last executing test programs: 18.351997093s ago: executing program 1 (id=364): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x100b0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX6q3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//vSA08w==") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r2, 0x4020744f, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1, r3}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="94110000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000a0000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e0000001000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000008000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff220000000000000000000000000000000200000000000000000000005c001400636d"], 0x1194}}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x100b0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) (async) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) (async) ioctl$PPPIOCGFLAGS1(r2, 0x4020744f, 0x0) (async) getpid() (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1, r3}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="94110000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000a0000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e0000001000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000008000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff220000000000000000000000000000000200000000000000000000005c001400636d"], 0x1194}}, 0x0) (async) 18.149360704s ago: executing program 1 (id=367): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xc178, 0x200000) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000004c0)={r2, 0x5, 0x15cf, 0x1}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x2, 0x5, 0x3, 0x7, 0x2, 0x0}) prlimit64(r3, 0x6, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000980)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000d80)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000e80)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0xc) fstat(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000fc0)={0x81, 0x7d, 0x1, {{0x0, 0x6b, 0xd, 0x7, {0x8, 0x4}, 0x2000000, 0xc826, 0x9, 0x0, 0x12, '/dev/input/mouse#\x00', 0x12, '/dev/input/mouse#\x00', 0x2, '(]', 0x12, '/dev/input/mouse#\x00'}, 0x1, '\x00', r4, r5, r6}}, 0x81) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) read$FUSE(r7, &(0x7f00000010c0)={0x2020}, 0x2020) r8 = socket$pppl2tp(0x18, 0x1, 0x1) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000003100), &(0x7f0000003140)='./file0\x00', 0x8, 0x3) io_setup(0x8, &(0x7f0000003180)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000031c0)) read$FUSE(r1, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$pagemap(r9, &(0x7f00000052c0)) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000005380), 0x800, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000053c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x80, 0x3, {0x0, 0x2710}, {0x2, 0xc, 0xf, 0x1, 0x8, 0xf, "77b6c293"}, 0x0, 0x1, {&(0x7f0000005300)=[{0xfffffff0, 0x9, {0x1000}, 0x401}, {0x7, 0x9, {0x1}, 0x7}]}, 0x1, 0x0, r10}) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) write$P9_RSTAT(r10, &(0x7f0000005440)={0x49, 0x7d, 0x1, {0x0, 0x42, 0x7, 0x90e, {0x2, 0x0, 0x4}, 0x40000, 0x6, 0x2, 0x401, 0xa, '/dev/fuse\x00', 0x0, '', 0x2, '(]', 0x3, '}&%'}}, 0x49) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000055c0)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005580)={&(0x7f0000005500)={0x44, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x28004081) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000005600)={0x2, 'veth0_to_team\x00', {0x80}, 0xffff}) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0x541c, &(0x7f0000005640)) connect$netrom(0xffffffffffffffff, &(0x7f0000005740)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 18.088210262s ago: executing program 1 (id=368): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x1}}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000480)={{0x5}, 'port1\x00', 0x1, 0x801, 0x7ff, 0x9, 0x7, 0x4, 0x8, 0x0, 0x3, 0xd7}) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="00ea5bd69d713e222cd60cd11db90800000000000000ea4152adefefea99eade61cbfd569fa11db9f8c2d61957d80907712ce79fe723343130f5eafee47902d3b8014bb5e10ca91c06696ca639c49955f903a28ae218f979031f0499c26c4a36805b879ab5f3c771a4cc01f5abe4cacf00dd07654fc90e9149625a8ebc69f52a22b95e4a624b6fd4268932776a7d1d41e1957efb88618f6905d2079bf5476b50bae43c3bc8ce74fe"], 0x1, 0x224, &(0x7f0000000000)="$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") 18.036141712s ago: executing program 1 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$eJzs28tO4nAUx/FfoVyGuTHDXJLJLGY1mc1QwAR1h49CoBJiUSJuICbqe7hx58PJwp0rMZS2SmWFtEX5fjacHydND4s/nBAQgI3V0B8ZMpSdht/54lnJSHokADGZeI/3EwCbJ32X9AQAkjHek/qSbm5PW0pn/bXgp19M+w2/n8o92x/GF9Iv0+sbeb0L7xdX0l//eqOw8PpC0H+/sP9PRe/+H/RRn/RZRX3RV5W8fju4/scLtyEAADaDoXI4zz2R0n7XsStBzri5qoI5y1k314L+LG8FOefmcuvIaUf4KgAsI6Xy9dMcPv/p0Pk3vfMP4PUbDEcHTcexj2Mq/O8HYr3pagqdr8UYKykyWosxKBYUptZijITfmABEzjrp9a3BcPS/22t27I59WK/V67uVne2q5S7+1vz6D+ANefzQT3oSAAAAAAAAAAAAAACwrG/6nvQIAAAAAGIS2b+IDEmX4pfFAAAAAAAAAAAAAAAAAABE4CEAAP//gNgaag==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") fsetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='btrfs.n'], 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x2, 0x400}}, './file0\x00'}) recvmsg(r3, &(0x7f0000000d00)={&(0x7f0000000840)=@alg, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/158, 0x9e}, {&(0x7f0000000980)=""/148, 0x94}, {&(0x7f0000000a40)=""/222, 0xde}, {&(0x7f0000000b40)=""/9, 0x9}, {&(0x7f0000000b80)=""/17, 0x11}], 0x5, &(0x7f0000000c40)=""/133, 0x85}, 0x40010000) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009965, r1, 0x0) getgroups(0x7, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000d40)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0xfffffffffffffff7}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'minix\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/i2c-#\x00'}}]}}, 0x0, 0x0, &(0x7f0000000700)="39a987ac63be3b6e9cfb4d3e594546d2a6788ea562f7352dbda1dd6c6d0d0aec16cc398b7e49c8e0446c7bc1c073bf1ede8517961d5e905651a4112b94e5d8565f59782be429971c28e7a4052dc1945f85711ac229b3d96e03cc9096869155e1e683bb660c6cabffe1675bfd0c3422ab14e88189399cc6bd5ce1912b4a6d27421d18128799db0bdaf8cd3fbffb686e9b1c7509db7108787d643bf40435bda40fd3c3782344d64184e91eaac1e497b925ac274d3f399664d0d9f6e028f800e179182760559ded1df489ddf13cd5e198bf8988fded286a7fa96a1cb05300334da6979c5d36ec929e42f9edc0") ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r1, 0x1, 0x8000, 0x1000}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="2800000004000000000000000000000001000000"], 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000020a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0xc801, 0x0, 0xffffffffffffffff}], 0x1}) 17.128969247s ago: executing program 1 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000068000903000000000000720a0a00000000000000050004"], 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005b80)={0x6c, r2, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x32, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac, {}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x0, @random=0x6, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xd5, 0xb4, 0x6}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x6c}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x501, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40400d4}, 0x8800) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x600010}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fddbdf257f0000000a00340001010101010100000a00f500d7cb8a64dcde000019a8bf46d7b2500a00f5005a0000"], 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x80) 16.785075221s ago: executing program 1 (id=387): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffe, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) readv(r0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/108, 0x6c}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000100)={0x0, 0xfac7, 0x200}) unshare(0x2c020400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x4}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/uts\x00') r2 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB='0x00000000000000d5:0x0000000000000008:0x000000000000000e:0x0000000000000081:0x000000003a618de8:0x00000000000000c0:0x0000000000000008:0x0000000000000800/00000000000000000079 /s'], 0xc7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x402, &(0x7f0000000000)={0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1, 0x18000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 16.705139934s ago: executing program 32 (id=387): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffe, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) readv(r0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/108, 0x6c}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000100)={0x0, 0xfac7, 0x200}) unshare(0x2c020400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x4}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/uts\x00') r2 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB='0x00000000000000d5:0x0000000000000008:0x000000000000000e:0x0000000000000081:0x000000003a618de8:0x00000000000000c0:0x0000000000000008:0x0000000000000800/00000000000000000079 /s'], 0xc7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x402, &(0x7f0000000000)={0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1, 0x18000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.58534934s ago: executing program 4 (id=560): socket$inet6(0xa, 0x80002, 0x88) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 4.385295759s ago: executing program 4 (id=565): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 4.269260995s ago: executing program 3 (id=571): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x3010840, &(0x7f00000001c0)=ANY=[], 0x1, 0x28a, &(0x7f00000005c0)="$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") capset(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) 4.195244601s ago: executing program 3 (id=573): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000002c0)='\x00', 0x1, 0x600}]) 3.973362637s ago: executing program 4 (id=578): sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.972911465s ago: executing program 4 (id=581): personality(0x48bcf18c26c9a27e) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 3.945473377s ago: executing program 3 (id=582): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3000e895) recvfrom(r0, 0x0, 0x2e, 0x2, 0x0, 0x0) 3.84114489s ago: executing program 3 (id=586): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) memfd_secret(0x80000) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f00000006c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c757466383d312c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d77696e6e742c005a086502454ede48cd0c582ac337a877be0c36a8e60d572dbe625e0680a225abe4d4fc79e83de86dce78be26dba8f6ff0abfb9c2fba30a14b3b206ad905e994c27e6d4fc5d74f88b749758f85a07efcf3e17bd78aad46a325ec58b65332fe45ac5db6e722db0a32946415f0b3403d53ad233d1fe2593f1d4fe07041a0091b2f43c1e87fa638a217f4108c00d47c229ae1229250e"], 0x1, 0x373, &(0x7f0000000340)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x10001) 3.173978236s ago: executing program 3 (id=596): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x3a, &(0x7f0000000bc0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @loopback}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}, 0x0) 3.037097717s ago: executing program 3 (id=598): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) write$binfmt_misc(r3, &(0x7f0000000240)="aef9fea6cc89e5d9", 0x8) 2.212852641s ago: executing program 4 (id=612): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf6bf531d9ec214627c11430c1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000006180)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000004c0)="a9b5b32c8dfe455e834e8d4875fb27de64", 0x11}], 0x1, 0x0, 0x0, 0x440d9}], 0x1, 0x4000115) 2.170825754s ago: executing program 4 (id=613): r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffffffffffffc, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) splice(r4, 0x0, r3, 0x0, 0xfff, 0x5) write$P9_RVERSION(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) write$P9_RWSTAT(r5, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) 1.692818809s ago: executing program 5 (id=627): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) close_range(r0, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x10, 0xad, 0x7fc00000}]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x200c050, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.495366969s ago: executing program 0 (id=631): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x42, 0x7f, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa8000aaaaaabb86dd6a000000004811"], 0x0) 1.425539999s ago: executing program 0 (id=632): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xc0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 1.425136801s ago: executing program 0 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) 838.86365ms ago: executing program 5 (id=636): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000a000000852000008859010095"], &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 753.540236ms ago: executing program 5 (id=637): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x28, 0xffffffffffffffda, 0x3, {{0xc467, 0x4fcd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x1f, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x79) 753.29986ms ago: executing program 5 (id=638): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) sendmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)="74e46f65751938126ed7c61b00c83a28131a99024772fb4beeb1567060c73941de279beabc993388aecdccd7271ace80a4c3cf9eb9739f6e1bc2600735fdc0c38750cf9d1d4ba35e17154568945ca7fe39bb206a0cf7604118", 0x59}], 0x1}}], 0x1, 0x4000010) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 715.74473ms ago: executing program 5 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc42, 0x11, 0x15}, 0x18) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 695.61826ms ago: executing program 5 (id=640): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x400}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x100, 0x4, 0x4, 0x7fff, 0xb, "28a403914865b89c1a6629238f099d2d0fb0d9"}) 517.454017ms ago: executing program 0 (id=641): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x0, 0x101, 0x4}, 0x7fffffff, 0x0, 0x2000008, 0x9, 0x9, 0x18, 0xb, 0x2e, 0x2, 0x5, {0x10001, 0x7fff, 0xffffffff, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c850}, 0x800) 473.130932ms ago: executing program 0 (id=643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={0x0}}, 0x20) 373.402737ms ago: executing program 2 (id=645): syz_mount_image$fuse(0x0, &(0x7f0000002140)='./file0\x00', 0x2010000, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x108) 373.239999ms ago: executing program 0 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000040), &(0x7f0000000400)) memfd_create(0x0, 0x6) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0xfffffffe, 0x9], 0x2) io_uring_enter(r0, 0x1e61, 0x9296, 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x8000000) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 333.589552ms ago: executing program 2 (id=647): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 250.301902ms ago: executing program 2 (id=648): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4(r1, 0x0, 0x0, 0x0) 133.588543ms ago: executing program 2 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000aa80)={0x0, 0x0, &(0x7f000000aa40)={&(0x7f00000005c0)=@newtaction={0x9c, 0x30, 0x1, 0x70bd26, 0xa5dfdbfb, {}, [{0x88, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x4, 0x0, 0x18000}, @rand_addr=0x64010101, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c044}, 0x2000c070) 130.414505ms ago: executing program 2 (id=650): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000001c0)="d7", 0x1}], 0x1}}], 0x1, 0x20044040) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) 0s ago: executing program 2 (id=651): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1207, &(0x7f0000000440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0xc4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000400)) kernel console output (not intermixed with test programs): 148832][ T7041] BTRFS info (device loop0): force clearing of disk cache [ 51.148915][ T7041] BTRFS info (device loop0): enabling auto defrag [ 51.148990][ T7041] BTRFS info (device loop0): max_inline set to 0 [ 51.221465][ T7079] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 51.353425][ T13] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 51.424519][ T7041] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.80'. [ 51.480143][ T6578] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 51.513035][ T6581] BTRFS info (device loop0): last unmount of filesystem 3b570481-0c39-47be-b22a-e9087d0a5e3b [ 52.646442][ T7113] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.93'. [ 52.694068][ T7119] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 52.747445][ T7128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.747516][ T7128] IPv6: NLM_F_CREATE should be set when creating new route [ 52.747540][ T7128] IPv6: NLM_F_CREATE should be set when creating new route [ 52.748036][ T7128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.869280][ T7141] tmpfs: Too few inodes for current use [ 52.939634][ T7143] set_capacity_and_notify: 9 callbacks suppressed [ 52.945672][ T7143] loop4: detected capacity change from 0 to 128 [ 52.958201][ T7135] loop1: detected capacity change