0x660/0x8c4 [ 41.444898][ T7334] netlink_sendmsg+0x648/0x930 [ 41.444903][ T7334] ____sys_sendmsg+0x490/0x7b8 [ 41.444910][ T7334] ___sys_sendmsg+0x204/0x278 [ 41.444917][ T7334] __arm64_sys_sendmsg+0x184/0x238 [ 41.444924][ T7334] invoke_syscall+0x98/0x254 [ 41.444929][ T7334] el0_svc_common+0x130/0x23c [ 41.444934][ T7334] do_el0_svc+0x48/0x58 [ 41.444939][ T7334] el0_svc+0x5c/0x254 [ 41.444946][ T7334] el0t_64_sync_handler+0x84/0x12c [ 41.444953][ T7334] el0t_64_sync+0x198/0x19c [ 41.444967][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 41.548399][ T7189] BTRFS info (device loop2): found 3 extents, stage: move data extents [ 41.594279][ T7347] netlink: 220 bytes leftover after parsing attributes in process `syz.1.136'. [ 41.642305][ T7189] BTRFS info (device loop2): left=0, need=393216, flags=34 [ 41.642346][ T7189] BTRFS info (device loop2): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 41.642358][ T7189] BTRFS info (device loop2): space_info total=8388608, used=16384, pinned=0, reserved=16384, may_use=0, readonly=8355840 zone_unusable=0 [ 41.642372][ T7189] BTRFS info (device loop2): global_block_rsv: size 5767168 reserved 5750784 [ 41.642380][ T7189] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 41.642387][ T7189] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 41.642393][ T7189] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 41.642399][ T7189] BTRFS info (device loop2): delayed_refs_rsv: size 5242880 reserved 4947968 [ 41.645026][ T7189] BTRFS info (device loop2): relocating block group 22020096 flags system|dup [ 41.648465][ T7340] loop3: detected capacity change from 0 to 32768 [ 41.659221][ T7340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.153 (7340) [ 41.683229][ T7340] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 41.683295][ T7340] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 41.683319][ T7340] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 41.721995][ T6530] bcachefs (loop1): shutting down [ 41.740632][ T6530] bcachefs (loop1): shutdown complete [ 41.788735][ T7189] BTRFS info (device loop2): found 1 extents, stage: move data extents [ 41.795965][ T7340] BTRFS info (device loop3): rebuilding free space tree [ 41.805509][ T7340] BTRFS info (device loop3): disabling free space tree [ 41.806160][ T7340] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 41.806175][ T7340] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 41.812208][ T7340] BTRFS info (device loop3): enabling ssd optimizations [ 41.812256][ T7340] BTRFS info (device loop3): turning off barriers [ 41.812264][ T7340] BTRFS info (device loop3): turning on flush-on-commit [ 41.812272][ T7340] BTRFS info (device loop3): enabling disk space caching [ 41.812280][ T7340] BTRFS info (device loop3): force clearing of disk cache [ 41.812288][ T7340] BTRFS info (device loop3): doing ref verification [ 41.812294][ T7340] BTRFS info (device loop3): force zlib compression, level 3 [ 41.812302][ T7340] BTRFS info (device loop3): max_inline set to 8 [ 41.832633][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.849983][ T6540] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 41.874509][ T7189] BTRFS info (device loop2): relocating block group 13631488 flags data [ 41.911292][ T7382] binder: BINDER_SET_CONTEXT_MGR already set [ 41.911319][ T7382] binder: 7381:7382 ioctl 4018620d 20000680 returned -16 [ 41.938888][ T7342] BTRFS info (device loop2): scrub: started on devid 1 [ 41.939038][ T7189] BTRFS info (device loop2): balance: canceled [ 41.946748][ T7342] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 41.968592][ T6533] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 41.982608][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 41.985499][ T26] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 41.985537][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 41.991778][ T26] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 41.995921][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.995963][ T26] usb 1-1: Product: syz [ 41.995976][ T26] usb 1-1: Manufacturer: syz [ 41.995993][ T26] usb 1-1: SerialNumber: syz [ 42.001657][ T26] usb 1-1: config 0 descriptor?? [ 42.009597][ T26] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 42.009668][ T26] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 42.041170][ T7391] 9pnet_fd: Insufficient options for proto=fd [ 42.043004][ T7391] capability: warning: `syz.4.163' uses deprecated v2 capabilities in a way that may be insecure [ 42.216396][ T7400] netlink: 'syz.4.166': attribute type 12 has an invalid length. [ 42.580358][ T7406] loop3: detected capacity change from 0 to 4096 [ 42.593433][ T7406] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 42.596481][ T7406] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 42.599651][ T7406] ntfs3(loop3): Failed to load $Extend (-22). [ 42.599678][ T7406] ntfs3(loop3): Failed to initialize $Extend. [ 42.631511][ T7406] netlink: 68 bytes leftover after parsing attributes in process `syz.3.168'. [ 42.659338][ T26] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 42.659711][ T26] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 42.661844][ T7404] loop4: detected capacity change from 0 to 32768 [ 42.665449][ T7404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.167 (7404) [ 42.679188][ T7404] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 42.679302][ T7404] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 42.710544][ T7404] BTRFS info (device loop4): enabling ssd optimizations [ 42.710583][ T7404] BTRFS info (device loop4): enabling free space tree [ 43.206149][ T7431] binder: BINDER_SET_CONTEXT_MGR already set [ 43.207300][ T7431] binder: 7430:7431 ioctl 4018620d 20000680 returned -16 [ 43.220576][ T7425] loop3: detected capacity change from 0 to 32768 [ 43.342815][ T6543] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.359333][ T26] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 43.362793][ T26] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 43.363363][ T26] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 43.370842][ T26] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 43.371403][ T26] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 43.371854][ T26] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 43.629363][ T7425] bcachefs (loop3): starting version 1.13: inode_has_child_snapshots opts=compression=zstd [ 43.631217][ T7425] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 43.634123][ T7425] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 43.635682][ T7425] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 43.637336][ T7425] bcachefs (loop3): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 43.637336][ T7425] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 43.666097][ T7425] bcachefs (loop3): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 43.666235][ T7425] bcachefs (loop3): check_topology... done [ 43.669044][ T7425] bcachefs (loop3): accounting_read... done [ 43.697660][ T7425] bcachefs (loop3): alloc_read... done [ 43.698010][ T7425] bcachefs (loop3): snapshots_read... done [ 43.698490][ T7425] bcachefs (loop3): check_allocations... [ 43.701469][ T7425] bcachefs (loop3): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 43.706945][ T7425] bcachefs (loop3): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 43.712169][ T7447] netlink: 60 bytes leftover after parsing attributes in process `syz.4.175'. [ 43.741885][ T7425] done [ 43.748594][ T7425] bcachefs (loop3): going read-write [ 43.761526][ T7425] bcachefs (loop3): journal_replay... done [ 43.836240][ T7425] bcachefs (loop3): check_lrus... done [ 43.837307][ T7425] bcachefs (loop3): check_backpointers_to_extents... done [ 43.848428][ T7425] bcachefs (loop3): check_extents_to_backpointers... done [ 43.857138][ T7425] bcachefs (loop3): check_inodes... done [ 43.857812][ T7425] bcachefs (loop3): resume_logged_ops... done [ 43.859120][ T7425] bcachefs (loop3): delete_dead_inodes... done [ 43.862183][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'. [ 43.864833][ T7425] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 43.864883][ T7425] bcachefs (loop3): check_extents_to_backpointers... [ 43.865417][ T7425] bcachefs (loop3): scanning for missing backpointers in 1/512 buckets [ 43.867836][ T7425] done [ 43.870453][ T7425] bcachefs (loop3): check_inodes... done [ 43.871935][ T7425] bcachefs (loop3): resume_logged_ops... done [ 43.872270][ T7425] bcachefs (loop3): delete_dead_inodes... done [ 43.877083][ T7425] bcachefs (loop3): done starting filesystem [ 43.959198][ T7460] binder: BINDER_SET_CONTEXT_MGR already set [ 43.959227][ T7460] binder: 7457:7460 ioctl 4018620d 20000680 returned -16 [ 43.984564][ T7433] loop2: detected capacity change from 0 to 262144 [ 43.989229][ T7433] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.172 (7433) [ 43.993436][ T6540] bcachefs (loop3): shutting down [ 43.993460][ T6540] bcachefs (loop3): going read-only [ 43.993488][ T6540] bcachefs (loop3): finished waiting for writes to stop [ 44.002516][ T7433] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 44.004642][ T7433] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 44.017829][ T6540] bcachefs (loop3): flushing journal and stopping allocators, journal seq 19 [ 44.078365][ T6540] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 20 [ 44.080576][ T6540] bcachefs (loop3): clean shutdown complete, journal seq 21 [ 44.080980][ T6540] bcachefs (loop3): marking filesystem clean [ 44.098253][ T7433] BTRFS info (device loop2): enabling ssd optimizations [ 44.098281][ T7433] BTRFS info (device loop2): turning on sync discard [ 44.098302][ T7433] BTRFS info (device loop2): enabling free space tree [ 44.111154][ T6540] bcachefs (loop3): shutdown complete [ 44.179592][ T7482] FAULT_INJECTION: forcing a failure. [ 44.179592][ T7482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.179649][ T7482] CPU: 1 UID: 0 PID: 7482 Comm: syz.4.180 Not tainted syzkaller #0 PREEMPT [ 44.179659][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.179663][ T7482] Call trace: [ 44.179666][ T7482] show_stack+0x2c/0x3c (C) [ 44.179680][ T7482] __dump_stack+0x30/0x40 [ 44.179686][ T7482] dump_stack_lvl+0xd8/0x12c [ 44.179691][ T7482] dump_stack+0x1c/0x28 [ 44.179696][ T7482] should_fail_ex+0x41c/0x594 [ 44.179705][ T7482] should_fail+0x14/0x24 [ 44.179712][ T7482] should_fail_usercopy+0x20/0x30 [ 44.179720][ T7482] _inline_copy_from_user+0x3c/0x194 [ 44.179727][ T7482] vmemdup_user+0x68/0xe0 [ 44.179733][ T7482] map_lookup_elem+0x1ec/0x558 [ 44.179741][ T7482] __sys_bpf+0x3e8/0x628 [ 44.179747][ T7482] __arm64_sys_bpf+0x80/0x98 [ 44.179754][ T7482] invoke_syscall+0x98/0x254 [ 44.179760][ T7482] el0_svc_common+0x130/0x23c [ 44.179765][ T7482] do_el0_svc+0x48/0x58 [ 44.179770][ T7482] el0_svc+0x5c/0x254 [ 44.179778][ T7482] el0t_64_sync_handler+0x84/0x12c [ 44.179785][ T7482] el0t_64_sync+0x198/0x19c [ 44.331571][ T7433] BTRFS info (device loop2): balance: start -d -m -s [ 44.331676][ T7433] BTRFS info (device loop2): unable to make block group 30408704 ro [ 44.331687][ T7433] BTRFS info (device loop2): space_info METADATA (sub-group id 0) has 27590656 free, is not full [ 44.331696][ T7433] BTRFS info (device loop2): space_info total=33554432, used=131072, pinned=0, reserved=0, may_use=5767168, readonly=65536 zone_unusable=0 [ 44.331707][ T7433] BTRFS info (device loop2): global_block_rsv: size 5767168 reserved 5767168 [ 44.331715][ T7433] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 44.331722][ T7433] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 44.331728][ T7433] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 44.331735][ T7433] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 44.332819][ T7433] BTRFS info (device loop2): relocating block group 30408704 flags metadata|dup [ 44.379719][ T7433] BTRFS info (device loop2): found 3 extents, stage: move data extents [ 44.406544][ T7433] BTRFS info (device loop2): left=0, need=393216, flags=34 [ 44.406581][ T7433] BTRFS info (device loop2): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 44.406606][ T7433] BTRFS info (device loop2): space_info total=8388608, used=16384, pinned=0, reserved=16384, may_use=0, readonly=8355840 zone_unusable=0 [ 44.406621][ T7433] BTRFS info (device loop2): global_block_rsv: size 5767168 reserved 5750784 [ 44.406632][ T7433] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 44.406642][ T7433] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 44.406652][ T7433] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 44.406661][ T7433] BTRFS info (device loop2): delayed_refs_rsv: size 5242880 reserved 4947968 [ 44.411607][ T7433] BTRFS info (device loop2): relocating block group 22020096 flags system|dup [ 44.417356][ T26] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 44.417366][ T26] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 44.417372][ T26] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 44.417377][ T26] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 44.417382][ T26] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 44.429887][ T7477] loop1: detected capacity change from 0 to 32768 [ 44.466162][ T7477] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 44.471589][ T7433] BTRFS info (device loop2): found 1 extents, stage: move data extents [ 44.488970][ T7433] BTRFS info (device loop2): relocating block group 13631488 flags data [ 44.491629][ T7477] XFS (loop1): Ending clean mount [ 44.583436][ T7433] BTRFS info (device loop2): found 1 extents, stage: move data extents [ 44.609862][ T7433] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 44.633409][ T6649] usb 1-1: USB disconnect, device number 3 [ 44.709090][ T7433] BTRFS info (device loop2): balance: ended with status: 0 [ 44.748341][ T7495] binder: BINDER_SET_CONTEXT_MGR already set [ 44.748386][ T7495] binder: 7494:7495 ioctl 4018620d 20000680 returned -16 [ 44.768624][ T6533] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 45.191243][ T6530] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 45.303843][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'. [ 45.304133][ T7512] FAULT_INJECTION: forcing a failure. [ 45.304133][ T7512] name failslab, interval 1, probability 0, space 0, times 0 [ 45.304173][ T7512] CPU: 0 UID: 0 PID: 7512 Comm: syz.1.186 Not tainted syzkaller #0 PREEMPT [ 45.304187][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 45.304195][ T7512] Call trace: [ 45.304198][ T7512] show_stack+0x2c/0x3c (C) [ 45.304212][ T7512] __dump_stack+0x30/0x40 [ 45.304219][ T7512] dump_stack_lvl+0xd8/0x12c [ 45.304224][ T7512] dump_stack+0x1c/0x28 [ 45.304229][ T7512] should_fail_ex+0x41c/0x594 [ 45.304238][ T7512] should_failslab+0xc0/0x128 [ 45.304245][ T7512] kmem_cache_alloc_node_noprof+0x88/0x3f4 [ 45.304254][ T7512] __alloc_skb+0x144/0x2ec [ 45.304262][ T7512] rtmsg_ifinfo_build_skb+0x90/0x24c [ 45.304268][ T7512] rtmsg_ifinfo+0xa0/0x188 [ 45.304274][ T7512] netif_close_many+0x248/0x448 [ 45.304280][ T7512] unregister_netdevice_many_notify+0x648/0x1de0 [ 45.304286][ T7512] rtnl_dellink+0x394/0x640 [ 45.304292][ T7512] rtnetlink_rcv_msg+0x664/0x97c [ 45.304298][ T7512] netlink_rcv_skb+0x220/0x3fc [ 45.304304][ T7512] rtnetlink_rcv+0x28/0x38 [ 45.304310][ T7512] netlink_unicast+0x694/0x8c4 [ 45.304315][ T7512] netlink_sendmsg+0x648/0x930 [ 45.304320][ T7512] ____sys_sendmsg+0x490/0x7b8 [ 45.304328][ T7512] ___sys_sendmsg+0x204/0x278 [ 45.304335][ T7512] __arm64_sys_sendmsg+0x184/0x238 [ 45.304342][ T7512] invoke_syscall+0x98/0x254 [ 45.304347][ T7512] el0_svc_common+0x130/0x23c [ 45.304352][ T7512] do_el0_svc+0x48/0x58 [ 45.304357][ T7512] el0_svc+0x5c/0x254 [ 45.304365][ T7512] el0t_64_sync_handler+0x84/0x12c [ 45.304372][ T7512] el0t_64_sync+0x198/0x19c [ 45.358695][ T7516] binder: BINDER_SET_CONTEXT_MGR already set [ 45.359954][ T7516] binder: 7515:7516 ioctl 4018620d 20000680 returned -16 [ 45.366593][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.189'. [ 45.453634][ T7518] loop0: detected capacity change from 0 to 32768 [ 45.464882][ T7518] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.191 (7518) [ 45.486576][ T7518] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 45.486653][ T7518] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 45.486677][ T7518] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 45.543591][ T7535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.543789][ T7535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.567155][ T7518] BTRFS info (device loop0): rebuilding free space tree [ 45.577791][ T7518] BTRFS info (device loop0): disabling free space tree [ 45.577837][ T7518] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 45.577849][ T7518] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 45.579153][ T7518] BTRFS info (device loop0): allowing degraded mounts [ 45.579163][ T7518] BTRFS info (device loop0): enabling ssd optimizations [ 45.579170][ T7518] BTRFS info (device loop0): enabling disk space caching [ 45.579175][ T7518] BTRFS info (device loop0): force clearing of disk cache [ 45.579182][ T7518] BTRFS info (device loop0): use zlib compression, level 3 [ 45.598239][ T7518] BTRFS error: failed to open device for path ‰9À>0xtÒ«å¤Ê‚…³*M›GÔAG SýÃ^ð© ‘k‹^Ìœ6³›DÐWÚz8¶×\ï*è•pWèø¤w `L–Uqk€šäMqÑõB–à|HËN7€ì*xhíù—RÈã`‚%6Ë»¼úY¢8d”äC~ã;½ˆV7k&ÑŽ• with flags 0x1: -2 [ 45.666885][ T6529] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 45.756214][ T7549] FAULT_INJECTION: forcing a failure. [ 45.756214][ T7549] name failslab, interval 1, probability 0, space 0, times 0 [ 45.756251][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT [ 45.756264][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 45.756269][ T7549] Call trace: [ 45.756272][ T7549] show_stack+0x2c/0x3c (C) [ 45.756285][ T7549] __dump_stack+0x30/0x40 [ 45.756292][ T7549] dump_stack_lvl+0xd8/0x12c [ 45.756297][ T7549] dump_stack+0x1c/0x28 [ 45.756302][ T7549] should_fail_ex+0x41c/0x594 [ 45.756310][ T7549] should_failslab+0xc0/0x128 [ 45.756318][ T7549] __kmalloc_cache_noprof+0x80/0x3fc [ 45.756325][ T7549] cls_bpf_change+0x220/0x998 [ 45.756332][ T7549] tc_new_tfilter+0xb90/0x12cc [ 45.756338][ T7549] rtnetlink_rcv_msg+0x664/0x97c [ 45.756345][ T7549] netlink_rcv_skb+0x220/0x3fc [ 45.756350][ T7549] rtnetlink_rcv+0x28/0x38 [ 45.756356][ T7549] netlink_unicast+0x694/0x8c4 [ 45.756361][ T7549] netlink_sendmsg+0x648/0x930 [ 45.756367][ T7549] ____sys_sendmsg+0x490/0x7b8 [ 45.756374][ T7549] ___sys_sendmsg+0x204/0x278 [ 45.756381][ T7549] __sys_sendmmsg+0x1f4/0x548 [ 45.756385][ T7549] __arm64_sys_sendmmsg+0xa0/0xbc [ 45.756390][ T7549] invoke_syscall+0x98/0x254 [ 45.756396][ T7549] el0_svc_common+0x130/0x23c [ 45.756401][ T7549] do_el0_svc+0x48/0x58 [ 45.756406][ T7549] el0_svc+0x5c/0x254 [ 45.756414][ T7549] el0t_64_sync_handler+0x84/0x12c [ 45.756421][ T7549] el0t_64_sync+0x198/0x19c [ 45.873751][ T7551] binder_user_error: 6 callbacks suppressed [ 45.873793][ T7551] binder: 7550:7551 got transaction to invalid handle, 1 [ 45.873805][ T7551] binder_debug: 31 callbacks suppressed [ 45.873812][ T7551] binder: 7550:7551 cannot find target node [ 45.873820][ T7551] binder: 7550:7551 transaction async to 0:0 failed 143/29201/-22, code 0 size 0-0 line 3151 [ 45.876124][ T7551] binder: 7550:7551 BC_FREE_BUFFER no match for buffer at offset ffffffffdf003000 [ 45.888399][ T2321] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.996399][ T7556] vlan0: entered promiscuous mode [ 46.004513][ T7556] loop2: detected capacity change from 0 to 1024 [ 46.004884][ T7556] EXT4-fs: quotafile must be on filesystem root [ 46.185444][ T7568] binder: BINDER_SET_CONTEXT_MGR already set [ 46.186617][ T7568] binder: 7567:7568 ioctl 4018620d 20000680 returned -16 [ 46.278723][ T7573] binder: 7572:7573 got transaction to invalid handle, 1 [ 46.279765][ T7574] loop0: detected capacity change from 0 to 128 [ 46.281086][ T7573] binder: 7572:7573 cannot find target node [ 46.282530][ T7573] binder: 7572:7573 transaction async to 0:0 failed 149/29201/-22, code 0 size 104-104 line 3151 [ 46.285031][ T6649] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.288932][ T7574] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.294770][ T7574] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 46.316185][ T7574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 46.318363][ T7574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 46.318397][ T7574] netlink: 'syz.0.203': attribute type 6 has an invalid length. [ 46.326761][ T31] audit: type=1326 audit(46.297:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7571 comm="syz.0.203" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615b3a8 code=0x0 [ 46.334129][ T7563] loop2: detected capacity change from 0 to 40427 [ 46.335854][ T7563] F2FS-fs: heap/no_heap options were deprecated [ 46.337591][ T7563] F2FS-fs (loop2): build fault injection rate: 19 [ 46.338844][ T7563] F2FS-fs (loop2): build fault injection type: 0x77e8c [ 46.345174][ T7563] F2FS-fs (loop2): invalid crc value [ 46.354807][ T7563] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x178/0x7ac [ 46.358045][ T7563] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x148/0x870 [ 46.363200][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0x858/0x894 [ 46.390978][ T7563] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 46.396788][ T7563] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.459506][ T7563] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x110/0x868 [ 46.466552][ T7563] syzkaller1: entered promiscuous mode [ 46.466582][ T7563] syzkaller1: entered allmulticast mode [ 46.470010][ T7563] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x118/0x4fc [ 46.478685][ T7522] loop1: detected capacity change from 0 to 262144 [ 46.481700][ T7522] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.193 (7522) [ 46.498997][ T7522] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 