last executing test programs: 1m53.844218055s ago: executing program 1 (id=2): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x6, 'team0\x00', {0x4}, 0x5}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f00000000c0)=""/3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000008500)={0x0, 0x0, &(0x7f00000084c0)={&(0x7f0000004a80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000140)=0x81, 0x4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) timer_create(0x7, &(0x7f0000000180)={0x0, 0x2, 0x1, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}}, &(0x7f0000000300)) inotify_init() 1m51.236848982s ago: executing program 1 (id=7): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x4) unshare(0x20000400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3adb80, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 1m50.748310927s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2d) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) r8 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_SQ_RING(r8, 0x1) munmap$IORING_OFF_CQ_RING(r8, 0x2f51) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) sendfile(r0, r0, 0x0, 0x1) 1m44.600015052s ago: executing program 1 (id=13): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000000c0)={[{@utf8}, {@utf8}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@allow_utime}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0x4}}]}, 0x1, 0x153c, &(0x7f00000009c0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJIkhyQ5JEkStuSUkCTZkpAYckoakpAchuQwhOQwMWmcz+dDQpI0SRKSU7L+18T81a797b2/3c73fXP/ruu9rDXruddzP+/9vs/7PGte803XYTUa16zagIjg34KX/kkAgFgAGAQA1wFAAABl48rGZYxnl5jw7+2E/bEaJl/tDNjVxPXP2rj+WRvXP2vj+mdtXP+sjeuftXH9szauP2NZ2ZYZ+a/nR9Z98Pp/Vsaf//+HpJcc98W6kjd2A4j5Z0O4/v/74b8Ry/X/Pyv4Zzbi+mdtXP+sKvZqJ8D+B+D3f1aQ7e+OcP2zNq4/Y1nZL9eCY+FqrkU/fKah+fP3C5H/5O9AfO9Lz/LVX+f/u8fPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Cc76KxQAZLavdl6MMcYYY4wxxhj74/hsVzsDxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyRy/HuLgBsgNN0IeyAv5ID/EQwEoCBoMWCAIoRAUhijcBEXgZigKxaA4lAAHJaEU3AKl4VYoA7dBWbgdysEdUB4qQEWoBHdCZbgLqsDdUBXugWpQHWpATbgXasF9UBvuhzrwANSFB6EePAT14WFoAA2hEfwFGsMj0AQehabQDJpDC2j534p/AXrCi9ALekMC9IG+8BL0g/4wAAbCIHgZBsMrMARehUQYCsPgNRgOr8MIeANGwigYDW/CGHgLxsI4GA8TIAkmwiR4GybDOzAFpsI0mA7JMANmwrswC2bDHHgP5sL7MA/mwwJYCCnwASyCxZAKH8IS+AjSYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsIu+Bh2wyewB/bCPvgU9sNn/2L8mb+J74aAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/FMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgffivdgHa2NtrIN1sC7WzVyewgbYABthI2yMjbEJNsGm2BSbY3NsiS2xFbbC1tga22JbbIftsD22xw7YATtiR+yEnbAzdsYu2AW7Ylfsht2xe/oL2QBfxBexN1YTfbAv9sV+mJhtAA7EgfgyDsZX8BV8FRNxKA7D1/A1fB1H4GkceXEUjsbRWFm8hWNxHJKYgEmYhJNwEk7GyTgFp+JUnI7JOANn4kychbNxNr6Hc/F9fB/n43xciCmYgotwMaZiKi7BM5iGS3EZLscVuBJX4Gpcg6txHa7HdbgRN+Jm3IxbcStux+24E3fix6gA8BPci3sxEffjfjyAB/AgHsRDeAjTMR0P42E8gkfwKB7FY3gMj+MJPIkn8BSewtN4Bs/iWTyP5/ECPhf/VaOPi61NBJFBCSViRIyIFbEih8ghcoqcIpfIJSIiIuJEnMgtcos8Io/IJ/KJeBEvCoqCwggjSIQZZwoRFVFRRBQRRUVRUVwUF044UUqUEqVFaVFGlBFlxe2inLhDlBcVRBtXSVQSlUVbV0XcLaqKqqKaqC5qiJqipqglaonaoraoI+qIuqKuqCceEvVFHxyADUVGZRqLodhEDMOmopmQl89QrcQIbC3aiLbiCTEKR2J70cp1EE+LjmIsdhJ/FePwWdFFTMCu4nnRTXQXPcQLoqdo7XqJ3mIK9hF9xXTsJ/qLAWKgmIXVxXs4N3sN8apIFEPFMPGaWIivixHiDTFSjBKjxZtijHhLjBXjxHgxQSSJiWKSeFtMFu+IKWKqmCami2QxQ8wU74pZYraYI94Tc8X7Yp6YLxaIhSJFfCAWicUiVXwoloiPRJpYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpdomPxW7xidgj9op94lOxX3wmDojPxUHxhTgkvhTp4itxWHwtjohvxFHxrTgmvhPHxQlxUnwvTokfxGlxRpwV58R58aO4IH4SF4UXIFEKKaWSgYyR2WSszC5zyGtkThlknv9lnLxB5pY3yjwyr8wn88t4WUAWlFoaaSXJUBaShWVU3iSLyJtlUVlMFpclpJMlZSl5iywtb5Vl5G2yrLxdlpN3yPKygqwoK8k7ZWV5l4TIpX1Uk9VlDVlT3isT4D5ZW94v68gHZF35oKwnH5L15cOygWwoG8m/yMbyEdlEPiqbymayuWwhW8rHZCv5uGwt28i28gnZTj4p28unZAf5tOwo/eWXyLOyi3xOdpXPy26yu+whf5IXpZe9ZG8JfUD2lS/JfrK/HCAHykHyZTlYviKHyFdlohwqh8nX5HD5uhwh35Aj5Sg5Wr4px8i35Fg5To6XE2SSnCgnybflZPmOnCKnymlyukyWM+SAyzPNkfIfxr/9O/FDft77ZrlFbpXb5Ha5Q+6Uu+THcrfcLffIPXKf3Cf3y/3ygDwgD8qD8pA8JNNlujwsD8sj8og8Ko/KY/KYPC5PyHPye3lK/iBPyzPyjDwnz8vz8sLl5wAUKqGkUipQMSqbilXZVQ51jcqprlW51HUqoq5XceoGlVvdqPKovCqfyq/iVQFVUGlllFWkQlVIFVZRdRNefsGo4qqEcqqkKqVu+VfiVRF1syqqiv0qPjO/hL+TX0vVUrVSrVRr1Vq1VW1VO9VOtVftVQfVQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UgkpQfdVLqp/qrwaogWqQellkHMMQNUQlqkQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4laSS1CQ1SU1Wk9UUNUVNU9NUskpWM9VMNUvNUnPUHDVXzVXz1Dy1QC1QKSpFLVKLVKpKVUvUEpWmlqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKk1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1S6SleH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcy47AtEIAIVqCAmiAlig9ggR5AjyBnkDHIFuYJIEAnigrggd3BjkCfIG+QL8gfxQYGgYKADE9hAXC56NLgpKBLcHBQNigXFgxKBC0oGpYJbgtLBrUGZ4LagbHB7UC64IygfVAgqBpWCO4PKwV1BleDuoGpwT1AtqB7UCGoG9wa1gvuC2sH9QZ3ggaBu8GBQL3goqB88HDQIGma8voLGwSNBk+DRoGnQLGgetAha/nHzB40C70/nfdz10r11gu6j++qXdD/dXw/QA/Ug/bIenHE20a/qRD1UD9Ov6eH6dT1Cv6FH6lF6tH5Tj9Fv6bF6nB6vJ+gkPVFP0m/ryfodPUVP1dP0dJ2sZ+iZ+l09S8/Wc/R7eq5+X8/T8/UCvVCn6A/0Ir1Yp+oP9RL9kU7TS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79A79S79sd6tP9F79F69T3+q9+vP9AH9uT6ov9CH9Jc6XX+lD+uv9RH9jT6qv9XH9Hf6uD6hy+jv9Sn9gz6tz+iz+pw+r3/UF/RP+qL2GRf3GR/vRhllYkyMiTWxJofJYXKanCaXyWUiJmLiTJzJbXKbPCaPyWfymXgTbwqagiYDGTKFTCETNVFTxBQxRU1RU9wUN844U8qUMqVNaVPGlDFlTVlTzpQz5U15U9FUNHeaO81d5i5zt7nb3GPuMdVNdVPT1DS1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPTyDQyjU1j08Q0MU1NU9PcNDctTUvTyrQyrU1r09a0Ne1MO9PetDcdTAfT0XQ0nUwn09l0Nl1MF9PVdDXdTDfTw/QwPU1P08v0MgkmwfQ1fU0/088MMAPMIDPIDDaDzRAzxCSaRDPMDDPDzXAzwowwI80oMzrjQtW8ZcaacWa8mWCSTJKZZCaZyWaymWKmmGlmmkk2yWammWlmmVlmjplj5pq5Zp6ZZxaYBSbFpJhFZpFJNalmiVli0kyaWWaWmRVmhVllVpk1Zo1ZZ9aZDbDBbDKbzBazxWwz28wOs8PsMrvMbrPb7DF7zD6zz+w3+80Bc8AcNAfNIXPIpJt0c9gcNkfMEXPUHDXHzDFz3Bw3J81Jc8qcMqfNaXPWnDXnTd7Ln5fexNrsNoe9xua019pc9jr7t/18Nr+NtwVsQattHpv3V31jrS1qi9nitoR1tqQtZW/5Tb+8rWAr2kr2TlvZ3mWr/KZfy95na9v7bR37gK1p7/1Vv6590Nazj9j6iAC2mW1kW9jG9hHbxD5qm9pmtrltYdvZJ217+5TtYJ+2He0zv+kvsovtGrvWrrPr7R6715615+wR+409b3+0vWxvO8i+bAfbV+wQ+6pNtEN/0x9t37Rj7Ft2rB1nx9sJv+lPs9Ntsp1hZ9p37Sw7+zf9FPuBnWtT7Tw73y6wC3/uZ+SUaj+0S+xHNs0GsMwutyvsSrvKrv7/uS63G+0mu9nutp/YbXa73WF32l2ZF8J2r91nP7Wxl7sH7Rf2kD1q0+1X9rD9+ufjO2q/tcfsd/a4PWFP2u/tKfuDyozOOPbv7U/2ovUWCAlIkqKAYigbxVJ2ykHXUE66lnLRdRSh6ymObqDcdCPlobyUj/JTPBWggqTJkCWikApRYYrSTZSZXnEqQY5KUim6hUrTrVSGbqOydDuVozuoPFWgilSJ7qTKdBdVobupKt1D1ag61aCadC/VovuoNt1PdegBqksPUj16iOrTw9SAGlIj+gs1pkeoCT1KTakZNacW1JIeo1b0OLWmNtSWnqB29CS1p6eoAz1NHekZ6kR/pc70LHWh56grPU/dqDv1oBeoJ71Ivag3JVAf6ksvUT/qTwNoIA2il2kwvUJD6FVKpKE0jF6j4fQ6jaA3aCSNotH0Jo2ht2gsjaPxNIGSaCJNordpMr1DU2gqTaPplEwzaCa9S7NoNs2h92guvU/zaD4toIWUQh/QIlpMqfQhLaGPKI2W0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO2gn7aKPaTd9QntoL+2jT2k/fUYH6HM6SF/QIfqS0ukrOkxf0xH6ho7St743fUfH6QSdpO/pFP1Ap+kMnaVzdJ5+pAv0E10kTxBiKEIZqjAIY8JsYWyYPcwRXhPmDK8Nc4XXhZHw+jAuvCHMHd4Y5gnzhvnC/GF8WCAsGOrQhDakMAwLhYXDaHhTWCS8OSwaFguLhyVCF5YMS4W3hKXDW8My4W1h2fD2sFx4R1g+rBA+8kCl8M6wcnhXWCW8O6wa3hNWC6uHNcKa4b1hrfC+sHZ4f1gnfCAsEz4Y1gsfCuuHD4cNwoZho/AvYePwkbBJ+GjYNGwWNg9bhC3Dx8JW4eNh67BN2Da8JmwXPhm2D58KO4RPhx3DZ34ef3Bx5vgTvxlPCPuEfcOXwpdC7++XC6ILoynRD6KLooujqdEPo0uiH0XTokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo97XzAYOnXDSKRe4GJfNxbrsLoe7xuV017pc7joXcde7OHeDy+1udHlcXpfP5XfxroAr6LQzzjpyoSvkCruou8kVcTe7oq6YK+5KOOdKulKuhWvpWrpW7nHX2rVxbd0T7gn3pHvSPeWeck+7ju4Z18n91XV2z7ou7jn3nHvedXPdXQ/3guvpJua69J5McH1dX9fP9XMD3AA3yA1yg91gN8QNcYku0Q1zw9xwN9yNcCPcSDfSjXaj3Rg3xo11Y914N94luSQ3yU1yk91kN8VNcdPcNJfskt1MN9PNcrNc5dmX9jLPzXML3AKX4lLcIpdxzZjqlrglLs2luWVumVvhVrhVbpVb49a4dW6d2+A2uE1uk9vitrhtbpvb4Xa4XW6X2+12uz3+ukuTuv3ugDvgDrqD7pD70qW7r9xh97U74r5xR9237pj7zh13J9xJ97075X5wp90Zd9adc+fdj+6C+8lddN4lRSZGJkXejkyOvBOZEpkamRaZHkmOzIjMjLwbmRWZHZkTeS8yN/J+ZF5kfmRBZGEkJfJBZFFkcSQ18mFkSeSjSFpkaWRZZHlkRWRlxPsC20JfyBf2UX+TL+Jv9kV9MV/cl/DOl/Sl/C2+9KW807y/3Zfzd/jyvoKv6B/1TX0z39y38C39Y76Vf9y39m18W/+Eb+ef9O39U76Df9p39M/4Tv6vvrN/1nfxz/mu/nnfzXf3PfwLvqd/0ffyvX2C7+P7+pd8P9/fD/AD/SD/sh/sX/FD/Ks+0Q/1w/xrfrh/3Y/wb/iRfpQfHfOmH5N5iwwTfJKf6Cf5t/1k/46f4qf6aX66T/Yz/Ez/rp/lZ/s5/j0/17/v5/n5foFf6FP8B36RX+xT/Yd+if/Ip/mlmYvGfpVf7df4tX6dX+83+I1+k9/st/itfpvf7nf4nX6X/9jv9p/4PX6v3+c/9fv9Z/6A/9wf9F/4Q/5Ln+6/8of91/6I/8Yf9d/6Y/47f9yf8Cf99/6U/8Gf9mf8WX/On/c/+gv+J3+R/88aY4wxxtg/ZeKVpvj1yKXl/D6/EyN+sXFfALh2e/70X45nXFFuyHOp3V/E/7wc8XTvrg0zH9WqJSQkXN42TUJQeD5A5m+CMvz81YPL/aXQFp6EDtAGSv9u/v1F9/P0D+aP3g6Q4xcxGQll9q/M/zkAJvzO/I89MXpRufBs3H8x/3yAooWvxGSHK/2l0Pbn9ZU2UObv5J+31T/IP/sXSQCtfxGTE670r+RfCh6HZ6DDr7ZkjDHGGGOMMcYu6S8qds68/8z8xufv3Z/Hqysx2eBK/x/dnzPGGGOMMcYYY+zqe7Z7j6ce69ChTed/vVHlvxX1TzeawH9qZm78bsN7gMyfKAD4NycEyGjI/2Ib8UcfxdY/5YlKvPzW+duhFed8AP8zSvlHNK7yiYkxxhhjjDH2h7ty0f/rn6urlRBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYF/Rl/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9BC/Sw") r0 = creat(&(0x7f0000001f00)='./file0\x00', 0xc7) unlink(&(0x7f0000001f40)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000280)='127.0.0.1:/export\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x4, 0x99, &(0x7f00000003c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000480)='10\x00\v\xb1\xfa\x03\xd4\t\x19~~\xf3\x89\x99\x0f\xe7\xa7\x8c\x1c\xa43\xd0\a\xfa\xac\xbd\x9b\x00\x00\x00\x00\xf8\xcdSj\xc0\x81\xdb\b\xa2M\xee\x1b\xe9U\x1a\xc76l4\xce\xdd\xf1\xeb\x85\rZ\xcd-\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x9d&Q', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}}, 0x20000044) sendmsg$nl_route_sched(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@delchain={0x34, 0x2e, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002040)={0xffffffffffffffff, 0x10, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x14, &(0x7f0000002080)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @generic={0xe, 0xe, 0x8, 0xf}, @map_fd={0x18, 0x3, 0x1, 0x0, r8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', r7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r9, &(0x7f0000000940)='e:my_read_msr1 msr/read_msr', 0x1b) write(r9, 0x0, 0x0) 1m40.686107689s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380), &(0x7f00000003c0)=@udp=r0, 0x1}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x5a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f0000002200)=""/16384, 0x4000) 1m39.886411774s ago: executing program 1 (id=26): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000200)="170000000200010000ffbe8c5ee17688a20033000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658c", 0xb8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000300000000000900f7ffffff850000001b0000009500000000000000fdbdd9475705dfaea14cb17d77343e5342d610f8f728b15029c352318db86b6c5006d9eb5c41b939afd05fe83a6740b06dab3ec7442ddee71c398002b13318eca9cb70e59217ebec3bf4602db899722687db0638ba5efcbc1ad2ad1dc2203ff76c41c9051c0c7549a8a70ed6a549d90bade14b52fc079b8b3f9a98e937be398b323f3937edaecc3f4e13ef166893bde36004f8e431c40f6ffc2989ddf61638a2752f8634f3fb29f9cd20a989fd102cd0a9a781513a434967a8ac2614231e0627b3649e5ac6480113e1f3"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_clone(0x950ae580, 0x0, 0xffffffffffffff31, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000c40), 0x10106, 0x2, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0x8]}, 0x8) mkdir(&(0x7f0000000cc0)='./control\x00', 0x111) close(r4) r5 = gettid() fcntl$setown(r4, 0x8, r5) inotify_add_watch(r4, &(0x7f0000000d00)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000d40)={[0xfffffffffffffffd]}, 0x0, 0x8) rmdir(&(0x7f0000000dc0)='./control\x00') setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@private=0xa010102, @local, 0x1, 0x4, [@loopback, @broadcast, @multicast1, @remote]}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@block_validity}, {@nogrpid}, {@quota}]}, 0x1, 0x526, &(0x7f0000000540)="$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") 1m38.735635522s ago: executing program 32 (id=26): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000200)="170000000200010000ffbe8c5ee17688a20033000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658c", 0xb8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000300000000000900f7ffffff850000001b0000009500000000000000fdbdd9475705dfaea14cb17d77343e5342d610f8f728b15029c352318db86b6c5006d9eb5c41b939afd05fe83a6740b06dab3ec7442ddee71c398002b13318eca9cb70e59217ebec3bf4602db899722687db0638ba5efcbc1ad2ad1dc2203ff76c41c9051c0c7549a8a70ed6a549d90bade14b52fc079b8b3f9a98e937be398b323f3937edaecc3f4e13ef166893bde36004f8e431c40f6ffc2989ddf61638a2752f8634f3fb29f9cd20a989fd102cd0a9a781513a434967a8ac2614231e0627b3649e5ac6480113e1f3"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_clone(0x950ae580, 0x0, 0xffffffffffffff31, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000c40), 0x10106, 0x2, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0x8]}, 0x8) mkdir(&(0x7f0000000cc0)='./control\x00', 0x111) close(r4) r5 = gettid() fcntl$setown(r4, 0x8, r5) inotify_add_watch(r4, &(0x7f0000000d00)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000d40)={[0xfffffffffffffffd]}, 0x0, 0x8) rmdir(&(0x7f0000000dc0)='./control\x00') setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@private=0xa010102, @local, 0x1, 0x4, [@loopback, @broadcast, @multicast1, @remote]}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@block_validity}, {@nogrpid}, {@quota}]}, 0x1, 0x526, &(0x7f0000000540)="$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") 13.893647503s ago: executing program 0 (id=292): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.686265894s ago: executing program 0 (id=294): pipe(&(0x7f00000002c0)) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000300)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x5) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f0000000c00)={{0x0, 0x0, 0x5, 0x800, 0x3}, [{0x369c, 0x7f2, 0x0, 0x2}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000cc0)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000d40), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x39}, 0x28) socket$xdp(0x2c, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000e80)='E', 0x1, 0x4fed3) 9.135159573s ago: executing program 2 (id=314): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x64010102, 0x4e21, 0x3, 'ovf\x00', 0x1, 0xa8a, 0x30}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 8.63656376s ago: executing program 2 (id=315): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x1, 0x2}, {0x44, 0x1, 0x9, 0x8016}]}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x7, @mcast1, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x58a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7.20875151s ago: executing program 2 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) 6.969105737s ago: executing program 2 (id=323): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) signalfd4(r3, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000c95d"}) syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0xfa000000}, 0xfe4f) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x2000)=nil) 5.537701473s ago: executing program 3 (id=328): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r8 = dup(r2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r3}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) 5.08629772s ago: executing program 0 (id=330): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x24}}, 0x0) 4.415269117s ago: executing program 0 (id=333): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000340)=0x1, 0x4) bind$rds(r0, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)=""/111, 0x6f}], 0x1, &(0x7f0000000500)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000740)=""/182, 0xb6}, {&(0x7f0000000800)=""/100, 