from 0 to 40427 [ 52.994039][ T7135] F2FS-fs (loop1): build fault injection rate: 1 [ 52.994074][ T7135] F2FS-fs (loop1): build fault injection type: 0x77 [ 52.994368][ T7135] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x26e0/0x5c24 [ 53.380709][ T7162] capability: warning: `syz.2.109' uses 32-bit capabilities (legacy support in use) [ 53.383284][ T7162] capability: warning: `syz.2.109' uses deprecated v2 capabilities in a way that may be insecure [ 53.426680][ T7145] loop3: detected capacity change from 0 to 65536 [ 53.453650][ T7145] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 53.481245][ T7145] XFS (loop3): Ending clean mount [ 53.678811][ T7180] loop2: detected capacity change from 0 to 40427 [ 53.682742][ T7180] F2FS-fs (loop2): Image doesn't support compression [ 53.682988][ T7180] F2FS-fs (loop2): build fault injection rate: 684 [ 53.683003][ T7180] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 53.683350][ T7180] F2FS-fs (loop2): invalid crc value [ 53.709431][ T7180] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 53.711674][ T7180] F2FS-fs (loop2): Start checkpoint disabled! [ 53.714872][ T7180] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 53.715367][ T7180] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 53.734164][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 53.736742][ T7196] loop1: detected capacity change from 0 to 1024 [ 53.830646][ T7193] loop0: detected capacity change from 0 to 2048 [ 53.831004][ T7193] udf: Unknown parameter '00000000000000000005ÿçòz§ìÖ' [ 53.840356][ T13] kworker/u8:1: attempt to access beyond end of device [ 53.840356][ T13] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.847312][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT [ 53.847337][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 53.847343][ T13] Workqueue: writeback wb_workfn (flush-7:2) [ 53.847363][ T13] Call trace: [ 53.847367][ T13] show_stack+0x2c/0x3c (C) [ 53.847380][ T13] __dump_stack+0x30/0x40 [ 53.847387][ T13] dump_stack_lvl+0xd8/0x12c [ 53.847393][ T13] dump_stack+0x1c/0x28 [ 53.847399][ T13] f2fs_handle_critical_error+0x34c/0x4b8 [ 53.847407][ T13] f2fs_stop_checkpoint+0x5c/0x70 [ 53.847414][ T13] f2fs_write_end_io+0x770/0xa78 [ 53.847419][ T13] bio_endio+0x8d4/0x910 [ 53.847426][ T13] submit_bio_noacct+0xd44/0x186c [ 53.847432][ T13] submit_bio+0x3b4/0x550 [ 53.847437][ T13] f2fs_submit_write_bio+0x124/0x324 [ 53.847442][ T13] __submit_merged_bio+0x224/0x6d4 [ 53.847447][ T13] __submit_merged_write_cond+0x250/0x4ac [ 53.847452][ T13] f2fs_write_data_pages+0x1dd4/0x2878 [ 53.847457][ T13] do_writepages+0x270/0x468 [ 53.847465][ T13] __writeback_single_inode+0x144/0x16b8 [ 53.847471][ T13] writeback_sb_inodes+0x73c/0x16b4 [ 53.847477][ T13] wb_writeback+0x3b4/0xd70 [ 53.847482][ T13] wb_workfn+0x320/0xdc0 [ 53.847487][ T13] process_one_work+0x7c0/0x1558 [ 53.847494][ T13] worker_thread+0x958/0xed8 [ 53.847500][ T13] kthread+0x5fc/0x75c [ 53.847505][ T13] ret_from_fork+0x10/0x20 [ 53.870883][ T13] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 53.972795][ T7215] FAULT_INJECTION: forcing a failure. [ 53.972795][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 53.982078][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.1.121 Not tainted syzkaller #0 PREEMPT [ 53.982103][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 53.982109][ T7215] Call trace: [ 53.982113][ T7215] show_stack+0x2c/0x3c (C) [ 53.982139][ T7215] __dump_stack+0x30/0x40 [ 53.982149][ T7215] dump_stack_lvl+0xd8/0x12c [ 53.982156][ T7215] dump_stack+0x1c/0x28 [ 53.982162][ T7215] should_fail_ex+0x41c/0x594 [ 53.982169][ T7215] should_failslab+0xc0/0x128 [ 53.982177][ T7215] __kvmalloc_node_noprof+0x168/0x8d8 [ 53.982183][ T7215] bpf_stack_liveness_init+0x30/0x94 [ 53.982190][ T7215] bpf_check+0x10194/0x159f0 [ 53.982196][ T7215] bpf_prog_load+0xf44/0x14b8 [ 53.982202][ T7215] __sys_bpf+0x45c/0x638 [ 53.982207][ T7215] __arm64_sys_bpf+0x80/0x98 [ 53.982212][ T7215] invoke_syscall+0x98/0x254 [ 53.982218][ T7215] el0_svc_common+0xe8/0x23c [ 53.982223][ T7215] do_el0_svc+0x48/0x58 [ 53.982228][ T7215] el0_svc+0x5c/0x26c [ 53.982235][ T7215] el0t_64_sync_handler+0x84/0x12c [ 53.982241][ T7215] el0t_64_sync+0x198/0x19c [ 54.161558][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.123'. [ 54.244187][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 54.246359][ T7237] tc_dump_action: action bad kind [ 54.563496][ T7210] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0xf0, xfs_inobt block 0x8008 [ 54.563536][ T7210] XFS (loop3): Unmount and run xfs_repair [ 54.563556][ T7210] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 54.563563][ T7210] 00000000: 49 41 42 33 00 00 00 00 ff ff ff ff ff ff ff ff IAB3............ [ 54.563570][ T7210] 00000010: 00 00 00 00 00 00 80 08 00 00 00 00 00 00 02 00 ................ [ 54.563575][ T7210] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 54.563580][ T7210] 00000030: 00 00 00 01 e5 03 51 91 00 00 00 00 00 00 00 00 ......Q......... [ 54.563585][ T7210] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.563590][ T7210] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.563595][ T7210] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.563600][ T7210] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.563679][ T7210] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x8008 len 2 error 74 [ 54.587007][ T7210] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4e0/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 54.587069][ T7210] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 54.588647][ T7231] loop0: detected capacity change from 0 to 32768 [ 54.590511][ T7231] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.125 (7231) [ 54.601446][ T7239] loop1: detected capacity change from 0 to 32768 [ 54.607512][ T7231] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 54.607577][ T7231] BTRFS info (device loop0): using blake2b (blake2b-256-lib) checksum algorithm [ 54.609566][ T7239] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.126 (7239) [ 54.618327][ T7239] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.620411][ T7239] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 54.622269][ T7239] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 54.637655][ T7246] loop2: detected capacity change from 0 to 32768 [ 54.667023][ T7246] JBD2: Ignoring recovery information on journal [ 54.720219][ T7246] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 54.732347][ T6578] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 54.755631][ T7231] BTRFS info (device loop0): enabling ssd optimizations [ 54.755660][ T7231] BTRFS info (device loop0): turning on async discard [ 54.755668][ T7231] BTRFS info (device loop0): enabling free space tree [ 54.755677][ T7231] BTRFS info (device loop0): use lzo compression, level 1 [ 54.789392][ T7239] BTRFS info (device loop1): rebuilding free space tree [ 54.793319][ T7231] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 54.815922][ T6582] ocfs2: Unmounting device (7,2) on (node local) [ 54.821394][ T7239] BTRFS info (device loop1): disabling free space tree [ 54.821541][ T7239] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 54.821557][ T7239] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 54.827667][ T7239] BTRFS info (device loop1): enabling ssd optimizations [ 54.827697][ T7239] BTRFS info (device loop1): enabling disk space caching [ 54.827719][ T7239] BTRFS info (device loop1): force clearing of disk cache [ 54.827726][ T7239] BTRFS info (device loop1): enabling auto defrag [ 54.827732][ T7239] BTRFS info (device loop1): max_inline set to 0 [ 54.891450][ T6581] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 54.996011][ T6577] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 55.004848][ T7290] loop3: detected capacity change from 0 to 16 [ 55.084471][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 55.106510][ T7290] erofs (device loop3): mounted with root inode @ nid 36. [ 55.164681][ T7296] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.130 (7296) [ 55.171265][ T7296] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 55.173164][ T7296] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 55.175068][ T7296] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 55.271873][ T7308] FAULT_INJECTION: forcing a failure. [ 55.271873][ T7308] name failslab, interval 1, probability 0, space 0, times 0 [ 55.271917][ T7308] CPU: 1 UID: 0 PID: 7308 Comm: syz.3.133 Not tainted syzkaller #0 PREEMPT [ 55.271933][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 55.271941][ T7308] Call trace: [ 55.271945][ T7308] show_stack+0x2c/0x3c (C) [ 55.271960][ T7308] __dump_stack+0x30/0x40 [ 55.271969][ T7308] dump_stack_lvl+0xd8/0x12c [ 55.271975][ T7308] dump_stack+0x1c/0x28 [ 55.271980][ T7308] should_fail_ex+0x41c/0x594 [ 55.271987][ T7308] should_failslab+0xc0/0x128 [ 55.271995][ T7308] __kvmalloc_node_noprof+0x168/0x8d8 [ 55.272001][ T7308] compute_postorder+0x114/0x748 [ 55.272008][ T7308] bpf_check+0x10178/0x159f0 [ 55.272014][ T7308] bpf_prog_load+0xf44/0x14b8 [ 55.272020][ T7308] __sys_bpf+0x45c/0x638 [ 55.272025][ T7308] __arm64_sys_bpf+0x80/0x98 [ 55.272030][ T7308] invoke_syscall+0x98/0x254 [ 55.272036][ T7308] el0_svc_common+0xe8/0x23c [ 55.272041][ T7308] do_el0_svc+0x48/0x58 [ 55.272047][ T7308] el0_svc+0x5c/0x26c [ 55.272054][ T7308] el0t_64_sync_handler+0x84/0x12c [ 55.272060][ T7308] el0t_64_sync+0x198/0x19c [ 55.301473][ T5055] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xcb5f9e49ac6f5a26 found 0xcd754095b1b8ecbe level 0 [ 55.304242][ T7296] BTRFS error (device loop0): failed to load root extent [ 55.322048][ T7296] BTRFS error (device loop0): open_ctree failed: -5 [ 55.343054][ T7316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.352446][ T7296] Bluetooth: MGMT ver 1.23 [ 55.416698][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 55.446462][ T7316] syz.4.134 uses obsolete (PF_INET,SOCK_PACKET) [ 55.486256][ T7316] syzkaller1: entered promiscuous mode [ 55.486294][ T7316] syzkaller1: entered allmulticast mode [ 55.991995][ T7339] netlink: 124 bytes leftover after parsing attributes in process `syz.2.139'. [ 55.992029][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 56.068307][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 56.072303][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 56.133545][ T7345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.140'. [ 56.166941][ T6585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.222864][ T7355] FAULT_INJECTION: forcing a failure. [ 56.222864][ T7355] name failslab, interval 1, probability 0, space 0, times 0 [ 56.225323][ T7355] CPU: 0 UID: 0 PID: 7355 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT [ 56.225348][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 56.225355][ T7355] Call trace: [ 56.225359][ T7355] show_stack+0x2c/0x3c (C) [ 56.225379][ T7355] __dump_stack+0x30/0x40 [ 56.225388][ T7355] dump_stack_lvl+0xd8/0x12c [ 56.225395][ T7355] dump_stack+0x1c/0x28 [ 56.225401][ T7355] should_fail_ex+0x41c/0x594 [ 56.225407][ T7355] should_failslab+0xc0/0x128 [ 56.225415][ T7355] __kvmalloc_node_noprof+0x168/0x8d8 [ 56.225422][ T7355] compute_scc+0xc4/0x8bc [ 56.225428][ T7355] bpf_check+0x10fd8/0x159f0 [ 56.225434][ T7355] bpf_prog_load+0xf44/0x14b8 [ 56.225440][ T7355] __sys_bpf+0x45c/0x638 [ 56.225445][ T7355] __arm64_sys_bpf+0x80/0x98 [ 56.225450][ T7355] invoke_syscall+0x98/0x254 [ 56.225456][ T7355] el0_svc_common+0xe8/0x23c [ 56.225461][ T7355] do_el0_svc+0x48/0x58 [ 56.225467][ T7355] el0_svc+0x5c/0x26c [ 56.225474][ T7355] el0t_64_sync_handler+0x84/0x12c [ 56.225479][ T7355] el0t_64_sync+0x198/0x19c [ 56.566633][ T7369] (syz.1.150,7369,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 56.569099][ T7369] (syz.1.150,7369,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 56.572011][ T7369] (syz.1.150,7369,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 56.587752][ T7369] (syz.1.150,7369,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 56.599218][ T7369] JBD2: Ignoring recovery information on journal [ 56.624745][ T7380] hfs: hfs: Invalid key length: 94 [ 56.640187][ T7379] kthread_run failed with err -4 [ 56.648923][ T7369] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 56.666855][ T7387] EXT4-fs: Ignoring removed bh option [ 56.694142][ T6582] hfs: node 4:3 still has 1 user(s)! [ 56.750449][ T7369] (syz.1.150,7369,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2a7897a5, computed 0xda902c08. Applying ECC. [ 56.753016][ T7369] (syz.1.150,7369,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2a7897a5, computed 0x9b5b40a8 [ 56.756728][ T7369] (syz.1.150,7369,0):ocfs2_search_chain:1818 ERROR: status = -5 [ 56.756828][ T7369] (syz.1.150,7369,0):ocfs2_search_chain:1941 ERROR: status = -5 [ 56.756846][ T7369] (syz.1.150,7369,0):ocfs2_claim_suballoc_bits:2021 ERROR: status = -5 [ 56.756863][ T7369] (syz.1.150,7369,0):ocfs2_claim_suballoc_bits:2074 ERROR: status = -5 [ 56.756880][ T7369] (syz.1.150,7369,0):ocfs2_claim_new_inode:2309 ERROR: status = -5 [ 56.756895][ T7369] (syz.1.150,7369,0):ocfs2_claim_new_inode:2324 ERROR: status = -5 [ 56.756910][ T7369] (syz.1.150,7369,0):ocfs2_mknod_locked:642 ERROR: status = -5 [ 56.756923][ T7369] (syz.1.150,7369,0):ocfs2_symlink:1957 ERROR: status = -5 [ 56.783673][ T7394] ocfs2: Unknown parameter '00000000000000000000170' [ 56.784340][ T7369] (syz.1.150,7369,1):ocfs2_symlink:2081 ERROR: status = -5 [ 56.791138][ T7387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.847138][ T7369] (syz.1.150,7369,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2a7897a5, computed 0xda902c08. Applying ECC. [ 56.847175][ T7369] (syz.1.150,7369,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2a7897a5, computed 0x9b5b40a8 [ 56.847188][ T7369] (syz.1.150,7369,1):ocfs2_search_chain:1818 ERROR: status = -5 [ 56.847199][ T7369] (syz.1.150,7369,1):ocfs2_search_chain:1941 ERROR: status = -5 [ 56.847206][ T7369] (syz.1.150,7369,1):ocfs2_claim_suballoc_bits:2021 ERROR: status = -5 [ 56.847213][ T7369] (syz.1.150,7369,1):ocfs2_claim_suballoc_bits:2074 ERROR: status = -5 [ 56.847220][ T7369] (syz.1.150,7369,1):ocfs2_claim_new_inode:2309 ERROR: status = -5 [ 56.847227][ T7369] (syz.1.150,7369,1):ocfs2_claim_new_inode:2324 ERROR: status = -5 [ 56.847234][ T7369] (syz.1.150,7369,1):ocfs2_mknod_locked:642 ERROR: status = -5 [ 56.847240][ T7369] (syz.1.150,7369,1):ocfs2_mknod:389 ERROR: status = -5 [ 56.847602][ T7369] (syz.1.150,7369,1):ocfs2_mknod:506 ERROR: status = -5 [ 56.847612][ T7369] (syz.1.150,7369,1):ocfs2_create:679 ERROR: status = -5 [ 56.899100][ T6581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.966264][ T6577] ocfs2: Unmounting device (7,1) on (node local) [ 57.377422][ T7409] FAULT_INJECTION: forcing a failure. [ 57.377422][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 57.379581][ T7409] CPU: 0 UID: 0 PID: 7409 Comm: syz.3.159 Not tainted syzkaller #0 PREEMPT [ 57.379599][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 57.379605][ T7409] Call trace: [ 57.379608][ T7409] show_stack+0x2c/0x3c (C) [ 57.379623][ T7409] __dump_stack+0x30/0x40 [ 57.379630][ T7409] dump_stack_lvl+0xd8/0x12c [ 57.379636][ T7409] dump_stack+0x1c/0x28 [ 57.379641][ T7409] should_fail_ex+0x41c/0x594 [ 57.379648][ T7409] should_failslab+0xc0/0x128 [ 57.379656][ T7409] __kvmalloc_node_noprof+0x168/0x8d8 [ 57.379661][ T7409] compute_scc+0xe0/0x8bc [ 57.379668][ T7409] bpf_check+0x10fd8/0x159f0 [ 57.379675][ T7409] bpf_prog_load+0xf44/0x14b8 [ 57.379680][ T7409] __sys_bpf+0x45c/0x638 [ 57.379685][ T7409] __arm64_sys_bpf+0x80/0x98 [ 57.379690][ T7409] invoke_syscall+0x98/0x254 [ 57.379696][ T7409] el0_svc_common+0xe8/0x23c [ 57.379701][ T7409] do_el0_svc+0x48/0x58 [ 57.379707][ T7409] el0_svc+0x5c/0x26c [ 57.379714][ T7409] el0t_64_sync_handler+0x84/0x12c [ 57.379720][ T7409] el0t_64_sync+0x198/0x19c [ 57.760536][ T7419] f2fs: Unknown parameter '00000000000000000000' [ 57.772272][ T7403] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 57.791831][ T7403] XFS (loop1): Ending clean mount [ 57.802780][ T7403] XFS (loop1): Quotacheck needed: Please wait. [ 57.835050][ T7403] XFS (loop1): Quotacheck: Done. [ 57.859146][ T6577] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 57.901458][ T7421] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.166 (7421) [ 57.976778][ T7421] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 57.978527][ T7421] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 58.057854][ T7457] FAULT_INJECTION: forcing a failure. [ 58.057854][ T7457] name failslab, interval 1, probability 0, space 0, times 0 [ 58.060187][ T7457] CPU: 1 UID: 0 PID: 7457 Comm: syz.0.171 Not tainted syzkaller #0 PREEMPT [ 58.060203][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 58.060209][ T7457] Call trace: [ 58.060213][ T7457] show_stack+0x2c/0x3c (C) [ 58.060231][ T7457] __dump_stack+0x30/0x40 [ 58.060241][ T7457] dump_stack_lvl+0xd8/0x12c [ 58.060248][ T7457] dump_stack+0x1c/0x28 [ 58.060254][ T7457] should_fail_ex+0x41c/0x594 [ 58.060261][ T7457] should_failslab+0xc0/0x128 [ 58.060269][ T7457] __kvmalloc_node_noprof+0x168/0x8d8 [ 58.060275][ T7457] compute_scc+0xfc/0x8bc [ 58.060282][ T7457] bpf_check+0x10fd8/0x159f0 [ 58.060288][ T7457] bpf_prog_load+0xf44/0x14b8 [ 58.060293][ T7457] __sys_bpf+0x45c/0x638 [ 58.060299][ T7457] __arm64_sys_bpf+0x80/0x98 [ 58.060303][ T7457] invoke_syscall+0x98/0x254 [ 58.060310][ T7457] el0_svc_common+0xe8/0x23c [ 58.060315][ T7457] do_el0_svc+0x48/0x58 [ 58.060320][ T7457] el0_svc+0x5c/0x26c [ 58.060328][ T7457] el0t_64_sync_handler+0x84/0x12c [ 58.060333][ T7457] el0t_64_sync+0x198/0x19c [ 58.084195][ T7421] BTRFS