46.499061][ T7522] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 46.766200][ T6533] syz-executor: attempt to access beyond end of device [ 46.766200][ T6533] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 46.766973][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 46.767005][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 46.767016][ T6533] Call trace: [ 46.767021][ T6533] show_stack+0x2c/0x3c (C) [ 46.767040][ T6533] __dump_stack+0x30/0x40 [ 46.767049][ T6533] dump_stack_lvl+0xd8/0x12c [ 46.767055][ T6533] dump_stack+0x1c/0x28 [ 46.767060][ T6533] f2fs_handle_critical_error+0x34c/0x4b8 [ 46.767070][ T6533] f2fs_stop_checkpoint+0x5c/0x70 [ 46.767076][ T6533] f2fs_write_end_io+0x768/0xa70 [ 46.767084][ T6533] bio_endio+0x858/0x894 [ 46.767093][ T6533] submit_bio_noacct+0x158/0x177c [ 46.767100][ T6533] submit_bio+0x3b4/0x550 [ 46.767105][ T6533] f2fs_submit_write_bio+0x13c/0x324 [ 46.767112][ T6533] __submit_merged_bio+0x254/0x704 [ 46.767118][ T6533] __submit_merged_write_cond+0x23c/0x4ac [ 46.767124][ T6533] f2fs_write_data_pages+0x1d28/0x2634 [ 46.767131][ T6533] do_writepages+0x270/0x468 [ 46.767139][ T6533] filemap_fdatawrite+0x14c/0x1f4 [ 46.767147][ T6533] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 46.767153][ T6533] f2fs_write_checkpoint+0x690/0x16a0 [ 46.767159][ T6533] kill_f2fs_super+0x21c/0x584 [ 46.767165][ T6533] deactivate_locked_super+0xc4/0x12c [ 46.767171][ T6533] deactivate_super+0xe0/0x100 [ 46.767176][ T6533] cleanup_mnt+0x31c/0x3ac [ 46.767182][ T6533] __cleanup_mnt+0x20/0x30 [ 46.767187][ T6533] task_work_run+0x1dc/0x260 [ 46.767195][ T6533] exit_to_user_mode_loop+0xfc/0x168 [ 46.767202][ T6533] el0_svc+0x170/0x254 [ 46.767211][ T6533] el0t_64_sync_handler+0x84/0x12c [ 46.767218][ T6533] el0t_64_sync+0x198/0x19c [ 46.767227][ T6533] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 46.816668][ T7522] BTRFS info (device loop1): enabling ssd optimizations [ 46.816700][ T7522] BTRFS info (device loop1): turning on sync discard [ 46.816710][ T7522] BTRFS info (device loop1): enabling free space tree [ 46.837853][ T7522] BTRFS info (device loop1): balance: start -d -m -s [ 46.839324][ T7522] BTRFS info (device loop1): unable to make block group 30408704 ro [ 46.840835][ T7522] BTRFS info (device loop1): space_info METADATA (sub-group id 0) has 27590656 free, is not full [ 46.840888][ T7522] BTRFS info (device loop1): space_info total=33554432, used=131072, pinned=0, reserved=0, may_use=5767168, readonly=65536 zone_unusable=0 [ 46.840918][ T7522] BTRFS info (device loop1): global_block_rsv: size 5767168 reserved 5767168 [ 46.840935][ T7522] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 46.840949][ T7522] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 46.840964][ T7522] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 46.840981][ T7522] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0 [ 46.854706][ T7522] BTRFS info (device loop1): relocating block group 30408704 flags metadata|dup [ 46.876131][ T7522] BTRFS info (device loop1): found 3 extents, stage: move data extents [ 46.916734][ T7522] BTRFS info (device loop1): left=0, need=393216, flags=34 [ 46.918328][ T7522] BTRFS info (device loop1): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 46.918376][ T7522] BTRFS info (device loop1): space_info total=8388608, used=16384, pinned=0, reserved=16384, may_use=0, readonly=8355840 zone_unusable=0 [ 46.918399][ T7522] BTRFS info (device loop1): global_block_rsv: size 5767168 reserved 5750784 [ 46.918413][ T7522] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 46.918425][ T7522] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 46.918435][ T7522] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 46.918445][ T7522] BTRFS info (device loop1): delayed_refs_rsv: size 5242880 reserved 4947968 [ 46.930469][ T7522] BTRFS info (device loop1): relocating block group 22020096 flags system|dup [ 46.978734][ T7522] BTRFS info (device loop1): found 1 extents, stage: move data extents [ 46.990551][ T7522] BTRFS info (device loop1): relocating block group 13631488 flags data [ 47.020288][ T7609] loop2: detected capacity change from 0 to 2048 [ 47.021101][ T7522] BTRFS info (device loop1): found 1 extents, stage: move data extents [ 47.049428][ T7609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 47.075956][ T7522] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 47.111631][ T7522] BTRFS info (device loop1): balance: ended with status: 0 [ 47.128131][ T6529] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.148082][ T6530] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 47.206448][ T7617] binder: 7616:7617 got transaction to invalid handle, 1 [ 47.207879][ T7617] binder: 7616:7617 cannot find target node [ 47.209023][ T7617] binder: 7616:7617 transaction async to 0:0 failed 153/29201/-22, code 0 size 104-24 line 3151 [ 47.211134][ T6649] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.211535][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 47.211558][ T7615] FAULT_INJECTION: forcing a failure. [ 47.211558][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 47.211570][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.0.211 Not tainted syzkaller #0 PREEMPT [ 47.211577][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.211582][ T7615] Call trace: [ 47.211584][ T7615] show_stack+0x2c/0x3c (C) [ 47.211597][ T7615] __dump_stack+0x30/0x40 [ 47.211603][ T7615] dump_stack_lvl+0xd8/0x12c [ 47.211609][ T7615] dump_stack+0x1c/0x28 [ 47.211613][ T7615] should_fail_ex+0x41c/0x594 [ 47.211621][ T7615] should_failslab+0xc0/0x128 [ 47.211629][ T7615] __kmalloc_cache_node_noprof+0x84/0x41c [ 47.211637][ T7615] __get_vm_area_node+0x178/0x330 [ 47.211643][ T7615] __vmalloc_node_range_noprof+0x2d8/0xf8c [ 47.211649][ T7615] __vmalloc_noprof+0xf8/0x154 [ 47.211655][ T7615] bpf_prog_alloc_no_stats+0x5c/0x468 [ 47.211662][ T7615] bpf_prog_alloc+0x48/0x10c [ 47.211669][ T7615] bpf_prog_create+0x90/0x1c0 [ 47.211677][ T7615] cls_bpf_prog_from_ops+0x170/0x2bc [ 47.211683][ T7615] cls_bpf_change+0x53c/0x998 [ 47.211689][ T7615] tc_new_tfilter+0xb90/0x12cc [ 47.211694][ T7615] rtnetlink_rcv_msg+0x664/0x97c [ 47.211700][ T7615] netlink_rcv_skb+0x220/0x3fc [ 47.211706][ T7615] rtnetlink_rcv+0x28/0x38 [ 47.211711][ T7615] netlink_unicast+0x694/0x8c4 [ 47.211717][ T7615] netlink_sendmsg+0x648/0x930 [ 47.211722][ T7615] ____sys_sendmsg+0x490/0x7b8 [ 47.211730][ T7615] ___sys_sendmsg+0x204/0x278 [ 47.211737][ T7615] __sys_sendmmsg+0x1f4/0x548 [ 47.211741][ T7615] __arm64_sys_sendmmsg+0xa0/0xbc [ 47.211746][ T7615] invoke_syscall+0x98/0x254 [ 47.211751][ T7615] el0_svc_common+0x130/0x23c [ 47.211757][ T7615] do_el0_svc+0x48/0x58 [ 47.211765][ T7615] el0_svc+0x5c/0x254 [ 47.211773][ T7615] el0t_64_sync_handler+0x84/0x12c [ 47.211780][ T7615] el0t_64_sync+0x198/0x19c [ 47.211888][ T7615] syz.0.211: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 47.211995][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.0.211 Not tainted syzkaller #0 PREEMPT [ 47.212005][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.212008][ T7615] Call trace: [ 47.212010][ T7615] show_stack+0x2c/0x3c (C) [ 47.212016][ T7615] __dump_stack+0x30/0x40 [ 47.212021][ T7615] dump_stack_lvl+0xd8/0x12c [ 47.212026][ T7615] dump_stack+0x1c/0x28 [ 47.212031][ T7615] warn_alloc+0x1f8/0x30c [ 47.212037][ T7615] __vmalloc_node_range_noprof+0x2f8/0xf8c [ 47.212044][ T7615] __vmalloc_noprof+0xf8/0x154 [ 47.212049][ T7615] bpf_prog_alloc_no_stats+0x5c/0x468 [ 47.212057][ T7615] bpf_prog_alloc+0x48/0x10c [ 47.212064][ T7615] bpf_prog_create+0x90/0x1c0 [ 47.212071][ T7615] cls_bpf_prog_from_ops+0x170/0x2bc [ 47.212077][ T7615] cls_bpf_change+0x53c/0x998 [ 47.212083][ T7615] tc_new_tfilter+0xb90/0x12cc [ 47.212088][ T7615] rtnetlink_rcv_msg+0x664/0x97c [ 47.212094][ T7615] netlink_rcv_skb+0x220/0x3fc [ 47.212100][ T7615] rtnetlink_rcv+0x28/0x38 [ 47.212106][ T7615] netlink_unicast+0x694/0x8c4 [ 47.212111][ T7615] netlink_sendmsg+0x648/0x930 [ 47.212117][ T7615] ____sys_sendmsg+0x490/0x7b8 [ 47.212125][ T7615] ___sys_sendmsg+0x204/0x278 [ 47.212131][ T7615] __sys_sendmmsg+0x1f4/0x548 [ 47.212136][ T7615] __arm64_sys_sendmmsg+0xa0/0xbc [ 47.212141][ T7615] invoke_syscall+0x98/0x254 [ 47.212146][ T7615] el0_svc_common+0x130/0x23c [ 47.212152][ T7615] do_el0_svc+0x48/0x58 [ 47.212157][ T7615] el0_svc+0x5c/0x254 [ 47.212164][ T7615] el0t_64_sync_handler+0x84/0x12c [ 47.212171][ T7615] el0t_64_sync+0x198/0x19c [ 47.212178][ T7615] Mem-Info: [ 47.212182][ T7615] active_anon:275 inactive_anon:38902 isolated_anon:0 [ 47.212182][ T7615] active_file:2827 inactive_file:5084 isolated_file:0 [ 47.212182][ T7615] unevictable:768 dirty:597 writeback:19 [ 47.212182][ T7615] slab_reclaimable:11186 slab_unreclaimable:90750 [ 47.212182][ T7615] mapped:32814 shmem:34909 pagetables:1020 [ 47.212182][ T7615] sec_pagetables:0 bounce:0 [ 47.212182][ T7615] kernel_misc_reclaimable:0 [ 47.212182][ T7615] free:1396212 free_pcp:21789 free_cma:7360 [ 47.212197][ T7615] Node 0 active_anon:1100kB inactive_anon:155608kB active_file:11308kB inactive_file:20336kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:131256kB dirty:2388kB writeback:76kB shmem:139636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9880kB pagetables:4080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 47.212211][ T7615] Node 0 DMA free:3076864kB boost:0kB min:20864kB low:26080kB high:31296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 47.212229][ T7615] lowmem_reserve[]: 0 0 3491 3491 3491 [ 47.212245][ T7615] Node 0 Normal free:2507984kB boost:0kB min:24188kB low:30232kB high:36276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1100kB inactive_anon:155608kB active_file:11308kB inactive_file:20336kB unevictable:3072kB writepending:2464kB present:5242880kB managed:3575528kB mlocked:0kB bounce:0kB free_pcp:87156kB local_pcp:82620kB free_cma:0kB [ 47.212262][ T7615] lowmem_reserve[]: 0 0 0 0 0 [ 47.212277][ T7615] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 47.212324][ T7615] Node 0 Normal: 1696*4kB (UME) 964*8kB (UME) 659*16kB (UME) 255*32kB (UME) 135*64kB (UME) 54*128kB (UME) 82*256kB (UME) 58*512kB (UME) 18*1024kB (UME) 23*2048kB (UME) 572*4096kB (UM) = 2507888kB [ 47.212388][ T7615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 47.212394][ T7615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 47.212399][ T7615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 47.212404][ T7615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 47.212409][ T7615] 42787 total pagecache pages [ 47.212412][ T7615] 0 pages in swap cache [ 47.212415][ T7615] Free swap = 124996kB [ 47.212418][ T7615] Total swap = 124996kB [ 47.212421][ T7615] 2097152 pages RAM [ 47.212423][ T7615] 0 pages HighMem/MovableOnly [ 47.212426][ T7615] 433222 pages reserved [ 47.212429][ T7615] 8192 pages cma reserved [ 47.212431][ T7615] 0 pages hwpoisoned [ 47.350159][ T7621] loop2: detected capacity change from 0 to 64 [ 47.359362][ T7619] binder: 7618:7619 tried to acquire reference to desc 0, got 1 instead [ 47.359593][ T7619] binder: 7618:7619 got transaction with invalid data ptr [ 47.360615][ T7619] binder: 7618:7619 transaction async to 7618:0 failed 158/29201/-14, code 0 size 104-104 line 3438 [ 47.361241][ T7621] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 47.520512][ T7634] binder: 7629:7634 tried to acquire reference to desc 0, got 1 instead [ 47.521463][ T7634] debug_low_async_space_locked: 4 callbacks suppressed [ 47.521471][ T7634] binder_alloc: 7629: pid 7629 spamming oneway? 