0x64}, {&(0x7f0000000880)=""/90, 0x5a}, {&(0x7f0000000900)=""/115, 0x73}, {&(0x7f0000000980)=""/159, 0x9f}, {&(0x7f0000000a40)=""/53, 0x35}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/47, 0x2f}], 0x10000000000001c9}, 0x6}], 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000d40)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000d80)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0) 4.089977129s ago: executing program 0 (id=335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000061186e000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdb"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x2, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf782, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x6, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x115000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000ac0)={0xaa, 0x268}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000c00)={&(0x7f000009c000/0x400000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x400000, 0x1}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000021c0)={{r1, &(0x7f0000000100)='*\x00', 0x88000, &(0x7f00000001c0)={@align=0x3, {0x3, 0x81, 0x1, 0x80000000}}, 0x7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000380)=0x9}, 0x4, &(0x7f0000002140)=[{0x2, 0x5, &(0x7f0000000700)='syz1\x00', &(0x7f0000000740)="adca5ccba909448d67ca540d710cfe4ecd7026028c27554a3be2573add2fa577187ea162d5875054f9a55d05588c64bb118e9f56bde61344fc466226f6e275afeb0df92f63eca5eb9946e02d0d73902f15c7b092750aae70f6ff4c77560110eb1ce6526f1f98b12d220c7d638b9464bcc0910fa192f8e41efb303b0cd8ce88e3ff944c4c9b5cad46aef920b0799acc9c15094f6d794b37e1bb5b2c495ea214078d2d968a6ee8d1dc339e53403e561348af939d86b5c8cea26ee78f22f341a7aa51a288c44e0ea83bc835841406df10cb2025f12c774a2a1ff4", 0xd9, 0x8}, {0x2, 0x1, &(0x7f0000000880)='\x00', &(0x7f00000008c0)="bf7ec4e0b39d5d83cff34af7bdc4315e1474b2eb44b2ee6af968d57701e64d0d5d13dc8263f729dea6206e0dcc3263f32d865ea4aadd790e20c6d8cbcd05256ad379cb47173e9dc0543e1759acacec21a96104e258cc61879effeb9e12a658331bc333b5e6700d8ffc03a4d492c32137c10b32c4f26321fee0984ed3fecf31136f990a3dd55d9b7d20ba6c736288f8bc50fd14d2d7031b9c2f94d47dc59bb65bb94075b26760990ffc0adc3631c9bfc79ddb070f2b7abf7272f3f34c709a32e9bac7", 0xc2, 0x18}, {0x3, 0x5, &(0x7f00000009c0)='\x00', &(0x7f0000000a00)="badb", 0x2, 0x20}, {0x3, 0x7fffffff, &(0x7f0000000a40)='syz1\x00', &(0x7f0000001140)="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", 0x1000, 0x8}]}) 3.556699011s ago: executing program 3 (id=337): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f80)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 3.361369901s ago: executing program 3 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x1d, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x34, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 3.04235695s ago: executing program 2 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './proc\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7ff9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.862942383s ago: executing program 5 (id=345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000007840)={&(0x7f0000007880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000007900)={0x0, 0x0, &(0x7f0000007940)={&(0x7f0000007980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008891}, 0x24000000) 2.843590457s ago: executing program 2 (id=346): gettid() openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r3, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2800091, &(0x7f0000000b00)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001bc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001d80)='./file2\x00', 0x80000, 0x82) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001dc0)={0x1, &(0x7f0000001e00)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001e40)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) read$FUSE(r5, &(0x7f0000001e80)={0x2020}, 0x2020) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x2208000, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000080)=@arm64) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000740)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a000000000000010000010000126700000000000000000000000011223344112233"}}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2.75190984s ago: executing program 3 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x12}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}]}, 0x38}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000500)="1122", 0x2, 0x0, &(0x7f0000000540)={0x2, 0x4d2, @remote}, 0x10) 2.659575031s ago: executing program 5 (id=348): r0 = syz_open_dev$vcsu(&(0x7f0000002000), 0x1, 0x2242) write$binfmt_script(r0, 0x0, 0x0) 2.656414946s ago: executing program 0 (id=349): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 2.561874344s ago: executing program 3 (id=350): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x62181) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000680)={0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x20000}, 0x0, &(0x7f0000000740)={0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000800)={0x0, 0x81, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000008c0)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}], 0x38) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000940), 0xa8c01) write$sndseq(r1, &(0x7f0000000980)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20046f39, 0x0, 0x0) 2.461665541s ago: executing program 5 (id=351): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1200, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) 2.154916347s ago: executing program 5 (id=352): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000cc0)={0xf0f045}) ppoll(&(0x7f0000000d00)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) 1.973100835s ago: executing program 5 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2d) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) r8 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_SQ_RING(r8, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) sendfile(r0, r0, 0x0, 0x1) 1.73087113s ago: executing program 4 (id=355): r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000158000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) shmdt(r0) 1.656561817s ago: executing program 4 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './proc\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7ff9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.539832126s ago: executing program 4 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) r4 = syz_clone(0x2d802000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000006900010028bd700000000000cc52445dd0000000"], 0x18}], 0x1}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0) process_madvise(r5, 0x0, 0x0, 0x18, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000000)={0x1, &(0x7f0000000780)=[{0x6, 0xf, 0x0, 0x7fff0000}]}) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400"], 0x0) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x240, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x5, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_buf(r12, 0x1, 0x4d, &(0x7f0000000400)=""/17, &(0x7f0000000440)=0x11) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x7, 0xffff}}}, 0x24}}, 0x0) 1.338750631s ago: executing program 3 (id=358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a840000000c0a010100002100000000000a000006090002007379"], 0xac}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xef, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ_cpu(r6, 0xaea3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000093"], 0x20) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000380)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000003c0)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r8 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 955.386079ms ago: executing program 5 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000061186e000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdb"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x2, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf782, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x6, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x115000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000ac0)={0xaa, 0x268}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000c00)={&(0x7f000009c000/0x400000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x400000, 0x1}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000021c0)={{r1, &(0x7f0000000100)='*\x00', 0x88000, &(0x7f00000001c0)={@align=0x3, {0x3, 0x81, 0x1, 0x80000000}}, 0x7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000380)=0x9}, 0x4, &(0x7f0000002140)=[{0x2, 0x5, &(0x7f0000000700)='syz1\x00', &(0x7f0000000740)="adca5ccba909448d67ca540d710cfe4ecd7026028c27554a3be2573add2fa577187ea162d5875054f9a55d05588c64bb118e9f56bde61344fc466226f6e275afeb0df92f63eca5eb9946e02d0d73902f15c7b092750aae70f6ff4c77560110eb1ce6526f1f98b12d220c7d638b9464bcc0910fa192f8e41efb303b0cd8ce88e3ff944c4c9b5cad46aef920b0799acc9c15094f6d794b37e1bb5b2c495ea214078d2d968a6ee8d1dc339e53403e561348af939d86b5c8cea26ee78f22f341a7aa51a288c44e0ea83bc835841406df10cb2025f12c774a2a1ff4", 0xd9, 0x8}, {0x2, 0x1, &(0x7f0000000880)='\x00', &(0x7f00000008c0)="bf7ec4e0b39d5d83cff34af7bdc4315e1474b2eb44b2ee6af968d57701e64d0d5d13dc8263f729dea6206e0dcc3263f32d865ea4aadd790e20c6d8cbcd05256ad379cb47173e9dc0543e1759acacec21a96104e258cc61879effeb9e12a658331bc333b5e6700d8ffc03a4d492c32137c10b32c4f26321fee0984ed3fecf31136f990a3dd55d9b7d20ba6c736288f8bc50fd14d2d7031b9c2f94d47dc59bb65bb94075b26760990ffc0adc3631c9bfc79ddb070f2b7abf7272f3f34c709a32e9bac7", 0xc2, 0x18}, {0x3, 0x5, &(0x7f00000009c0)='\x00', &(0x7f0000000a00)="badb", 0x2, 0x20}, {0x3, 0x7fffffff, &(0x7f0000000a40)='syz1\x00', &(0x7f0000001140)="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", 0x1000, 0x8}]}) 288.193722ms ago: executing program 4 (id=360): socket$kcm(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 147.621571ms ago: executing program 4 (id=361): r0 = userfaultfd(0x80801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 0s ago: executing program 4 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) ioctl(r1, 0x4048aec9, &(0x7f0000000200)="01000000000000000100"/20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff01") kernel console output (not intermixed with test programs): scuous mode [ 88.393982][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.396369][ T5611] team0: Port device team_slave_1 added [ 88.396634][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.396795][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.396903][ T5605] bridge_slave_1: entered allmulticast mode [ 88.398257][ T5605] bridge_slave_1: entered promiscuous mode [ 88.467640][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.515300][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.515320][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.515345][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.559437][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.559474][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.559544][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.593746][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.594965][ T5607] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.599455][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.599496][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.599566][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.680714][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.680734][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.680772][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.695451][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.757395][ T5608] team0: Port device team_slave_0 added [ 88.794260][ T5608] team0: Port device team_slave_1 added [ 88.799832][ T5605] team0: Port device team_slave_0 added [ 88.872031][ T5605] team0: Port device team_slave_1 added [ 88.922367][ T5611] hsr_slave_0: entered promiscuous mode [ 88.923752][ T5611] hsr_slave_1: entered promiscuous mode [ 88.954713][ T5606] hsr_slave_0: entered promiscuous mode [ 88.955704][ T5606] hsr_slave_1: entered promiscuous mode [ 88.956351][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 88.956451][ T5606] Cannot create hsr debugfs directory [ 88.957313][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.957325][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.957348][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.053671][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.053690][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.053718][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.055727][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.055741][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.055764][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.185155][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.185173][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.185196][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.272439][ T5619] Bluetooth: hci1: command tx timeout [ 89.272599][ T5619] Bluetooth: hci3: command tx timeout [ 89.272625][ T5619] Bluetooth: hci2: command tx timeout [ 89.352635][ T5627] Bluetooth: hci4: command tx timeout [ 89.352647][ T5619] Bluetooth: hci0: command tx timeout [ 89.389410][ T5608] hsr_slave_0: entered promiscuous mode [ 89.390763][ T5608] hsr_slave_1: entered promiscuous mode [ 89.391311][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 89.391332][ T5608] Cannot create hsr debugfs directory [ 89.460649][ T5605] hsr_slave_0: entered promiscuous mode [ 89.461571][ T5605] hsr_slave_1: entered promiscuous mode [ 89.462089][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 89.462109][ T5605] Cannot create hsr debugfs directory [ 89.947157][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.961111][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.965857][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.985449][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.004543][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.009709][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.010594][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.038084][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.208633][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.208708][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.208878][ T5607] bridge_slave_0: entered allmulticast mode [ 90.210156][ T5607] bridge_slave_0: entered promiscuous mode [ 90.220960][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.244124][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.256534][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.260473][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.261462][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.286058][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.286949][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.290600][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.291824][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.291937][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.292057][ T5607] bridge_slave_1: entered allmulticast mode [ 90.311442][ T5607] bridge_slave_1: entered promiscuous mode [ 