info (device loop2): checking UUID tree [ 58.086640][ T7421] BTRFS info (device loop2): enabling ssd optimizations [ 58.086674][ T7421] BTRFS info (device loop2): turning on async discard [ 58.086685][ T7421] BTRFS info (device loop2): enabling free space tree [ 58.086696][ T7421] BTRFS info (device loop2): enabling auto defrag [ 58.086708][ T7421] BTRFS info (device loop2): max_inline set to 0 [ 58.093736][ T7439] set_capacity_and_notify: 11 callbacks suppressed [ 58.093901][ T7439] loop1: detected capacity change from 0 to 40427 [ 58.196342][ T6582] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 58.276996][ T7456] loop3: detected capacity change from 0 to 32768 [ 58.282737][ T7468] loop0: detected capacity change from 0 to 4096 [ 58.289989][ T7468] ntfs3(loop0): ino=3, Correct links count -> 2. [ 58.687562][ T7482] tipc: Enabling of bearer rejected, failed to enable media [ 58.801332][ T7500] FAULT_INJECTION: forcing a failure. [ 58.801332][ T7500] name failslab, interval 1, probability 0, space 0, times 0 [ 58.801608][ T7500] CPU: 0 UID: 0 PID: 7500 Comm: syz.4.185 Not tainted syzkaller #0 PREEMPT [ 58.801622][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 58.801629][ T7500] Call trace: [ 58.801634][ T7500] show_stack+0x2c/0x3c (C) [ 58.801650][ T7500] __dump_stack+0x30/0x40 [ 58.801657][ T7500] dump_stack_lvl+0xd8/0x12c [ 58.801663][ T7500] dump_stack+0x1c/0x28 [ 58.801669][ T7500] should_fail_ex+0x41c/0x594 [ 58.801676][ T7500] should_failslab+0xc0/0x128 [ 58.801683][ T7500] __kvmalloc_node_noprof+0x168/0x8d8 [ 58.801689][ T7500] compute_scc+0xfc/0x8bc [ 58.801696][ T7500] bpf_check+0x10fd8/0x159f0 [ 58.801702][ T7500] bpf_prog_load+0xf44/0x14b8 [ 58.801708][ T7500] __sys_bpf+0x45c/0x638 [ 58.801713][ T7500] __arm64_sys_bpf+0x80/0x98 [ 58.801718][ T7500] invoke_syscall+0x98/0x254 [ 58.801724][ T7500] el0_svc_common+0xe8/0x23c [ 58.801729][ T7500] do_el0_svc+0x48/0x58 [ 58.801734][ T7500] el0_svc+0x5c/0x26c [ 58.801741][ T7500] el0t_64_sync_handler+0x84/0x12c [ 58.801747][ T7500] el0t_64_sync+0x198/0x19c [ 58.909333][ T7508] loop0: detected capacity change from 0 to 128 [ 58.911129][ T7508] FAT-fs (loop0): bogus number of reserved sectors [ 58.913851][ T7508] FAT-fs (loop0): Can't find a valid FAT filesystem [ 59.225156][ T7515] loop2: detected capacity change from 0 to 512 [ 59.247595][ T7515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.317514][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.398657][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 59.398695][ T7456] netlink: 152 bytes leftover after parsing attributes in process `syz.3.173'. [ 59.438736][ T7522] loop2: detected capacity change from 0 to 1024 [ 59.477435][ T3135] hfsplus: b-tree write err: -5, ino 4 [ 59.558834][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 59.578188][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 59.585960][ T7528] netlink: 'syz.3.192': attribute type 7 has an invalid length. [ 59.587461][ T7528] netlink: 'syz.3.192': attribute type 8 has an invalid length. [ 59.596744][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.597304][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.605769][ T7528] bridge0: entered allmulticast mode [ 59.628389][ T7528] bridge_slave_1: left allmulticast mode [ 59.629800][ T7528] bridge_slave_1: left promiscuous mode [ 59.630461][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.641300][ T7528] bridge_slave_0: left allmulticast mode [ 59.643043][ T7528] bridge_slave_0: left promiscuous mode [ 59.644814][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.894235][ T7537] loop4: detected capacity change from 0 to 256 [ 59.896464][ T7537] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 60.088951][ T7539] loop0: detected capacity change from 0 to 256 [ 60.089452][ T7539] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 61.009416][ T7543] FAULT_INJECTION: forcing a failure. [ 61.009416][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 61.009451][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.3.198 Not tainted syzkaller #0 PREEMPT [ 61.009460][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 61.009464][ T7543] Call trace: [ 61.009467][ T7543] show_stack+0x2c/0x3c (C) [ 61.009480][ T7543] __dump_stack+0x30/0x40 [ 61.009487][ T7543] dump_stack_lvl+0xd8/0x12c [ 61.009493][ T7543] dump_stack+0x1c/0x28 [ 61.009498][ T7543] should_fail_ex+0x41c/0x594 [ 61.009504][ T7543] should_failslab+0xc0/0x128 [ 61.009512][ T7543] __kvmalloc_node_noprof+0x168/0x8d8 [ 61.009518][ T7543] compute_live_registers+0x108/0x11ec [ 61.009525][ T7543] bpf_check+0x10ff4/0x159f0 [ 61.009531][ T7543] bpf_prog_load+0xf44/0x14b8 [ 61.009536][ T7543] __sys_bpf+0x45c/0x638 [ 61.009541][ T7543] __arm64_sys_bpf+0x80/0x98 [ 61.009546][ T7543] invoke_syscall+0x98/0x254 [ 61.009552][ T7543] el0_svc_common+0xe8/0x23c [ 61.009557][ T7543] do_el0_svc+0x48/0x58 [ 61.009562][ T7543] el0_svc+0x5c/0x26c [ 61.009569][ T7543] el0t_64_sync_handler+0x84/0x12c [ 61.009575][ T7543] el0t_64_sync+0x198/0x19c [ 61.891474][ T7572] loop3: detected capacity change from 0 to 32768 [ 61.923731][ T7572] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 61.942153][ T7572] XFS (loop3): Ending clean mount [ 61.958862][ T7572] __nla_validate_parse: 2 callbacks suppressed [ 61.959149][ T7572] netlink: 256 bytes leftover after parsing attributes in process `syz.3.208'. [ 61.961979][ T7570] loop2: detected capacity change from 0 to 32768 [ 61.984374][ T7572] XFS (loop3): Metadata CRC error detected at xfs_refcountbt_read_verify+0x50/0xf0, xfs_refcountbt block 0x28 [ 61.987022][ T7572] XFS (loop3): Unmount and run xfs_repair [ 61.987969][ T7572] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 61.989414][ T7572] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 61.990966][ T7572] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 61.992566][ T7572] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 61.994035][ T7572] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 61.995469][ T7572] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 61.997016][ T7572] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 61.998636][ T7572] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 62.000088][ T7572] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 62.002559][ T7572] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x28 len 8 error 74 [ 62.010096][ T7572] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4e0/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 62.011423][ T7572] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 62.018511][ T7572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.208'. [ 62.048546][ T6578] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 62.090276][ T7585] FAULT_INJECTION: forcing a failure. [ 62.090276][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 62.093128][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.4.211 Not tainted syzkaller #0 PREEMPT [ 62.093153][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 62.093159][ T7585] Call trace: [ 62.093163][ T7585] show_stack+0x2c/0x3c (C) [ 62.093181][ T7585] __dump_stack+0x30/0x40 [ 62.093193][ T7585] dump_stack_lvl+0xd8/0x12c [ 62.093201][ T7585] dump_stack+0x1c/0x28 [ 62.093209][ T7585] should_fail_ex+0x41c/0x594 [ 62.093217][ T7585] should_failslab+0xc0/0x128 [ 62.093226][ T7585] __kmalloc_cache_noprof+0x8c/0x698 [ 62.093234][ T7585] do_check_common+0x134/0x1dc0 [ 62.093243][ T7585] bpf_check+0x11030/0x159f0 [ 62.093250][ T7585] bpf_prog_load+0xf44/0x14b8 [ 62.093255][ T7585] __sys_bpf+0x45c/0x638 [ 62.093261][ T7585] __arm64_sys_bpf+0x80/0x98 [ 62.093266][ T7585] invoke_syscall+0x98/0x254 [ 62.093272][ T7585] el0_svc_common+0xe8/0x23c [ 62.093277][ T7585] do_el0_svc+0x48/0x58 [ 62.093283][ T7585] el0_svc+0x5c/0x26c [ 62.093290][ T7585] el0t_64_sync_handler+0x84/0x12c [ 62.093295][ T7585] el0t_64_sync+0x198/0x19c [ 62.226916][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.228759][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.385722][ T7605] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 63.158819][ T7607] set_capacity_and_notify: 1 callbacks suppressed [ 63.158856][ T7607] loop0: detected capacity change from 0 to 4096 [ 63.315095][ T7619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.221'. [ 63.328596][ T7621] loop0: detected capacity change from 0 to 16 [ 63.383983][ T7621] erofs (device loop0): mounted with root inode @ nid 36. [ 63.388131][ T7626] FAULT_INJECTION: forcing a failure. [ 63.388131][ T7626] name failslab, interval 1, probability 0, space 0, times 0 [ 63.388174][ T7626] CPU: 0 UID: 0 PID: 7626 Comm: syz.1.224 Not tainted syzkaller #0 PREEMPT [ 63.388189][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 63.388194][ T7626] Call trace: [ 63.388197][ T7626] show_stack+0x2c/0x3c (C) [ 63.388211][ T7626] __dump_stack+0x30/0x40 [ 63.388218][ T7626] dump_stack_lvl+0xd8/0x12c [ 63.388223][ T7626] dump_stack+0x1c/0x28 [ 63.388228][ T7626] should_fail_ex+0x41c/0x594 [ 63.388235][ T7626] should_failslab+0xc0/0x128 [ 63.388243][ T7626] __kmalloc_node_track_caller_noprof+0x100/0x778 [ 63.388249][ T7626] krealloc_node_align_noprof+0x1c0/0x3ec [ 63.388254][ T7626] realloc_array+0x84/0x148 [ 63.388262][ T7626] check_stack_access_within_bounds+0x484/0x768 [ 63.388267][ T7626] check_mem_access+0x708/0x19c0 [ 63.388274][ T7626] check_store_reg+0x7d0/0xf28 [ 63.388281][ T7626] do_check+0x4b04/0xbdbc [ 63.388287][ T7626] do_check_common+0x1364/0x1dc0 [ 63.388293][ T7626] bpf_check+0x11030/0x159f0 [ 63.388299][ T7626] bpf_prog_load+0xf44/0x14b8 [ 63.388305][ T7626] __sys_bpf+0x45c/0x638 [ 63.388310][ T7626] __arm64_sys_bpf+0x80/0x98 [ 63.388315][ T7626] invoke_syscall+0x98/0x254 [ 63.388321][ T7626] el0_svc_common+0xe8/0x23c [ 63.388326][ T7626] do_el0_svc+0x48/0x58 [ 63.388331][ T7626] el0_svc+0x5c/0x26c [ 63.388338][ T7626] el0t_64_sync_handler+0x84/0x12c [ 63.388344][ T7626] el0t_64_sync+0x198/0x19c [ 63.396503][ T7604] loop3: detected capacity change from 0 to 32768 [ 63.427996][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 63.429523][ T7621] tc_dump_action: action bad kind [ 63.443518][ T7630] deleting an unspecified loop device is not supported. [ 63.625597][ T7624] loop4: detected capacity change from 0 to 32768 [ 63.627520][ T7624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.223 (7624) [ 63.638009][ T7624] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.638082][ T7624] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 63.680160][ T7624] BTRFS info (device loop4): enabling ssd optimizations [ 63.680197][ T7624] BTRFS info (device loop4): turning on async discard [ 63.680206][ T7624] BTRFS info (device loop4): enabling free space tree [ 63.829140][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.231'. [ 63.978090][ T7672] loop3: detected capacity change from 0 to 128 [ 63.999079][ T7672] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.425596][ T7714] FAULT_INJECTION: forcing a failure. [ 64.425596][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 64.425633][ T7714] CPU: 1 UID: 0 PID: 7714 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT [ 64.425645][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 64.425651][ T7714] Call trace: [ 64.425655][ T7714] show_stack+0x2c/0x3c (C) [ 64.425670][ T7714] __dump_stack+0x30/0x40 [ 64.425678][ T7714] dump_stack_lvl+0xd8/0x12c [ 64.425684][ T7714] dump_stack+0x1c/0x28 [ 64.425689][ T7714] should_fail_ex+0x41c/0x594 [ 64.425696][ T7714] should_failslab+0xc0/0x128 [ 64.425704][ T7714] __kmalloc_node_track_caller_noprof+0x100/0x778 [ 64.425710][ T7714] krealloc_node_align_noprof+0x1c0/0x3ec [ 64.425715][ T7714] push_jmp_history+0x1bc/0x568 [ 64.425723][ T7714] check_stack_write+0x2b68/0x4294 [ 64.425728][ T7714] check_mem_access+0xa54/0x19c0 [ 64.425735][ T7714] check_store_reg+0x7d0/0xf28 [ 64.425741][ T7714] do_check+0x4b04/0xbdbc [ 64.425748][ T7714] do_check_common+0x1364/0x1dc0 [ 64.425754][ T7714] bpf_check+0x11030/0x159f0 [ 64.425760][ T7714] bpf_prog_load+0xf44/0x14b8 [ 64.425765][ T7714] __sys_bpf+0x45c/0x638 [ 64.425770][ T7714] __arm64_sys_bpf+0x80/0x98 [ 64.425775][ T7714] invoke_syscall+0x98/0x254 [ 64.425781][ T7714] el0_svc_common+0xe8/0x23c [ 64.425786][ T7714] do_el0_svc+0x48/0x58 [ 64.425791][ T7714] el0_svc+0x5c/0x26c [ 64.425798][ T7714] el0t_64_sync_handler+0x84/0x12c [ 64.425804][ T7714] el0t_64_sync+0x198/0x19c [ 64.447841][ T7715] loop0: detected capacity change from 0 to 64 [ 64.468435][ T7630] loop2: detected capacity change from 0 to 262144 [ 64.470037][ T7630] btrfs: Unknown parameter 'context' [ 64.475155][ T7717] Unsupported ieee802154 address type: 0 [ 64.507430][ T2474] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.508637][ T2474] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.658389][ T7630] loop2: detected capacity change from 0 to 1024 [ 64.665564][ T7630] hfsplus: Unknown parameter 'Ö—¦–ïÛe' [ 64.741203][ T31] audit: type=1326 audit(64.700:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7731 comm="syz.1.243" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b778fa8 code=0x0 [ 64.775534][ T7727] loop0: detected capacity change from 0 to 32768 [ 64.840220][ T7727] JBD2: Ignoring recovery information on journal [ 64.870633][ T6578] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.890790][ T7727] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 65.022595][ T7754] loop1: detected capacity change from 0 to 1024 [ 65.043299][ T6581] ocfs2: Unmounting device (7,0) on (node local) [ 65.364968][ T7754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.380259][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.435593][ T7747] overlay: Unknown parameter 'func' [ 65.437893][ T7748] overlay: Unknown parameter 'func' [ 65.503847][ T7761] EXT4-fs (loop0): shut down requested (2) [ 65.579458][ T6581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.655948][ T7769] FAULT_INJECTION: forcing a failure. [ 65.655948][ T7769] name failslab, interval 1, probability 0, space 0, times 0 [ 65.655986][ T7769] CPU: 1 UID: 0 PID: 7769 Comm: syz.2.250 Not tainted syzkaller #0 PREEMPT [ 65.655998][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 65.656005][ T7769] Call trace: [ 65.656009][ T7769] show_stack+0x2c/0x3c (C) [ 65.656026][ T7769] __dump_stack+0x30/0x40 [ 65.656036][ T7769] dump_stack_lvl+0xd8/0x12c [ 65.656042][ T7769] dump_stack+0x1c/0x28 [ 65.656047][ T7769] should_fail_ex+0x41c/0x594 [ 65.656055][ T7769] should_failslab+0xc0/0x128 [ 65.656063][ T7769] __kvmalloc_node_noprof+0x168/0x8d8 [ 65.656069][ T7769] alloc_frame_masks+0x130/0x28c [ 65.656076][ T7769] commit_stack_write_marks+0x190/0x47c [ 65.656082][ T7769] bpf_commit_stack_write_marks+0x68/0x7c [ 65.656089][ T7769] do_check+0x61f8/0xbdbc [ 65.656096][ T7769] do_check_common+0x1364/0x1dc0 [ 65.656102][ T7769] bpf_check+0x11030/0x159f0 [ 65.656108][ T7769] bpf_prog_load+0xf44/0x14b8 [ 65.656114][ T7769] __sys_bpf+0x45c/0x638 [ 65.656119][ T7769] __arm64_sys_bpf+0x80/0x98 [ 65.656124][ T7769] invoke_syscall+0x98/0x254 [ 65.656130][ T7769] el0_svc_common+0xe8/0x23c [ 65.656140][ T7769] do_el0_svc+0x48/0x58 [ 65.656146][ T7769] el0_svc+0x5c/0x26c [ 65.656154][ T7769] el0t_64_sync_handler+0x84/0x12c [ 65.656161][ T7769] el0t_64_sync+0x198/0x19c [ 65.685518][ T6577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.767967][ T7771] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 65.785300][ T7774] BTRFS info: device /dev/loop1 (7:1) using temp-fsid ff11f095-0e81-404a-99a1-bd75871230f9 [ 65.787228][ T7774] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.251 (7774) [ 65.843808][ T7774] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 65.845648][ T7774] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 65.879744][ T7774] BTRFS info (device loop1): setting nodatasum [ 65.880879][ T7774] BTRFS info (device loop1): setting nodatacow [ 65.880943][ T7774] BTRFS info (device loop1): enabling ssd optimizations [ 65.880968][ T7774] BTRFS info (device loop1): turning on async discard [ 65.880981][ T7774] BTRFS info (device loop1): enabling free space tree [ 65.880991][ T7774] BTRFS info (device loop1): max_inline set to 0 [ 65.890977][ T7802] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 65.924370][ T7806] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 65.958756][ T7774] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 65.975540][ T7806] ntfs3(loop2): ino=19, mi_enum_attr [ 65.975588][ T7806] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 66.002056][ T7782] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 66.002859][ T7806] ntfs3(loop2): ino=21, "mnt" fallocate(0x40) is not supported [ 66.012273][ T7782] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 66.014369][ T7782] F2FS-fs (loop0): build fault injection rate: 1 [ 66.018403][ T7782] F2FS-fs (loop0): build fault injection type: 0x1f8 [ 66.029410][ T7782] F2FS-fs (loop0): invalid crc value [ 66.074623][ T7782] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 66.077570][ T6577] BTRFS info (device loop1): last unmount of filesystem ff11f095-0e81-404a-99a1-bd75871230f9 [ 66.081982][ T7782] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 66.083878][ T7782] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 66.211494][ T7783] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 66.221408][ T7783] XFS (loop3): Ending clean mount [ 66.222160][ T7783] XFS (loop3): Quotacheck needed: Please wait. [ 66.232236][ T7783] XFS (loop3): Quotacheck: Done. [ 66.285821][ T7782] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of f2fs_find_data_folio+0x60/0x390 [ 66.294574][ T7782] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0xe0/0xd3c [ 66.705969][ T6578] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 66.752622][ T7842] FAULT_INJECTION: forcing a failure. [ 66.752622][ T7842] name failslab, interval 1, probability 0, space 0, times 0 [ 66.752662][ T7842] CPU: 1 UID: 0 PID: 7842 Comm: syz.4.265 Not tainted syzkaller #0 PREEMPT [ 66.752670][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 66.752674][ T7842] Call trace: [ 66.752677][ T7842] show_stack+0x2c/0x3c (C) [ 66.752690][ T7842] __dump_stack+0x30/0x40 [ 66.752697][ T7842] dump_stack_lvl+0xd8/0x12c [ 66.752703][ T7842] dump_stack+0x1c/0x28 [ 66.752708][ T7842] should_fail_ex+0x41c/0x594 [ 66.752714][ T7842] should_failslab+0xc0/0x128 [ 66.752722][ T7842] __kmalloc_node_track_caller_noprof+0x100/0x778 [ 66.752728][ T7842] krealloc_node_align_noprof+0x1c0/0x3ec [ 66.752733][ T7842] push_jmp_history+0x1bc/0x568 [ 66.752740][ T7842] do_check+0x3dd4/0xbdbc [ 66.752747][ T7842] do_check_common+0x1364/0x1dc0 [ 66.752753][ T7842] bpf_check+0x11030/0x159f0 [ 66.752759][ T7842] bpf_prog_load+0xf44/0x14b8 [ 66.752765][ T7842] __sys_bpf+0x45c/0x638 [ 66.752770][ T7842] __arm64_sys_bpf+0x80/0x98 [ 66.752774][ T7842] invoke_syscall+0x98/0x254 [ 66.752780][ T7842] el0_svc_common+0xe8/0x23c [ 66.752786][ T7842] do_el0_svc+0x48/0x58 [ 66.752791][ T7842] el0_svc+0x5c/0x26c [ 66.752798][ T7842] el0t_64_sync_handler+0x84/0x12c [ 66.752804][ T7842] el0t_64_sync+0x198/0x19c [ 66.878819][ T7848] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.079059][ T7862] netlink: 'syz.3.271': attribute type 1 has an invalid length. [ 67.096520][ T7862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.100758][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.271'. [ 67.101189][ T7862] bond1: entered promiscuous mode [ 67.146345][ T7862] bond1: (slave dummy0): making interface the new active one [ 67.146385][ T7862] dummy0: entered promiscuous mode [ 67.149215][ T7862] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 67.174965][ T7874] vxcan1: entered allmulticast mode [ 67.178431][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 67.200421][ T7874] vxcan1 (unregistering): left allmulticast mode [ 67.225441][ T7879] FAULT_INJECTION: forcing a failure. [ 67.225441][ T7879] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.227904][ T7879] CPU: 0 UID: 0 PID: 7879 Comm: syz.3.277 Not tainted syzkaller #0 PREEMPT [ 67.227924][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 67.227931][ T7879] Call trace: [ 67.227935][ T7879] show_stack+0x2c/0x3c (C) [ 67.227956][ T7879] __dump_stack+0x30/0x40 [ 67.227965][ T7879] dump_stack_lvl+0xd8/0x12c [ 67.227972][ T7879] dump_stack+0x1c/0x28 [ 67.227979][ T7879] should_fail_ex+0x41c/0x594 [ 67.227987][ T7879] should_fail+0x14/0x24 [ 67.227993][ T7879] should_fail_usercopy+0x20/0x30 [ 67.227999][ T7879] copy_to_bpfptr_offset+0x64/0x160 [ 67.228008][ T7879] bpf_check+0x4de8/0x159f0 [ 67.228014][ T7879] bpf_prog_load+0xf44/0x14b8 [ 67.228020][ T7879] __sys_bpf+0x45c/0x638 [ 67.228025][ T7879] __arm64_sys_bpf+0x80/0x98 [ 67.228030][ T7879] invoke_syscall+0x98/0x254 [ 67.228036][ T7879] el0_svc_common+0xe8/0x23c [ 67.228041][ T7879] do_el0_svc+0x48/0x58 [ 67.228046][ T7879] el0_svc+0x5c/0x26c [ 67.228054][ T7879] el0t_64_sync_handler+0x84/0x12c [ 67.228060][ T7879] el0t_64_sync+0x198/0x19c [ 67.375229][ T7883] F2FS-fs: heap/no_heap options were deprecated [ 67.377797][ T7883] F2FS-fs (loop3): build fault injection rate: 23 [ 67.378872][ T7883] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 67.380526][ T7883] F2FS-fs (loop3): invalid crc value [ 67.386308][ T7883] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4ec/0x7b0 [ 67.400238][ T7883] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 67.402463][ T7883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.405258][ T7891] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_read_data_folio+0xdc/0x6b8 [ 67.410230][ T7891] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 67.417604][ T7892] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x93c/0x1820 [ 67.420946][ T7892] F2FS-fs (loop3): inconsistent node block, node_type:3, nid:13, node_footer[nid:13,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 67.438555][ T6578] syz-executor: attempt to access beyond end of device [ 67.438555][ T6578] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.443075][ T6578] CPU: 0 UID: 0 PID: 6578 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 67.443098][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 67.443104][ T6578] Call trace: [ 67.443108][ T6578] show_stack+0x2c/0x3c (C) [ 67.443133][ T6578] __dump_stack+0x30/0x40 [ 67.443144][ T6578] dump_stack_lvl+0xd8/0x12c [ 67.443151][ T6578] dump_stack+0x1c/0x28 [ 67.443157][ T6578] f2fs_handle_critical_error+0x34c/0x4b8 [ 67.443166][ T6578] f2fs_stop_checkpoint+0x5c/0x70 [ 67.443172][ T6578] f2fs_write_end_io+0x770/0xa78 [ 67.443178][ T6578] bio_endio+0x8d4/0x910 [ 67.443185][ T6578] submit_bio_noacct+0xd44/0x186c [ 67.443191][ T6578] submit_bio+0x3b4/0x550 [ 67.443196][ T6578] f2fs_submit_write_bio+0x124/0x324 [ 67.443201][ T6578] __submit_merged_bio+0x224/0x6d4 [ 67.443206][ T6578] __submit_merged_write_cond+0x250/0x4ac [ 67.443211][ T6578] f2fs_write_data_pages+0x1dd4/0x2878 [ 67.443216][ T6578] do_writepages+0x270/0x468 [ 67.443223][ T6578] filemap_fdatawrite+0x14c/0x1f4 [ 67.443230][ T6578] f2fs_sync_dirty_inodes+0x2a0/0x788 [ 67.443237][ T6578] f2fs_write_checkpoint+0x708/0x1c28 [ 67.443243][ T6578] kill_f2fs_super+0x230/0x580 [ 67.443248][ T6578] deactivate_locked_super+0xc4/0x12c [ 67.443255][ T6578] deactivate_super+0xe0/0x100 [ 67.443261][ T6578] cleanup_mnt+0x31c/0x3ac [ 67.443268][ T6578] __cleanup_mnt+0x20/0x30 [ 67.443275][ T6578] task_work_run+0x1dc/0x260 [ 67.443282][ T6578] exit_to_user_mode_loop+0x10c/0x18c [ 67.443288][ T6578] el0_svc+0x17c/0x26c [ 67.443295][ T6578] el0t_64_sync_handler+0x84/0x12c [ 67.443301][ T6578] el0t_64_sync+0x198/0x19c [ 67.455212][ T6578] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 67.622581][ T7907] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 67.625643][ T7907] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 67.627528][ T7907] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.285: Corrupt directory, running e2fsck is recommended [ 67.659822][ T7907] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 67.661429][ T7907] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.285: corrupted in-inode xattr: e_name out of bounds [ 67.667094][ T7907] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.285: couldn't read orphan inode 15 (err -117) [ 67.669731][ T7907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.690843][ T6581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.730597][ T7913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.733267][ T7913] random: crng reseeded on system resumption [ 67.754815][ T6581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.783682][ T7917] FAULT_INJECTION: forcing a failure. [ 67.783682][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 67.786132][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.0.288 Not tainted syzkaller #0 PREEMPT [ 67.786156][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 67.786163][ T7917] Call trace: [ 67.786166][ T7917] show_stack+0x2c/0x3c (C) [ 67.786182][ T7917] __dump_stack+0x30/0x40 [ 67.786189][ T7917] dump_stack_lvl+0xd8/0x12c [ 67.786194][ T7917] dump_stack+0x1c/0x28 [ 67.786200][ T7917] should_fail_ex+0x41c/0x594 [ 67.786207][ T7917] should_failslab+0xc0/0x128 [ 67.786214][ T7917] __kmalloc_noprof+0x100/0x764 [ 67.786220][ T7917] bpf_check+0x5354/0x159f0 [ 67.786227][ T7917] bpf_prog_load+0xf44/0x14b8 [ 67.786232][ T7917] __sys_bpf+0x45c/0x638 [ 67.786237][ T7917] __arm64_sys_bpf+0x80/0x98 [ 67.786243][ T7917] invoke_syscall+0x98/0x254 [ 67.786249][ T7917] el0_svc_common+0xe8/0x23c [ 67.786254][ T7917] do_el0_svc+0x48/0x58 [ 67.786259][ T7917] el0_svc+0x5c/0x26c [ 67.786266][ T7917] el0t_64_sync_handler+0x84/0x12c [ 67.786272][ T7917] el0t_64_sync+0x198/0x19c [ 68.052196][ T7933] EXT4-fs: Ignoring removed orlov option [ 68.054095][ T7933] EXT4-fs (loop1): invalid inodes per group: 32 [ 68.054095][ T7933] [ 68.210658][ T7943] FAULT_INJECTION: forcing a failure. [ 68.210658][ T7943] name failslab, interval 1, probability 0, space 0, times 0 [ 68.210698][ T7943] CPU: 0 UID: 0 PID: 7943 Comm: syz.2.299 Not tainted syzkaller #0 PREEMPT [ 68.210708][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 68.210714][ T7943] Call trace: [ 68.210718][ T7943] show_stack+0x2c/0x3c (C) [ 68.210734][ T7943] __dump_stack+0x30/0x40 [ 68.210742][ T7943] dump_stack_lvl+0xd8/0x12c [ 68.210748][ T7943] dump_stack+0x1c/0x28 [ 68.210754][ T7943] should_fail_ex+0x41c/0x594 [ 68.210760][ T7943] should_failslab+0xc0/0x128 [ 68.210768][ T7943] __kmalloc_cache_noprof+0x8c/0x698 [ 68.210774][ T7943] bpf_int_jit_compile+0x1a4/0x1250 [ 68.210780][ T7943] bpf_prog_select_runtime+0x3d8/0x6b8 [ 68.210786][ T7943] bpf_prog_load+0xf68/0x14b8 [ 68.210792][ T7943] __sys_bpf+0x45c/0x638 [ 68.210797][ T7943] __arm64_sys_bpf+0x80/0x98 [ 68.210802][ T7943] invoke_syscall+0x98/0x254 [ 68.210808][ T7943] el0_svc_common+0xe8/0x23c [ 68.210813][ T7943] do_el0_svc+0x48/0x58 [ 68.210818][ T7943] el0_svc+0x5c/0x26c [ 68.210825][ T7943] el0t_64_sync_handler+0x84/0x12c [ 68.210831][ T7943] el0t_64_sync+0x198/0x19c [ 68.212693][ T7940] set_capacity_and_notify: 9 callbacks suppressed [ 68.212701][ T7940] loop3: detected capacity change from 0 to 4096 [ 68.217533][ T7940] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 68.220624][ T7940] ntfs3(loop3): try to read out of volume at offset 0x103000 [ 68.220678][ T7940] ntfs3(loop3): Failed to load $Volume (-5). [ 68.305185][ T7946] 9p: Bad value for 'rfdno' [ 68.311740][ T7949] netlink: 'syz.3.301': attribute type 21 has an invalid length. [ 68.311799][ T7949] netlink: 'syz.3.301': attribute type 6 has an invalid length. [ 68.311809][ T7949] netlink: 132 bytes leftover after parsing attributes in process `syz.3.301'. [ 68.505021][ T7934] loop0: detected capacity change from 0 to 65536 [ 68.519107][ T7951] loop2: detected capacity change from 0 to 32768 [ 68.546224][ T7934] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 68.565818][ T7951] JBD2: Ignoring recovery information on journal [ 68.568732][ T7951] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 68.571223][ T7951] JBD2: bad block at offset 32 [ 68.576266][ T7951] (syz.2.300,7951,1):ocfs2_load_local_alloc:312 ERROR: Invalid local alloc inode, 75 [ 68.577860][ T7951] (syz.2.300,7951,1):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 68.579122][ T7951] (syz.2.300,7951,1):ocfs2_check_volume:2404 ERROR: status = -22 [ 68.580406][ T7951] (syz.2.300,7951,1):ocfs2_check_volume:2432 ERROR: status = -22 [ 68.581733][ T7951] (syz.2.300,7951,1):ocfs2_mount_volume:1764 ERROR: status = -22 [ 68.596185][ T7951] (syz.2.300,7951,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 68.604809][ T7934] XFS (loop0): Ending clean mount [ 68.635530][ T7934] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 68.635586][ T7934] XFS (loop0): Unmount and run xfs_repair [ 68.637115][ T7934] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 68.637146][ T7934] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 68.637154][ T7934] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 68.637160][ T7934] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 68.637166][ T7934] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 68.637172][ T7934] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 68.637177][ T7934] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.637182][ T7934] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.637187][ T7934] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 68.637195][ T7934] XFS (loop0): metadata I/O error in "xfs_read_agf+0x220/0x58c" at daddr 0x1 len 1 error 74 [ 68.768451][ T6581] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 68.773381][ T6581] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 68.845326][ T7974] ip6tnl1: entered promiscuous mode [ 68.887541][ T7968] loop3: detected capacity change from 0 to 128 [ 68.977379][ T7968] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 68.978429][ T7968] hpfs: filesystem error: improperly stopped [ 68.978450][ T7968] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 68.978462][ T7968] hpfs: You really don't want any checks? You are crazy... [ 68.978547][ T7968] hpfs: hpfs_map_sector(): read error [ 68.978553][ T7968] hpfs: code page support is disabled [ 68.978873][ T7968] hpfs: hpfs_map_4sectors(): unaligned read [ 68.978918][ T7968] hpfs: hpfs_map_4sectors(): unaligned read [ 68.978923][ T7968] hpfs: filesystem error: unable to find root dir [ 69.080637][ T7985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.126838][ T7966] syz.3.303 (7966): drop_caches: 1 [ 69.151568][ T7966] syz.3.303 (7966): drop_caches: 1 [ 69.157755][ T7985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.182531][ T7982] loop2: detected capacity change from 0 to 32768 [ 69.188555][ T7982] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.222853][ T7985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.232314][ T7982] XFS (loop2): Ending clean mount [ 69.282867][ T6582] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.304244][ T7985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.320598][ T7998] loop3: detected capacity change from 0 to 256 [ 69.328073][ T7998] loop3: detected capacity change from 0 to 1024 [ 69.332404][ T7998] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 69.436357][ T8002] loop2: detected capacity change from 0 to 16 [ 69.447264][ T8002] erofs (device loop2): mounted with root inode @ nid 36. [ 69.490592][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.500739][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.532959][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.540326][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.550106][ T8007] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 69.554055][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 69.555676][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 69.610051][ T8010] loop2: detected capacity change from 0 to 4096 [ 69.627305][ T26] cfg80211: failed to load regulatory.db [ 69.646162][ T8010] ntfs3(loop2): Failed to initialize $Secure (-22). [ 69.760837][ T8024] loop0: detected capacity change from 0 to 16 [ 69.765780][ T8024] erofs (device loop0): mounted with root inode @ nid 36. [ 69.766053][ T8022] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 69.788813][ T8024] evm: overlay not supported [ 69.797193][ T6584] erofs (device loop0): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 9000 [ 69.802921][ T8024] erofs (device loop0): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 4096 [ 69.802970][ T8024] erofs (device loop0): read error -117 @ 0 of nid 89 [ 70.239275][ T8051] EXT4-fs: Ignoring removed i_version option [ 70.239307][ T8051] EXT4-fs: Ignoring removed nobh option [ 70.240686][ T8051] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.246999][ T8051] EXT4-fs (loop0): 1 truncate cleaned up [ 70.247474][ T8051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.250711][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 70.299545][ T8056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.321802][ T6581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.357327][ T6578] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.546821][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'. [ 70.565703][ T3135] hfsplus: b-tree write err: -5, ino 4 [ 70.622019][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 70.623189][ T8074] vfat: Unknown parameter 'Þ”ø O sÄ<{΢'º‡³Iƒ¼2 ìCÁhÊZ~´ÄA´ušíY’T!