1 buffers allocated for a total size of 4096 [ 47.525871][ T7634] binder_alloc: 7629: pid 7629 spamming oneway? 2 buffers allocated for a total size of 5120 [ 47.528805][ T7634] binder: 7629:7634 BC_FREE_BUFFER no match for buffer at offset ffffffffdf003000 [ 47.580453][ T7640] binder: 7639:7640 tried to acquire reference to desc 0, got 1 instead [ 47.580668][ T7640] binder_alloc: 7639: pid 7639 spamming oneway? 1 buffers allocated for a total size of 4096 [ 47.580742][ T7640] binder_alloc: 7639: pid 7639 spamming oneway? 2 buffers allocated for a total size of 5120 [ 47.581443][ T7640] FAULT_INJECTION: forcing a failure. [ 47.581443][ T7640] name failslab, interval 1, probability 0, space 0, times 0 [ 47.581456][ T7640] CPU: 1 UID: 0 PID: 7640 Comm: syz.2.221 Not tainted syzkaller #0 PREEMPT [ 47.581463][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.581467][ T7640] Call trace: [ 47.581470][ T7640] show_stack+0x2c/0x3c (C) [ 47.581483][ T7640] __dump_stack+0x30/0x40 [ 47.581491][ T7640] dump_stack_lvl+0xd8/0x12c [ 47.581496][ T7640] dump_stack+0x1c/0x28 [ 47.581501][ T7640] should_fail_ex+0x41c/0x594 [ 47.581511][ T7640] should_failslab+0xc0/0x128 [ 47.581518][ T7640] __kmalloc_noprof+0xf4/0x4c8 [ 47.581526][ T7640] tomoyo_encode+0x274/0x4a4 [ 47.581533][ T7640] tomoyo_realpath_from_path+0x480/0x4d4 [ 47.581539][ T7640] tomoyo_path_number_perm+0x1a0/0x47c [ 47.581546][ T7640] tomoyo_file_ioctl+0x2c/0x3c [ 47.581552][ T7640] security_file_ioctl+0xe8/0x2f0 [ 47.581559][ T7640] __arm64_sys_ioctl+0xa8/0x1c4 [ 47.581566][ T7640] invoke_syscall+0x98/0x254 [ 47.581572][ T7640] el0_svc_common+0x130/0x23c [ 47.581577][ T7640] do_el0_svc+0x48/0x58 [ 47.581582][ T7640] el0_svc+0x5c/0x254 [ 47.581590][ T7640] el0t_64_sync_handler+0x84/0x12c [ 47.581597][ T7640] el0t_64_sync+0x198/0x19c [ 47.581608][ T7640] ERROR: Out of memory at tomoyo_realpath_from_path. [ 47.581617][ T7640] binder: 7639:7640 BC_FREE_BUFFER no match for buffer at offset ffffffffdf003000 [ 47.657724][ T7646] binder: BINDER_SET_CONTEXT_MGR already set [ 47.657755][ T7646] binder: 7645:7646 ioctl 4018620d 20000680 returned -16 [ 47.724106][ T7642] loop1: detected capacity change from 0 to 40427 [ 47.725689][ T7642] F2FS-fs: heap/no_heap options were deprecated [ 47.739887][ T7642] F2FS-fs (loop1): build fault injection rate: 19 [ 47.739933][ T7642] F2FS-fs (loop1): build fault injection type: 0x77e8c [ 47.741244][ T7642] F2FS-fs (loop1): invalid crc value [ 47.745581][ T7642] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x178/0x7ac [ 47.747154][ T7642] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x148/0x870 [ 47.747427][ C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0x858/0x894 [ 47.771094][ T7657] FAULT_INJECTION: forcing a failure. [ 47.771094][ T7657] name failslab, interval 1, probability 0, space 0, times 0 [ 47.774403][ T7657] CPU: 0 UID: 0 PID: 7657 Comm: syz.2.228 Not tainted syzkaller #0 PREEMPT [ 47.774425][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.774435][ T7657] Call trace: [ 47.774439][ T7657] show_stack+0x2c/0x3c (C) [ 47.774454][ T7657] __dump_stack+0x30/0x40 [ 47.774461][ T7657] dump_stack_lvl+0xd8/0x12c [ 47.774466][ T7657] dump_stack+0x1c/0x28 [ 47.774471][ T7657] should_fail_ex+0x41c/0x594 [ 47.774480][ T7657] should_failslab+0xc0/0x128 [ 47.774488][ T7657] __kmalloc_cache_noprof+0x80/0x3fc [ 47.774495][ T7657] tcf_exts_init_ex+0xe4/0x58c [ 47.774502][ T7657] cls_bpf_change+0x248/0x998 [ 47.774508][ T7657] tc_new_tfilter+0xb90/0x12cc [ 47.774513][ T7657] rtnetlink_rcv_msg+0x664/0x97c [ 47.774520][ T7657] netlink_rcv_skb+0x220/0x3fc [ 47.774526][ T7657] rtnetlink_rcv+0x28/0x38 [ 47.774532][ T7657] netlink_unicast+0x694/0x8c4 [ 47.774537][ T7657] netlink_sendmsg+0x648/0x930 [ 47.774543][ T7657] ____sys_sendmsg+0x490/0x7b8 [ 47.774550][ T7657] ___sys_sendmsg+0x204/0x278 [ 47.774557][ T7657] __sys_sendmmsg+0x1f4/0x548 [ 47.774562][ T7657] __arm64_sys_sendmmsg+0xa0/0xbc [ 47.774566][ T7657] invoke_syscall+0x98/0x254 [ 47.774572][ T7657] el0_svc_common+0x130/0x23c [ 47.774577][ T7657] do_el0_svc+0x48/0x58 [ 47.774582][ T7657] el0_svc+0x5c/0x254 [ 47.774590][ T7657] el0t_64_sync_handler+0x84/0x12c [ 47.774597][ T7657] el0t_64_sync+0x198/0x19c [ 47.787266][ T7642] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 47.790150][ T7642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.826464][ T7642] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x110/0x868 [ 47.831431][ T7642] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x3e8/0xd78 [ 47.881899][ T7659] loop0: detected capacity change from 0 to 32768 [ 47.903847][ T6530] syz-executor: attempt to access beyond end of device [ 47.903847][ T6530] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.912691][ T6530] CPU: 0 UID: 0 PID: 6530 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 47.912719][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.912730][ T6530] Call trace: [ 47.912735][ T6530] show_stack+0x2c/0x3c (C) [ 47.912756][ T6530] __dump_stack+0x30/0x40 [ 47.912764][ T6530] dump_stack_lvl+0xd8/0x12c [ 47.912770][ T6530] dump_stack+0x1c/0x28 [ 47.912775][ T6530] f2fs_handle_critical_error+0x34c/0x4b8 [ 47.912783][ T6530] f2fs_stop_checkpoint+0x5c/0x70 [ 47.912788][ T6530] f2fs_write_end_io+0x768/0xa70 [ 47.912795][ T6530] bio_endio+0x858/0x894 [ 47.912802][ T6530] submit_bio_noacct+0x158/0x177c [ 47.912807][ T6530] submit_bio+0x3b4/0x550 [ 47.912813][ T6530] f2fs_submit_write_bio+0x13c/0x324 [ 47.912819][ T6530] __submit_merged_bio+0x254/0x704 [ 47.912824][ T6530] __submit_merged_write_cond+0x23c/0x4ac [ 47.912830][ T6530] f2fs_write_data_pages+0x1d28/0x2634 [ 47.912837][ T6530] do_writepages+0x270/0x468 [ 47.912844][ T6530] filemap_fdatawrite+0x14c/0x1f4 [ 47.912851][ T6530] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 47.912857][ T6530] f2fs_write_checkpoint+0x690/0x16a0 [ 47.912862][ T6530] kill_f2fs_super+0x21c/0x584 [ 47.912868][ T6530] deactivate_locked_super+0xc4/0x12c [ 47.912874][ T6530] deactivate_super+0xe0/0x100 [ 47.912878][ T6530] cleanup_mnt+0x31c/0x3ac [ 47.912884][ T6530] __cleanup_mnt+0x20/0x30 [ 47.912888][ T6530] task_work_run+0x1dc/0x260 [ 47.912895][ T6530] exit_to_user_mode_loop+0xfc/0x168 [ 47.912901][ T6530] el0_svc+0x170/0x254 [ 47.912909][ T6530] el0t_64_sync_handler+0x84/0x12c [ 47.912916][ T6530] el0t_64_sync+0x198/0x19c [ 47.912942][ T6530] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 47.974184][ T7659] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=nojournal_transaction_names [ 47.974217][ T7659] allowing incompatible features above 0.0: (unknown version) [ 47.976423][ T7659] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 47.976445][ T7659] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 47.976503][ T7659] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 47.976543][ T7659] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 47.976543][ T7659] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 47.990313][ T7659] bcachefs (loop0): accounting_read... done [ 48.024796][ T7659] bcachefs (loop0): alloc_read... done [ 48.026176][ T7659] bcachefs (loop0): snapshots_read... done [ 48.027497][ T7659] bcachefs (loop0): check_allocations... [ 48.028017][ T7659] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 48.028023][ T7659] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq cddfaeeca0a7d1e5 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 48.037744][ T7659] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 48.037770][ T7659] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 6f77d90a6678a8d9 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 48.038556][ T7659] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 48.038561][ T7659] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1be24db0106cff76 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 48.050305][ T7659] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 48.050333][ T7659] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 592c28c0a83be2c9 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 48.051278][ T7659] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 48.051284][ T7659] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1a83a7e47ef9f6aa written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 48.052316][ T7659] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 48.052322][ T7659] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 11da0ed3864cee54 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 48.061539][ T7659] done [ 48.079116][ T7659] bcachefs (loop0): going read-write [ 48.097046][ T7659] bcachefs (loop0): journal_replay... done [ 48.147939][ T7659] bcachefs (loop0): check_extents_to_backpointers... [ 48.148346][ T7659] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets [ 48.152239][ T7659] done [ 48.154941][ T7659] bcachefs (loop0): check_inodes... done [ 48.155540][ T7659] bcachefs (loop0): resume_logged_ops... done [ 48.156200][ T7659] bcachefs (loop0): delete_dead_inodes... done [ 48.161965][ T7659] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 48.162013][ T7659] bcachefs (loop0): check_extents_to_backpointers... done [ 48.164963][ T7659] bcachefs (loop0): check_inodes... done [ 48.167853][ T7659] bcachefs (loop0): resume_logged_ops... done [ 48.168602][ T7659] bcachefs (loop0): delete_dead_inodes... done [ 48.175889][ T7659] bcachefs (loop0): done starting filesystem [ 48.201945][ T7678] input: syz0 as /devices/virtual/input/input2 [ 48.227285][ T7682] FAULT_INJECTION: forcing a failure. [ 48.227285][ T7682] name failslab, interval 1, probability 0, space 0, times 0 [ 48.228561][ T7682] CPU: 1 UID: 0 PID: 7682 Comm: syz.2.234 Not tainted syzkaller #0 PREEMPT [ 48.228573][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 48.228580][ T7682] Call trace: [ 48.228583][ T7682] show_stack+0x2c/0x3c (C) [ 48.228595][ T7682] __dump_stack+0x30/0x40 [ 48.228602][ T7682] dump_stack_lvl+0xd8/0x12c [ 48.228607][ T7682] dump_stack+0x1c/0x28 [ 48.228612][ T7682] should_fail_ex+0x41c/0x594 [ 48.228620][ T7682] should_failslab+0xc0/0x128 [ 48.228628][ T7682] kmem_cache_alloc_node_noprof+0x88/0x3f4 [ 48.228635][ T7682] __alloc_skb+0x144/0x2ec [ 48.228643][ T7682] netlink_ack+0x11c/0x88c [ 48.228649][ T7682] netlink_rcv_skb+0x1fc/0x3fc [ 48.228655][ T7682] nfnetlink_rcv+0x1f0/0x1db4 [ 48.228662][ T7682] netlink_unicast+0x694/0x8c4 [ 48.228667][ T7682] netlink_sendmsg+0x648/0x930 [ 48.228673][ T7682] ____sys_sendmsg+0x490/0x7b8 [ 48.228680][ T7682] ___sys_sendmsg+0x204/0x278 [ 48.228687][ T7682] __sys_sendmmsg+0x1f4/0x548 [ 48.228691][ T7682] __arm64_sys_sendmmsg+0xa0/0xbc [ 48.228696][ T7682] invoke_syscall+0x98/0x254 [ 48.228702][ T7682] el0_svc_common+0x130/0x23c [ 48.228707][ T7682] do_el0_svc+0x48/0x58 [ 48.228712][ T7682] el0_svc+0x5c/0x254 [ 48.228719][ T7682] el0t_64_sync_handler+0x84/0x12c [ 48.228726][ T7682] el0t_64_sync+0x198/0x19c [ 48.278787][ T6529] bcachefs (loop0): shutting down [ 48.278822][ T6529] bcachefs (loop0): going read-only [ 48.309797][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 48.531286][ T7694] loop2: detected capacity change from 0 to 2048 [ 48.568808][ T7678] loop1: detected capacity change from 0 to 32768 [ 48.569238][ T7678] bcachefs: bch2_fs_parse_param() Error parsing option errors: option_value [ 48.578366][ T7704] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.592918][ T7700] FAULT_INJECTION: forcing a failure. [ 48.592918][ T7700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.592967][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: syz.4.239 Not tainted syzkaller #0 PREEMPT [ 48.592994][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 48.593005][ T7700] Call trace: [ 48.593010][ T7700] show_stack+0x2c/0x3c (C) [ 48.593023][ T7700] __dump_stack+0x30/0x40 [ 48.593030][ T7700] dump_stack_lvl+0xd8/0x12c [ 48.593035][ T7700] dump_stack+0x1c/0x28 [ 48.593040][ T7700] should_fail_ex+0x41c/0x594 [ 48.593049][ T7700] should_fail+0x14/0x24 [ 48.593056][ T7700] should_fail_usercopy+0x20/0x30 [ 48.593063][ T7700] simple_read_from_buffer+0xc4/0x254 [ 48.593071][ T7700] proc_fail_nth_read+0x1a0/0x23c [ 48.593077][ T7700] vfs_read+0x228/0x93c [ 48.593084][ T7700] ksys_read+0x120/0x210 [ 48.593090][ T7700] __arm64_sys_read+0x7c/0x90 [ 48.593096][ T7700] invoke_syscall+0x98/0x254 [ 48.593102][ T7700] el0_svc_common+0x130/0x23c [ 48.593107][ T7700] do_el0_svc+0x48/0x58 [ 48.593112][ T7700] el0_svc+0x5c/0x254 [ 48.593121][ T7700] el0t_64_sync_handler+0x84/0x12c [ 48.593128][ T7700] el0t_64_sync+0x198/0x19c [ 48.737333][ T7723] binder: BINDER_SET_CONTEXT_MGR already set [ 48.737362][ T7723] binder: 7722:7723 ioctl 4018620d 20000680 returned -16 [ 48.795222][ T7726] binder_alloc: 7724: pid 7724 spamming oneway? 1 buffers allocated for a total size of 4096 [ 48.830730][ T7636] loop3: detected capacity change from 0 to 262144 [ 48.839633][ T7636] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.220 (7636) [ 48.872997][ T7636] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 48.873066][ T7636] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 48.875735][ T7732] loop1: detected capacity change from 0 to 2048 [ 48.910748][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 48.933103][ T7636] BTRFS info (device loop3): enabling ssd optimizations [ 48.933139][ T7636] BTRFS info (device loop3): turning on sync discard [ 48.933162][ T7636] BTRFS info (device loop3): enabling free space tree [ 48.964062][ T7751] loop4: detected capacity change from 0 to 4096 [ 48.970772][ T7636] BTRFS info (device loop3): balance: start -d -m -s [ 48.972177][ T7636] BTRFS info (device loop3): unable to make block group 30408704 ro [ 48.974837][ T7636] BTRFS info (device loop3): space_info METADATA (sub-group id 0) has 27590656 free, is not full [ 48.974884][ T7636] BTRFS info (device loop3): space_info total=33554432, used=131072, pinned=0, reserved=0, may_use=5767168, readonly=65536 zone_unusable=0 [ 48.974908][ T7636] BTRFS info (device loop3): global_block_rsv: size 5767168 reserved 5767168 [ 48.974925][ T7636] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 48.974938][ T7636] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 48.974949][ T7636] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 48.974960][ T7636] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 48.980866][ T7751] ntfs3(loop4): It is recommened to use chkdsk. [ 48.981315][ T7751] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 48.981332][ T7751] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 48.981344][ T7751] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 48.981357][ T7751] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 48.981372][ T7751] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 48.981382][ T7751] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 48.981395][ T7751] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 48.981405][ T7751] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 48.981415][ T7751] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 48.998220][ T7752] loop2: detected capacity change from 0 to 1024 [ 49.024532][ T7636] BTRFS info (device loop3): relocating block group 30408704 flags metadata|dup [ 49.037030][ T7752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.038571][ T7751] netlink: 104 bytes leftover after parsing attributes in process `syz.4.247'. [ 49.038587][ T7751] netlink: 104 bytes leftover after parsing attributes in process `syz.4.247'. [ 49.038600][ T7751] netlink: 81 bytes leftover after parsing attributes in process `syz.4.247'. [ 49.129273][ T6533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.162382][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.162937][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.189643][ T7776] binder: BINDER_SET_CONTEXT_MGR already set [ 49.191602][ T7776] binder: 7775:7776 ioctl 4018620d 20000680 returned -16 [ 49.248428][ T7636] BTRFS info (device loop3): found 3 extents, stage: move data extents [ 49.304254][ T7636] BTRFS info (device loop3): left=0, need=393216, flags=34 [ 49.304293][ T7636] BTRFS info (device loop3): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 49.304304][ T7636] BTRFS info (device loop3): space_info total=8388608, used=16384, pinned=0, reserved=16384, may_use=0, readonly=8355840 zone_unusable=0 [ 49.304315][ T7636] BTRFS info (device loop3): global_block_rsv: size 5767168 reserved 5750784 [ 49.304322][ T7636] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 49.304329][ T7636] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 49.304335][ T7636] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 49.304341][ T7636] BTRFS info (device loop3): delayed_refs_rsv: size 5242880 reserved 4947968 [ 49.304649][ T7636] BTRFS info (device loop3): relocating block group 22020096 flags system|dup [ 49.361883][ T7636] BTRFS info (device loop3): found 1 extents, stage: move data extents [ 49.372126][ T7636] BTRFS info (device loop3): relocating block group 13631488 flags data [ 49.405390][ T7779] loop2: detected capacity change from 0 to 32768 [ 49.408209][ T7779] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section journal: duplicate journal buckets 1 [ 49.408209][ T7779] journal (size 40): [ 49.408209][ T7779] Buckets: 1 7 24 1 [ 49.408209][ T7779] [ 49.408280][ T7779] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 49.419239][ T7636] BTRFS info (device loop3): found 1 extents, stage: move data extents [ 49.457410][ T7636] BTRFS info (device loop3): found 1 extents, stage: update data pointers [ 49.463320][ T7792] binder_alloc: 7791: pid 7791 spamming oneway? 1 buffers allocated for a total size of 4096 [ 49.465545][ T7792] binder_alloc: 7791: pid 7791 spamming oneway? 2 buffers allocated for a total size of 5120 [ 49.499777][ T7636] BTRFS info (device loop3): balance: ended with status: 0 [ 49.511028][ T7798] binder_alloc: 7797: pid 7797 spamming oneway? 1 buffers allocated for a total size of 4096 [ 49.511146][ T7798] binder_alloc: 7797: pid 7797 spamming oneway? 2 buffers allocated for a total size of 5120 [ 49.511568][ T7798] FAULT_INJECTION: forcing a failure. [ 49.511568][ T7798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.511582][ T7798] CPU: 1 UID: 0 PID: 7798 Comm: syz.2.254 Not tainted syzkaller #0 PREEMPT [ 49.511591][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 49.511596][ T7798] Call trace: [ 49.511599][ T7798] show_stack+0x2c/0x3c (C) [ 49.511613][ T7798] __dump_stack+0x30/0x40 [ 49.511620][ T7798] dump_stack_lvl+0xd8/0x12c [ 49.511625][ T7798] dump_stack+0x1c/0x28 [ 49.511630][ T7798] should_fail_ex+0x41c/0x594 [ 49.511638][ T7798] should_fail+0x14/0x24 [ 49.511644][ T7798] should_fail_usercopy+0x20/0x30 [ 49.511651][ T7798] _inline_copy_from_user+0x40/0x180 [ 49.511659][ T7798] binder_ioctl_write_read+0x124/0x9f58 [ 49.511665][ T7798] binder_ioctl+0x420/0x19a4 [ 49.511672][ T7798] __arm64_sys_ioctl+0x14c/0x1c4 [ 49.511679][ T7798] invoke_syscall+0x98/0x254 [ 49.511685][ T7798] el0_svc_common+0x130/0x23c [ 49.511690][ T7798] do_el0_svc+0x48/0x58 [ 49.511695][ T7798] el0_svc+0x5c/0x254 [ 49.511702][ T7798] el0t_64_sync_handler+0x84/0x12c [ 49.511709][ T7798] el0t_64_sync+0x198/0x19c [ 49.511717][ T7798] binder: 7797:7798 ioctl c0306201 20000140 returned -14 [ 49.540895][ T6540] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 49.574614][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.577246][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.847752][ T7833] loop3: detected capacity change from 0 to 16 [ 49.849368][ T7833] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 49.857064][ T6674] udevd[6674]: incorrect cramfs checksum on /dev/loop3 [ 49.934697][ T6125] Bluetooth: hci3: failed to read key size for handle 200 [ 50.004219][ T7847] 9pnet_fd: Insufficient options for proto=fd [ 50.182481][ T7863] FAULT_INJECTION: forcing a failure. [ 50.182481][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 50.183854][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.4.261 Not tainted syzkaller #0 PREEMPT [ 50.183876][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 50.183881][ T7863] Call trace: [ 50.183884][ T7863] show_stack+0x2c/0x3c (C) [ 50.183898][ T7863] __dump_stack+0x30/0x40 [ 50.183905][ T7863] dump_stack_lvl+0xd8/0x12c [ 50.183910][ T7863] dump_stack+0x1c/0x28 [ 50.183915][ T7863] should_fail_ex+0x41c/0x594 [ 50.183923][ T7863] should_failslab+0xc0/0x128 [ 50.183932][ T7863] kmem_cache_alloc_noprof+0x80/0x3e8 [ 50.183941][ T7863] skb_clone+0x1b4/0x328 [ 50.183948][ T7863] __netlink_deliver_tap+0x36c/0x708 [ 50.183956][ T7863] netlink_deliver_tap+0x1ac/0x1b0 [ 50.183962][ T7863] netlink_sendskb+0x78/0x164 [ 50.183969][ T7863] netlink_unicast+0x304/0x8c4 [ 50.183974][ T7863] netlink_ack+0x574/0x88c [ 50.183979][ T7863] netlink_rcv_skb+0x1fc/0x3fc [ 50.183984][ T7863] rtnetlink_rcv+0x28/0x38 [ 50.183994][ T7863] netlink_unicast+0x694/0x8c4 [ 50.183999][ T7863] netlink_sendmsg+0x648/0x930 [ 50.184005][ T7863] ____sys_sendmsg+0x490/0x7b8 [ 50.184012][ T7863] ___sys_sendmsg+0x204/0x278 [ 50.184020][ T7863] __arm64_sys_sendmsg+0x184/0x238 [ 50.184027][ T7863] invoke_syscall+0x98/0x254 [ 50.184033][ T7863] el0_svc_common+0x130/0x23c [ 50.184038][ T7863] do_el0_svc+0x48/0x58 [ 50.184043][ T7863] el0_svc+0x5c/0x254 [ 50.184050][ T7863] el0t_64_sync_handler+0x84/0x12c [ 50.184057][ T7863] el0t_64_sync+0x198/0x19c [ 50.293977][ T7869] loop4: detected capacity change from 0 to 32768 [ 50.335828][ T7869] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 50.339418][ T7869] allowing incompatible features above 0.0: (unknown version) [ 50.340637][ T7869] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 50.342967][ T7869] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 50.343113][ T7869] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 50.343192][ T7869] bcachefs (loop4): Version upgrade required: [ 50.343192][ T7869] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 50.343192][ T7869] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 50.343192][ T7869] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 50.343306][ T7869] bcachefs (loop4): dropping and reconstructing all alloc info [ 50.347736][ T7869] bcachefs (loop4): accounting_read... done [ 50.362992][ T7869] bcachefs (loop4): alloc_read... done [ 50.363106][ T7869] bcachefs (loop4): snapshots_read... done [ 50.363345][ T7869] bcachefs (loop4): done starting filesystem [ 50.405496][ T6543] bcachefs (loop4): shutting down [ 50.413969][ T26] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 50.414018][ T26] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 50.416563][ T6543] bcachefs (loop4): shutdown complete [ 50.471800][ T7878] FAULT_INJECTION: forcing a failure. [ 50.471800][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 50.471835][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: syz.2.265 Not tainted syzkaller #0 PREEMPT [ 50.471847][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 50.471852][ T7878] Call trace: [ 50.471856][ T7878] show_stack+0x2c/0x3c (C) [ 50.471872][ T7878] __dump_stack+0x30/0x40 [ 50.471880][ T7878] dump_stack_lvl+0xd8/0x12c [ 50.471886][ T7878] dump_stack+0x1c/0x28 [ 50.471891][ T7878] should_fail_ex+0x41c/0x594 [ 50.471900][ T7878] should_failslab+0xc0/0x128 [ 50.471907][ T7878] __kmalloc_node_track_caller_noprof+0xf4/0x4d0 [ 50.471915][ T7878] kmemdup_noprof+0x44/0x8c [ 50.471921][ T7878] cls_bpf_prog_from_ops+0x154/0x2bc [ 50.471929][ T7878] cls_bpf_change+0x53c/0x998 [ 50.471937][ T7878] tc_new_tfilter+0xb90/0x12cc [ 50.471943][ T7878] rtnetlink_rcv_msg+0x664/0x97c [ 50.471950][ T7878] netlink_rcv_skb+0x220/0x3fc [ 50.471956][ T7878] rtnetlink_rcv+0x28/0x38 [ 50.471962][ T7878] netlink_unicast+0x694/0x8c4 [ 50.471967][ T7878] netlink_sendmsg+0x648/0x930 [ 50.471972][ T7878] ____sys_sendmsg+0x490/0x7b8 [ 50.471979][ T7878] ___sys_sendmsg+0x204/0x278 [ 50.471986][ T7878] __sys_sendmmsg+0x1f4/0x548 [ 50.471996][ T7878] __arm64_sys_sendmmsg+0xa0/0xbc [ 50.472001][ T7878] invoke_syscall+0x98/0x254 [ 50.472008][ T7878] el0_svc_common+0x130/0x23c [ 50.472014][ T7878] do_el0_svc+0x48/0x58 [ 50.472019][ T7878] el0_svc+0x5c/0x254 [ 50.472028][ T7878] el0t_64_sync_handler+0x84/0x12c [ 50.472034][ T7878] el0t_64_sync+0x198/0x19c [ 50.549357][ T7880] FAULT_INJECTION: forcing a failure. [ 50.549357][ T7880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.552485][ T7880] CPU: 0 UID: 0 PID: 7880 Comm: syz.4.264 Not tainted syzkaller #0 PREEMPT [ 50.552510][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 50.552516][ T7880] Call trace: [ 50.552520][ T7880] show_stack+0x2c/0x3c (C) [ 50.552538][ T7880] __dump_stack+0x30/0x40 [ 50.552549][ T7880] dump_stack_lvl+0xd8/0x12c [ 50.552556][ T7880] dump_stack+0x1c/0x28 [ 50.552562][ T7880] should_fail_ex+0x41c/0x594 [ 50.552570][ T7880] should_fail+0x14/0x24 [ 50.552577][ T7880] should_fail_usercopy+0x20/0x30 [ 50.552583][ T7880] simple_read_from_buffer+0xc4/0x254 [ 50.552592][ T7880] proc_fail_nth_read+0x1a0/0x23c [ 50.552597][ T7880] vfs_read+0x228/0x93c [ 50.552603][ T7880] ksys_read+0x120/0x210 [ 50.552609][ T7880] __arm64_sys_read+0x7c/0x90 [ 50.552616][ T7880] invoke_syscall+0x98/0x254 [ 50.552621][ T7880] el0_svc_common+0x130/0x23c [ 50.552626][ T7880] do_el0_svc+0x48/0x58 [ 50.552631][ T7880] el0_svc+0x5c/0x254 [ 50.552639][ T7880] el0t_64_sync_handler+0x84/0x12c [ 50.552646][ T7880] el0t_64_sync+0x198/0x19c [ 50.585444][ T7886] netlink: 'syz.4.267': attribute type 10 has an invalid length. [ 50.586953][ T7886] __nla_validate_parse: 1 callbacks suppressed [ 50.588269][ T7886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.267'. [ 50.590205][ T7886] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 50.598926][ T7886] 9pnet_fd: Insufficient options for proto=fd [ 50.600802][ T7884] loop2: detected capacity change from 0 to 4096 [ 50.670962][ T7890] binder_alloc: 7889: pid 7889 spamming oneway? 1 buffers allocated for a total size of 4096 [ 50.676321][ T7890] loop2: detected capacity change from 0 to 64 [ 50.699409][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 50.771979][ T7896] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 50.803038][ T7894] loop2: detected capacity change from 0 to 32768 [ 50.831868][ T7894] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 50.866047][ T7894] XFS (loop2): Ending clean mount [ 50.966219][ T7914] binder_user_error: 18 callbacks suppressed [ 50.966504][ T7914] binder: 7913:7914 tried to acquire reference to desc 0, got 1 instead [ 50.967134][ T24] binder_debug: 56 callbacks suppressed [ 50.967141][ T24] binder: undelivered TRANSACTION_COMPLETE [ 50.967150][ T24] binder: undelivered TRANSACTION_COMPLETE [ 50.967157][ T24] binder: undelivered TRANSACTION_COMPLETE [ 50.979379][ T24] binder: undelivered transaction 231, process died. [ 50.979423][ T24] binder: undelivered transaction 232, process died. [ 50.979448][ T24] binder: undelivered transaction 230, process died. [ 50.987290][ T6533] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 51.059713][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 51.137034][ T7927] binder: 7926:7927 tried to acquire reference to desc 0, got 1 instead [ 51.138483][ T9] binder: undelivered TRANSACTION_COMPLETE [ 51.138495][ T9] binder: undelivered TRANSACTION_COMPLETE [ 51.138503][ T9] binder: undelivered TRANSACTION_COMPLETE [ 51.144682][ T9] binder: undelivered transaction 238, process died. [ 51.180826][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'. [ 51.240963][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 51.241016][ T7934] FAULT_INJECTION: forcing a failure. [ 51.241016][ T7934] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 51.241035][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.2.285 Not tainted syzkaller #0 PREEMPT [ 51.241043][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 51.241049][ T7934] Call trace: [ 51.241052][ T7934] show_stack+0x2c/0x3c (C) [ 51.241066][ T7934] __dump_stack+0x30/0x40 [ 51.241073][ T7934] dump_stack_lvl+0xd8/0x12c [ 51.241078][ T7934] dump_stack+0x1c/0x28 [ 51.241083][ T7934] should_fail_ex+0x41c/0x594 [ 51.241091][ T7934] should_fail_alloc_page+0xec/0x10c [ 51.241098][ T7934] prepare_alloc_pages+0x1c8/0x50c [ 51.241104][ T7934] __alloc_frozen_pages_noprof+0x134/0x318 [ 51.241109][ T7934] alloc_pages_bulk_noprof+0x564/0x810 [ 51.241114][ T7934] kasan_populate_vmalloc+0xe4/0x268 [ 51.241120][ T7934] alloc_vmap_area+0xda0/0x13d4 [ 51.241126][ T7934] __get_vm_area_node+0x220/0x330 [ 51.241132][ T7934] __vmalloc_node_range_noprof+0x2d8/0xf8c [ 51.241138][ T7934] __vmalloc_noprof+0xf8/0x154 [ 51.241144][ T7934] bpf_prog_alloc_no_stats+0x5c/0x468 [ 51.241151][ T7934] bpf_prog_alloc+0x48/0x10c [ 51.241158][ T7934] bpf_prog_create+0x90/0x1c0 [ 51.241165][ T7934] cls_bpf_prog_from_ops+0x170/0x2bc [ 51.241172][ T7934] cls_bpf_change+0x53c/0x998 [ 51.241178][ T7934] tc_new_tfilter+0xb90/0x12cc [ 51.241183][ T7934] rtnetlink_rcv_msg+0x664/0x97c [ 51.241189][ T7934] netlink_rcv_skb+0x220/0x3fc [ 51.241195][ T7934] rtnetlink_rcv+0x28/0x38 [ 51.241200][ T7934] netlink_unicast+0x694/0x8c4 [ 51.241206][ T7934] netlink_sendmsg+0x648/0x930 [ 51.241211][ T7934] ____sys_sendmsg+0x490/0x7b8 [ 51.241219][ T7934] ___sys_sendmsg+0x204/0x278 [ 51.241226][ T7934] __sys_sendmmsg+0x1f4/0x548 [ 51.241230][ T7934] __arm64_sys_sendmmsg+0xa0/0xbc [ 51.241235][ T7934] invoke_syscall+0x98/0x254 [ 51.241241][ T7934] el0_svc_common+0x130/0x23c [ 51.241246][ T7934] do_el0_svc+0x48/0x58 [ 51.241251][ T7934] el0_svc+0x5c/0x254 [ 51.241258][ T7934] el0t_64_sync_handler+0x84/0x12c [ 51.241265][ T7934] el0t_64_sync+0x198/0x19c [ 51.347442][ T7937] binder: 7936:7937 tried to acquire reference to desc 0, got 1 instead [ 51.348556][ T7937] FAULT_INJECTION: forcing a failure. [ 51.348556][ T7937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.348569][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.2.286 Not tainted syzkaller #0 PREEMPT [ 51.348576][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 51.348580][ T7937] Call trace: [ 51.348582][ T7937] show_stack+0x2c/0x3c (C) [ 51.348594][ T7937] __dump_stack+0x30/0x40 [ 51.348600][ T7937] dump_stack_lvl+0xd8/0x12c [ 51.348605][ T7937] dump_stack+0x1c/0x28 [ 51.348609][ T7937] should_fail_ex+0x41c/0x594 [ 51.348618][ T7937] should_fail+0x14/0x24 [ 51.348624][ T7937] should_fail_usercopy+0x20/0x30 [ 51.348630][ T7937] _inline_copy_from_user+0x40/0x180 [ 51.348638][ T7937] binder_ioctl_write_read+0x124/0x9f58 [ 51.348646][ T7937] binder_ioctl+0x420/0x19a4 [ 51.348653][ T7937] __arm64_sys_ioctl+0x14c/0x1c4 [ 51.348660][ T7937] invoke_syscall+0x98/0x254 [ 51.348666][ T7937] el0_svc_common+0x130/0x23c [ 51.348671][ T7937] do_el0_svc+0x48/0x58 [ 51.348676][ T7937] el0_svc+0x5c/0x254 [ 51.348684][ T7937] el0t_64_sync_handler+0x84/0x12c [ 51.348690][ T7937] el0t_64_sync+0x198/0x19c [ 51.348768][ T7937] binder: 7936:7937 ioctl c0306201 20000140 returned -14 [ 51.408563][ T7935] loop4: detected capacity change from 0 to 65536 [ 51.434251][ T7941] loop2: detected capacity change from 0 to 128 [ 51.436091][ T7941] EXT4-fs (loop2): Test dummy encryption mode enabled [ 51.446255][ T7941] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.454734][ T7941] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 51.457051][ T7941] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.288: bg 0: bad block bitmap checksum [ 51.515367][ T6533] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.655115][ T7951] FAULT_INJECTION: forcing a failure. [ 51.655115][ T7951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.655152][ T7951] CPU: 1 UID: 0 PID: 7951 Comm: syz.2.292 Not tainted syzkaller #0 PREEMPT [ 51.655162][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 51.655166][ T7951] Call trace: [ 51.655168][ T7951] show_stack+0x2c/0x3c (C) [ 51.655181][ T7951] __dump_stack+0x30/0x40 [ 51.655187][ T7951] dump_stack_lvl+0xd8/0x12c [ 51.655192][ T7951] dump_stack+0x1c/0x28 [ 51.655197][ T7951] should_fail_ex+0x41c/0x594 [ 51.655205][ T7951] should_fail+0x14/0x24 [ 51.655211][ T7951] should_fail_usercopy+0x20/0x30 [ 51.655218][ T7951] simple_read_from_buffer+0xc4/0x254 [ 51.655226][ T7951] proc_fail_nth_read+0x1a0/0x23c [ 51.655231][ T7951] vfs_read+0x228/0x93c [ 51.655238][ T7951] ksys_read+0x120/0x210 [ 51.655244][ T7951] __arm64_sys_read+0x7c/0x90 [ 51.655250][ T7951] invoke_syscall+0x98/0x254 [ 51.655256][ T7951] el0_svc_common+0x130/0x23c [ 51.655261][ T7951] do_el0_svc+0x48/0x58 [ 51.655265][ T7951] el0_svc+0x5c/0x254 [ 51.655273][ T7951] el0t_64_sync_handler+0x84/0x12c [ 51.655280][ T7951] el0t_64_sync+0x198/0x19c [ 51.817837][ T7929] loop4: detected capacity change from 0 to 131072 [ 51.962283][ T7962] loop4: detected capacity change from 0 to 1024 [ 51.979978][ T7962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.018924][ T7962] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 52.021143][ T7962] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 52.037586][ T6543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.184071][ T7969] loop3: detected capacity change from 0 to 1764 [ 52.337103][ T7968] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 52.337121][ T7968] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 52.337346][ T7968] vhci_hcd vhci_hcd.0: Device attached [ 52.394782][ T7973] loop4: detected capacity change from 0 to 4096 [ 52.396484][ T7973] ntfs3: Unknown parameter 'fuse' [ 52.492966][ T6125] Bluetooth: hci1: command 0x0c1a tx timeout [ 52.494180][ T26] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 52.494223][ T26] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 52.588300][ T7981] loop2: detected capacity change from 0 to 16 [ 52.599231][ T7981] erofs (device loop2): mounted with root inode @ nid 36. [ 52.613370][ T9] usb 9-1: SetAddress Request (2) to port 0 [ 52.613435][ T9] usb 9-1: new SuperSpeed USB device number 2 using vhci_hcd [ 52.815240][ T7970] vhci_hcd: connection reset by peer [ 52.818141][ T7023] vhci_hcd: stop threads [ 52.818480][ T7023] vhci_hcd: release socket [ 52.819299][ T7023] vhci_hcd: disconnect device [ 52.902342][ T7994] binder: 7993:7994 tried to acquire reference to desc 0, got 1 instead [ 52.904774][ T7994] debug_low_async_space_locked: 7 callbacks suppressed [ 52.906079][ T7994] binder_alloc: 7993: pid 7993 spamming oneway? 1 buffers allocated for a total size of 4096 [ 52.908065][ T7994] binder_alloc: 7993: pid 7993 spamming oneway? 2 buffers allocated for a total size of 5120 [ 53.012275][ T7998] loop1: detected capacity change from 0 to 32768 [ 53.014201][ T7998] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.307 (7998) [ 53.019440][ T7998] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 53.019487][ T7998] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 53.019511][ T7998] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 53.038524][ T2186] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x7cc576a9 found 0xc5e04c16 level 0 [ 53.038656][ T7998] BTRFS warning (device loop1): couldn't read tree root [ 53.056167][ T7998] BTRFS error (device loop1): open_ctree failed: -5 [ 53.163800][ T8016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.250643][ T8016] loop1: detected capacity change from 0 to 32768 [ 53.264695][ T8016] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 53.267392][ T2186] (kworker/u8:6,2186,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 53.285018][ T8016] (syz.1.308,8016,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 53.285065][ T8016] (syz.1.308,8016,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 53.285081][ T8016] (syz.1.308,8016,1):__ocfs2_prepare_orphan_dir:2183 ERROR: status = -2 [ 53.285091][ T8016] (syz.1.308,8016,1):ocfs2_prepare_orphan_dir:2227 ERROR: status = -2 [ 53.285100][ T8016] (syz.1.308,8016,1):ocfs2_prepare_orphan_dir:2243 ERROR: status = -2 [ 53.285108][ T8016] (syz.1.308,8016,1):ocfs2_unlink:967 ERROR: status = -2 [ 53.310608][ T6530] ocfs2: Unmounting device (7,1) on (node local) [ 53.330361][ T8020] binder: 8019:8020 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 53.331338][ T8020] binder: 8019:8020 got transaction to invalid handle, 1 [ 53.385521][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 53.411408][ T8027] 9pnet_fd: Insufficient options for proto=fd [ 53.411590][ T8026] 9pnet_fd: Insufficient options for proto=fd [ 53.606256][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.633154][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.059158][ T8049] binder: 8048:8049 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 54.061780][ T8049] binder: 8048:8049 got transaction to invalid handle, 1 [ 54.098938][ T8051] loop4: detected capacity change from 0 to 4096 [ 54.128096][ T8053] binder: 8052:8053 tried to acquire reference to desc 0, got 1 instead [ 54.128415][ T8053] binder_alloc: 8052: pid 8052 spamming oneway? 1 buffers allocated for a total size of 4096 [ 54.128604][ T8053] binder_alloc: 8052: pid 8052 spamming oneway? 2 buffers allocated for a total size of 5120 [ 54.223859][ T8055] loop4: detected capacity change from 0 to 32768 [ 54.289698][ T8055] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 54.289725][ T8055] allowing incompatible features above 0.0: (unknown version) [ 54.289745][ T8055] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 54.289754][ T8055] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 54.289801][ T8055] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 54.289866][ T8055] bcachefs (loop4): Version upgrade required: [ 54.289866][ T8055] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 54.289866][ T8055] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 54.289866][ T8055] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 54.292215][ T8055] bcachefs (loop4): dropping and reconstructing all alloc info [ 54.304189][ T8055] bcachefs (loop4): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: [ 54.304200][ T8055] mode=15 [ 54.304204][ T8055] flags=(d7300000) [ 54.304207][ T8055] journal_seq=4 [ 54.304210][ T8055] hash_seed=f4891abdd5c0cd85 [ 54.304213][ T8055] hash_type=siphash [ 54.304216][ T8055] bi_size=38 [ 54.304219][ T8055] bi_sectors=8 [ 54.304221][ T8055] bi_version=0 [ 54.304224][ T8055] bi_atime=2770562249 [ 54.304227][ T8055] bi_ctime=2780562352 [ 54.304229][ T8055] bi_mtime=2770562249 [ 54.304232][ T8055] bi_otime=2770562249 [ 54.304235][ T8055] bi_uid=0 [ 54.304237][ T8055] bi_gid=0 [ 54.304240][ T8055] bi_nlink=0 [ 54.304242][ T8055] bi_generation=0 [ 54.304245][ T8055] bi_dev=0 [ 54.304248][ T8055] bi_data_checksum=0 [ 54.304250][ T8055] bi_compression=0 [ 54.304253][ T8055] bi_project=0 [ 54.304256][ T8055] bi_background_compression=0 [ 54.304258][ T8055] bi_data_replicas=0 [ 54.304261][ T8055] bi_promote_target=0 [ 54.304264][ T8055] bi_foreground_target=0 [ 54.304266][ T8055] bi_background_target=0 [ 54.304269][ T8055] bi_erasure_code=0 [ 54.304272][ T8055] bi_fields_set=0 [ 54.304275][ T8055] bi_dir=4098 [ 54.304277][ T8055] bi_dir_offset=5675548428000973578 [ 54.304280][ T8055] bi_subvol=0 [ 54.304283][ T8055] bi_parent_subvol=0 [ 54.304285][ T8055] bi_nocow=0 [ 54.304288][ T8055] bi_depth=0 [ 54.304290][ T8055] bi_inodes_32bit=0 [ 54.304293][ T8055] bi_casefold=0 [ 54.304296][ T8055] invalid fields_start (got 17, min 6 max 13), deleting [ 54.306378][ T8055] bcachefs (loop4): accounting_read... done [ 54.315761][ T8055] bcachefs (loop4): alloc_read... done [ 54.316053][ T8055] bcachefs (loop4): snapshots_read... done [ 54.316438][ T8055] bcachefs (loop4): check_allocations... done [ 54.321658][ T8055] bcachefs (loop4): going read-write [ 54.321704][ T8055] bcachefs (loop4): insufficient writeable journal devices available: have 0, need 1 [ 54.321704][ T8055] rw journal devs: [ 54.331263][ T8055] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 54.331563][ T8055] bcachefs (loop4): done starting filesystem [ 54.377804][ T6543] bcachefs (loop4): shutting down [ 54.377839][ T6543] bcachefs (loop4): going read-only [ 54.379172][ T6543] bcachefs (loop4): finished waiting for writes to stop [ 54.396819][ T6543] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 54.396928][ T6543] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 54.397215][ T6543] bcachefs (loop4): unclean shutdown complete, journal seq 10 [ 54.398199][ T6543] bcachefs (loop4): done going read-only, filesystem not clean [ 54.409342][ T6543] bcachefs (loop4): shutdown complete [ 54.412439][ T8071] binder: 8070:8071 tried to acquire reference to desc 0, got 1 instead [ 54.420096][ T8071] binder_alloc: 8070: pid 8070 spamming oneway? 1 buffers allocated for a total size of 4096 [ 54.420251][ T8071] binder_alloc: 8070: pid 8070 spamming oneway? 2 buffers allocated for a total size of 5120 [ 54.575616][ T8075] loop4: detected capacity change from 0 to 32768 [ 54.587760][ T8073] loop1: detected capacity change from 0 to 32768 [ 54.594948][ T8073] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.328 (8073) [ 54.605673][ T8073] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 54.605724][ T8073] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 54.637656][ T8093] loop4: detected capacity change from 0 to 128 [ 54.637847][ T8073] BTRFS info (device loop1): rebuilding free space tree [ 54.642379][ T8073] BTRFS info (device loop1): enabling ssd optimizations [ 54.643954][ T8073] BTRFS info (device loop1): using spread ssd allocation scheme [ 54.643977][ T8073] BTRFS info (device loop1): enabling free space tree [ 54.643995][ T8073] BTRFS info (device loop1): force clearing of disk cache [ 54.644009][ T8073] BTRFS info (device loop1): force zlib compression, level 3 [ 54.652851][ T6125] Bluetooth: hci2: command 0x0c1a tx timeout [ 54.653667][ T26] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 54.654223][ T26] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 54.687499][ T31] audit: type=1326 audit(54.657:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8095 comm="syz.4.329" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d5b3a8 code=0x0 [ 54.720766][ T6530] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 54.859675][ T8097] loop4: detected capacity change from 0 to 32768 [ 54.892213][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 54.910735][ T8097] loop4: detected capacity change from 0 to 16 [ 54.911477][ T8097] erofs: Unknown parameter 'nossd' [ 55.097083][ T8107] FAULT_INJECTION: forcing a failure. [ 55.097083][ T8107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.097118][ T8107] CPU: 1 UID: 0 PID: 8107 Comm: syz.1.333 Not tainted syzkaller #0 PREEMPT [ 55.097129][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 55.097137][ T8107] Call trace: [ 55.097140][ T8107] show_stack+0x2c/0x3c (C) [ 55.097156][ T8107] __dump_stack+0x30/0x40 [ 55.097164][ T8107] dump_stack_lvl+0xd8/0x12c [ 55.097169][ T8107] dump_stack+0x1c/0x28 [ 55.097175][ T8107] should_fail_ex+0x41c/0x594 [ 55.097183][ T8107] should_fail+0x14/0x24 [ 55.097189][ T8107] should_fail_usercopy+0x20/0x30 [ 55.097197][ T8107] simple_read_from_buffer+0xc4/0x254 [ 55.097205][ T8107] proc_fail_nth_read+0x1a0/0x23c [ 55.097211][ T8107] vfs_read+0x228/0x93c [ 55.097218][ T8107] ksys_read+0x120/0x210 [ 55.097224][ T8107] __arm64_sys_read+0x7c/0x90 [ 55.097231][ T8107] invoke_syscall+0x98/0x254 [ 55.097236][ T8107] el0_svc_common+0x130/0x23c [ 55.097242][ T8107] do_el0_svc+0x48/0x58 [ 55.097247][ T8107] el0_svc+0x5c/0x254 [ 55.097255][ T8107] el0t_64_sync_handler+0x84/0x12c [ 55.097262][ T8107] el0t_64_sync+0x198/0x19c [ 55.319669][ T8115] binder_alloc: 8114: pid 8114 spamming oneway? 