90.394608][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.418472][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.476743][ T5607] team0: Port device team_slave_0 added [ 90.487109][ T5607] team0: Port device team_slave_1 added [ 90.528530][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.528547][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.528568][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.539799][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.539841][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.539911][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.635806][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.639185][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.669066][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.678255][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.681392][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.695487][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.696413][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.699896][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.742078][ T5607] hsr_slave_0: entered promiscuous mode [ 90.745771][ T5607] hsr_slave_1: entered promiscuous mode [ 90.747887][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 90.747938][ T5607] Cannot create hsr debugfs directory [ 90.925903][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.927528][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.931012][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.931857][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.950733][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.975263][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.979996][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.981623][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.993417][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.108042][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.168677][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.168970][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.196408][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.196517][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.222145][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.284451][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.288016][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.309639][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.319986][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.320977][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.331269][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.351076][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.354512][ T5625] Bluetooth: hci1: command tx timeout [ 91.354751][ T5627] Bluetooth: hci2: command tx timeout [ 91.358320][ T5619] Bluetooth: hci3: command tx timeout [ 91.373193][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.391612][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.432700][ T5619] Bluetooth: hci0: command tx timeout [ 91.433000][ T5619] Bluetooth: hci4: command tx timeout [ 91.434905][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.456688][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.456960][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.506539][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.506643][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.557802][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.586054][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.610798][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.635761][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.635870][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.672279][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.672370][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.719562][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.719673][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.779116][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.779287][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.989139][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.086058][ T32] cfg80211: failed to load regulatory.db [ 92.144685][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.219158][ T1480] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.219262][ T1480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.257621][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.257733][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.996261][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.107752][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.250464][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.280587][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.291334][ T5606] veth0_vlan: entered promiscuous mode [ 93.324600][ T5606] veth1_vlan: entered promiscuous mode [ 93.427603][ T5611] veth0_vlan: entered promiscuous mode [ 93.433746][ T5627] Bluetooth: hci3: command tx timeout [ 93.433858][ T5627] Bluetooth: hci2: command tx timeout [ 93.433920][ T5627] Bluetooth: hci1: command tx timeout [ 93.501076][ T5608] veth0_vlan: entered promiscuous mode [ 93.501905][ T5611] veth1_vlan: entered promiscuous mode [ 93.515145][ T5627] Bluetooth: hci0: command tx timeout [ 93.515279][ T5619] Bluetooth: hci4: command tx timeout [ 93.534664][ T5606] veth0_macvtap: entered promiscuous mode [ 93.569740][ T5608] veth1_vlan: entered promiscuous mode [ 93.581321][ T5605] veth0_vlan: entered promiscuous mode [ 93.589683][ T5606] veth1_macvtap: entered promiscuous mode [ 93.638601][ T5605] veth1_vlan: entered promiscuous mode [ 93.669602][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.671538][ T5611] veth0_macvtap: entered promiscuous mode [ 93.705073][ T5611] veth1_macvtap: entered promiscuous mode [ 93.720700][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.751614][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.778394][ T5608] veth0_macvtap: entered promiscuous mode [ 93.816722][ T5608] veth1_macvtap: entered promiscuous mode [ 93.821300][ T5605] veth0_macvtap: entered promiscuous mode [ 93.840237][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.863740][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.885707][ T5605] veth1_macvtap: entered promiscuous mode [ 93.914039][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.915139][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.917824][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.998586][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.000483][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.047540][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.064889][ T1480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.064937][ T1480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.068793][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.095040][ T1268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.102816][ T1480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.102857][ T1480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.216310][ T1268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.216332][ T1268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.238922][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.253656][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.357957][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.357981][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.382391][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.387543][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.387593][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.387631][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.387668][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.387705][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.497167][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.497190][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.597067][ T1268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.597090][ T1268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.658178][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.658223][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.688977][ T5607] veth0_vlan: entered promiscuous mode [ 94.701265][ T5606] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.778857][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.778881][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.831896][ T5607] veth1_vlan: entered promiscuous mode [ 94.952053][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.952078][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.018071][ T1480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.018094][ T1480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.144623][ T5607] veth0_macvtap: entered promiscuous mode [ 95.149538][ T5607] veth1_macvtap: entered promiscuous mode [ 95.226400][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.396048][ T5816] loop3: detected capacity change from 0 to 1024 [ 95.794732][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.157720][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.161808][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.169569][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.171418][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.178721][ T5816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.177219][ T2247] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.579250][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.765655][ T5830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.765681][ T5830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.954995][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.955020][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.196846][ T5842] loop0: detected capacity change from 0 to 512 [ 99.450548][ T5847] loop2: detected capacity change from 0 to 512 [ 99.470829][ T5847] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.498095][ T5842] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 99.498118][ T5842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 99.498224][ T5842] System zones: 0-1, 15-15, 18-18, 34-34 [ 99.498518][ T5842] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.498724][ T5842] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 99.498805][ T5842] EXT4-fs warning (device loop0): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 99.498834][ T5842] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 99.501574][ T5842] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.1: bad orphan inode 16 [ 99.501740][ T5842] loop0: lost filesystem error report for type 5 error -117 [ 99.502521][ C0] EXT4-fs (loop0): initial error at time 1792037481: ext4_orphan_get:1430 [ 99.502613][ C0] EXT4-fs (loop0): last error at time 1792037481: ext4_orphan_get:1430 [ 99.564216][ T5842] ext4_test_bit(bit=15, block=18) = 1 [ 99.564241][ T5842] is_bad_inode(inode)=0 [ 99.564281][ T5842] NEXT_ORPHAN(inode)=0 [ 99.564291][ T5842] max_ino=32 [ 99.564299][ T5842] i_nlink=2 [ 99.650594][ T5847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.696685][ T5842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.295979][ T5867] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.720151][ T5874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 103.790415][ T5874] bond0: (slave bond_slave_0): Releasing backup interface [ 104.560640][ T5874] bond_slave_0: entered promiscuous mode [ 104.560667][ T5874] bond_slave_0: entered allmulticast mode [ 105.697864][ T5890] syz.4.5 (5890) used greatest stack depth: 16816 bytes left [ 105.844576][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.401592][ T5903] loop4: detected capacity change from 0 to 512 [ 106.642951][ T5903] EXT4-fs (loop4): Test dummy encryption mode enabled [ 106.898419][ T5903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.040782][ T5914] loop1: detected capacity change from 0 to 256 [ 107.055662][ T5914] exfat: Deprecated parameter 'utf8' [ 107.055686][ T5914] exfat: Deprecated parameter 'utf8' [ 107.055712][ T5914] exfat: Deprecated parameter 'namecase' [ 107.055783][ T5914] exfat: Deprecated parameter 'namecase' [ 107.055842][ T5914] exfat: Deprecated parameter 'namecase' [ 107.152337][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.220855][ T5914] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 107.252835][ T5741] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.593599][ T5741] usb 5-1: Using ep0 maxpacket: 16 [ 107.595591][ T5741] usb 5-1: New USB device found: idVendor=1430, idProduct=474b, bcdDevice=0.40 [ 107.602860][ T5741] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 107.633430][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.633460][ T5741] usb 5-1: Product: syz [ 107.633476][ T5741] usb 5-1: Manufacturer: syz [ 107.633492][ T5741] usb 5-1: SerialNumber: syz [ 107.759801][ T5929] loop2: detected capacity change from 0 to 128 [ 107.767620][ T5929] vfat: Unknown parameter './file0' [ 108.750760][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'. [ 109.181611][ T5741] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.360845][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.711296][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.840807][ T5741] usb 5-1: USB disconnect, device number 2 [ 110.006643][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.098233][ T5921] loop3: detected capacity change from 0 to 40427 [ 110.140508][ T5921] f2fs: Unknown parameter 'whint_mode' [ 110.799291][ T5956] loop2: detected capacity change from 0 to 4096 [ 110.858433][ T5961] loop4: detected capacity change from 0 to 256 [ 110.872564][ T5961] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 110.872590][ T5961] exFAT-fs (loop4): invalid boot region [ 110.872600][ T5961] exFAT-fs (loop4): failed to recognize exfat type [ 110.958614][ T1054] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.024767][ T5956] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 111.290820][ T1054] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.519901][ T1054] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.639427][ T5962] loop3: detected capacity change from 0 to 40427 [ 111.677410][ T1054] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.695216][ T5962] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 111.695252][ T5962] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 111.751107][ T5962] F2FS-fs (loop3): invalid crc value [ 112.290560][ T1054] bridge_slave_1: left allmulticast mode [ 112.290621][ T1054] bridge_slave_1: left promiscuous mode [ 112.292131][ T1054] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.320396][ T5962] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 112.378712][ T5962] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 112.379345][ T5962] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.441007][ T1054] bridge_slave_0: left allmulticast mode [ 112.441037][ T1054] bridge_slave_0: left promiscuous mode [ 112.441286][ T1054] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.504884][ T5999] loop4: detected capacity change from 0 to 512 [ 112.520116][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.530202][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.534658][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.547568][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.548229][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.577463][ T6004] loop0: detected capacity change from 0 to 16 [ 112.582137][ T6004] erofs (device loop0): mounted with root inode @ nid 36. [ 112.595092][ T6004] erofs (device loop0): compressed inode (nid 89) is invalid in a plain filesystem [ 112.637563][ T5999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.737360][ T5999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.739270][ T5999] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.419530][ T33] audit: type=1326 audit(1792037495.787:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.35" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fbb9e559 code=0x7ffc0000 [ 113.419910][ T33] audit: type=1326 audit(1792037495.787:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.35" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fbb9e559 code=0x7ffc0000 [ 113.501853][ T33] audit: type=1326 audit(1792037495.867:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.35" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fbb9e559 code=0x7ffc0000 [ 113.540969][ T33] audit: type=1326 audit(1792037495.907:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.35" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fbb9e559 code=0x7ffc0000 [ 113.541717][ T33] audit: type=1326 audit(1792037495.907:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.35" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22fbb9e559 code=0x7ffc0000 [ 113.541772][ T33] audit: type=1326 audit(1792037495.907:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.35" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fbb9e559 code=0x7ffc0000 [ 113.541816][ T33] audit: type=1326 audit(1792037495.907:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.35" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fbb9e559 code=0x7ffc0000 [ 113.655092][ T33] audit: type=1326 audit(1792037495.907:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.35" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fbb9e559 code=0x7ffc0000 [ 113.655156][ T33] audit: type=1326 audit(1792037496.027:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.35" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fbb9e559 code=0x7ffc0000 [ 113.709312][ T33] audit: type=1326 audit(1792037496.077:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.35" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22fbb9e559 code=0x7ffc0000 [ 113.798627][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.935521][ T1054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.951300][ T1054] bond0 (unregistering): Released all slaves [ 113.981647][ T6004] tipc: Started in network mode [ 113.981673][ T6004] tipc: Node identity 4, cluster identity 4711 [ 113.981686][ T6004] tipc: Node number set to 4 [ 113.989734][ T6010] tipc: Enabled bearer , priority 0 [ 114.427449][ T5606] syz-executor: attempt to access beyond end of device [ 114.427449][ T5606] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.456704][ T5606] CPU: 1 UID: 0 PID: 5606 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 114.456735][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.456750][ T5606] Call Trace: [ 114.456763][ T5606] [ 114.456771][ T5606] dump_stack_lvl+0xe8/0x150 [ 114.456821][ T5606] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 114.456859][ T5606] f2fs_write_end_bio+0x118e/0x15d0 [ 114.456900][ T5606] __submit_merged_bio+0x258/0x6a0 [ 114.456932][ T5606] ? rcu_is_watching+0x16/0xb0 [ 114.456968][ T5606] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 114.457003][ T5606] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 114.457061][ T5606] f2fs_write_data_pages+0x2a13/0x36e0 [ 114.457121][ T5606] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 114.457143][ T5606] ? is_bpf_text_address+0x26/0x2b0 [ 114.457187][ T5606] ? arch_stack_walk+0xfb/0x150 [ 114.457244][ T5606] ? add_lock_to_list+0xc7/0x100 [ 114.457276][ T5606] ? lockdep_unlock+0x5c/0xd0 [ 114.457295][ T5606] ? __lock_acquire+0x1511/0x2de0 [ 114.457357][ T5606] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.457402][ T5606] ? do_raw_spin_unlock+0xf5/0x200 [ 114.457435][ T5606] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 114.457460][ T5606] do_writepages+0x338/0x560 [ 114.457502][ T5606] ? do_raw_spin_unlock+0xf5/0x200 [ 114.457539][ T5606] filemap_fdatawrite+0x1e9/0x2f0 [ 114.457575][ T5606] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 114.457655][ T5606] ? do_raw_spin_unlock+0xf5/0x200 [ 114.457693][ T5606] f2fs_sync_dirty_inodes+0x471/0x970 [ 114.457737][ T5606] f2fs_write_checkpoint+0x860/0x24d0 [ 114.457803][ T5606] kill_f2fs_super+0x2dc/0x700 [ 114.457834][ T5606] ? rcu_do_enqueue+0x616/0x870 [ 114.457857][ T5606] ? lockdep_hardirqs_on+0x7b/0x110 [ 114.457881][ T5606] ? __pfx_kill_f2fs_super+0x10/0x10 [ 114.457925][ T5606] ? __pfx_call_rcu+0x10/0x10 [ 114.457961][ T5606] ? shrinker_free+0x2a7/0x3b0 [ 114.457996][ T5606] deactivate_locked_super+0xbe/0x110 [ 114.458033][ T5606] cleanup_mnt+0x204/0x2a0 [ 114.458063][ T5606] task_work_run+0x1d9/0x260 [ 114.458097][ T5606] ? __pfx_task_work_run+0x10/0x10 [ 114.458132][ T5606] exit_to_user_mode_loop+0x204/0x770 [ 114.458159][ T5606] ? rcu_is_watching+0x16/0xb0 [ 114.458192][ T5606] do_syscall_64+0x328/0x520 [ 114.458216][ T5606] ? trace_irq_disable+0x3b/0x140 [ 114.458248][ T5606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.458271][ T5606] ? clear_bhb_loop+0x70/0xc0 [ 114.458298][ T5606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.458327][ T5606] RIP: 0033:0x7f9feb39f797 [ 114.458365][ T5606] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 114.458383][ T5606] RSP: 002b:00007ffc5f1b4478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 114.458412][ T5606] RAX: 0000000000000000 RBX: 00007f9feb434cf3 RCX: 00007f9feb39f797 [ 114.458427][ T5606] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5f1b4530 [ 114.458440][ T5606] RBP: 00007ffc5f1b4530 R08: 00007ffc5f1b5530 R09: 00000000ffffffff [ 114.458455][ T5606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5f1b55c0 [ 114.458468][ T5606] R13: 00007f9feb434cf3 R14: 000000000001b87a R15: 00007ffc5f1b5600 [ 114.458500][ T5606] [ 114.463287][ T5606] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 114.645678][ T5619] Bluetooth: hci4: command tx timeout [ 114.814841][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 114.837078][ T6038] loop4: detected capacity change from 0 to 4096 [ 114.851987][ T6039] tipc: Resetting bearer [ 114.863024][ T6038] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 115.043105][ T6039] tipc: Disabling bearer [ 115.533771][ T6022] loop2: detected capacity change from 0 to 40427 [ 115.623118][ T6022] F2FS-fs (loop2): invalid crc value [ 115.851655][ T6060] loop3: detected capacity change from 0 to 256 [ 115.955330][ T6061] loop0: detected capacity change from 0 to 256 [ 115.963160][ T6061] exfat: Deprecated parameter 'utf8' [ 115.963564][ T6061] exfat: Deprecated parameter 'namecase' [ 115.963865][ T6061] exfat: Deprecated parameter 'namecase' [ 115.964212][ T6061] exfat: Deprecated parameter 'namecase' [ 116.016052][ T6060] ======================================================= [ 116.016052][ T6060] WARNING: The mand mount option has been deprecated and [ 116.016052][ T6060] and is ignored by this kernel. Remove the mand [ 116.016052][ T6060] option from the mount to silence this warning. [ 116.016052][ T6060] ======================================================= [ 116.019998][ T6060] exfat: Invalid uid '0x00000000ffffffff' [ 116.240557][ T6061] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 116.803542][ T5619] Bluetooth: hci4: command tx timeout [ 116.972138][ T6067] loop4: detected capacity change from 0 to 128 [ 117.410888][ T6022] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 117.462417][ T6022] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 117.462462][ T6022] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 117.517400][ T6022] F2FS-fs (loop2): Start checkpoint disabled! [ 117.661467][ C1] Adjusting tsc more than 11% (6083271 vs 8464875) [ 117.819613][ T6022] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 118.505659][ T5998] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.946213][ T6090] loop4: detected capacity change from 0 to 1024 [ 119.005145][ T6090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.022547][ T6090] netlink: 328 bytes leftover after parsing attributes in process `syz.4.51'. [ 119.084029][ T6096] loop3: detected capacity change from 0 to 128 [ 119.128518][ T6096] FAT-fs (loop3): data area starts beyond volume (1024 > 255) [ 119.128545][ T6096] FAT-fs (loop3): Can't find a valid FAT filesystem [ 119.203556][ T5627] Bluetooth: hci4: command tx timeout [ 119.395755][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.532615][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.441080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.790688][ T5627] Bluetooth: hci4: command 0x0419 tx timeout [ 122.089467][ T6096] loop3: detected capacity change from 0 to 40427 [ 122.126079][ T6096] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 122.126111][ T6096] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.132359][ T6096] F2FS-fs (loop3): Image doesn't support compression [ 122.161317][ T6096] F2FS-fs (loop3): invalid crc value [ 122.352392][ T1054] hsr_slave_0: left promiscuous mode [ 122.363149][ T1054] hsr_slave_1: left promiscuous mode [ 122.364219][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.364258][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.420987][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.421013][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.787674][ T1054] veth1_macvtap: left promiscuous mode [ 122.787835][ T1054] veth0_macvtap: left promiscuous mode [ 122.792505][ T1054] veth1_vlan: left promiscuous mode [ 122.796134][ T1054] veth0_vlan: left promiscuous mode [ 122.975574][ T6096] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 122.996916][ T6096] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 122.996947][ T6096] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 122.996974][ T6096] F2FS-fs (loop3): Start checkpoint disabled! [ 123.087309][ T6096] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 123.552750][ T6154] netlink: 144 bytes leftover after parsing attributes in process `syz.0.65'. [ 123.552791][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 124.083179][ T5619] Bluetooth: hci4: command 0x0419 tx timeout [ 124.233172][ T1054] team0 (unregistering): Port device team_slave_1 removed [ 124.259464][ T1054] team0 (unregistering): Port device team_slave_0 removed [ 124.376290][ T6170] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5606] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6170] [ 124.994249][ T6174] Zero length message leads to an empty skb [ 125.097909][ T6178] loop0: detected capacity change from 0 to 512 [ 125.099939][ T6178] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 125.099970][ T6178] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.099983][ T6178] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.154658][ T6178] EXT4-fs (loop0): 1 truncate cleaned up [ 125.178402][ T6178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.239217][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 125.321849][ T2247] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.413474][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.701088][ T2247] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.701144][ T2247] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 125.701184][ T2247] usb 5-1: no configurations [ 125.701197][ T2247] usb 5-1: can't read configurations, error -22 [ 125.927294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.168135][ T6200] 9pnet_fd: Insufficient options for proto=fd [ 127.133328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.688377][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.688583][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.688742][ T5998] bridge_slave_0: entered allmulticast mode [ 128.692099][ T5998] bridge_slave_0: entered promiscuous mode [ 128.723970][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.724078][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.724210][ T5998] bridge_slave_1: entered allmulticast mode [ 128.745132][ T5998] bridge_slave_1: entered promiscuous mode [ 128.916746][ T5998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.951169][ T5998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.076307][ T5998] team0: Port device team_slave_0 added [ 129.093039][ T5998] team0: Port device team_slave_1 added [ 129.215344][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.215364][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.215393][ T5998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.276621][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.276640][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.276667][ T5998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.528233][ T5998] hsr_slave_0: entered promiscuous mode [ 129.538967][ T5998] hsr_slave_1: entered promiscuous mode [ 132.709010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 133.298326][ T6240] loop0: detected capacity change from 0 to 512 [ 133.309692][ T6240] EXT4-fs: Ignoring removed bh option [ 133.334789][ T6240] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 133.437554][ T6240] EXT4-fs (loop0): 1 truncate cleaned up [ 133.497749][ T6240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.591272][ T5998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.625182][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.630920][ T5998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.670112][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.679176][ T5998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.698751][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.707026][ T5998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.733126][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.744239][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 133.905199][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.937579][ T5998] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.953154][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.953345][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.987125][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.987234][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.899086][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.899173][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.011728][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 135.222565][ T6285] warning: `syz.4.