`ϳ' [ 70.628883][ T8074] nbd: must specify at least one socket [ 70.779763][ T8091] netlink: 'syz.1.344': attribute type 3 has an invalid length. [ 70.781393][ T8091] netlink: 666 bytes leftover after parsing attributes in process `syz.1.344'. [ 71.014898][ T8105] mkiss: ax0: crc mode is auto. [ 71.079077][ T8110] netlink: 10 bytes leftover after parsing attributes in process `syz.4.349'. [ 71.128378][ T8101] (syz.1.347,8101,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 71.131362][ T8101] (syz.1.347,8101,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 71.131918][ T8101] (syz.1.347,8101,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 71.132494][ T8101] (syz.1.347,8101,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 71.158510][ T8101] JBD2: Ignoring recovery information on journal [ 71.187859][ T8117] FAULT_INJECTION: forcing a failure. [ 71.187859][ T8117] name failslab, interval 1, probability 0, space 0, times 0 [ 71.189937][ T8117] CPU: 1 UID: 0 PID: 8117 Comm: syz.4.352 Not tainted syzkaller #0 PREEMPT [ 71.189960][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 71.189966][ T8117] Call trace: [ 71.189969][ T8117] show_stack+0x2c/0x3c (C) [ 71.189987][ T8117] __dump_stack+0x30/0x40 [ 71.189994][ T8117] dump_stack_lvl+0xd8/0x12c [ 71.190000][ T8117] dump_stack+0x1c/0x28 [ 71.190006][ T8117] should_fail_ex+0x41c/0x594 [ 71.190013][ T8117] should_failslab+0xc0/0x128 [ 71.190021][ T8117] __kvmalloc_node_noprof+0x168/0x8d8 [ 71.190026][ T8117] bpf_jit_binary_pack_alloc+0x130/0x2f8 [ 71.190033][ T8117] bpf_int_jit_compile+0xf28/0x1250 [ 71.190039][ T8117] bpf_prog_select_runtime+0x3d8/0x6b8 [ 71.190045][ T8117] bpf_prog_load+0xf68/0x14b8 [ 71.190050][ T8117] __sys_bpf+0x45c/0x638 [ 71.190055][ T8117] __arm64_sys_bpf+0x80/0x98 [ 71.190060][ T8117] invoke_syscall+0x98/0x254 [ 71.190066][ T8117] el0_svc_common+0xe8/0x23c [ 71.190072][ T8117] do_el0_svc+0x48/0x58 [ 71.190077][ T8117] el0_svc+0x5c/0x26c [ 71.190084][ T8117] el0t_64_sync_handler+0x84/0x12c [ 71.190090][ T8117] el0t_64_sync+0x198/0x19c [ 71.190361][ T8101] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 71.338182][ T6577] ocfs2: Unmounting device (7,1) on (node local) [ 71.596889][ T8129] btrfs: Deprecated parameter 'usebackuproot' [ 71.598324][ T8129] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 71.603707][ T8129] BTRFS info: device /dev/loop3 (7:3) using temp-fsid c284e062-68d7-45cf-9946-ed972090ea73 [ 71.606808][ T8129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.355 (8129) [ 71.807745][ T8131] netlink: 'syz.1.354': attribute type 7 has an invalid length. [ 71.810828][ T8131] netlink: 'syz.1.354': attribute type 5 has an invalid length. [ 71.812901][ T8133] fuse: Bad value for 'fd' [ 71.818298][ T8131] fuse: Bad value for 'fd' [ 72.403788][ T8139] F2FS-fs: heap/no_heap options were deprecated [ 72.411751][ T8139] F2FS-fs (loop0): build fault injection rate: 19 [ 72.411809][ T8139] F2FS-fs (loop0): build fault injection type: 0x77e8c [ 72.419918][ T8139] F2FS-fs (loop0): invalid crc value [ 72.575811][ T8139] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x17c/0x7b0 [ 72.599802][ T8139] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x148/0x880 [ 72.623146][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0x8d4/0x910 [ 72.696960][ T8139] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 72.714497][ T8139] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 72.728832][ T8139] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x3e8/0xd3c [ 72.744466][ T8139] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_map_blocks+0xbf0/0x3204 [ 72.747589][ T8139] __nla_validate_parse: 3 callbacks suppressed [ 72.747615][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'. [ 72.842127][ T8129] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.856340][ T8129] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 72.962221][ T8141] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 73.001331][ T8161] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 73.026510][ T3577] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 73.029298][ T8129] BTRFS warning (device loop3): couldn't read tree root [ 73.029322][ T8129] BTRFS warning (device loop3): try to load backup roots slot 1 [ 73.032539][ T3577] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 73.036163][ T8129] BTRFS warning (device loop3): couldn't read tree root [ 73.037351][ T8129] BTRFS warning (device loop3): try to load backup roots slot 2 [ 73.039965][ T5055] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 73.041702][ T8129] BTRFS warning (device loop3): couldn't read tree root [ 73.041747][ T8129] BTRFS warning (device loop3): try to load backup roots slot 3 [ 73.054699][ T6581] syz-executor: attempt to access beyond end of device [ 73.054699][ T6581] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.057639][ T6581] CPU: 0 UID: 0 PID: 6581 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 73.057658][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 73.057664][ T6581] Call trace: [ 73.057668][ T6581] show_stack+0x2c/0x3c (C) [ 73.057689][ T6581] __dump_stack+0x30/0x40 [ 73.057699][ T6581] dump_stack_lvl+0xd8/0x12c [ 73.057706][ T6581] dump_stack+0x1c/0x28 [ 73.057712][ T6581] f2fs_handle_critical_error+0x34c/0x4b8 [ 73.057721][ T6581] f2fs_stop_checkpoint+0x5c/0x70 [ 73.057728][ T6581] f2fs_write_end_io+0x770/0xa78 [ 73.057733][ T6581] bio_endio+0x8d4/0x910 [ 73.057740][ T6581] submit_bio_noacct+0xd44/0x186c [ 73.057746][ T6581] submit_bio+0x3b4/0x550 [ 73.057752][ T6581] f2fs_submit_write_bio+0x124/0x324 [ 73.057756][ T6581] __submit_merged_bio+0x224/0x6d4 [ 73.057761][ T6581] __submit_merged_write_cond+0x250/0x4ac [ 73.057766][ T6581] f2fs_write_data_pages+0x1dd4/0x2878 [ 73.057771][ T6581] do_writepages+0x270/0x468 [ 73.057779][ T6581] filemap_fdatawrite+0x14c/0x1f4 [ 73.057786][ T6581] f2fs_sync_dirty_inodes+0x2a0/0x788 [ 73.057792][ T6581] f2fs_write_checkpoint+0x708/0x1c28 [ 73.057799][ T6581] kill_f2fs_super+0x230/0x580 [ 73.057804][ T6581] deactivate_locked_super+0xc4/0x12c [ 73.057810][ T6581] deactivate_super+0xe0/0x100 [ 73.057816][ T6581] cleanup_mnt+0x31c/0x3ac [ 73.057823][ T6581] __cleanup_mnt+0x20/0x30 [ 73.057830][ T6581] task_work_run+0x1dc/0x260 [ 73.057837][ T6581] exit_to_user_mode_loop+0x10c/0x18c [ 73.057843][ T6581] el0_svc+0x17c/0x26c [ 73.057850][ T6581] el0t_64_sync_handler+0x84/0x12c [ 73.057856][ T6581] el0t_64_sync+0x198/0x19c [ 73.058006][ T6581] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 73.102945][ T8129] BTRFS info (device loop3): rebuilding free space tree [ 73.106168][ T8141] ntfs3(loop1): ino=19, mi_enum_attr [ 73.106216][ T8141] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 73.138559][ T8129] BTRFS info (device loop3): checking UUID tree [ 73.154709][ T8129] BTRFS info (device loop3): enabling ssd optimizations [ 73.154750][ T8129] BTRFS info (device loop3): disabling tree log [ 73.155074][ T8129] BTRFS info (device loop3): turning on async discard [ 73.155093][ T8129] BTRFS info (device loop3): enabling free space tree [ 73.155109][ T8129] BTRFS info (device loop3): force clearing of disk cache [ 73.155121][ T8129] BTRFS info (device loop3): trying to use backup root at mount time [ 73.155130][ T8129] BTRFS info (device loop3): use zlib compression, level 3 [ 73.392140][ T8184] FAULT_INJECTION: forcing a failure. [ 73.392140][ T8184] name failslab, interval 1, probability 0, space 0, times 0 [ 73.396760][ T8184] CPU: 0 UID: 0 PID: 8184 Comm: syz.2.363 Not tainted syzkaller #0 PREEMPT [ 73.396784][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 73.396790][ T8184] Call trace: [ 73.396793][ T8184] show_stack+0x2c/0x3c (C) [ 73.396812][ T8184] __dump_stack+0x30/0x40 [ 73.396822][ T8184] dump_stack_lvl+0xd8/0x12c [ 73.396829][ T8184] dump_stack+0x1c/0x28 [ 73.396835][ T8184] should_fail_ex+0x41c/0x594 [ 73.396842][ T8184] should_failslab+0xc0/0x128 [ 73.396850][ T8184] kmem_cache_alloc_lru_noprof+0x94/0x684 [ 73.396856][ T8184] __d_alloc+0x50/0x690 [ 73.396862][ T8184] d_alloc_pseudo+0x2c/0xd8 [ 73.396867][ T8184] alloc_file_pseudo+0xd0/0x1f4 [ 73.396874][ T8184] anon_inode_getfd+0xe0/0x1d0 [ 73.396881][ T8184] bpf_prog_new_fd+0x58/0x74 [ 73.396887][ T8184] bpf_prog_load+0x1060/0x14b8 [ 73.396892][ T8184] __sys_bpf+0x45c/0x638 [ 73.396897][ T8184] __arm64_sys_bpf+0x80/0x98 [ 73.396902][ T8184] invoke_syscall+0x98/0x254 [ 73.396908][ T8184] el0_svc_common+0xe8/0x23c [ 73.396914][ T8184] do_el0_svc+0x48/0x58 [ 73.396919][ T8184] el0_svc+0x5c/0x26c [ 73.396926][ T8184] el0t_64_sync_handler+0x84/0x12c [ 73.396932][ T8184] el0t_64_sync+0x198/0x19c [ 73.538150][ T6578] BTRFS info (device loop3): last unmount of filesystem c284e062-68d7-45cf-9946-ed972090ea73 [ 73.538635][ T8188] set_capacity_and_notify: 13 callbacks suppressed [ 73.538647][ T8188] loop1: detected capacity change from 0 to 512 [ 73.561444][ T8188] netlink: 4168 bytes leftover after parsing attributes in process `syz.1.364'. [ 73.741578][ T8199] loop1: detected capacity change from 0 to 8 [ 73.750429][ T8199] SQUASHFS error: xz decompression failed, data probably corrupt [ 73.753549][ T8199] SQUASHFS error: Failed to read block 0x108: -5 [ 73.754764][ T8199] SQUASHFS error: Unable to read metadata cache entry [106] [ 73.754779][ T8199] SQUASHFS error: Unable to read inode 0x11f [ 73.800100][ T8201] loop1: detected capacity change from 0 to 64 [ 73.909579][ T8195] loop3: detected capacity change from 0 to 32768 [ 73.913143][ T8201] fuse: Bad value for 'user_id' [ 73.914195][ T8201] fuse: Bad value for 'user_id' [ 73.917556][ T8195] (syz.3.365,8195,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 73.918034][ T8195] (syz.3.365,8195,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 73.918302][ T8195] (syz.3.365,8195,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 73.918683][ T8195] (syz.3.365,8195,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 73.938805][ T8195] JBD2: Ignoring recovery information on journal [ 73.951477][ T8195] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 73.981420][ T6578] ocfs2: Unmounting device (7,3) on (node local) [ 74.125372][ T8210] loop3: detected capacity change from 0 to 32768 [ 74.135988][ T8221] loop0: detected capacity change from 0 to 1024 [ 74.229145][ T8221] loop0: detected capacity change from 0 to 32768 [ 74.230765][ T8221] BTRFS error: invalid value 0 for thread_pool [ 74.236962][ T8210] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.370 (8210) [ 74.245549][ T8210] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 74.245614][ T8210] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm [ 74.331936][ T8210] BTRFS info (device loop3): enabling ssd optimizations [ 74.333296][ T8210] BTRFS info (device loop3): turning on async discard [ 74.335614][ T8210] BTRFS info (device loop3): enabling free space tree [ 74.337093][ T8210] BTRFS info (device loop3): use lzo compression, level 1 [ 74.355019][ T8262] loop2: detected capacity change from 0 to 256 [ 74.366052][ T8262] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 74.396368][ T8221] loop0: detected capacity change from 0 to 2048 [ 74.436671][ T8270] FAULT_INJECTION: forcing a failure. [ 74.436671][ T8270] name failslab, interval 1, probability 0, space 0, times 0 [ 74.436704][ T8270] CPU: 1 UID: 0 PID: 8270 Comm: syz.2.377 Not tainted syzkaller #0 PREEMPT [ 74.436716][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 74.436722][ T8270] Call trace: [ 74.436725][ T8270] show_stack+0x2c/0x3c (C) [ 74.436738][ T8270] __dump_stack+0x30/0x40 [ 74.436745][ T8270] dump_stack_lvl+0xd8/0x12c [ 74.436751][ T8270] dump_stack+0x1c/0x28 [ 74.436756][ T8270] should_fail_ex+0x41c/0x594 [ 74.436762][ T8270] should_failslab+0xc0/0x128 [ 74.436770][ T8270] __kvmalloc_node_noprof+0x168/0x8d8 [ 74.436776][ T8270] bpf_jit_binary_pack_alloc+0x130/0x2f8 [ 74.436782][ T8270] bpf_int_jit_compile+0xf28/0x1250 [ 74.436788][ T8270] bpf_prog_select_runtime+0x3d8/0x6b8 [ 74.436794][ T8270] bpf_prog_load+0xf68/0x14b8 [ 74.436799][ T8270] __sys_bpf+0x45c/0x638 [ 74.436804][ T8270] __arm64_sys_bpf+0x80/0x98 [ 74.436809][ T8270] invoke_syscall+0x98/0x254 [ 74.436814][ T8270] el0_svc_common+0xe8/0x23c [ 74.436820][ T8270] do_el0_svc+0x48/0x58 [ 74.436825][ T8270] el0_svc+0x5c/0x26c [ 74.436832][ T8270] el0t_64_sync_handler+0x84/0x12c [ 74.436838][ T8270] el0t_64_sync+0x198/0x19c [ 74.462963][ T8271] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.480869][ T6578] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 74.512158][ T8221] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 74.515173][ T8221] Remounting filesystem read-only [ 74.604644][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.604814][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.657998][ T8275] loop0: detected capacity change from 0 to 32768 [ 74.671800][ T8275] (syz.0.380,8275,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.671920][ T8275] (syz.0.380,8275,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.672219][ T8275] (syz.0.380,8275,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 74.672664][ T8275] (syz.0.380,8275,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 74.695387][ T8275] JBD2: Ignoring recovery information on journal [ 74.711027][ T6577] VFS: Lookup of '.¨' in minix loop1 would have caused loop [ 74.711317][ T6577] VFS: Lookup of '.¨' in minix loop1 would have caused loop [ 74.728073][ T8275] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 74.800351][ T8226] hfsplus: b-tree write err: -5, ino 4 [ 74.892306][ T6581] ocfs2: Unmounting device (7,0) on (node local) [ 75.060014][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 75.149259][ T8297] FAULT_INJECTION: forcing a failure. [ 75.149259][ T8297] name failslab, interval 1, probability 0, space 0, times 0 [ 75.151811][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.0.389 Not tainted syzkaller #0 PREEMPT [ 75.151831][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.151837][ T8297] Call trace: [ 75.151841][ T8297] show_stack+0x2c/0x3c (C) [ 75.151856][ T8297] __dump_stack+0x30/0x40 [ 75.151866][ T8297] dump_stack_lvl+0xd8/0x12c [ 75.151871][ T8297] dump_stack+0x1c/0x28 [ 75.151876][ T8297] should_fail_ex+0x41c/0x594 [ 75.151883][ T8297] should_failslab+0xc0/0x128 [ 75.151891][ T8297] kmem_cache_alloc_noprof+0x90/0x680 [ 75.151896][ T8297] security_file_alloc+0x38/0x320 [ 75.151904][ T8297] init_file+0x90/0x2ac [ 75.151910][ T8297] alloc_empty_file+0x74/0x1c0 [ 75.151916][ T8297] alloc_file_pseudo+0x120/0x1f4 [ 75.151922][ T8297] anon_inode_getfd+0xe0/0x1d0 [ 75.151928][ T8297] bpf_prog_new_fd+0x58/0x74 [ 75.151934][ T8297] bpf_prog_load+0x1060/0x14b8 [ 75.151939][ T8297] __sys_bpf+0x45c/0x638 [ 75.151944][ T8297] __arm64_sys_bpf+0x80/0x98 [ 75.151950][ T8297] invoke_syscall+0x98/0x254 [ 75.151955][ T8297] el0_svc_common+0xe8/0x23c [ 75.151961][ T8297] do_el0_svc+0x48/0x58 [ 75.151966][ T8297] el0_svc+0x5c/0x26c [ 75.151973][ T8297] el0t_64_sync_handler+0x84/0x12c [ 75.151979][ T8297] el0t_64_sync+0x198/0x19c [ 75.176598][ T6587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.177566][ T6587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.178706][ T6587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.182007][ T6587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.186611][ T6587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.247543][ T8228] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.326711][ T8228] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.376946][ T8228] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.446944][ T8228] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.475117][ T8298] chnl_net:caif_netlink_parms(): no params data found [ 75.502660][ T8320] (syz.2.395,8320,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 75.506248][ T8320] (syz.2.395,8320,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 75.509063][ T8326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 75.509676][ T8320] (syz.2.395,8320,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 75.515077][ T8320] (syz.2.395,8320,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 75.531854][ T8320] JBD2: Ignoring recovery information on journal [ 75.563017][ T8320] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 75.572482][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.572566][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.572624][ T8298] bridge_slave_0: entered allmulticast mode [ 75.573161][ T8298] bridge_slave_0: entered promiscuous mode [ 75.575251][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.575296][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.575353][ T8298] bridge_slave_1: entered allmulticast mode [ 75.575805][ T8298] bridge_slave_1: entered promiscuous mode [ 75.586244][ T8298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.589069][ T8298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.612002][ T8298] team0: Port device team_slave_0 added [ 75.612893][ T8298] team0: Port device team_slave_1 added [ 75.647667][ T8320] (syz.2.395,8320,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2a7897a5, computed 0xda902c08. Applying ECC. [ 75.650394][ T8298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.650405][ T8298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.650422][ T8298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.652732][ T8298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.652746][ T8298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.652761][ T8298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.693193][ T8320] (syz.2.395,8320,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2a7897a5, computed 0x9b5b40a8 [ 75.693248][ T8320] (syz.2.395,8320,0):ocfs2_search_chain:1818 ERROR: status = -5 [ 75.693258][ T8320] (syz.2.395,8320,0):ocfs2_search_chain:1941 ERROR: status = -5 [ 75.693267][ T8320] (syz.2.395,8320,0):ocfs2_claim_suballoc_bits:2021 ERROR: status = -5 [ 75.693276][ T8320] (syz.2.395,8320,0):ocfs2_claim_suballoc_bits:2074 ERROR: status = -5 [ 75.693284][ T8320] (syz.2.395,8320,0):ocfs2_claim_new_inode:2309 ERROR: status = -5 [ 75.693291][ T8320] (syz.2.395,8320,0):ocfs2_claim_new_inode:2324 ERROR: status = -5 [ 75.693298][ T8320] (syz.2.395,8320,0):ocfs2_mknod_locked:642 ERROR: status = -5 [ 75.693305][ T8320] (syz.2.395,8320,0):ocfs2_mknod:389 ERROR: status = -5 [ 75.693472][ T8320] (syz.2.395,8320,0):ocfs2_mknod:506 ERROR: status = -5 [ 75.693479][ T8320] (syz.2.395,8320,0):ocfs2_create:679 ERROR: status = -5 [ 75.776538][ T8228] bridge_slave_1: left allmulticast mode [ 75.776604][ T8228] bridge_slave_1: left promiscuous mode [ 75.777350][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.789515][ T8228] bridge_slave_0: left allmulticast mode [ 75.789545][ T8228] bridge_slave_0: left promiscuous mode [ 75.791117][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.792001][ T6582] ocfs2: Unmounting device (7,2) on (node local) [ 75.844631][ T8326] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 75.844680][ T8326] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 64512 [ 75.844692][ T8326] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.397: Failed to acquire dquot type 0 [ 75.859462][ T8343] FAT-fs (loop3): Directory bread(block 64) failed [ 75.859504][ T8343] FAT-fs (loop3): Directory bread(block 65) failed [ 75.859526][ T8343] FAT-fs (loop3): Directory bread(block 66) failed [ 75.859536][ T8343] FAT-fs (loop3): Directory bread(block 67) failed [ 75.859553][ T8343] FAT-fs (loop3): Directory bread(block 68) failed [ 75.859562][ T8343] FAT-fs (loop3): Directory bread(block 69) failed [ 75.859579][ T8343] FAT-fs (loop3): Directory