1 buffers allocated for a total size of 4096 [ 55.321926][ T8115] binder_alloc: 8114: pid 8114 spamming oneway? 2 buffers allocated for a total size of 5120 [ 55.378211][ T8119] loop1: detected capacity change from 0 to 16 [ 55.382345][ T8119] erofs (device loop1): mounted with root inode @ nid 36. [ 55.602638][ T6536] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 55.605659][ T6536] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.679705][ T8123] loop4: detected capacity change from 0 to 2048 [ 55.724362][ T6674] loop4: p1 < > p3 [ 55.725413][ T6674] loop4: p3 size 54016 extends beyond EOD, truncated [ 55.729435][ T8123] loop4: p1 < > p3 [ 55.730805][ T8123] loop4: p3 size 54016 extends beyond EOD, truncated [ 55.781206][ T7310] udevd[7310]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 55.787834][ T6674] udevd[6674]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 55.828960][ T8127] loop4: detected capacity change from 0 to 512 [ 55.836369][ T8127] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.343: casefold flag without casefold feature [ 55.836941][ T8127] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.343: couldn't read orphan inode 15 (err -117) [ 55.837454][ T8127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.841657][ T8127] /dev/loop4: Can't open blockdev [ 55.940220][ T6536] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 55.941990][ T6536] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.956732][ T6543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.966723][ T8131] fido_id[8131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.987650][ T8133] binder: BINDER_SET_CONTEXT_MGR already set [ 55.987681][ T8133] binder: 8132:8133 ioctl 4018620d 20000040 returned -16 [ 55.988569][ T8133] binder_user_error: 2 callbacks suppressed [ 55.988578][ T8133] binder: 8132:8133 got transaction to invalid handle, 1 [ 55.988589][ T8133] binder_debug: 38 callbacks suppressed [ 55.988594][ T8133] binder: 8132:8133 cannot find target node [ 55.988600][ T8133] binder: 8132:8133 transaction async to 0:0 failed 284/29201/-22, code 0 size 0-0 line 3151 [ 55.988788][ T8133] binder: 8132:8133 BC_FREE_BUFFER no match for buffer at offset ffffffffdf003000 [ 56.063455][ T6603] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.081522][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 56.103196][ T6603] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 56.507925][ T8151] Bluetooth: MGMT ver 1.23 [ 56.546501][ T6603] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 56.590269][ T8159] binder: 8158:8159 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 56.604061][ T8161] FAULT_INJECTION: forcing a failure. [ 56.604061][ T8161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.606294][ T8161] CPU: 0 UID: 0 PID: 8161 Comm: syz.3.355 Not tainted syzkaller #0 PREEMPT [ 56.606318][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 56.606324][ T8161] Call trace: [ 56.606327][ T8161] show_stack+0x2c/0x3c (C) [ 56.606343][ T8161] __dump_stack+0x30/0x40 [ 56.606350][ T8161] dump_stack_lvl+0xd8/0x12c [ 56.606356][ T8161] dump_stack+0x1c/0x28 [ 56.606362][ T8161] should_fail_ex+0x41c/0x594 [ 56.606370][ T8161] should_fail_alloc_page+0xec/0x10c [ 56.606377][ T8161] prepare_alloc_pages+0x1c8/0x50c [ 56.606383][ T8161] __alloc_frozen_pages_noprof+0x134/0x318 [ 56.606388][ T8161] alloc_pages_mpol+0x1e4/0x460 [ 56.606395][ T8161] alloc_pages_noprof+0xe0/0x308 [ 56.606402][ T8161] get_free_pages_noprof+0x1c/0xc4 [ 56.606407][ T8161] kasan_populate_vmalloc+0x48/0x268 [ 56.606412][ T8161] alloc_vmap_area+0xda0/0x13d4 [ 56.606418][ T8161] __get_vm_area_node+0x220/0x330 [ 56.606424][ T8161] __vmalloc_node_range_noprof+0x2d8/0xf8c [ 56.606429][ T8161] __vmalloc_noprof+0xf8/0x154 [ 56.606435][ T8161] bpf_prog_alloc_no_stats+0x5c/0x468 [ 56.606442][ T8161] bpf_prog_alloc+0x48/0x10c [ 56.606448][ T8161] bpf_prog_create+0x90/0x1c0 [ 56.606456][ T8161] cls_bpf_prog_from_ops+0x170/0x2bc [ 56.606462][ T8161] cls_bpf_change+0x53c/0x998 [ 56.606468][ T8161] tc_new_tfilter+0xb90/0x12cc [ 56.606473][ T8161] rtnetlink_rcv_msg+0x664/0x97c [ 56.606479][ T8161] netlink_rcv_skb+0x220/0x3fc [ 56.606484][ T8161] rtnetlink_rcv+0x28/0x38 [ 56.606490][ T8161] netlink_unicast+0x694/0x8c4 [ 56.606495][ T8161] netlink_sendmsg+0x648/0x930 [ 56.606500][ T8161] ____sys_sendmsg+0x490/0x7b8 [ 56.606508][ T8161] ___sys_sendmsg+0x204/0x278 [ 56.606514][ T8161] __sys_sendmmsg+0x1f4/0x548 [ 56.606519][ T8161] __arm64_sys_sendmmsg+0xa0/0xbc [ 56.606524][ T8161] invoke_syscall+0x98/0x254 [ 56.606529][ T8161] el0_svc_common+0x130/0x23c [ 56.606534][ T8161] do_el0_svc+0x48/0x58 [ 56.606539][ T8161] el0_svc+0x5c/0x254 [ 56.606546][ T8161] el0t_64_sync_handler+0x84/0x12c [ 56.606553][ T8161] el0t_64_sync+0x198/0x19c [ 56.627006][ T8163] binder: 8162:8163 tried to acquire reference to desc 0, got 1 instead [ 56.627883][ T8163] binder_alloc: 8162: pid 8162 spamming oneway? 1 buffers allocated for a total size of 4096 [ 56.628000][ T8163] binder_alloc: 8162: pid 8162 spamming oneway? 2 buffers allocated for a total size of 5120 [ 56.628187][ T6603] binder: undelivered TRANSACTION_COMPLETE [ 56.628197][ T6603] binder: undelivered TRANSACTION_COMPLETE [ 56.628204][ T6603] binder: undelivered TRANSACTION_COMPLETE [ 56.632344][ T6603] binder: undelivered transaction 291, process died. [ 56.632360][ T6603] binder: undelivered transaction 292, process died. [ 56.632374][ T6603] binder: undelivered transaction 290, process died. [ 56.719747][ T6649] IPVS: starting estimator thread 0... [ 56.734141][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.357'. [ 56.802692][ T8169] IPVS: using max 69 ests per chain, 165600 per kthread [ 56.813253][ T26] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 56.813285][ T26] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 56.813413][ C0] ------------[ cut here ]------------ [ 56.813422][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 56.813460][ C0] WARNING: CPU: 0 PID: 0 at kernel/workqueue.c:2256 __queue_work+0xe10/0x1210 [ 56.818936][ C0] Modules linked in: [ 56.819616][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT [ 56.820947][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 56.822626][ C0] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 56.823858][ C0] pc : __queue_work+0xe10/0x1210 [ 56.824630][ C0] lr : __queue_work+0xe10/0x1210 [ 56.825376][ C0] sp : ffff800097b47b20 [ 56.826012][ C0] x29: ffff800097b47b70 x28: dfff800000000000 x27: ffff700012f68f84 [ 56.827211][ C0] x26: 0000000000000008 x25: dfff800000000000 x24: ffff0000d8e3d800 [ 56.828402][ C0] x23: ffff0000d8e3d9c0 x22: 0000000000000100 x21: 1fffe0001b1c7b38 [ 56.829638][ C0] x20: ffff800092e27000 x19: ffff0000c7f4c988 x18: 0000000076f75921 [ 56.830787][ C0] x17: 0000000000000000 x16: ffff80008b021140 x15: 0000000000000001 [ 56.831963][ C0] x14: 1ffff000122780f4 x13: 0000000000000000 x12: 0000000000000000 [ 56.833252][ C0] x11: ffff7000122780f5 x10: 0000000000ff0100 x9 : 400eb279710c7000 [ 56.834453][ C0] x8 : 400eb279710c7000 x7 : ffff800080565b6c x6 : 0000000000000000 [ 56.835646][ C0] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000807e0688 [ 56.836947][ C0] x2 : 0000000000000002 x1 : 0000000000000101 x0 : 0000000000000000 [ 56.838217][ C0] Call trace: [ 56.838738][ C0] __queue_work+0xe10/0x1210 (P) [ 56.839491][ C0] delayed_work_timer_fn+0x74/0x90 [ 56.840237][ C0] call_timer_fn+0x1b4/0x818 [ 56.840964][ C0] __run_timer_base+0x54c/0x76c [ 56.841681][ C0] run_timer_softirq+0xcc/0x194 [ 56.842425][ C0] handle_softirqs+0x328/0xc88 [ 56.843157][ C0] __do_softirq+0x14/0x20 [ 56.843835][ C0] ____do_softirq+0x14/0x20 [ 56.844526][ C0] call_on_irq_stack+0x30/0x48 [ 56.845233][ C0] do_softirq_own_stack+0x20/0x2c [ 56.846022][ C0] __irq_exit_rcu+0x1b0/0x478 [ 56.846705][ C0] irq_exit_rcu+0x14/0x84 [ 56.847359][ C0] el1_interrupt+0x40/0x60 [ 56.848054][ C0] el1h_64_irq_handler+0x18/0x24 [ 56.848873][ C0] el1h_64_irq+0x6c/0x70 [ 56.849489][ C0] arch_local_irq_enable+0x8/0xc (P) [ 56.850379][ C0] do_idle+0x1d8/0x454 [ 56.851069][ C0] cpu_startup_entry+0x5c/0x74 [ 56.851843][ C0] rest_init+0x2d8/0x2f4 [ 56.852498][ C0] start_kernel+0x390/0x3e0 [ 56.853218][ C0] __primary_switched+0x8c/0x94 [ 56.853942][ C0] irq event stamp: 332309 [ 56.854563][ C0] hardirqs last enabled at (332308): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 56.856078][ C0] hardirqs last disabled at (332309): [] _raw_spin_lock_irq+0x28/0x70 [ 56.857575][ C0] softirqs last enabled at (331534): [] handle_softirqs+0xaf8/0xc88 [ 56.859023][ C0] softirqs last disabled at (331579): [] __do_softirq+0x14/0x20 [ 56.860388][ C0] ---[ end trace 0000000000000000 ]--- [ 56.932612][ T8172] loop3: detected capacity change from 0 to 32768 [ 56.934249][ T8172] bcachefs: bch2_fs_parse_param() Error parsing option metadata_replicas_required: option_value [ 57.049518][ T8172] loop3: detected capacity change from 0 to 32768 [ 57.113695][ T8172] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 57.113746][ T8172] allowing incompatible features above 0.0: (unknown version) [ 57.113758][ T8172] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 57.113892][ T8172] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 57.113924][ T8172] bcachefs (loop3): initializing new filesystem [ 57.116367][ T8172] bcachefs (loop3): going read-write [ 57.124625][ T8172] bcachefs (loop3): marking superblocks [ 57.151084][ T8172] bcachefs (loop3): initializing freespace [ 57.157283][ T8172] bcachefs (loop3): done initializing freespace [ 57.166237][ T8172] bcachefs (loop3): reading snapshots table [ 57.166290][ T8172] bcachefs (loop3): reading snapshots done [ 57.176887][ T8172] bcachefs (loop3): done starting filesystem [ 57.614553][ T6540] bcachefs (loop3): shutting down [ 57.614581][ T6540] bcachefs (loop3): going read-only [ 57.615097][ T6540] bcachefs (loop3): finished waiting for writes to stop [ 57.653640][ T6540] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 57.694586][ T9] usb 9-1: device descriptor read/8, error -110 [ 57.707791][ T6540] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 57.710524][ T6540] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 57.712970][ T6540] bcachefs (loop3): marking filesystem clean [ 57.722471][ T6540] bcachefs (loop3): shutdown complete [ 58.095523][ T9] usb usb9-port1: attempt power cycle [ 58.653664][ T9] usb usb9-port1: unable to enumerate USB device [ 64.494430][ T2414] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494508][ T2414] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.514047][ T1818] cfg80211: failed to load regulatory.db