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.266994][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.409944][ T6285] loop4: detected capacity change from 0 to 256 [ 135.463867][ T6285] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 135.493978][ T6291] loop0: detected capacity change from 0 to 128 [ 135.521703][ T6291] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 135.521736][ T6291] FAT-fs (loop0): data area starts beyond volume (36 > 6) [ 135.521753][ T6291] FAT-fs (loop0): Can't find a valid FAT filesystem [ 135.523481][ T6285] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 136.978707][ T5998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.421209][ T6335] loop4: detected capacity change from 0 to 40427 [ 139.067015][ T6335] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 139.067041][ T6335] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 139.107650][ T6335] F2FS-fs (loop4): invalid crc value [ 139.167556][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 139.232885][ T6335] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 139.268297][ T6335] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 139.268330][ T6335] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.364212][ T6353] ip_tables: iptables: counters copy to user failed while replacing table [ 139.378969][ T6353] syz_tun: entered allmulticast mode [ 139.507868][ T5607] syz-executor: attempt to access beyond end of device [ 139.507868][ T5607] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 139.548103][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 139.548135][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.548149][ T5607] Call Trace: [ 139.548158][ T5607] [ 139.548167][ T5607] dump_stack_lvl+0xe8/0x150 [ 139.548207][ T5607] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 139.548247][ T5607] f2fs_write_end_bio+0x2b5/0x15d0 [ 139.548274][ T5607] ? blkg_put+0x22/0x240 [ 139.548300][ T5607] ? blkg_put+0x18d/0x240 [ 139.548327][ T5607] ? bio_endio+0x984/0xac0 [ 139.548352][ T5607] ? f2fs_write_end_io+0x258/0x300 [ 139.548381][ T5607] __submit_merged_bio+0x258/0x6a0 [ 139.548414][ T5607] ? rcu_is_watching+0x16/0xb0 [ 139.548450][ T5607] f2fs_submit_merged_write+0x2cc/0x610 [ 139.548491][ T5607] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 139.548541][ T5607] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 139.548577][ T5607] ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0 [ 139.548620][ T5607] f2fs_writeback_node_caches+0xf46/0x1100 [ 139.548680][ T5607] ? __pfx_f2fs_writeback_node_caches+0x10/0x10 [ 139.548747][ T5607] ? f2fs_write_checkpoint+0xe1e/0x24d0 [ 139.548780][ T5607] ? up_write+0x19d/0x4a0 [ 139.548817][ T5607] f2fs_write_checkpoint+0xe54/0x24d0 [ 139.548887][ T5607] kill_f2fs_super+0x2dc/0x700 [ 139.548919][ T5607] ? rcu_do_enqueue+0x616/0x870 [ 139.548942][ T5607] ? lockdep_hardirqs_on+0x7b/0x110 [ 139.548966][ T5607] ? __pfx_kill_f2fs_super+0x10/0x10 [ 139.549011][ T5607] ? __pfx_call_rcu+0x10/0x10 [ 139.549055][ T5607] ? shrinker_free+0x2a7/0x3b0 [ 139.549090][ T5607] deactivate_locked_super+0xbe/0x110 [ 139.549132][ T5607] cleanup_mnt+0x204/0x2a0 [ 139.549161][ T5607] task_work_run+0x1d9/0x260 [ 139.549190][ T5607] ? __pfx_task_work_run+0x10/0x10 [ 139.549225][ T5607] exit_to_user_mode_loop+0x204/0x770 [ 139.549252][ T5607] ? rcu_is_watching+0x16/0xb0 [ 139.549286][ T5607] do_syscall_64+0x328/0x520 [ 139.549309][ T5607] ? trace_irq_disable+0x3b/0x140 [ 139.549334][ T5607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.549357][ T5607] ? clear_bhb_loop+0x70/0xc0 [ 139.549384][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.549406][ T5607] RIP: 0033:0x7f44d579f797 [ 139.549426][ T5607] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 139.549444][ T5607] RSP: 002b:00007fff7a623d28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 139.549468][ T5607] RAX: 0000000000000000 RBX: 00007f44d5834cf3 RCX: 00007f44d579f797 [ 139.549483][ T5607] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7a623de0 [ 139.549497][ T5607] RBP: 00007fff7a623de0 R08: 00007fff7a624de0 R09: 00000000ffffffff [ 139.549512][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7a624e70 [ 139.549525][ T5607] R13: 00007f44d5834cf3 R14: 0000000000021756 R15: 00007fff7a624eb0 [ 139.549563][ T5607] [ 139.560722][ T5607] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 139.923506][ T6357] loop2: detected capacity change from 0 to 128 [ 139.963913][ T6357] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 139.963946][ T6357] FAT-fs (loop2): data area starts beyond volume (36 > 6) [ 139.963963][ T6357] FAT-fs (loop2): Can't find a valid FAT filesystem [ 140.355285][ T6365] loop3: detected capacity change from 0 to 512 [ 140.377730][ T6365] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 140.377773][ T6365] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.429457][ T5998] veth0_vlan: entered promiscuous mode [ 140.502411][ T6365] EXT4-fs (loop3): orphan cleanup on readonly fs [ 140.503108][ T6365] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.107: inode #15: comm syz.3.107: iget: illegal inode # [ 140.503163][ T6365] loop3: lost filesystem error report for type 5 error -117 [ 140.504552][ T6365] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.107: couldn't read orphan inode 15 (err -117) [ 140.504609][ T6365] loop3: lost filesystem error report for type 5 error -117 [ 140.511541][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 140.511564][ C0] EXT4-fs (loop3): initial error at time 1792037520: ext4_orphan_get:1404 [ 140.511590][ C0] EXT4-fs (loop3): last error at time 1792037520: ext4_orphan_get:1409 [ 140.552337][ T6365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 141.224759][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 141.576091][ T5998] veth1_vlan: entered promiscuous mode [ 141.652448][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.823539][ T5998] veth0_macvtap: entered promiscuous mode [ 141.848496][ T5998] veth1_macvtap: entered promiscuous mode [ 141.920290][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.948350][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.025106][ T6064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.027101][ T5909] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.027703][ T5909] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.028187][ T5909] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.373941][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.373982][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.534372][ T6394] loop2: detected capacity change from 0 to 256 [ 142.543558][ T33] kauditd_printk_skb: 29 callbacks suppressed [ 142.543599][ T33] audit: type=1800 audit(1792037522.419:41): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.112" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 143.202677][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.202701][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.552831][ T6414] loop2: detected capacity change from 0 to 40427 [ 144.585612][ T6414] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 144.585640][ T6414] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 144.637926][ T6414] F2FS-fs (loop2): invalid crc value [ 144.852953][ T6414] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 145.024662][ T6414] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 145.024707][ T6414] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.229596][ T5605] syz-executor: attempt to access beyond end of device [ 146.229596][ T5605] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 146.259015][ T6429] loop0: detected capacity change from 0 to 128 [ 146.270211][ T5605] CPU: 0 UID: 0 PID: 5605 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 146.270241][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.270253][ T5605] Call Trace: [ 146.270262][ T5605] [ 146.270271][ T5605] dump_stack_lvl+0xe8/0x150 [ 146.270309][ T5605] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 146.270349][ T5605] f2fs_write_end_bio+0x2b5/0x15d0 [ 146.270375][ T5605] ? blkg_put+0x22/0x240 [ 146.270400][ T5605] ? blkg_put+0x18d/0x240 [ 146.270426][ T5605] ? bio_endio+0x984/0xac0 [ 146.270461][ T5605] ? f2fs_write_end_io+0x258/0x300 [ 146.270489][ T5605] __submit_merged_bio+0x258/0x6a0 [ 146.270520][ T5605] ? rcu_is_watching+0x16/0xb0 [ 146.270556][ T5605] f2fs_submit_merged_write+0x2cc/0x610 [ 146.270600][ T5605] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 146.270646][ T5605] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 146.270682][ T5605] ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0 [ 146.270724][ T5605] f2fs_writeback_node_caches+0xf46/0x1100 [ 146.270784][ T5605] ? __pfx_f2fs_writeback_node_caches+0x10/0x10 [ 146.270850][ T5605] ? f2fs_write_checkpoint+0xe1e/0x24d0 [ 146.270882][ T5605] ? up_write+0x19d/0x4a0 [ 146.270919][ T5605] f2fs_write_checkpoint+0xe54/0x24d0 [ 146.270988][ T5605] kill_f2fs_super+0x2dc/0x700 [ 146.271024][ T5605] ? rcu_do_enqueue+0x616/0x870 [ 146.271048][ T5605] ? lockdep_hardirqs_on+0x7b/0x110 [ 146.271071][ T5605] ? __pfx_kill_f2fs_super+0x10/0x10 [ 146.271115][ T5605] ? __pfx_call_rcu+0x10/0x10 [ 146.271151][ T5605] ? shrinker_free+0x2a7/0x3b0 [ 146.271186][ T5605] deactivate_locked_super+0xbe/0x110 [ 146.271222][ T5605] cleanup_mnt+0x204/0x2a0 [ 146.271253][ T5605] task_work_run+0x1d9/0x260 [ 146.271281][ T5605] ? __pfx_task_work_run+0x10/0x10 [ 146.271316][ T5605] exit_to_user_mode_loop+0x204/0x770 [ 146.271342][ T5605] ? rcu_is_watching+0x16/0xb0 [ 146.271376][ T5605] do_syscall_64+0x328/0x520 [ 146.271399][ T5605] ? trace_irq_disable+0x3b/0x140 [ 146.271425][ T5605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.271454][ T5605] ? clear_bhb_loop+0x70/0xc0 [ 146.271482][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.271504][ T5605] RIP: 0033:0x7f22fbb9f797 [ 146.271525][ T5605] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 146.271543][ T5605] RSP: 002b:00007ffe57233be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 146.271566][ T5605] RAX: 0000000000000000 RBX: 00007f22fbc34cf3 RCX: 00007f22fbb9f797 [ 146.271581][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe57233ca0 [ 146.271595][ T5605] RBP: 00007ffe57233ca0 R08: 00007ffe57234ca0 R09: 00000000ffffffff [ 146.271609][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe57234d30 [ 146.271622][ T5605] R13: 00007f22fbc34cf3 R14: 0000000000022cd2 R15: 00007ffe57234d70 [ 146.271659][ T5605] [ 146.327947][ T5605] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 146.398315][ T6429] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 146.398388][ T6429] FAT-fs (loop0): data area starts beyond volume (36 > 6) [ 146.398438][ T6429] FAT-fs (loop0): Can't find a valid FAT filesystem [ 146.584436][ T6430] loop5: detected capacity change from 0 to 2048 [ 147.436448][ T6430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.487287][ T6443] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 147.666810][ T6430] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 147.666849][ T6430] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.666849][ T6430] [ 147.666866][ T6430] EXT4-fs (loop5): Total free blocks count 0 [ 147.666881][ T6430] EXT4-fs (loop5): Free/Dirty block details [ 147.666915][ T6430] EXT4-fs (loop5): free_blocks=2415919504 [ 147.666950][ T6430] EXT4-fs (loop5): dirty_blocks=32 [ 147.666970][ T6430] EXT4-fs (loop5): Block reservation details [ 147.666982][ T6430] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 147.843549][ T13] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 147.871405][ T6448] ip_tables: iptables: counters copy to user failed while replacing table [ 147.952003][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 148.438009][ T6468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.530587][ T6477] loop5: detected capacity change from 0 to 128 [ 148.549935][ T6477] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 148.549966][ T6477] FAT-fs (loop5): data area starts beyond volume (36 > 6) [ 148.549983][ T6477] FAT-fs (loop5): Can't find a valid FAT filesystem [ 149.655650][ T6490] loop0: detected capacity change from 0 to 2048 [ 149.687004][ T6495] capability: warning: `syz.3.135' uses 32-bit capabilities (legacy support in use) [ 150.309227][ T6490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.684485][ T5742] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.149268][ T5742] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 151.149321][ T5742] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 151.431326][ T6502] loop5: detected capacity change from 0 to 2048 [ 151.707207][ T33] audit: type=1800 audit(1792037530.917:42): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.134" name="bus" dev="loop0" ino=18 res=0 errno=-22 [ 151.740611][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 151.894894][ T6495] syz_tun (unregistering): left allmulticast mode [ 151.951704][ T6502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.092586][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.225012][ T6502] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 152.225453][ T6502] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 152.225484][ T6502] EXT4-fs (loop5): This should not happen!! Data will be lost [ 152.225484][ T6502] [ 152.225502][ T6502] EXT4-fs (loop5): Total free blocks count 0 [ 152.225518][ T6502] EXT4-fs (loop5): Free/Dirty block details [ 152.225534][ T6502] EXT4-fs (loop5): free_blocks=2415919504 [ 152.225552][ T6502] EXT4-fs (loop5): dirty_blocks=32 [ 152.225566][ T6502] EXT4-fs (loop5): Block reservation details [ 152.225580][ T6502] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 152.484694][ T6513] loop4: detected capacity change from 0 to 4096 [ 152.508968][ T6513] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 152.536320][ T13] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 152.555119][ T5742] usb 4-1: string descriptor 0 read error: -71 [ 152.555255][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.610390][ T5742] usb 4-1: can't set config #1, error -71 [ 152.631204][ T5742] usb 4-1: USB disconnect, device number 2 [ 153.996037][ T6545] loop4: detected capacity change from 0 to 128 [ 154.127792][ T6545] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 154.127825][ T6545] FAT-fs (loop4): data area starts beyond volume (36 > 6) [ 154.127843][ T6545] FAT-fs (loop4): Can't find a valid FAT filesystem [ 155.606989][ T5619] Bluetooth: hci3: connection err: -111 [ 155.913454][ T6580] loop2: detected capacity change from 0 to 16 [ 157.368793][ T6580] erofs (device loop2): mounted with root inode @ nid 36. [ 157.387129][ T6580] erofs (device loop2): compressed inode (nid 89) is invalid in a plain filesystem [ 157.391990][ T6580] tipc: Started in network mode [ 157.392011][ T6580] tipc: Node identity 4, cluster identity 4711 [ 157.392023][ T6580] tipc: Node number set to 4 [ 157.394036][ T6580] tipc: Enabled bearer , priority 0 [ 158.529672][ T6585] loop5: detected capacity change from 0 to 2048 [ 158.610055][ T6585] loop5: p2 p3 < > p4 < p5 > [ 158.610085][ T6585] loop5: partition table partially beyond EOD, truncated [ 158.681119][ T6585] loop5: p3 start 4225 is beyond EOD, truncated [ 158.904510][ T6598] loop5: detected capacity change from 0 to 128 [ 158.931194][ T6598] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 158.931225][ T6598] FAT-fs (loop5): data area starts beyond volume (36 > 6) [ 158.931243][ T6598] FAT-fs (loop5): Can't find a valid FAT filesystem [ 160.249697][ T6610] loop5: detected capacity change from 0 to 2048 [ 160.284184][ T5619] Bluetooth: hci0: connection err: -111 [ 160.330351][ T6610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.411513][ T6609] block device autoloading is deprecated and will be removed. [ 160.618448][ T6618] x_tables: duplicate underflow at hook 1 [ 162.948157][ T6609] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 162.948201][ T6609] device-mapper: ioctl: error adding target to table [ 162.983257][ T6630] Bluetooth: MGMT ver 1.23 [ 163.069012][ T6635] loop5: detected capacity change from 0 to 512 [ 163.129503][ T6635] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.129531][ T6635] EXT4-fs (loop5): blocks per group (42) and clusters per group (32768) inconsistent [ 163.173542][ T6637] FAULT_INJECTION: forcing a failure. [ 163.173542][ T6637] name failslab, interval 1, probability 0, space 0, times 1 [ 163.173575][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT(full) [ 163.173599][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.173613][ T6637] Call Trace: [ 163.173621][ T6637] [ 163.173631][ T6637] dump_stack_lvl+0xe8/0x150 [ 163.173671][ T6637] should_fail_ex+0x3eb/0x540 [ 163.173706][ T6637] should_failslab+0xa8/0x100 [ 163.173733][ T6637] ? alloc_empty_file+0x5b/0x1d0 [ 163.173764][ T6637] kmem_cache_alloc_noprof+0x9c/0x600 [ 163.173800][ T6637] ? alloc_empty_file+0x5b/0x1d0 [ 163.173838][ T6637] alloc_empty_file+0x5b/0x1d0 [ 163.173871][ T6637] alloc_file_pseudo+0x110/0x1e0 [ 163.173906][ T6637] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 163.173938][ T6637] ? _raw_spin_unlock+0x28/0x50 [ 163.173980][ T6637] sock_alloc_file+0xb8/0x2e0 [ 163.174010][ T6637] ? __sys_socket+0x12b/0x1b0 [ 163.174046][ T6637] __sys_socket+0x13f/0x1b0 [ 163.174083][ T6637] __x64_sys_socket+0x7a/0x90 [ 163.174118][ T6637] do_syscall_64+0x166/0x520 [ 163.174141][ T6637] ? trace_irq_disable+0x3b/0x140 [ 163.174168][ T6637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.174190][ T6637] ? clear_bhb_loop+0x70/0xc0 [ 163.174218][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.174241][ T6637] RIP: 0033:0x7f22fbb9e559 [ 163.174270][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.174289][ T6637] RSP: 002b:00007f22fca4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 163.174314][ T6637] RAX: ffffffffffffffda RBX: 00007f22fbe25fa0 RCX: 00007f22fbb9e559 [ 163.174330][ T6637] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000028 [ 163.174344][ T6637] RBP: 00007f22fbc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 163.174358][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.174371][ T6637] R13: 00007f22fbe26038 R14: 00007f22fbe25fa0 R15: 00007ffe57234978 [ 163.174406][ T6637] [ 163.705241][ T6648] kvm: apic: phys broadcast and lowest prio [ 163.791589][ T6644] loop3: detected capacity change from 0 to 256 [ 163.823263][ T6644] exFAT-fs (loop3): error, no upcase table entry. Please run fsck [ 163.823286][ T6644] exFAT-fs (loop3): Filesystem has been set read-only [ 163.823544][ T6644] exFAT-fs (loop3): failed to load alloc-bitmap [ 163.823555][ T6644] exFAT-fs (loop3): failed to recognize exfat type [ 164.255362][ T6639] loop0: detected capacity change from 0 to 32768 [ 164.315475][ T6655] bridge0: port 3(syz_tun) entered blocking state [ 164.315609][ T6655] bridge0: port 3(syz_tun) entered disabled state [ 164.315819][ T6655] syz_tun: entered allmulticast mode [ 164.338536][ T6655] syz_tun: entered promiscuous mode [ 164.340635][ T6655] bridge0: port 3(syz_tun) entered blocking state [ 164.340779][ T6655] bridge0: port 3(syz_tun) entered listening state [ 164.381584][ T6639] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.178 (6639) [ 164.715692][ T6639] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 164.715750][ T6639] BTRFS info (device loop0): using blake2b checksum algorithm [ 166.009259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 166.537674][ T6639] BTRFS info (device loop0): enabling ssd optimizations [ 166.537708][ T6639] BTRFS info (device loop0): turning on async discard [ 166.537727][ T6639] BTRFS info (device loop0): enabling free space tree [ 166.537757][ T6639] BTRFS info (device loop0): use zlib compression, level 3 [ 166.662119][ T33] audit: type=1800 audit(1792037544.721:43): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.178" name="file1" dev="loop0" ino=260 res=0 errno=-22 [ 168.319269][ T5608] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 168.475250][ T6686] loop4: detected capacity change from 0 to 16 [ 168.479108][ T6686] erofs (device loop4): mounted with root inode @ nid 36. [ 168.481182][ T6686] erofs (device loop4): compressed inode (nid 89) is invalid in a plain filesystem [ 168.493400][ T6686] tipc: Started in network mode [ 168.493465][ T6686] tipc: Node identity 4, cluster identity 4711 [ 168.493502][ T6686] tipc: Node number set to 4 [ 168.496225][ T6686] tipc: Enabled bearer , priority 0 [ 168.610587][ T6703] loop5: detected capacity change from 0 to 256 [ 168.617350][ T6703] exfat: Deprecated parameter 'utf8' [ 168.617735][ T6703] exfat: Deprecated parameter 'namecase' [ 168.618047][ T6703] exfat: Deprecated parameter 'namecase' [ 168.618482][ T6703] exfat: Deprecated parameter 'namecase' [ 168.933155][ T6703] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 170.159828][ T5613] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 170.322415][ T5613] usb 5-1: Using ep0 maxpacket: 32 [ 170.323172][ T5613] usb 5-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 170.328338][ T5613] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 170.395328][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 170.395359][ T5613] usb 5-1: Product: syz [ 170.395375][ T5613] usb 5-1: Manufacturer: syz [ 170.395391][ T5613] usb 5-1: SerialNumber: syz [ 170.484677][ T5613] usb 5-1: config 0 descriptor?? [ 170.495637][ T6710] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.505110][ T5613] hub 5-1:0.0: bad descriptor, ignoring hub [ 170.505138][ T5613] hub 5-1:0.0: probe with driver hub failed with error -5 [ 170.896935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 172.002547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 172.412289][ T6733] loop2: detected capacity change from 0 to 256 [ 172.483513][ T6733] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 172.514914][ T6730] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 172.664026][ T6744] loop0: detected capacity change from 0 to 512 [ 172.665135][ T6744] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 173.467579][ T5743] usb 5-1: USB disconnect, device number 5 [ 173.690882][ T6744] mmap: syz.0.200 (6744) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 174.502044][ T6762] xt_hashlimit: size too large, truncated to 1048576 [ 174.715900][ T6767] FAULT_INJECTION: forcing a failure. [ 174.715900][ T6767] name failslab, interval 1, probability 5, space 0, times 10000 [ 174.715957][ T6767] CPU: 1 UID: 0 PID: 6767 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(full) [ 174.715983][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.715996][ T6767] Call Trace: [ 174.716004][ T6767] [ 174.716014][ T6767] dump_stack_lvl+0xe8/0x150 [ 174.716054][ T6767] should_fail_ex+0x3eb/0x540 [ 174.716085][ T6767] should_failslab+0xa8/0x100 [ 174.716112][ T6767] ? ptlock_alloc+0x20/0x70 [ 174.716142][ T6767] kmem_cache_alloc_noprof+0x9c/0x600 [ 174.716177][ T6767] ? ptlock_alloc+0x20/0x70 [ 174.716213][ T6767] ptlock_alloc+0x20/0x70 [ 174.716242][ T6767] pte_alloc_one+0x7a/0x3d0 [ 174.716273][ T6767] __pte_alloc+0x25/0x1a0 [ 174.716310][ T6767] do_pte_missing+0x2ddb/0x3570 [ 174.716343][ T6767] ? __lock_acquire+0x747/0x2de0 [ 174.716387][ T6767] handle_mm_fault+0x1a53/0x3750 [ 174.716428][ T6767] ? handle_mm_fault+0xf1/0x3750 [ 174.716468][ T6767] ? __pfx_handle_mm_fault+0x10/0x10 [ 174.716494][ T6767] ? lock_vma_under_rcu+0x45a/0x500 [ 174.716552][ T6767] do_user_addr_fault+0xb35/0x1480 [ 174.716588][ T6767] ? trace_page_fault_user+0x84/0x1e0 [ 174.716614][ T6767] exc_page_fault+0x6a/0xc0 [ 174.716640][ T6767] asm_exc_page_fault+0x26/0x30 [ 174.716662][ T6767] RIP: 0033:0x7fdf2e65534e [ 174.716683][ T6767] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 174.716701][ T6767] RSP: 002b:00007fdf2f613470 EFLAGS: 00010206 [ 174.716723][ T6767] RAX: 0000000000a00001 RBX: 00007fdf2f613530 RCX: 0000000000000008 [ 174.716738][ T6767] RDX: 000000000000003f RSI: 0000000000000001 RDI: 00007fdf2f6135d0 [ 174.716752][ T6767] RBP: 0000000000000018 R08: 00007fdf24400000 R09: 0000000000a00000 [ 174.716767][ T6767] R10: 0000000000000000 R11: 00007fdf2f613540 R12: 0000000000000001 [ 174.716781][ T6767] R13: 00007fdf2e855b20 R14: 0000000000000000 R15: 00007fdf2f6135d0 [ 174.716825][ T6767] [ 174.721297][ T6767] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 174.989511][ T6755] loop3: detected capacity change from 0 to 40427 [ 175.006141][ T6755] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 175.006173][ T6755] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 175.009125][ T6755] F2FS-fs (loop3): Image doesn't support compression [ 175.009178][ T6755] F2FS-fs (loop3): build fault injection rate: 690 [ 175.009220][ T6755] F2FS-fs (loop3): build fault injection type: 0x35f7 [ 175.019405][ T6755] F2FS-fs (loop3): invalid crc value [ 175.179101][ T6755] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 175.199430][ T6755] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 175.199460][ T6755] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 175.199486][ T6755] F2FS-fs (loop3): Start checkpoint disabled! [ 175.244513][ T6755] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 175.263098][ T6755] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 175.263129][ T6755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 175.479473][ T6755] syz.3.202: attempt to access beyond end of device [ 175.479473][ T6755] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.540411][ T6755] syz.3.202: attempt to access beyond end of device [ 175.540411][ T6755] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.698054][ T6734] kworker/u8:16: attempt to access beyond end of device [ 175.698054][ T6734] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 175.699411][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 175.699446][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.699460][ T6734] Workqueue: writeback wb_workfn (flush-7:3) [ 175.699498][ T6734] Call Trace: [ 175.699507][ T6734] [ 175.699516][ T6734] dump_stack_lvl+0xe8/0x150 [ 175.699553][ T6734] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 175.699596][ T6734] f2fs_write_end_bio+0x118e/0x15d0 [ 175.699645][ T6734] __submit_merged_bio+0x258/0x6a0 [ 175.699679][ T6734] ? rcu_is_watching+0x16/0xb0 [ 175.699717][ T6734] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 175.699754][ T6734] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 175.699817][ T6734] f2fs_write_data_pages+0x2a13/0x36e0 [ 175.699890][ T6734] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.699934][ T6734] ? check_path+0x21/0x40 [ 175.699995][ T6734] ? __pfx_read_node_cache+0x10/0x10 [ 175.700059][ T6734] ? __lock_acquire+0x747/0x2de0 [ 175.700113][ T6734] ? __pfx_wake_up_bit+0x10/0x10 [ 175.700148][ T6734] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.700175][ T6734] do_writepages+0x338/0x560 [ 175.700217][ T6734] ? reacquire_held_locks+0x117/0x1a0 [ 175.700245][ T6734] ? writeback_sb_inodes+0x450/0x1af0 [ 175.700286][ T6734] __writeback_single_inode+0x136/0x1220 [ 175.700325][ T6734] ? do_raw_spin_unlock+0xf5/0x200 [ 175.700364][ T6734] writeback_sb_inodes+0x9de/0x1af0 [ 175.700396][ T6734] ? __lock_acquire+0x747/0x2de0 [ 175.700440][ T6734] ? lock_acquire+0x115/0x350 [ 175.700473][ T6734] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 175.700562][ T6734] ? rcu_is_watching+0x16/0xb0 [ 175.700593][ T6734] ? queue_io+0x2d3/0x470 [ 175.700631][ T6734] wb_writeback+0x41c/0xad0 [ 175.700667][ T6734] ? queue_io+0x1f1/0x470 [ 175.700708][ T6734] ? __pfx_wb_writeback+0x10/0x10 [ 175.700738][ T6734] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.700793][ T6734] wb_workfn+0x431/0x10f0 [ 175.700846][ T6734] ? __pfx_wb_workfn+0x10/0x10 [ 175.700882][ T6734] ? trace_hrtimer_start+0x82/0x200 [ 175.700913][ T6734] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.700958][ T6734] ? lock_acquire+0x115/0x350 [ 175.700995][ T6734] ? rcu_is_watching+0x16/0xb0 [ 175.701027][ T6734] ? process_scheduled_works+0x97a/0x1630 [ 175.701059][ T6734] process_scheduled_works+0xc3d/0x1630 [ 175.701137][ T6734] ? __pfx_process_scheduled_works+0x10/0x10 [ 175.701177][ T6734] ? assign_work+0x3cf/0x5d0 [ 175.701215][ T6734] worker_thread+0xa47/0xfb0 [ 175.701282][ T6734] kthread+0x38b/0x480 [ 175.701307][ T6734] ? __pfx_worker_thread+0x10/0x10 [ 175.701335][ T6734] ? __pfx_kthread+0x10/0x10 [ 175.701360][ T6734] ret_from_fork+0x514/0xb70 [ 175.701388][ T6734] ? __pfx_ret_from_fork+0x10/0x10 [ 175.701411][ T6734] ? __switch_to+0xc78/0x1410 [ 175.701448][ T6734] ? __pfx_kthread+0x10/0x10 [ 175.701473][ T6734] ret_from_fork_asm+0x1a/0x30 [ 175.701517][ T6734] [ 175.720358][ T6734] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 176.080849][ T6796] loop2: detected capacity change from 0 to 256 [ 176.137847][ T6796] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 176.189776][ T6796] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 176.433842][ T6767] FAULT_INJECTION: forcing a failure. [ 176.433842][ T6767] name failslab, interval 1, probability 5, space 0, times 9991 [ 176.433886][ T6767] CPU: 1 UID: 0 PID: 6767 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(full) [ 176.433910][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.433923][ T6767] Call Trace: [ 176.433932][ T6767] [ 176.433941][ T6767] dump_stack_lvl+0xe8/0x150 [ 176.433978][ T6767] should_fail_ex+0x3eb/0x540 [ 176.434008][ T6767] should_failslab+0xa8/0x100 [ 176.434039][ T6767] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 176.434083][ T6767] ? xas_nomem+0x14a/0x1f0 [ 176.434107][ T6767] ? xas_nomem+0x14a/0x1f0 [ 176.434150][ T6767] xas_nomem+0x14a/0x1f0 [ 176.434178][ T6767] shmem_add_to_page_cache+0xa68/0xd40 [ 176.434223][ T6767] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 176.434273][ T6767] shmem_alloc_and_add_folio+0x854/0xf60 [ 176.434294][ T6767] ? filemap_get_entry+0xcd/0x3f0 [ 176.434320][ T6767] ? __pfx___schedule+0x10/0x10 [ 176.434339][ T6767] ? __pfx_filemap_get_entry+0x10/0x10 [ 176.434358][ T6767] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 176.434379][ T6767] ? copy_folio_from_iter_atomic+0x1b9c/0x1c60 [ 176.434411][ T6767] shmem_get_folio_gfp+0x594/0x1330 [ 176.434458][ T6767] shmem_write_begin+0x16c/0x330 [ 176.434484][ T6767] generic_perform_write+0x2d5/0x8e0 [ 176.441618][ T6767] ? __pfx_generic_perform_write+0x10/0x10 [ 176.441652][ T6767] ? preempt_count_add+0x6a/0x140 [ 176.441684][ T6767] ? mnt_put_write_access_file+0xbc/0x100 [ 176.441713][ T6767] ? file_update_time_flags+0x3ab/0x440 [ 176.441744][ T6767] shmem_file_write_iter+0xf8/0x120 [ 176.441773][ T6767] vfs_write+0x612/0xba0 [ 176.441805][ T6767] ? __pfx_vfs_write+0x10/0x10 [ 176.441833][ T6767] ? __fget_files+0x3a2/0x420 [ 176.441851][ T6767] ? __fget_files+0x2a/0x420 [ 176.441876][ T6767] ? fdget+0x1ac/0x250 [ 176.441904][ T6767] ksys_write+0x150/0x270 [ 176.441930][ T6767] ? __pfx_ksys_write+0x10/0x10 [ 176.441966][ T6767] do_syscall_64+0x166/0x520 [ 176.441991][ T6767] ? trace_irq_disable+0x3b/0x140 [ 176.442017][ T6767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.442040][ T6767] ? clear_bhb_loop+0x70/0xc0 [ 176.442067][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.442089][ T6767] RIP: 0033:0x7fdf2e75ed8e [ 176.442110][ T6767] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.442128][ T6767] RSP: 002b:00007fdf2f613da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.442152][ T6767] RAX: ffffffffffffffda RBX: 00007fdf2f6146c0 RCX: 00007fdf2e75ed8e [ 176.442168][ T6767] RDX: 00000000013bd7ef RSI: 00007fdf24400000 RDI: 