bread(block 70) failed [ 75.859588][ T8343] FAT-fs (loop3): Directory bread(block 71) failed [ 75.859611][ T8343] FAT-fs (loop3): Directory bread(block 72) failed [ 75.859620][ T8343] FAT-fs (loop3): Directory bread(block 73) failed [ 75.885386][ T8345] FAULT_INJECTION: forcing a failure. [ 75.885386][ T8345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.886127][ T8326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 75.890461][ T8345] CPU: 1 UID: 0 PID: 8345 Comm: syz.2.400 Not tainted syzkaller #0 PREEMPT [ 75.890494][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.890501][ T8345] Call trace: [ 75.890504][ T8345] show_stack+0x2c/0x3c (C) [ 75.890523][ T8345] __dump_stack+0x30/0x40 [ 75.890530][ T8345] dump_stack_lvl+0xd8/0x12c [ 75.890537][ T8345] dump_stack+0x1c/0x28 [ 75.890543][ T8345] should_fail_ex+0x41c/0x594 [ 75.890550][ T8345] should_fail+0x14/0x24 [ 75.890555][ T8345] should_fail_usercopy+0x20/0x30 [ 75.890561][ T8345] simple_read_from_buffer+0xc4/0x254 [ 75.890568][ T8345] proc_fail_nth_read+0x1a0/0x23c [ 75.890576][ T8345] vfs_read+0x228/0x93c [ 75.890582][ T8345] ksys_read+0x120/0x210 [ 75.890587][ T8345] __arm64_sys_read+0x7c/0x90 [ 75.890592][ T8345] invoke_syscall+0x98/0x254 [ 75.890598][ T8345] el0_svc_common+0xe8/0x23c [ 75.890603][ T8345] do_el0_svc+0x48/0x58 [ 75.890609][ T8345] el0_svc+0x5c/0x26c [ 75.890616][ T8345] el0t_64_sync_handler+0x84/0x12c [ 75.890622][ T8345] el0t_64_sync+0x198/0x19c [ 76.068965][ T6698] loop2: p1 < > p3 < p5 > p4 [ 76.072161][ T6698] loop2: p4 size 3081 extends beyond EOD, truncated [ 76.073911][ T6698] loop2: p5 size 3081 extends beyond EOD, truncated [ 76.094193][ T8351] loop2: p1 < > p3 < p5 > p4 [ 76.097187][ T8351] loop2: p4 size 3081 extends beyond EOD, truncated [ 76.098635][ T8351] loop2: p5 size 3081 extends beyond EOD, truncated [ 76.180610][ T8228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.227466][ T8228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.266112][ T8228] bond0 (unregistering): Released all slaves [ 76.279651][ T8228] bond1 (unregistering): Released all slaves [ 76.286663][ T8228] bond2 (unregistering): Released all slaves [ 76.339270][ T8346] tipc: Started in network mode [ 76.339331][ T8346] tipc: Node identity 629134f075de, cluster identity 6 [ 76.340554][ T8346] tipc: Enabled bearer , priority 0 [ 76.343629][ T8350] syzkaller0: entered promiscuous mode [ 76.354844][ T8350] syzkaller0: entered allmulticast mode [ 76.397412][ T8359] tipc: Resetting bearer [ 76.450973][ T8336] tipc: Resetting bearer [ 76.472824][ T8336] tipc: Disabling bearer [ 76.524159][ T8298] hsr_slave_0: entered promiscuous mode [ 76.525661][ T8298] hsr_slave_1: entered promiscuous mode [ 76.527056][ T8298] debugfs: 'hsr0' already exists in 'hsr' [ 76.528022][ T8298] Cannot create hsr debugfs directory [ 76.587442][ T6698] udevd[6698]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 76.591148][ T6567] udevd[6567]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 76.597676][ T6826] udevd[6826]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 76.599940][ T6571] udevd[6571]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 76.607887][ T6571] udevd[6571]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 76.610476][ T6567] udevd[6567]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 76.615471][ T6826] udevd[6826]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 76.621856][ T6698] udevd[6698]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 76.630827][ T6826] udevd[6826]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 76.636315][ T6567] udevd[6567]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 76.745870][ T8365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.405'. [ 76.746086][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.405'. [ 76.779282][ T8378] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 76.880915][ T8391] netlink: 104 bytes leftover after parsing attributes in process `syz.2.411'. [ 76.893063][ T8387] (syz.3.410,8387,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.896600][ T8387] (syz.3.410,8387,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.899487][ T8387] (syz.3.410,8387,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 76.914445][ T8387] (syz.3.410,8387,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 76.930325][ T8387] JBD2: Ignoring recovery information on journal [ 76.944555][ T8387] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 77.027452][ T8387] (syz.3.410,8387,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2a7897a5, computed 0xda902c08. Applying ECC. [ 77.031740][ T8387] (syz.3.410,8387,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2a7897a5, computed 0x9b5b40a8 [ 77.034495][ T8387] (syz.3.410,8387,1):ocfs2_search_chain:1818 ERROR: status = -5 [ 77.034520][ T8387] (syz.3.410,8387,1):ocfs2_search_chain:1941 ERROR: status = -5 [ 77.034535][ T8387] (syz.3.410,8387,1):ocfs2_claim_suballoc_bits:2021 ERROR: status = -5 [ 77.034551][ T8387] (syz.3.410,8387,1):ocfs2_claim_suballoc_bits:2074 ERROR: status = -5 [ 77.034561][ T8387] (syz.3.410,8387,1):ocfs2_claim_new_inode:2309 ERROR: status = -5 [ 77.034568][ T8387] (syz.3.410,8387,1):ocfs2_claim_new_inode:2324 ERROR: status = -5 [ 77.034576][ T8387] (syz.3.410,8387,1):ocfs2_mknod_locked:642 ERROR: status = -5 [ 77.034583][ T8387] (syz.3.410,8387,1):ocfs2_mknod:389 ERROR: status = -5 [ 77.034774][ T8387] (syz.3.410,8387,1):ocfs2_mknod:506 ERROR: status = -5 [ 77.034783][ T8387] (syz.3.410,8387,1):ocfs2_create:679 ERROR: status = -5 [ 77.059758][ T8228] hsr_slave_0: left promiscuous mode [ 77.062000][ T8228] hsr_slave_1: left promiscuous mode [ 77.064454][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.064493][ T8228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.066325][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.066339][ T8228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.103380][ T8228] veth1_macvtap: left promiscuous mode [ 77.103463][ T8228] veth0_macvtap: left promiscuous mode [ 77.105683][ T8228] veth1_vlan: left promiscuous mode [ 77.105842][ T8228] veth0_vlan: left promiscuous mode [ 77.108878][ T6578] ocfs2: Unmounting device (7,3) on (node local) [ 77.233874][ T6584] Bluetooth: hci0: command tx timeout [ 77.581417][ T8421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.417'. [ 77.795296][ T8407] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 77.796708][ T8407] F2FS-fs (loop2): build fault injection rate: 7 [ 77.797688][ T8407] F2FS-fs (loop2): build fault injection type: 0x40004 [ 77.798927][ T8407] F2FS-fs (loop2): invalid crc value [ 77.831573][ T8407] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x148/0x4a8 [ 77.833619][ T8407] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4ec/0x7b0 [ 77.841124][ T8407] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4ec/0x7b0 [ 77.846624][ T8407] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x17c/0x7b0 [ 77.870519][ T8407] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x148/0x4a8 [ 77.879836][ T8407] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x148/0x4a8 [ 77.918420][ T8407] F2FS-fs (loop2): Bad quota inode 2:255 [ 77.919583][ T8407] F2FS-fs (loop2): Failed to enable quota tracking (type=2, err=-2). Please run fsck to fix. [ 77.921393][ T8407] F2FS-fs (loop2): Cannot turn on quotas: error -2 [ 77.922708][ T8407] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 77.924539][ T8407] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_recover_fsync_data+0x3b0/0x7458 [ 77.929452][ T8407] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e954 [ 77.949204][ T6582] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x70/0x1ec [ 77.949580][ T6582] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x420/0x1b50 [ 77.949596][ T6582] F2FS-fs (loop2): invalid blkaddr: 514, type: 10, run fsck to fix. [ 77.950862][ T6582] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x420/0x1b50 [ 77.950877][ T6582] F2FS-fs (loop2): invalid blkaddr: 517, type: 10, run fsck to fix. [ 77.952850][ T6582] F2FS-fs (loop2): invalid blkaddr: 1026, type: 10, run fsck to fix. [ 77.955386][ T6582] F2FS-fs (loop2): invalid blkaddr: 512, type: 10, run fsck to fix. [ 77.955418][ T6582] F2FS-fs (loop2): invalid blkaddr: 515, type: 10, run fsck to fix. [ 78.024616][ T8228] team0 (unregistering): Port device team_slave_1 removed [ 78.053159][ T8228] team0 (unregistering): Port device team_slave_0 removed [ 78.407417][ T8440] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 78.463358][ T8438] f2fs: Unknown parameter 'jfmt' [ 78.483145][ T8298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.484877][ T8298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.492041][ T8298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.499945][ T8298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.583633][ T8298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.594503][ T8298] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.598093][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.598139][ T2269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.617507][ T2269] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.617560][ T2269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.660081][ T8298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.697976][ T8452] set_capacity_and_notify: 11 callbacks suppressed [ 78.699243][ T8452] loop3: detected capacity change from 0 to 32768 [ 78.705844][ T8452] (syz.3.424,8452,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.708820][ T8452] (syz.3.424,8452,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.717315][ T8452] (syz.3.424,8452,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 78.717802][ T8452] (syz.3.424,8452,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 78.730765][ T8452] JBD2: Ignoring recovery information on journal [ 78.756806][ T8298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.806698][ T8452] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 78.831257][ T8480] loop2: detected capacity change from 0 to 512 [ 78.854762][ T8480] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.428: invalid indirect mapped block 1024 (level 0) [ 78.857887][ T8452] (syz.3.424,8452,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2a7897a5, computed 0xda902c08. Applying ECC. [ 78.858529][ T8480] EXT4-fs (loop2): Remounting filesystem read-only [ 78.859005][ T8452] (syz.3.424,8452,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2a7897a5, computed 0x9b5b40a8 [ 78.859027][ T8452] (syz.3.424,8452,0):ocfs2_search_chain:1818 ERROR: status = -5 [ 78.859038][ T8452] (syz.3.424,8452,0):ocfs2_search_chain:1941 ERROR: status = -5 [ 78.859047][ T8452] (syz.3.424,8452,0):ocfs2_claim_suballoc_bits:2021 ERROR: status = -5 [ 78.859055][ T8452] (syz.3.424,8452,0):ocfs2_claim_suballoc_bits:2074 ERROR: status = -5 [ 78.859062][ T8452] (syz.3.424,8452,0):ocfs2_claim_new_inode:2309 ERROR: status = -5 [ 78.859069][ T8452] (syz.3.424,8452,0):ocfs2_claim_new_inode:2324 ERROR: status = -5 [ 78.859076][ T8452] (syz.3.424,8452,0):ocfs2_mknod_locked:642 ERROR: status = -5 [ 78.859083][ T8452] (syz.3.424,8452,0):ocfs2_mknod:389 ERROR: status = -5 [ 78.859233][ T8452] (syz.3.424,8452,0):ocfs2_mknod:506 ERROR: status = -5 [ 78.859239][ T8452] (syz.3.424,8452,0):ocfs2_create:679 ERROR: status = -5 [ 78.861857][ T8480] EXT4-fs (loop2): 1 truncate cleaned up [ 78.865714][ T8480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.888557][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 78.909957][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.953040][ T8298] veth0_vlan: entered promiscuous mode [ 78.964739][ T6578] ocfs2: Unmounting device (7,3) on (node local) [ 78.975925][ T8298] veth1_vlan: entered promiscuous mode [ 78.987830][ T8298] veth0_macvtap: entered promiscuous mode [ 78.995508][ T8298] veth1_macvtap: entered promiscuous mode [ 79.008574][ T8298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.017389][ T8298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.020669][ T8229] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.020822][ T8229] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.021166][ T8229] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.021195][ T8229] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.062284][ T350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.062315][ T350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.100137][ T8226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.100177][ T8226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.226894][ T8504] loop3: detected capacity change from 0 to 256 [ 79.238798][ T8502] loop2: detected capacity change from 0 to 1024 [ 79.249107][ T8502] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.250370][ T8502] EXT4-fs: inline encryption not supported [ 79.252674][ T8502] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.269028][ T8502] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.433: bad orphan inode 11 [ 79.271041][ T8502] EXT4-fs (loop2): Remounting filesystem read-only [ 79.271582][ T8502] ext4_test_bit(bit=10, block=4) = 1 [ 79.271599][ T8502] is_bad_inode(inode)=0 [ 79.271611][ T8502] NEXT_ORPHAN(inode)=3254779904 [ 79.271621][ T8502] max_ino=32 [ 79.271627][ T8502] i_nlink=0 [ 79.272282][ T8502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.321374][ T6584] Bluetooth: hci0: command tx timeout [ 79.447996][ T8532] loop5: detected capacity change from 0 to 1024 [ 79.771848][ T8561] loop5: detected capacity change from 0 to 16 [ 79.789028][ T8561] erofs (device loop5): mounted with root inode @ nid 36. [ 79.794588][ T8561] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 79.799134][ T8561] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 79.803841][ T8561] erofs (device loop5): read error -117 @ 72 of nid 36 [ 80.121514][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.177474][ T8572] fuse: Bad value for 'fd' [ 80.320698][ T8575] loop2: detected capacity change from 0 to 32768 [ 80.328709][ T8575] (syz.2.443,8575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 80.328829][ T8575] (syz.2.443,8575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 80.329096][ T8575] (syz.2.443,8575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 80.329595][ T8575] (syz.2.443,8575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 80.337697][ T8571] loop3: detected capacity change from 0 to 32768 [ 80.344286][ T8575] JBD2: Ignoring recovery information on journal [ 80.345363][ T8571] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 87c122b8-c2cd-46a0-be39-a28fc4759eda [ 80.345392][ T8571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.442 (8571) [ 80.356125][ T8571] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.360627][ T8571] BTRFS info (device loop3 state S): using crc32c (crc32c-lib) checksum algorithm [ 80.379666][ T8575] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 80.409090][ T2270] BTRFS warning (device loop3 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 80.416770][ T8229] BTRFS warning (device loop3 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored [ 80.422440][ T8244] BTRFS warning (device loop3 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored [ 80.428872][ T2270] BTRFS warning (device loop3 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored [ 80.434312][ T8571] BTRFS error (device loop3 state S): chunk 5242880 has missing dev extent, have 0 expect 1 [ 80.436667][ T8571] BTRFS error (device loop3 state S): failed to verify dev extents against chunks: -117 [ 80.447751][ T8575] (syz.2.443,8575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2a7897a5, computed 0xda902c08. Applying ECC. [ 80.447794][ T8575] (syz.2.443,8575,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2a7897a5, computed 0x9b5b40a8 [ 80.447809][ T8575] (syz.2.443,8575,1):ocfs2_search_chain:1818 ERROR: status = -5 [ 80.447818][ T8575] (syz.2.443,8575,1):ocfs2_search_chain:1941 ERROR: status = -5 [ 80.447825][ T8575] (syz.2.443,8575,1):ocfs2_claim_suballoc_bits:2021 ERROR: status = -5 [ 80.447833][ T8575] (syz.2.443,8575,1):ocfs2_claim_suballoc_bits:2074 ERROR: status = -5 [ 80.447841][ T8575] (syz.2.443,8575,1):ocfs2_claim_new_inode:2309 ERROR: status = -5 [ 80.447849][ T8575] (syz.2.443,8575,1):ocfs2_claim_new_inode:2324 ERROR: status = -5 [ 80.447856][ T8575] (syz.2.443,8575,1):ocfs2_mknod_locked:642 ERROR: status = -5 [ 80.447863][ T8575] (syz.2.443,8575,1):ocfs2_mknod:389 ERROR: status = -5 [ 80.447984][ T8575] (syz.2.443,8575,1):ocfs2_mknod:506 ERROR: status = -5 [ 80.447998][ T8575] (syz.2.443,8575,1):ocfs2_create:679 ERROR: status = -5 [ 80.450867][ T8571] BTRFS error (device loop3 state S): open_ctree failed: -117 [ 80.476363][ T8575] FAULT_INJECTION: forcing a failure. [ 80.476363][ T8575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.476400][ T8575] CPU: 1 UID: 0 PID: 8575 Comm: syz.2.443 Not tainted syzkaller #0 PREEMPT [ 80.476411][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 80.476418][ T8575] Call trace: [ 80.476422][ T8575] show_stack+0x2c/0x3c (C) [ 80.476438][ T8575] __dump_stack+0x30/0x40 [ 80.476446][ T8575] dump_stack_lvl+0xd8/0x12c [ 80.476452][ T8575] dump_stack+0x1c/0x28 [ 80.476457][ T8575] should_fail_ex+0x41c/0x594 [ 80.476464][ T8575] should_fail+0x14/0x24 [ 80.476469][ T8575] should_fail_usercopy+0x20/0x30 [ 80.476474][ T8575] simple_read_from_buffer+0xc4/0x254 [ 80.476482][ T8575] proc_fail_nth_read+0x1a0/0x23c [ 80.476489][ T8575] vfs_read+0x228/0x93c [ 80.476495][ T8575] ksys_read+0x120/0x210 [ 80.476500][ T8575] __arm64_sys_read+0x7c/0x90 [ 80.476505][ T8575] invoke_syscall+0x98/0x254 [ 80.476511][ T8575] el0_svc_common+0xe8/0x23c [ 80.476516][ T8575] do_el0_svc+0x48/0x58 [ 80.476522][ T8575] el0_svc+0x5c/0x26c [ 80.476529][ T8575] el0t_64_sync_handler+0x84/0x12c [ 80.476535][ T8575] el0t_64_sync+0x198/0x19c [ 80.592981][ T6582] ocfs2: Unmounting device (7,2) on (node local) [ 80.930102][ T8626] binder_alloc: binder_alloc_mmap_handler: 8625 20ffd000-21000000 already mapped failed -16 [ 80.930219][ T8626] binder_alloc: binder_alloc_mmap_handler: 8625 20ffd000-21000000 already mapped failed -16 [ 80.930262][ T8626] binder_alloc: binder_alloc_mmap_handler: 8625 20ffd000-21000000 already mapped failed -16 [ 80.930305][ T8626] binder_alloc: binder_alloc_mmap_handler: 8625 20ffd000-21000000 already mapped failed -16 [ 80.930346][ T8626] binder_alloc: binder_alloc_mmap_handler: 8625 20ffd000-21000000 already mapped failed -16 [ 80.930417][ T8626] binder_alloc: binder_alloc_mmap_handler: 8625 20ffd000-21000000 already mapped failed -16 [ 80.930465][ T8626] binder_alloc: binder_alloc_mmap_handler: 8625 20ffd000-21000000 already mapped failed -16 [ 80.930506][ T8626] binder_alloc: binder_alloc_mmap_handler: 8625 20ffd000-21000000 already mapped failed -16 [ 80.930546][ T8626] binder_alloc: binder_alloc_mmap_handler: 8625 20ffd000-21000000 already mapped failed -16 [ 80.939256][ T8626] binder_alloc: binder_alloc_mmap_handler: 8625 20ffd000-21000000 already mapped failed -16 [ 80.955612][ T8627] binder: 8625:8627 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 80.955669][ T8627] binder: 8625:8627 got transaction to invalid handle, 1 [ 80.955714][ T8627] binder: 8625:8627 cannot find target node [ 80.955729][ T8627] binder: 8625:8627 transaction async to 0:0 failed 3/29201/-22, code 0 size 72-24 line 3232 [ 80.971834][ T8620] loop5: detected capacity change from 0 to 32768 [ 80.975258][ T8620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.450 (8620) [ 80.980544][ T8620] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 80.982385][ T8620] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 80.985143][ T8620] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 81.008321][ T8620] BTRFS info (device loop5): rebuilding free space tree [ 81.015781][ T7540] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.020155][ T8620] BTRFS info (device loop5): disabling free space tree [ 81.021495][ T8620] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.024657][ T8622] loop3: detected capacity change from 0 to 32768 [ 81.025984][ T8620] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.030807][ T8620] BTRFS info (device loop5): enabling ssd optimizations [ 81.032177][ T8620] BTRFS info (device loop5): enabling disk space caching [ 81.033592][ T8620] BTRFS info (device loop5): force clearing of disk cache [ 81.035513][ T8620] BTRFS info (device loop5): enabling auto defrag [ 81.036747][ T8620] BTRFS info (device loop5): max_inline set to 0 [ 81.056347][ T8622] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.091721][ T8622] XFS (loop3): Ending clean mount [ 81.097484][ T8620] bpf: Bad value for 'uid' [ 81.100382][ T8622] XFS (loop3): Quotacheck needed: Please wait. [ 81.120497][ T8622] XFS (loop3): Quotacheck: Done. [ 81.159516][ T8244] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 81.179774][ T6578] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.195911][ T8298] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.383949][ T6584] Bluetooth: hci0: command tx timeout [ 81.442966][ T8665] (syz.5.455,8665,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.447706][ T8665] (syz.5.455,8665,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.451002][ T8665] (syz.5.455,8665,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 81.454915][ T8665] (syz.5.455,8665,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 81.474277][ T8665] JBD2: Ignoring recovery information on journal [ 81.495569][ T8665] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 81.573530][ T8665] (syz.5.455,8665,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2a7897a5, computed 0xda902c08. Applying ECC. [ 81.580823][ T8665] (syz.5.455,8665,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2a7897a5, computed 0x9b5b40a8 [ 81.580882][ T8665] (syz.5.455,8665,0):ocfs2_search_chain:1818 ERROR: status = -5 [ 81.580899][ T8665] (syz.5.455,8665,0):ocfs2_search_chain:1941 ERROR: status = -5 [ 81.580916][ T8665] (syz.5.455,8665,0):ocfs2_claim_suballoc_bits:2021 ERROR: status = -5 [ 81.580928][ T8665] (syz.5.455,8665,0):ocfs2_claim_suballoc_bits:2074 ERROR: status = -5 [ 81.580938][ T8665] (syz.5.455,8665,0):ocfs2_claim_new_inode:2309 ERROR: status = -5 [ 81.580948][ T8665] (syz.5.455,8665,0):ocfs2_claim_new_inode:2324 ERROR: status = -5 [ 81.580957][ T8665] (syz.5.455,8665,0):ocfs2_mknod_locked:642 ERROR: status = -5 [ 81.580967][ T8665] (syz.5.455,8665,0):ocfs2_mknod:389 ERROR: status = -5 [ 81.581141][ T8665] (syz.5.455,8665,0):ocfs2_mknod:506 ERROR: status = -5 [ 81.581155][ T8665] (syz.5.455,8665,0):ocfs2_create:679 ERROR: status = -5 [ 81.621404][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.628166][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.660188][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.685336][ T8298] ocfs2: Unmounting device (7,5) on (node local) [ 81.732104][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.769619][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.772063][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'. [ 81.781934][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.800116][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.824014][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'. [ 81.857170][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.859424][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.893202][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 81.975828][ T8672] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 81.977305][ T8672] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.999014][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 82.007813][ T8672] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 82.094183][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 82.114821][ T8672] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 82.124853][ T8672] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.139894][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 82.166776][ T8702] EXT4-fs: Ignoring removed nobh option [ 82.175467][ T8702] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.468: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 82.179194][ T8702] EXT4-fs (loop5): Remounting filesystem read-only [ 82.184179][ T8702] EXT4-fs (loop5): get root inode failed [ 82.186247][ T8702] EXT4-fs (loop5): mount failed [ 82.269787][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 82.306059][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 82.310304][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 82.317245][ T8680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 82.336804][ T8725] netlink: 'syz.5.472': attribute type 2 has an invalid length. [ 82.341026][ T8725] !: entered promiscuous mode [ 82.539769][ T8735] binder: 8733:8735 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 82.700283][ T8729] (syz.5.475,8729,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.700398][ T8729] (syz.5.475,8729,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.700668][ T8729] (syz.5.475,8729,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 82.701221][ T8729] (syz.5.475,8729,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x538eef10. Applying ECC. [ 82.717857][ T8729] JBD2: Ignoring recovery information on journal [ 82.749954][ T8729] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 82.793586][ T8734] F2FS-fs (loop2): invalid crc value [ 82.804720][ T8734] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 82.813037][ T8734] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.815834][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 82.833333][ T8729] (syz.5.475,8729,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2a7897a5, computed 0xda902c08. Applying ECC. [ 82.833385][ T8729] (syz.5.475,8729,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2a7897a5, computed 0x9b5b40a8 [ 82.838761][ T6582] syz-executor: attempt to access beyond end of device [ 82.838761][ T6582] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.838823][ T6582] CPU: 1 UID: 0 PID: 6582 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 82.838838][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 82.838843][ T6582] Call trace: [ 82.838846][ T6582] show_stack+0x2c/0x3c (C) [ 82.838862][ T6582] __dump_stack+0x30/0x40 [ 82.838871][ T6582] dump_stack_lvl+0xd8/0x12c [ 82.838877][ T6582] dump_stack+0x1c/0x28 [ 82.838882][ T6582] f2fs_handle_critical_error+0x34c/0x4b8 [ 82.838891][ T6582] f2fs_stop_checkpoint+0x5c/0x70 [ 82.838898][ T6582] f2fs_write_end_io+0x770/0xa78 [ 82.838904][ T6582] bio_endio+0x8d4/0x910 [ 82.838911][ T6582] submit_bio_noacct+0xd44/0x186c [ 82.838917][ T6582] submit_bio+0x3b4/0x550 [ 82.838922][ T6582] f2fs_submit_write_bio+0x124/0x324 [ 82.838927][ T6582] __submit_merged_bio+0x224/0x6d4 [ 82.838932][ T6582] __submit_merged_write_cond+0x250/0x4ac [ 82.838937][ T6582] f2fs_write_data_pages+0x1dd4/0x2878 [ 82.838942][ T6582] do_writepages+0x270/0x468 [ 82.838950][ T6582] filemap_fdatawrite+0x14c/0x1f4 [ 82.838956][ T6582] f2fs_sync_dirty_inodes+0x2a0/0x788 [ 82.838963][ T6582] f2fs_write_checkpoint+0x708/0x1c28 [ 82.838969][ T6582] kill_f2fs_super+0x230/0x580 [ 82.838974][ T6582] deactivate_locked_super+0xc4/0x12c [ 82.838981][ T6582] deactivate_super+0xe0/0x100 [ 82.838987][ T6582] cleanup_mnt+0x31c/0x3ac [ 82.838994][ T6582] __cleanup_mnt+0x20/0x30 [ 82.839000][ T6582] task_work_run+0x1dc/0x260 [ 82.839008][ T6582] exit_to_user_mode_loop+0x10c/0x18c [ 82.839014][ T6582] el0_svc+0x17c/0x26c [ 82.839021][ T6582] el0t_64_sync_handler+0x84/0x12c [ 82.839027][ T6582] el0t_64_sync+0x198/0x19c [ 82.839034][ T6582] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 82.844058][ T8729] (syz.5.475,8729,1):ocfs2_search_chain:1818 ERROR: status = -5 [ 82.844084][ T8729] (syz.5.475,8729,1):ocfs2_search_chain:1941 ERROR: status = -5 [ 82.844097][ T8729] (syz.5.475,8729,1):ocfs2_claim_suballoc_bits:2021 ERROR: status = -5 [ 82.844109][ T8729] (syz.5.475,8729,1):ocfs2_claim_suballoc_bits:2074 ERROR: status = -5 [ 82.844119][ T8729] (syz.5.475,8729,1):ocfs2_claim_new_inode:2309 ERROR: status = -5 [ 82.844128][ T8729] (syz.5.475,8729,1):ocfs2_claim_new_inode:2324 ERROR: status = -5 [ 82.844143][ T8729] (syz.5.475,8729,1):ocfs2_mknod_locked:642 ERROR: status = -5 [ 82.844152][ T8729] (syz.5.475,8729,1):ocfs2_mknod:389 ERROR: status = -5 [ 82.844300][ T8729] (syz.5.475,8729,1):ocfs2_mknod:506 ERROR: status = -5 [ 82.844311][ T8729] (syz.5.475,8729,1):ocfs2_create:679 ERROR: status = -5 [ 82.957758][ T8298] ocfs2: Unmounting device (7,5) on (node local) [ 83.120548][ T8750] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 83.306408][ T8766] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 83.463793][ T6584] Bluetooth: hci0: command tx timeout [ 83.498696][ T8768] ocfs2: Unknown parameter 'b`rrier' [ 83.603277][ T8780] netlink: 'syz.2.490': attribute type 2 has an invalid length. [ 83.631839][ T8782] netlink: 80 bytes leftover after parsing attributes in process `syz.0.491'. [ 83.702767][ T8774] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.727226][ T8790] set_capacity_and_notify: 25 callbacks suppressed [ 83.727280][ T8790] loop2: detected capacity change from 0 to 512 [ 83.741730][ T8795] loop3: detected capacity change from 0 to 128 [ 83.743650][ T8774] XFS (loop5): Ending clean mount [ 83.745521][ T8795] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 83.748723][ T8774] XFS (loop5): Quotacheck needed: Please wait. [ 83.774583][ T8774] XFS (loop5): Quotacheck: Done. [ 83.806719][ T8298] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.825579][ T8795] hpfs: hpfs_map_sector(): read error [ 83.912897][ T8800] loop3: detected capacity change from 0 to 1024 [ 83.917452][ T8800] EXT4-fs: test_dummy_encryption requires encrypt feature [ 84.544928][ T8835] loop2: detected capacity change from 0 to 40427 [ 84.563905][ T8835] F2FS-fs (loop2): Image doesn't support compression [ 84.563933][ T8835] F2FS-fs (loop2): build fault injection rate: 684 [ 84.569991][ T8835] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 84.571877][ T8835] F2FS-fs (loop2): invalid crc value [ 84.608205][ T8832] overlayfs: cannot append lower layer [ 84.613300][ T8835] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 84.616457][ T8835] F2FS-fs (loop2): Start checkpoint disabled! [ 84.619202][ T8835] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 84.632474][ T8835] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 84.665834][ T8226] kworker/u8:35: attempt to access beyond end of device [ 84.665834][ T8226] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 84.665917][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: kworker/u8:35 Not tainted syzkaller #0 PREEMPT [ 84.665927][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 84.665932][ T8226] Workqueue: writeback wb_workfn (flush-7:2) [ 84.665950][ T8226] Call trace: [ 84.665953][ T8226] show_stack+0x2c/0x3c (C) [ 84.665965][ T8226] __dump_stack+0x30/0x40 [ 84.665972][ T8226] dump_stack_lvl+0xd8/0x12c [ 84.665977][ T8226] dump_stack+0x1c/0x28 [ 84.665982][ T8226] f2fs_handle_critical_error+0x34c/0x4b8 [ 84.665991][ T8226] f2fs_stop_checkpoint+0x5c/0x70 [ 84.665998][ T8226] f2fs_write_end_io+0x770/0xa78 [ 84.666003][ T8226] bio_endio+0x8d4/0x910 [ 84.666010][ T8226] submit_bio_noacct+0xd44/0x186c [ 84.666016][ T8226] submit_bio+0x3b4/0x550 [ 84.666021][ T8226] f2fs_submit_write_bio+0x124/0x324 [ 84.666026][ T8226] __submit_merged_bio+0x224/0x6d4 [ 84.666031][ T8226] __submit_merged_write_cond+0x39c/0x4ac [ 84.666035][ T8226] f2fs_submit_merged_write+0x38/0x48 [ 84.666040][ T8226] f2fs_sync_node_pages+0x1148/0x128c [ 84.666046][ T8226] f2fs_write_node_pages+0x278/0x618 [ 84.666052][ T8226] do_writepages+0x270/0x468 [ 84.666060][ T8226] __writeback_single_inode+0x144/0x16b8 [ 84.666066][ T8226] writeback_sb_inodes+0x73c/0x16b4 [ 84.666071][ T8226] wb_writeback+0x3b4/0xd70 [ 84.666077][ T8226] wb_workfn+0x320/0xdc0 [ 84.666082][ T8226] process_one_work+0x7c0/0x1558 [ 84.666089][ T8226] worker_thread+0x958/0xed8 [ 84.666095][ T8226] kthread+0x5fc/0x75c [ 84.666100][ T8226] ret_from_fork+0x10/0x20 [ 84.666108][ T8226] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 84.666126][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: kworker/u8:35 Not tainted syzkaller #0 PREEMPT [ 84.666132][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 84.666141][ T8226] Workqueue: writeback wb_workfn (flush-7:2) [ 84.666149][ T8226] Call trace: [ 84.666151][ T8226] show_stack+0x2c/0x3c (C) [ 84.666158][ T8226] __dump_stack+0x30/0x40 [ 84.666164][ T8226] dump_stack_lvl+0xd8/0x12c [ 84.666170][ T8226] dump_stack+0x1c/0x28 [ 84.666175][ T8226] f2fs_handle_critical_error+0x34c/0x4b8 [ 84.666182][ T8226] f2fs_stop_checkpoint+0x5c/0x70 [ 84.666188][ T8226] f2fs_write_end_io+0x770/0xa78 [ 84.666193][ T8226] bio_endio+0x8d4/0x910 [ 84.666200][ T8226] submit_bio_noacct+0xd44/0x186c [ 84.666205][ T8226] submit_bio+0x3b4/0x550 [ 84.666210][ T8226] f2fs_submit_write_bio+0x124/0x324 [ 84.666215][ T8226] __submit_merged_bio+0x224/0x6d4 [ 84.666220][ T8226] __submit_merged_write_cond+0x39c/0x4ac [ 84.666225][ T8226] f2fs_submit_merged_write+0x38/0x48 [ 84.666229][ T8226] f2fs_sync_node_pages+0x1148/0x128c [ 84.666235][ T8226] f2fs_write_node_pages+0x278/0x618 [ 84.666241][ T8226] do_writepages+0x270/0x468 [ 84.666248][ T8226] __writeback_single_inode+0x144/0x16b8 [ 84.666254][ T8226] writeback_sb_inodes+0x73c/0x16b4 [ 84.666260][ T8226] wb_writeback+0x3b4/0xd70 [ 84.666265][ T8226] wb_workfn+0x320/0xdc0 [ 84.666271][ T8226] process_one_work+0x7c0/0x1558 [ 84.666276][ T8226] worker_thread+0x958/0xed8 [ 84.666282][ T8226] kthread+0x5fc/0x75c [ 84.666288][ T8226] ret_from_fork+0x10/0x20 [ 84.666294][ T8226] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 84.731788][ T8841] syzkaller1: entered promiscuous mode [ 84.731825][ T8841] syzkaller1: entered allmulticast mode [ 84.749501][ T8831] loop3: detected capacity change from 0 to 32768 [ 84.771690][ T8831] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.794633][ T8831] XFS (loop3): Ending clean mount [ 84.830992][ T8831] netlink: 116 bytes leftover after parsing attributes in process `syz.3.505'. [ 84.834374][ T8831] nbd: couldn't find a device at index 1074069516 [ 85.092517][ T8854] loop2: detected capacity change from 0 to 256 [ 85.095027][ T8854] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 85.885818][ T6578] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.041564][ T8865] loop5: detected capacity change from 0 to 8 [ 86.042767][ T8865] SQUASHFS error: xz decompression failed, data probably corrupt [ 86.042780][ T8865] SQUASHFS error: Failed to read block 0x108: -5 [ 86.042786][ T8865] SQUASHFS error: Unable to read metadata cache entry [106] [ 86.042791][ T8865] SQUASHFS error: Unable to read inode 0x11f [ 86.134264][ T8858] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 86.135602][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 86.224360][ T8872] loop5: detected capacity change from 0 to 2048 [ 86.256563][ T8872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.301633][ T8867] loop2: detected capacity change from 0 to 32768 [ 86.316661][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.456346][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.524'. [ 86.634486][ T8918] loop2: detected capacity