0000000000000006 [ 176.442183][ T6767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.442195][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 176.442208][ T6767] R13: 00007fdf2f613ee0 R14: 00007fdf2f613ea0 R15: 00007fdf24400000 [ 176.442245][ T6767] [ 177.763050][ T6812] loop5: detected capacity change from 0 to 40427 [ 177.784408][ T6812] F2FS-fs (loop5): build fault injection rate: 174 [ 177.784435][ T6812] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 177.787834][ T6812] F2FS-fs (loop5): invalid crc value [ 177.899608][ T5613] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 178.061735][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 178.078617][ T5613] usb 3-1: unable to get BOS descriptor or descriptor too short [ 178.078675][ T5613] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 178.102198][ T5613] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 178.102242][ T5613] usb 3-1: can't read configurations, error -71 [ 178.293485][ T6812] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 178.310140][ T6767] loop0: detected capacity change from 0 to 32768 [ 178.310532][ T6767] FAULT_INJECTION: forcing a failure. [ 178.310532][ T6767] name failslab, interval 1, probability 5, space 0, times 9985 [ 178.310562][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(full) [ 178.310586][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.310599][ T6767] Call Trace: [ 178.310607][ T6767] [ 178.310615][ T6767] dump_stack_lvl+0xe8/0x150 [ 178.310660][ T6767] should_fail_ex+0x3eb/0x540 [ 178.310691][ T6767] should_failslab+0xa8/0x100 [ 178.310720][ T6767] __kmalloc_noprof+0xf9/0x710 [ 178.310757][ T6767] ? tomoyo_encode+0x2ad/0x570 [ 178.310787][ T6767] ? tomoyo_encode+0x2ad/0x570 [ 178.310817][ T6767] tomoyo_encode+0x2ad/0x570 [ 178.310856][ T6767] tomoyo_realpath_from_path+0x5fa/0x640 [ 178.310889][ T6767] ? tomoyo_path_number_perm+0x219/0x5f0 [ 178.310918][ T6767] tomoyo_path_number_perm+0x246/0x5f0 [ 178.310950][ T6767] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.311025][ T6767] ? __pfx_current_check_access_path+0x10/0x10 [ 178.311061][ T6767] ? d_splice_alias_ops+0x11c/0x440 [ 178.311087][ T6767] ? d_splice_alias+0x12/0x30 [ 178.311115][ T6767] ? lookup_one_qstr_excl+0x1d4/0x360 [ 178.311144][ T6767] tomoyo_path_mkdir+0xb0/0xf0 [ 178.311170][ T6767] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 178.311199][ T6767] ? __pfx_filename_create+0x10/0x10 [ 178.311233][ T6767] security_path_mkdir+0x169/0x350 [ 178.311260][ T6767] filename_mkdirat+0x200/0x510 [ 178.311286][ T6767] ? __might_fault+0xaf/0x130 [ 178.311320][ T6767] ? __pfx_filename_mkdirat+0x10/0x10 [ 178.311353][ T6767] ? do_getname+0x151/0x250 [ 178.311388][ T6767] __se_sys_mkdirat+0x35/0x150 [ 178.311418][ T6767] do_syscall_64+0x166/0x520 [ 178.311441][ T6767] ? trace_irq_disable+0x3b/0x140 [ 178.311466][ T6767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.311487][ T6767] ? clear_bhb_loop+0x70/0xc0 [ 178.311513][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.311534][ T6767] RIP: 0033:0x7fdf2e79d3c7 [ 178.311554][ T6767] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.311572][ T6767] RSP: 002b:00007fdf2f613e58 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 178.311594][ T6767] RAX: ffffffffffffffda RBX: 00007fdf2f613ee0 RCX: 00007fdf2e79d3c7 [ 178.311610][ T6767] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 178.311624][ T6767] RBP: 000020000003e000 R08: 0000000000000000 R09: 0000000000000000 [ 178.311637][ T6767] R10: 0000000000000000 R11: 0000000000000202 R12: 0000200000000280 [ 178.311650][ T6767] R13: 00007fdf2f613ea0 R14: 0000000000004431 R15: 000020000003e080 [ 178.311686][ T6767] [ 178.324176][ T6767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.399049][ T6812] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 178.713106][ T6767] FAULT_INJECTION: forcing a failure. [ 178.713106][ T6767] name failslab, interval 1, probability 5, space 0, times 9984 [ 178.713142][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(full) [ 178.713167][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.713181][ T6767] Call Trace: [ 178.713190][ T6767] [ 178.713199][ T6767] dump_stack_lvl+0xe8/0x150 [ 178.713239][ T6767] should_fail_ex+0x3eb/0x540 [ 178.713271][ T6767] should_failslab+0xa8/0x100 [ 178.713302][ T6767] __kmalloc_cache_noprof+0x9e/0x600 [ 178.713338][ T6767] ? ocfs2_fill_super+0x1cd4/0x6a20 [ 178.713362][ T6767] ? ocfs2_fill_super+0x1cd4/0x6a20 [ 178.713389][ T6767] ? __asan_memset+0x22/0x50 [ 178.713425][ T6767] ocfs2_fill_super+0x1cd4/0x6a20 [ 178.713472][ T6767] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 178.713500][ T6767] ? __lock_acquire+0x747/0x2de0 [ 178.713527][ T6767] ? rcu_is_watching+0x16/0xb0 [ 178.713554][ T6767] ? __kasan_check_byte+0x12/0x40 [ 178.713581][ T6767] ? rcu_is_watching+0x16/0xb0 [ 178.713613][ T6767] ? rcu_is_watching+0x16/0xb0 [ 178.713640][ T6767] ? __kasan_check_byte+0x12/0x40 [ 178.713667][ T6767] ? rcu_is_watching+0x16/0xb0 [ 178.713697][ T6767] ? lock_release+0x4b/0x3c0 [ 178.713719][ T6767] ? lock_release+0x4b/0x3c0 [ 178.713750][ T6767] ? is_bpf_text_address+0x292/0x2b0 [ 178.713781][ T6767] ? is_bpf_text_address+0x26/0x2b0 [ 178.713815][ T6767] ? rcu_is_watching+0x16/0xb0 [ 178.713842][ T6767] ? __kasan_check_byte+0x12/0x40 [ 178.713876][ T6767] ? rcu_is_watching+0x16/0xb0 [ 178.713909][ T6767] ? rcu_is_watching+0x16/0xb0 [ 178.713936][ T6767] ? __kasan_check_byte+0x12/0x40 [ 178.713963][ T6767] ? rcu_is_watching+0x16/0xb0 [ 178.714013][ T6767] ? lock_release+0x4b/0x3c0 [ 178.714035][ T6767] ? lock_release+0x4b/0x3c0 [ 178.714066][ T6767] ? is_bpf_text_address+0x292/0x2b0 [ 178.714097][ T6767] ? is_bpf_text_address+0x26/0x2b0 [ 178.714132][ T6767] ? kernel_text_address+0xa5/0xe0 [ 178.714158][ T6767] ? __kernel_text_address+0xd/0x30 [ 178.714181][ T6767] ? unwind_get_return_address+0x4d/0x90 [ 178.714209][ T6767] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 178.714235][ T6767] ? arch_stack_walk+0xfb/0x150 [ 178.714261][ T6767] ? __bfs+0x153/0x290 [ 178.714284][ T6767] ? __pfx_hlock_conflict+0x10/0x10 [ 178.714324][ T6767] ? __bfs+0x153/0x290 [ 178.714347][ T6767] ? __pfx_hlock_conflict+0x10/0x10 [ 178.714383][ T6767] ? check_path+0x21/0x40 [ 178.714410][ T6767] ? check_noncircular+0xdb/0x150 [ 178.714448][ T6767] ? lockdep_unlock+0x5c/0xd0 [ 178.714467][ T6767] ? __lock_acquire+0x1511/0x2de0 [ 178.714540][ T6767] ? __mutex_trylock_common+0x15f/0x270 [ 178.714574][ T6767] ? string+0x28a/0x2d0 [ 178.714605][ T6767] ? widen_string+0x3b/0x2a0 [ 178.714635][ T6767] ? string+0x28a/0x2d0 [ 178.714670][ T6767] ? bdev_name+0x2f0/0x450 [ 178.714697][ T6767] ? pointer+0x6f2/0x1120 [ 178.714735][ T6767] ? __pfx_pointer+0x10/0x10 [ 178.714798][ T6767] ? snprintf+0xe8/0x140 [ 178.714836][ T6767] ? __pfx_snprintf+0x10/0x10 [ 178.714874][ T6767] ? set_blocksize+0x1c9/0x440 [ 178.714912][ T6767] ? sb_set_blocksize+0x155/0x240 [ 178.714946][ T6767] ? setup_bdev_super+0x586/0x680 [ 178.714975][ T6767] get_tree_bdev_flags+0x430/0x4f0 [ 178.715001][ T6767] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 178.715033][ T6767] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 178.715078][ T6767] vfs_get_tree+0x92/0x2a0 [ 178.715114][ T6767] do_new_mount+0x325/0xb00 [ 178.715157][ T6767] ? __pfx_do_new_mount+0x10/0x10 [ 178.715193][ T6767] ? ns_capable+0x84/0xe0 [ 178.715222][ T6767] ? path_mount+0x647/0x1050 [ 178.715260][ T6767] ? user_path_at+0xd4/0x160 [ 178.715286][ T6767] __se_sys_mount+0x31d/0x420 [ 178.715328][ T6767] ? __pfx___se_sys_mount+0x10/0x10 [ 178.715370][ T6767] ? __x64_sys_mount+0x20/0xc0 [ 178.715406][ T6767] do_syscall_64+0x166/0x520 [ 178.715430][ T6767] ? trace_irq_disable+0x3b/0x140 [ 178.715456][ T6767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.715479][ T6767] ? clear_bhb_loop+0x70/0xc0 [ 178.715506][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.715528][ T6767] RIP: 0033:0x7fdf2e79f7ca [ 178.715550][ T6767] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.715568][ T6767] RSP: 002b:00007fdf2f613e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.715592][ T6767] RAX: ffffffffffffffda RBX: 00007fdf2f613ee0 RCX: 00007fdf2e79f7ca [ 178.715609][ T6767] RDX: 000020000003e000 RSI: 0000200000000280 RDI: 00007fdf2f613ea0 [ 178.715625][ T6767] RBP: 000020000003e000 R08: 00007fdf2f613ee0 R09: 00000000000008c0 [ 178.715639][ T6767] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000200000000280 [ 178.715654][ T6767] R13: 00007fdf2f613ea0 R14: 0000000000004431 R15: 000020000003e080 [ 178.715689][ T6767] [ 178.802495][ T6767] (syz.0.204,6767,0):ocfs2_initialize_super:2065 ERROR: unable to alloc vol label [ 178.802898][ T6767] (syz.0.204,6767,0):ocfs2_fill_super:1185 ERROR: status = -12 [ 179.260670][ T6857] overlayfs: failed to resolve './bus': -2 [ 179.386817][ T6860] netlink: 108 bytes leftover after parsing attributes in process `syz.2.224'. [ 179.566041][ T5998] syz-executor: attempt to access beyond end of device [ 179.566041][ T5998] loop5: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 179.592539][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 179.592572][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.592585][ T5998] Call Trace: [ 179.592593][ T5998] [ 179.592602][ T5998] dump_stack_lvl+0xe8/0x150 [ 179.592640][ T5998] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 179.592681][ T5998] f2fs_write_end_bio+0x118e/0x15d0 [ 179.592733][ T5998] __submit_merged_bio+0x258/0x6a0 [ 179.592765][ T5998] ? rcu_is_watching+0x16/0xb0 [ 179.592801][ T5998] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 179.592838][ T5998] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 179.592898][ T5998] f2fs_write_data_pages+0x2a13/0x36e0 [ 179.592962][ T5998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.592984][ T5998] ? is_bpf_text_address+0x26/0x2b0 [ 179.593028][ T5998] ? arch_stack_walk+0xfb/0x150 [ 179.593087][ T5998] ? add_lock_to_list+0xc7/0x100 [ 179.593118][ T5998] ? lockdep_unlock+0x5c/0xd0 [ 179.593137][ T5998] ? __lock_acquire+0x1511/0x2de0 [ 179.593191][ T5998] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.593236][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.593272][ T5998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.593298][ T5998] do_writepages+0x338/0x560 [ 179.593339][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.593376][ T5998] filemap_fdatawrite+0x1e9/0x2f0 [ 179.593411][ T5998] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.593519][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.593556][ T5998] f2fs_sync_dirty_inodes+0x471/0x970 [ 179.593599][ T5998] f2fs_write_checkpoint+0x860/0x24d0 [ 179.593666][ T5998] kill_f2fs_super+0x2dc/0x700 [ 179.593703][ T5998] ? rcu_do_enqueue+0x616/0x870 [ 179.593736][ T5998] ? lockdep_hardirqs_on+0x7b/0x110 [ 179.593761][ T5998] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.593805][ T5998] ? __pfx_call_rcu+0x10/0x10 [ 179.593842][ T5998] ? shrinker_free+0x2a7/0x3b0 [ 179.593876][ T5998] deactivate_locked_super+0xbe/0x110 [ 179.593923][ T5998] cleanup_mnt+0x204/0x2a0 [ 179.593955][ T5998] task_work_run+0x1d9/0x260 [ 179.593984][ T5998] ? __pfx_task_work_run+0x10/0x10 [ 179.594020][ T5998] exit_to_user_mode_loop+0x204/0x770 [ 179.594046][ T5998] ? rcu_is_watching+0x16/0xb0 [ 179.594094][ T5998] do_syscall_64+0x328/0x520 [ 179.594118][ T5998] ? trace_irq_disable+0x3b/0x140 [ 179.594143][ T5998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.594166][ T5998] ? clear_bhb_loop+0x70/0xc0 [ 179.594193][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.594215][ T5998] RIP: 0033:0x7fa38cf9f797 [ 179.594236][ T5998] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.594254][ T5998] RSP: 002b:00007ffdaa740d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.594278][ T5998] RAX: 0000000000000000 RBX: 00007fa38d034cf3 RCX: 00007fa38cf9f797 [ 179.594293][ T5998] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaa740e40 [ 179.594306][ T5998] RBP: 00007ffdaa740e40 R08: 00007ffdaa741e40 R09: 00000000ffffffff [ 179.594321][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaa741ed0 [ 179.594335][ T5998] R13: 00007fa38d034cf3 R14: 000000000002a796 R15: 00007ffdaa741f10 [ 179.594371][ T5998] [ 179.612336][ T5998] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 179.612654][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 179.612734][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.612766][ T5998] Call Trace: [ 179.612786][ T5998] [ 179.612807][ T5998] dump_stack_lvl+0xe8/0x150 [ 179.612901][ T5998] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 179.613005][ T5998] f2fs_write_end_bio+0x118e/0x15d0 [ 179.613138][ T5998] __submit_merged_bio+0x258/0x6a0 [ 179.613224][ T5998] ? rcu_is_watching+0x16/0xb0 [ 179.613315][ T5998] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 179.613408][ T5998] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 179.613551][ T5998] f2fs_write_data_pages+0x2a13/0x36e0 [ 179.613723][ T5998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.613776][ T5998] ? is_bpf_text_address+0x26/0x2b0 [ 179.613888][ T5998] ? arch_stack_walk+0xfb/0x150 [ 179.614032][ T5998] ? add_lock_to_list+0xc7/0x100 [ 179.614105][ T5998] ? lockdep_unlock+0x5c/0xd0 [ 179.614154][ T5998] ? __lock_acquire+0x1511/0x2de0 [ 179.614283][ T5998] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.614404][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.614500][ T5998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.614570][ T5998] do_writepages+0x338/0x560 [ 179.614671][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.614771][ T5998] filemap_fdatawrite+0x1e9/0x2f0 [ 179.614854][ T5998] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.615058][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.615150][ T5998] f2fs_sync_dirty_inodes+0x471/0x970 [ 179.615250][ T5998] f2fs_write_checkpoint+0x860/0x24d0 [ 179.615417][ T5998] kill_f2fs_super+0x2dc/0x700 [ 179.615497][ T5998] ? rcu_do_enqueue+0x616/0x870 [ 179.615550][ T5998] ? lockdep_hardirqs_on+0x7b/0x110 [ 179.615611][ T5998] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.615732][ T5998] ? __pfx_call_rcu+0x10/0x10 [ 179.615838][ T5998] ? shrinker_free+0x2a7/0x3b0 [ 179.615934][ T5998] deactivate_locked_super+0xbe/0x110 [ 179.616019][ T5998] cleanup_mnt+0x204/0x2a0 [ 179.616090][ T5998] task_work_run+0x1d9/0x260 [ 179.616162][ T5998] ? __pfx_task_work_run+0x10/0x10 [ 179.616240][ T5998] exit_to_user_mode_loop+0x204/0x770 [ 179.616309][ T5998] ? rcu_is_watching+0x16/0xb0 [ 179.616393][ T5998] do_syscall_64+0x328/0x520 [ 179.616447][ T5998] ? trace_irq_disable+0x3b/0x140 [ 179.616514][ T5998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.616568][ T5998] ? clear_bhb_loop+0x70/0xc0 [ 179.616638][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.616689][ T5998] RIP: 0033:0x7fa38cf9f797 [ 179.616743][ T5998] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.616791][ T5998] RSP: 002b:00007ffdaa740d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.616844][ T5998] RAX: 0000000000000000 RBX: 00007fa38d034cf3 RCX: 00007fa38cf9f797 [ 179.616883][ T5998] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaa740e40 [ 179.616915][ T5998] RBP: 00007ffdaa740e40 R08: 00007ffdaa741e40 R09: 00000000ffffffff [ 179.616954][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaa741ed0 [ 179.616986][ T5998] R13: 00007fa38d034cf3 R14: 000000000002a796 R15: 00007ffdaa741f10 [ 