change from 0 to 7 [ 86.635893][ T8918] Dev loop2: unable to read RDB block 7 [ 86.635932][ T8918] loop2: unable to read partition table [ 86.635997][ T8918] loop2: partition table beyond EOD, truncated [ 86.636635][ T8918] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 87.152456][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 87.172097][ T8972] netlink: 'syz.0.557': attribute type 6 has an invalid length. [ 87.254539][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 87.271626][ T8978] vlan2: entered promiscuous mode [ 87.271678][ T8978] erspan0: entered promiscuous mode [ 87.763194][ T9010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'. [ 88.066773][ T9043] xt_hashlimit: size too large, truncated to 1048576 [ 88.129594][ T9033] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.544355][ T6692] Process accounting resumed [ 88.590435][ T9033] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 88.590616][ T9033] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 88.590644][ T9033] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 88.727754][ T31] audit: type=1326 audit(88.700:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83978fa8 code=0x7ffc0000 [ 88.756538][ T31] audit: type=1326 audit(88.700:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff849109d8 code=0x7ffc0000 [ 88.760027][ T31] audit: type=1326 audit(88.730:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff849109d8 code=0x7ffc0000 [ 88.763281][ T31] audit: type=1326 audit(88.730:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff849109d8 code=0x7ffc0000 [ 88.774681][ T31] audit: type=1326 audit(88.750:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff849109d8 code=0x7ffc0000 [ 88.779986][ T31] audit: type=1326 audit(88.750:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff849109d8 code=0x7ffc0000 [ 88.784154][ T31] audit: type=1326 audit(88.750:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff849109d8 code=0x7ffc0000 [ 88.784194][ T31] audit: type=1326 audit(88.750:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff849109d8 code=0x7ffc0000 [ 88.784209][ T31] audit: type=1326 audit(88.750:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff849109d8 code=0x7ffc0000 [ 88.784221][ T31] audit: type=1326 audit(88.750:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff849109d8 code=0x7ffc0000 [ 89.496951][ T9089] xt_NFQUEUE: number of total queues is 0 [ 91.909632][ T9229] set_capacity_and_notify: 2 callbacks suppressed [ 91.909868][ T9229] loop2: detected capacity change from 0 to 8192 [ 91.924937][ T6578] [ 91.925342][ T6578] ===================================================== [ 91.926451][ T6578] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 91.927627][ T6578] syzkaller #0 Not tainted [ 91.928288][ T6578] ----------------------------------------------------- [ 91.929381][ T6578] syz-executor/6578 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 91.930527][ T6578] ffff800097626150 (&p->sequence){+.-.}-{0:0}, at: __fprop_add_percpu_max+0x130/0x1f4 [ 91.932018][ T6578] [ 91.932018][ T6578] and this task is already holding: [ 91.933132][ T6578] ffff0000f5210240 (&xa->xa_lock#10){-.-.}-{3:3}, at: __folio_end_writeback+0x10c/0x6f8 [ 91.934695][ T6578] which would create a new lock dependency: [ 91.935636][ T6578] (&xa->xa_lock#10){-.-.}-{3:3} -> (&p->sequence){+.-.}-{0:0} [ 91.936818][ T6578] [ 91.936818][ T6578] but this new dependency connects a HARDIRQ-irq-safe lock: [ 91.938251][ T6578] (&xa->xa_lock#10){-.-.}-{3:3} [ 91.938281][ T6578] [ 91.938281][ T6578] ... which became HARDIRQ-irq-safe at: [ 91.940169][ T6578] lock_acquire+0x140/0x2e0 [ 91.940852][ T6578] _raw_spin_lock_irqsave+0x5c/0x7c [ 91.941652][ T6578] __folio_end_writeback+0x10c/0x6f8 [ 91.942458][ T6578] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 91.943391][ T6578] folio_end_writeback+0xd8/0x248 [ 91.944238][ T6578] end_buffer_async_write+0x20c/0x350 [ 91.945110][ T6578] end_bio_bh_io_sync+0xb0/0x184 [ 91.945928][ T6578] bio_endio+0x8d4/0x910 [ 91.946611][ T6578] blk_mq_end_request_batch+0x49c/0x105c [ 91.947499][ T6578] nvme_irq+0x1ec/0x240 [ 91.948147][ T6578] __handle_irq_event_percpu+0x20c/0x8e4 [ 91.949013][ T6578] handle_irq_event+0x9c/0x1d0 [ 91.949796][ T6578] handle_fasteoi_irq+0x328/0x8d8 [ 91.950631][ T6578] generic_handle_domain_irq+0xe0/0x140 [ 91.951540][ T6578] gic_handle_irq+0x6c/0x18c [ 91.952276][ T6578] call_on_irq_stack+0x30/0x48 [ 91.953030][ T6578] do_interrupt_handler+0xd4/0x138 [ 91.953845][ T6578] el1_interrupt+0x3c/0x60 [ 91.954532][ T6578] el1h_64_irq_handler+0x18/0x24 [ 91.955283][ T6578] el1h_64_irq+0x6c/0x70 [ 91.955931][ T6578] unmap_page_range+0xadc/0x30f8 [ 91.956674][ T6578] unmap_vmas+0x264/0x3d4 [ 91.957343][ T6578] exit_mmap+0x1b0/0xaac [ 91.958005][ T6578] __mmput+0xec/0x3fc [ 91.958591][ T6578] mmput+0x70/0xac [ 91.959155][ T6578] exit_mm+0x13c/0x200 [ 91.959784][ T6578] do_exit+0x4c4/0x1a1c [ 91.960439][ T6578] do_group_exit+0x194/0x22c [ 91.961132][ T6578] pid_child_should_wake+0x0/0x1dc [ 91.961937][ T6578] invoke_syscall+0x98/0x254 [ 91.962660][ T6578] el0_svc_common+0xe8/0x23c [ 91.963362][ T6578] do_el0_svc+0x48/0x58 [ 91.963974][ T6578] el0_svc+0x5c/0x26c [ 91.964591][ T6578] el0t_64_sync_handler+0x84/0x12c [ 91.965307][ T6578] el0t_64_sync+0x198/0x19c [ 91.965995][ T6578] [ 91.965995][ T6578] to a HARDIRQ-irq-unsafe lock: [ 91.966999][ T6578] (&p->sequence){+.-.}-{0:0} [ 91.967023][ T6578] [ 91.967023][ T6578] ... which became HARDIRQ-irq-unsafe at: [ 91.968883][ T6578] ... [ 91.968892][ T6578] lock_acquire+0x140/0x2e0 [ 91.969922][ T6578] fprop_new_period+0x3b8/0x718 [ 91.970682][ T6578] writeout_period+0x94/0x11c [ 91.971361][ T6578] call_timer_fn+0x19c/0x814 [ 91.972023][ T6578] __run_timer_base+0x51c/0x76c [ 91.972732][ T6578] run_timer_softirq+0x11c/0x194 [ 91.973472][ T6578] handle_softirqs+0x31c/0xc88 [ 91.974222][ T6578] __do_softirq+0x14/0x20 [ 91.974891][ T6578] ____do_softirq+0x14/0x20 [ 91.975577][ T6578] call_on_irq_stack+0x30/0x48 [ 91.976268][ T6578] do_softirq_own_stack+0x20/0x2c [ 91.977013][ T6578] __irq_exit_rcu+0x1b0/0x478 [ 91.977754][ T6578] irq_exit_rcu+0x14/0x84 [ 91.978419][ T6578] el0_interrupt+0x70/0x2bc [ 91.979128][ T6578] __el0_irq_handler_common+0x18/0x24 [ 91.979915][ T6578] el0t_64_irq_handler+0x10/0x1c [ 91.980649][ T6578] el0t_64_irq+0x198/0x19c [ 91.981334][ T6578] [ 91.981334][ T6578] other info that might help us debug this: [ 91.981334][ T6578] [ 91.982847][ T6578] Possible interrupt unsafe locking scenario: [ 91.982847][ T6578] [ 91.984000][ T6578] CPU0 CPU1 [ 91.984754][ T6578] ---- ---- [ 91.985594][ T6578] lock(&p->sequence); [ 91.986189][ T6578] local_irq_disable(); [ 91.987213][ T6578] lock(&xa->xa_lock#10); [ 91.988270][ T6578] lock(&p->sequence); [ 91.989267][ T6578] [ 91.989800][ T6578] lock(&xa->xa_lock#10); [ 91.990475][ T6578] [ 91.990475][ T6578] *** DEADLOCK *** [ 91.990475][ T6578] [ 91.991654][ T6578] 3 locks held by syz-executor/6578: [ 91.992425][ T6578] #0: ffff0000dc216420 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x24c/0xa3c [ 91.993808][ T6578] #1: ffff0000f5210638 (&fi->lock){+.+.}-{3:3}, at: fuse_writepage_end+0x138/0x454 [ 91.995262][ T6578] #2: ffff0000f5210240 (&xa->xa_lock#10){-.-.}-{3:3}, at: __folio_end_writeback+0x10c/0x6f8 [ 91.996807][ T6578] [ 91.996807][ T6578] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 91.998331][ T6578] -> (&xa->xa_lock#10){-.-.}-{3:3} { [ 91.999115][ T6578] IN-HARDIRQ-W at: [ 91.999740][ T6578] lock_acquire+0x140/0x2e0 [ 92.000660][ T6578] _raw_spin_lock_irqsave+0x5c/0x7c [ 92.001709][ T6578] __folio_end_writeback+0x10c/0x6f8 [ 92.002744][ T6578] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 92.003901][ T6578] folio_end_writeback+0xd8/0x248 [ 92.004919][ T6578] end_buffer_async_write+0x20c/0x350 [ 92.005969][ T6578] end_bio_bh_io_sync+0xb0/0x184 [ 92.006966][ T6578] bio_endio+0x8d4/0x910 [ 92.007850][ T6578] blk_mq_end_request_batch+0x49c/0x105c [ 92.008968][ T6578] nvme_irq+0x1ec/0x240 [ 92.009800][ T6578] __handle_irq_event_percpu+0x20c/0x8e4 [ 92.010834][ T6578] handle_irq_event+0x9c/0x1d0 [ 92.011759][ T6578] handle_fasteoi_irq+0x328/0x8d8 [ 92.012734][ T6578] generic_handle_domain_irq+0xe0/0x140 [ 92.013721][ T6578] gic_handle_irq+0x6c/0x18c [ 92.014609][ T6578] call_on_irq_stack+0x30/0x48 [ 92.015608][ T6578] do_interrupt_handler+0xd4/0x138 [ 92.016588][ T6578] el1_interrupt+0x3c/0x60 [ 92.017527][ T6578] el1h_64_irq_handler+0x18/0x24 [ 92.018444][ T6578] el1h_64_irq+0x6c/0x70 [ 92.019299][ T6578] unmap_page_range+0xadc/0x30f8 [ 92.020237][ T6578] unmap_vmas+0x264/0x3d4 [ 92.021162][ T6578] exit_mmap+0x1b0/0xaac [ 92.022077][ T6578] __mmput+0xec/0x3fc [ 92.022914][ T6578] mmput+0x70/0xac [ 92.023734][ T6578] exit_mm+0x13c/0x200 [ 92.024567][ T6578] do_exit+0x4c4/0x1a1c [ 92.025382][ T6578] do_group_exit+0x194/0x22c [ 92.026300][ T6578] pid_child_should_wake+0x0/0x1dc [ 92.027263][ T6578] invoke_syscall+0x98/0x254 [ 92.028203][ T6578] el0_svc_common+0xe8/0x23c [ 92.029136][ T6578] do_el0_svc+0x48/0x58 [ 92.029995][ T6578] el0_svc+0x5c/0x26c [ 92.030798][ T6578] el0t_64_sync_handler+0x84/0x12c [ 92.031828][ T6578] el0t_64_sync+0x198/0x19c [ 92.032688][ T6578] IN-SOFTIRQ-W at: [ 92.033269][ T6578] lock_acquire+0x140/0x2e0 [ 92.034205][ T6578] _raw_spin_lock_irqsave+0x5c/0x7c [ 92.035190][ T6578] __folio_end_writeback+0x10c/0x6f8 [ 92.036181][ T6578] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 92.037232][ T6578] folio_end_writeback+0xd8/0x248 [ 92.038259][ T6578] end_buffer_async_write+0x20c/0x350 [ 92.039262][ T6578] end_bio_bh_io_sync+0xb0/0x184 [ 92.040207][ T6578] bio_endio+0x8d4/0x910 [ 92.041080][ T6578] blk_update_request+0x474/0xba8 [ 92.042052][ T6578] blk_mq_end_request+0x54/0x88 [ 92.042995][ T6578] lo_complete_rq+0x124/0x274 [ 92.043944][ T6578] blk_done_softirq+0x11c/0x168 [ 92.044926][ T6578] handle_softirqs+0x31c/0xc88 [ 92.045904][ T6578] run_ksoftirqd+0x70/0xc0 [ 92.046833][ T6578] smpboot_thread_fn+0x4d8/0x9cc [ 92.047825][ T6578] kthread+0x5fc/0x75c [ 92.048716][ T6578] ret_from_fork+0x10/0x20 [ 92.049582][ T6578] INITIAL USE at: [ 92.050140][ T6578] lock_acquire+0x140/0x2e0 [ 92.051055][ T6578] _raw_spin_lock_irq+0x58/0x70 [ 92.052020][ T6578] shmem_add_to_page_cache+0x564/0xa24 [ 92.053008][ T6578] shmem_alloc_and_add_folio+0x758/0x10c4 [ 92.054127][ T6578] shmem_get_folio_gfp+0x4d4/0x159c [ 92.055102][ T6578] shmem_read_folio_gfp+0x8c/0xf0 [ 92.056059][ T6578] drm_gem_get_pages+0x1cc/0x7c0 [ 92.056974][ T6578] drm_gem_shmem_get_pages_locked+0x1d4/0x364 [ 92.058037][ T6578] drm_gem_shmem_pin_locked+0x1f8/0x410 [ 92.059089][ T6578] drm_gem_shmem_vmap_locked+0x3cc/0x658 [ 92.060118][ T6578] drm_gem_shmem_object_vmap+0x28/0x38 [ 92.061172][ T6578] drm_gem_vmap+0x104/0x1d8 [ 92.062044][ T6578] drm_client_buffer_vmap+0x68/0xb0 [ 92.063003][ T6578] drm_fbdev_shmem_driver_fbdev_probe+0x1f4/0x700 [ 92.064139][ T6578] __drm_fb_helper_initial_config_and_unlock+0x108c/0x1728 [ 92.065421][ T6578] drm_fb_helper_initial_config+0x3c/0x58 [ 92.066524][ T6578] drm_fbdev_client_hotplug+0x154/0x22c [ 92.067543][ T6578] drm_client_register+0x13c/0x1d4 [ 92.068482][ T6578] drm_fbdev_client_setup+0x194/0x3d0 [ 92.069505][ T6578] drm_client_setup+0x114/0x228 [ 92.070435][ T6578] vkms_create+0x370/0x420 [ 92.071267][ T6578] vkms_init+0x64/0x9c [ 92.072091][ T6578] do_one_initcall+0x248/0x9b4 [ 92.072995][ T6578] do_initcall_level+0x128/0x1c4 [ 92.073911][ T6578] do_initcalls+0x70/0xd0 [ 92.074795][ T6578] do_basic_setup+0x78/0x8c [ 92.075649][ T6578] kernel_init_freeable+0x268/0x39c [ 92.076615][ T6578] kernel_init+0x24/0x1dc [ 92.077437][ T6578] ret_from_fork+0x10/0x20 [ 92.078244][ T6578] } [ 92.078627][ T6578] ... key at: [] xa_init_flags.__key+0x0/0x20 [ 92.079803][ T6578] [ 92.079803][ T6578] the dependencies between the lock to be acquired [ 92.079814][ T6578] and HARDIRQ-irq-unsafe lock: [ 92.081707][ T6578] -> (&p->sequence){+.-.}-{0:0} { [ 92.082436][ T6578] HARDIRQ-ON-W at: [ 92.083008][ T6578] lock_acquire+0x140/0x2e0 [ 92.083890][ T6578] fprop_new_period+0x3b8/0x718 [ 92.084837][ T6578] writeout_period+0x94/0x11c [ 92.085725][ T6578] call_timer_fn+0x19c/0x814 [ 92.086646][ T6578] __run_timer_base+0x51c/0x76c [ 92.087592][ T6578] run_timer_softirq+0x11c/0x194 [ 92.088512][ T6578] handle_softirqs+0x31c/0xc88 [ 92.089421][ T6578] __do_softirq+0x14/0x20 [ 92.090245][ T6578] ____do_softirq+0x14/0x20 [ 92.091141][ T6578] call_on_irq_stack+0x30/0x48 [ 92.092124][ T6578] do_softirq_own_stack+0x20/0x2c [ 92.093098][ T6578] __irq_exit_rcu+0x1b0/0x478 [ 92.094040][ T6578] irq_exit_rcu+0x14/0x84 [ 92.094917][ T6578] el0_interrupt+0x70/0x2bc [ 92.095825][ T6578] __el0_irq_handler_common+0x18/0x24 [ 92.096811][ T6578] el0t_64_irq_handler+0x10/0x1c [ 92.097752][ T6578] el0t_64_irq+0x198/0x19c [ 92.098628][ T6578] IN-SOFTIRQ-W at: [ 92.099207][ T6578] lock_acquire+0x140/0x2e0 [ 92.100087][ T6578] fprop_new_period+0x3b8/0x718 [ 92.100998][ T6578] writeout_period+0x94/0x11c [ 92.101914][ T6578] call_timer_fn+0x19c/0x814 [ 92.102864][ T6578] __run_timer_base+0x51c/0x76c [ 92.103776][ T6578] run_timer_softirq+0x11c/0x194 [ 92.104710][ T6578] handle_softirqs+0x31c/0xc88 [ 92.105587][ T6578] __do_softirq+0x14/0x20 [ 92.106442][ T6578] ____do_softirq+0x14/0x20 [ 92.107316][ T6578] call_on_irq_stack+0x30/0x48 [ 92.108255][ T6578] do_softirq_own_stack+0x20/0x2c [ 92.109248][ T6578] __irq_exit_rcu+0x1b0/0x478 [ 92.110186][ T6578] irq_exit_rcu+0x14/0x84 [ 92.111073][ T6578] el0_interrupt+0x70/0x2bc [ 92.111949][ T6578] __el0_irq_handler_common+0x18/0x24 [ 92.112973][ T6578] el0t_64_irq_handler+0x10/0x1c [ 92.113913][ T6578] el0t_64_irq+0x198/0x19c [ 92.114815][ T6578] INITIAL USE at: [ 92.115371][ T6578] lock_acquire+0x140/0x2e0 [ 92.116212][ T6578] fprop_new_period+0x3b8/0x718 [ 92.117215][ T6578] writeout_period+0x94/0x11c [ 92.118176][ T6578] call_timer_fn+0x19c/0x814 [ 92.119044][ T6578] __run_timer_base+0x51c/0x76c [ 92.120034][ T6578] run_timer_softirq+0x11c/0x194 [ 92.121011][ T6578] handle_softirqs+0x31c/0xc88 [ 92.121905][ T6578] __do_softirq+0x14/0x20 [ 92.122767][ T6578] ____do_softirq+0x14/0x20 [ 92.123682][ T6578] call_on_irq_stack+0x30/0x48 [ 92.124685][ T6578] do_softirq_own_stack+0x20/0x2c [ 92.125676][ T6578] __irq_exit_rcu+0x1b0/0x478 [ 92.126559][ T6578] irq_exit_rcu+0x14/0x84 [ 92.127503][ T6578] el0_interrupt+0x70/0x2bc [ 92.128407][ T6578] __el0_irq_handler_common+0x18/0x24 [ 92.129391][ T6578] el0t_64_irq_handler+0x10/0x1c [ 92.130315][ T6578] el0t_64_irq+0x198/0x19c [ 92.131193][ T6578] INITIAL READ USE at: [ 92.131822][ T6578] lock_acquire+0x140/0x2e0 [ 92.132757][ T6578] fprop_fraction_percpu+0xac/0x270 [ 92.133815][ T6578] __wb_calc_thresh+0xfc/0x3b0 [ 92.134815][ T6578] domain_over_bg_thresh+0xb8/0x1f0 [ 92.135861][ T6578] wb_over_bg_thresh+0xf8/0x17c [ 92.136888][ T6578] wb_workfn+0xa30/0xdc0 [ 92.137808][ T6578] process_one_work+0x7c0/0x1558 [ 92.138802][ T6578] worker_thread+0x958/0xed8 [ 92.139794][ T6578] kthread+0x5fc/0x75c [ 92.140660][ T6578] ret_from_fork+0x10/0x20 [ 92.141571][ T6578] } [ 92.141909][ T6578] ... key at: [] fprop_global_init.__key.1+0x0/0x20 [ 92.143145][ T6578] ... acquired at: [ 92.143692][ T6578] fprop_fraction_percpu+0xf0/0x270 [ 92.144419][ T6578] __fprop_add_percpu_max+0x130/0x1f4 [ 92.145248][ T6578] __wb_writeout_add+0xbc/0x27c [ 92.145968][ T6578] __folio_end_writeback+0x380/0x6f8 [ 92.146780][ T6578] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 92.147679][ T6578] folio_end_writeback+0xd8/0x248 [ 92.148469][ T6578] iomap_finish_folio_write+0x1c0/0x2a4 [ 92.149347][ T6578] fuse_writepage_end+0x238/0x454 [ 92.150091][ T6578] fuse_request_end+0x898/0xc10 [ 92.150808][ T6578] fuse_abort_conn+0xe88/0x10a0 [ 92.151548][ T6578] fuse_conn_abort_write+0x10c/0x194 [ 92.152347][ T6578] vfs_write+0x2b8/0xa3c [ 92.153042][ T6578] ksys_write+0x120/0x210 [ 92.153670][ T6578] __arm64_sys_write+0x7c/0x90 [ 92.154357][ T6578] invoke_syscall+0x98/0x254 [ 92.155048][ T6578] el0_svc_common+0xe8/0x23c [ 92.155715][ T6578] do_el0_svc+0x48/0x58 [ 92.156336][ T6578] el0_svc+0x5c/0x26c [ 92.156985][ T6578] el0t_64_sync_handler+0x84/0x12c [ 92.157778][ T6578] el0t_64_sync+0x198/0x19c [ 92.158470][ T6578] [ 92.158804][ T6578] [ 92.158804][ T6578] stack backtrace: [ 92.159663][ T6578] CPU: 0 UID: 0 PID: 6578 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 92.160953][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 92.162477][ T6578] Call trace: [ 92.163025][ T6578] show_stack+0x2c/0x3c (C) [ 92.163695][ T6578] __dump_stack+0x30/0x40 [ 92.164362][ T6578] dump_stack_lvl+0xd8/0x12c [ 92.165044][ T6578] dump_stack+0x1c/0x28 [ 92.165663][ T6578] __lock_acquire+0x3058/0x30a4 [ 92.166415][ T6578] lock_acquire+0x140/0x2e0 [ 92.167085][ T6578] fprop_fraction_percpu+0xf0/0x270 [ 92.167882][ T6578] __fprop_add_percpu_max+0x130/0x1f4 [ 92.168727][ T6578] __wb_writeout_add+0xbc/0x27c [ 92.169439][ T6578] __folio_end_writeback+0x380/0x6f8 [ 92.170231][ T6578] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 92.171128][ T6578] folio_end_writeback+0xd8/0x248 [ 92.171853][ T6578] iomap_finish_folio_write+0x1c0/0x2a4 [ 92.172647][ T6578] fuse_writepage_end+0x238/0x454 [ 92.173404][ T6578] fuse_request_end+0x898/0xc10 [ 92.174128][ T6578] fuse_abort_conn+0xe88/0x10a0 [ 92.174883][ T6578] fuse_conn_abort_write+0x10c/0x194 [ 92.175662][ T6578] vfs_write+0x2b8/0xa3c [ 92.176236][ T6578] ksys_write+0x120/0x210 [ 92.176914][ T6578] __arm64_sys_write+0x7c/0x90 [ 92.177666][ T6578] invoke_syscall+0x98/0x254 [ 92.178354][ T6578] el0_svc_common+0xe8/0x23c [ 92.179061][ T6578] do_el0_svc+0x48/0x58 [ 92.179699][ T6578] el0_svc+0x5c/0x26c [ 92.180276][ T6578] el0t_64_sync_handler+0x84/0x12c [ 92.181023][ T6578] el0t_64_sync+0x198/0x19c