179.617070][ T5998] [ 179.667847][ T5998] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 179.668081][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 179.668155][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.668181][ T5998] Call Trace: [ 179.668196][ T5998] [ 179.668216][ T5998] dump_stack_lvl+0xe8/0x150 [ 179.668309][ T5998] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 179.668411][ T5998] f2fs_write_end_bio+0x118e/0x15d0 [ 179.668526][ T5998] __submit_merged_bio+0x258/0x6a0 [ 179.668600][ T5998] ? rcu_is_watching+0x16/0xb0 [ 179.668694][ T5998] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 179.668794][ T5998] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 179.668961][ T5998] f2fs_write_data_pages+0x2a13/0x36e0 [ 179.669118][ T5998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.669170][ T5998] ? is_bpf_text_address+0x26/0x2b0 [ 179.669269][ T5998] ? arch_stack_walk+0xfb/0x150 [ 179.669414][ T5998] ? add_lock_to_list+0xc7/0x100 [ 179.669504][ T5998] ? lockdep_unlock+0x5c/0xd0 [ 179.669549][ T5998] ? __lock_acquire+0x1511/0x2de0 [ 179.669690][ T5998] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.669805][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.669887][ T5998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.669948][ T5998] do_writepages+0x338/0x560 [ 179.670051][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.670106][ T5998] filemap_fdatawrite+0x1e9/0x2f0 [ 179.670140][ T5998] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.670234][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.670269][ T5998] f2fs_sync_dirty_inodes+0x471/0x970 [ 179.670312][ T5998] f2fs_write_checkpoint+0x860/0x24d0 [ 179.670380][ T5998] kill_f2fs_super+0x2dc/0x700 [ 179.670412][ T5998] ? rcu_do_enqueue+0x616/0x870 [ 179.670435][ T5998] ? lockdep_hardirqs_on+0x7b/0x110 [ 179.670459][ T5998] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.670500][ T5998] ? __pfx_call_rcu+0x10/0x10 [ 179.670537][ T5998] ? shrinker_free+0x2a7/0x3b0 [ 179.670571][ T5998] deactivate_locked_super+0xbe/0x110 [ 179.670608][ T5998] cleanup_mnt+0x204/0x2a0 [ 179.670638][ T5998] task_work_run+0x1d9/0x260 [ 179.670666][ T5998] ? __pfx_task_work_run+0x10/0x10 [ 179.670727][ T5998] exit_to_user_mode_loop+0x204/0x770 [ 179.670808][ T5998] ? rcu_is_watching+0x16/0xb0 [ 179.670915][ T5998] do_syscall_64+0x328/0x520 [ 179.670977][ T5998] ? trace_irq_disable+0x3b/0x140 [ 179.671039][ T5998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.671093][ T5998] ? clear_bhb_loop+0x70/0xc0 [ 179.671163][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.671221][ T5998] RIP: 0033:0x7fa38cf9f797 [ 179.671281][ T5998] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.671323][ T5998] RSP: 002b:00007ffdaa740d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.671386][ T5998] RAX: 0000000000000000 RBX: 00007fa38d034cf3 RCX: 00007fa38cf9f797 [ 179.671419][ T5998] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaa740e40 [ 179.671450][ T5998] RBP: 00007ffdaa740e40 R08: 00007ffdaa741e40 R09: 00000000ffffffff [ 179.671490][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaa741ed0 [ 179.671522][ T5998] R13: 00007fa38d034cf3 R14: 000000000002a796 R15: 00007ffdaa741f10 [ 179.671612][ T5998] [ 179.699035][ T5998] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 179.709153][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 179.709181][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.709195][ T5998] Call Trace: [ 179.709203][ T5998] [ 179.709211][ T5998] dump_stack_lvl+0xe8/0x150 [ 179.709265][ T5998] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 179.709397][ T5998] f2fs_write_end_bio+0x118e/0x15d0 [ 179.709523][ T5998] __submit_merged_bio+0x258/0x6a0 [ 179.709605][ T5998] ? rcu_is_watching+0x16/0xb0 [ 179.709708][ T5998] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 179.709800][ T5998] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 179.709947][ T5998] f2fs_write_data_pages+0x2a13/0x36e0 [ 179.710102][ T5998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.710173][ T5998] ? is_bpf_text_address+0x26/0x2b0 [ 179.710273][ T5998] ? arch_stack_walk+0xfb/0x150 [ 179.710429][ T5998] ? add_lock_to_list+0xc7/0x100 [ 179.710514][ T5998] ? lockdep_unlock+0x5c/0xd0 [ 179.710558][ T5998] ? __lock_acquire+0x1511/0x2de0 [ 179.710717][ T5998] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.710842][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.710925][ T5998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.710988][ T5998] do_writepages+0x338/0x560 [ 179.711099][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.711186][ T5998] filemap_fdatawrite+0x1e9/0x2f0 [ 179.711270][ T5998] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.711477][ T5998] ? do_raw_spin_unlock+0xf5/0x200 [ 179.711568][ T5998] f2fs_sync_dirty_inodes+0x471/0x970 [ 179.711682][ T5998] f2fs_write_checkpoint+0x860/0x24d0 [ 179.711853][ T5998] kill_f2fs_super+0x2dc/0x700 [ 179.711929][ T5998] ? rcu_do_enqueue+0x616/0x870 [ 179.711988][ T5998] ? lockdep_hardirqs_on+0x7b/0x110 [ 179.712041][ T5998] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.712167][ T5998] ? __pfx_call_rcu+0x10/0x10 [ 179.712269][ T5998] ? shrinker_free+0x2a7/0x3b0 [ 179.712358][ T5998] deactivate_locked_super+0xbe/0x110 [ 179.712450][ T5998] cleanup_mnt+0x204/0x2a0 [ 179.712525][ T5998] task_work_run+0x1d9/0x260 [ 179.712590][ T5998] ? __pfx_task_work_run+0x10/0x10 [ 179.712680][ T5998] exit_to_user_mode_loop+0x204/0x770 [ 179.712743][ T5998] ? rcu_is_watching+0x16/0xb0 [ 179.712832][ T5998] do_syscall_64+0x328/0x520 [ 179.712887][ T5998] ? trace_irq_disable+0x3b/0x140 [ 179.712955][ T5998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.713007][ T5998] ? clear_bhb_loop+0x70/0xc0 [ 179.713072][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.713130][ T5998] RIP: 0033:0x7fa38cf9f797 [ 179.713177][ T5998] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.713220][ T5998] RSP: 002b:00007ffdaa740d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.713308][ T5998] RAX: 0000000000000000 RBX: 00007fa38d034cf3 RCX: 00007fa38cf9f797 [ 179.713348][ T5998] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaa740e40 [ 179.713380][ T5998] RBP: 00007ffdaa740e40 R08: 00007ffdaa741e40 R09: 00000000ffffffff [ 179.713419][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaa741ed0 [ 179.713459][ T5998] R13: 00007fa38d034cf3 R14: 000000000002a796 R15: 00007ffdaa741f10 [ 179.713565][ T5998] [ 179.766586][ T5998] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 180.259356][ T6846] loop4: detected capacity change from 0 to 32768 [ 180.676727][ C1] bridge0: port 3(syz_tun) entered learning state [ 181.066528][ T6846] JBD2: Ignoring recovery information on journal [ 181.275493][ T6876] loop2: detected capacity change from 0 to 128 [ 181.311713][ T6846] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 181.445086][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 181.445189][ T6876] tipc: Resetting bearer [ 181.897321][ T6876] tipc: Disabling bearer [ 182.149999][ T6868] loop0: detected capacity change from 0 to 32768 [ 182.165104][ T5607] ocfs2: Unmounting device (7,4) on (node local) [ 182.425528][ T6734] IPVS: starting estimator thread 0... [ 182.538045][ T6891] IPVS: using max 27 ests per chain, 64800 per kthread [ 182.649894][ T6895] loop5: detected capacity change from 0 to 256 [ 183.158151][ T6902] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 183.885222][ T6913] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 183.885259][ T6913] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 183.885301][ T6913] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 183.937025][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.241'. [ 183.997004][ T6912] bond0: (slave bond_slave_0): Releasing backup interface [ 184.165845][ T6912] bond_slave_0: entered promiscuous mode [ 184.165871][ T6912] bond_slave_0: entered allmulticast mode [ 184.507164][ T6914] smbdirect: ib_dev[rxe0] renamed to [s] [ 186.074109][ T6924] loop4: detected capacity change from 0 to 32768 [ 186.078615][ T6924] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.244 (6924) [ 186.219878][ T6924] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.219916][ T6924] BTRFS info (device loop4): using sha256 checksum algorithm [ 186.467500][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 186.467530][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 186.523798][ T6924] BTRFS info (device loop4): enabling ssd optimizations [ 186.523830][ T6924] BTRFS info (device loop4): turning on async discard [ 186.523848][ T6924] BTRFS info (device loop4): enabling free space tree [ 186.999927][ T6924] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 187.187563][ T6962] FAULT_INJECTION: forcing a failure. [ 187.187563][ T6962] name failslab, interval 1, probability 5, space 0, times 9982 [ 187.187607][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.2.250 Not tainted syzkaller #0 PREEMPT(full) [ 187.187633][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.187646][ T6962] Call Trace: [ 187.187655][ T6962] [ 187.187664][ T6962] dump_stack_lvl+0xe8/0x150 [ 187.187704][ T6962] should_fail_ex+0x3eb/0x540 [ 187.187735][ T6962] should_failslab+0xa8/0x100 [ 187.187765][ T6962] __kmalloc_noprof+0xf9/0x710 [ 187.187798][ T6962] ? capable+0x83/0xe0 [ 187.187824][ T6962] ? __kmalloc_noprof+0x1a6/0x710 [ 187.187856][ T6962] ? ovl_fill_super+0x3e0/0x4370 [ 187.187878][ T6962] ? ovl_fill_super+0x3e0/0x4370 [ 187.187908][ T6962] ovl_fill_super+0x3e0/0x4370 [ 187.187947][ T6962] ? __mutex_unlock_slowpath+0x731/0x900 [ 187.187978][ T6962] ? super_dev_insert+0x2a/0xe00 [ 187.188005][ T6962] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.188047][ T6962] ? __pfx_ovl_fill_super+0x10/0x10 [ 187.188069][ T6962] ? shrinker_register+0x158/0x210 [ 187.188104][ T6962] ? sget_fc+0x195c/0x1a60 [ 187.188149][ T6962] ? __pfx_set_anon_super_fc+0x10/0x10 [ 187.188174][ T6962] ? __pfx_sget_fc+0x10/0x10 [ 187.188208][ T6962] ? vfs_parse_monolithic_sep+0x322/0x360 [ 187.188235][ T6962] ? __pfx_ovl_next_opt+0x10/0x10 [ 187.188270][ T6962] ? __pfx_ovl_fill_super+0x10/0x10 [ 187.188299][ T6962] get_tree_nodev+0xbb/0x150 [ 187.188325][ T6962] vfs_get_tree+0x92/0x2a0 [ 187.188353][ T6962] do_new_mount+0x325/0xb00 [ 187.188393][ T6962] ? __pfx_do_new_mount+0x10/0x10 [ 187.188428][ T6962] ? ns_capable+0x84/0xe0 [ 187.188456][ T6962] ? path_mount+0x647/0x1050 [ 187.188492][ T6962] ? user_path_at+0xd4/0x160 [ 187.188518][ T6962] __se_sys_mount+0x31d/0x420 [ 187.188558][ T6962] ? __pfx___se_sys_mount+0x10/0x10 [ 187.188607][ T6962] ? __x64_sys_mount+0x20/0xc0 [ 187.188646][ T6962] do_syscall_64+0x166/0x520 [ 187.188670][ T6962] ? trace_irq_disable+0x3b/0x140 [ 187.188695][ T6962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.188743][ T6962] ? clear_bhb_loop+0x70/0xc0 [ 187.188771][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.188793][ T6962] RIP: 0033:0x7f22fbb9e559 [ 187.188815][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.188834][ T6962] RSP: 002b:00007f22fca4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.188858][ T6962] RAX: ffffffffffffffda RBX: 00007f22fbe25fa0 RCX: 00007f22fbb9e559 [ 187.188874][ T6962] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 187.188889][ T6962] RBP: 00007f22fbc358b0 R08: 0000200000000280 R09: 0000000000000000 [ 187.188903][ T6962] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 187.188915][ T6962] R13: 00007f22fbe26038 R14: 00007f22fbe25fa0 R15: 00007ffe57234978 [ 187.188950][ T6962] [ 187.838858][ T6973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 187.850048][ T6970] loop5: detected capacity change from 0 to 2048 [ 187.963929][ T6970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.387547][ T6986] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 188.388396][ T6986] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 188.388445][ T6986] EXT4-fs (loop5): This should not happen!! Data will be lost [ 188.388445][ T6986] [ 188.388499][ T6986] EXT4-fs (loop5): Total free blocks count 0 [ 188.388533][ T6986] EXT4-fs (loop5): Free/Dirty block details [ 188.388592][ T6986] EXT4-fs (loop5): free_blocks=2415919504 [ 188.388646][ T6986] EXT4-fs (loop5): dirty_blocks=32 [ 188.388680][ T6986] EXT4-fs (loop5): Block reservation details [ 188.388712][ T6986] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 189.261688][ T6992] loop0: detected capacity change from 0 to 2048 [ 189.394279][ T6992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.305558][ T6983] loop2: detected capacity change from 0 to 1024 [ 190.420014][ T5607] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.423230][ T6737] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 191.030429][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 191.405010][ T7008] loop2: detected capacity change from 0 to 4096 [ 191.420628][ T7008] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 191.790620][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.093149][ T7017] loop2: detected capacity change from 0 to 256 [ 192.164862][ T7017] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 192.186263][ T7017] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 192.981332][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 193.621102][ T7032] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 193.685138][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 193.723848][ T7032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.749034][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 194.246272][ T7032] bond1: (slave bridge1): making interface the new active one [ 194.250213][ T7032] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 194.724642][ T7062] FAULT_INJECTION: forcing a failure. [ 194.724642][ T7062] name failslab, interval 1, probability 5, space 0, times 10000 [ 194.724675][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.3.281 Not tainted syzkaller #0 PREEMPT(full) [ 194.724697][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.724710][ T7062] Call Trace: [ 194.724718][ T7062] [ 194.724727][ T7062] dump_stack_lvl+0xe8/0x150 [ 194.724774][ T7062] should_fail_ex+0x3eb/0x540 [ 194.724805][ T7062] should_failslab+0xa8/0x100 [ 194.724834][ T7062] __kmalloc_noprof+0xf9/0x710 [ 194.724865][ T7062] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 194.724897][ T7062] ? __d_alloc+0xbf/0x7f0 [ 194.724917][ T7062] ? __d_alloc+0xbf/0x7f0 [ 194.724946][ T7062] __d_alloc+0xbf/0x7f0 [ 194.724974][ T7062] __d_alloc_parallel+0xde/0x1700 [ 194.725002][ T7062] ? lock_acquire+0x115/0x350 [ 194.725038][ T7062] ? __d_lookup+0x66/0x790 [ 194.725064][ T7062] ? __d_lookup+0x66/0x790 [ 194.725090][ T7062] ? __pfx___d_alloc_parallel+0x10/0x10 [ 194.725114][ T7062] ? d_lookup+0x1f/0xa0 [ 194.725140][ T7062] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 194.725174][ T7062] ? lockdep_hardirqs_on+0x7b/0x110 [ 194.725204][ T7062] lookup_open+0x2c2/0x1970 [ 194.725255][ T7062] path_openat+0x70c/0x20f0 [ 194.725303][ T7062] do_file_open+0x258/0x570 [ 194.725330][ T7062] ? __pfx_do_file_open+0x10/0x10 [ 194.725378][ T7062] ? _raw_spin_unlock+0x28/0x50 [ 194.725410][ T7062] ? alloc_fd+0x6af/0x760 [ 194.725455][ T7062] do_sys_openat2+0x115/0x200 [ 194.725482][ T7062] ? __se_sys_futex+0x3a8/0x450 [ 194.725513][ T7062] ? __pfx_do_sys_openat2+0x10/0x10 [ 194.725553][ T7062] ? rcu_is_watching+0x16/0xb0 [ 194.725587][ T7062] __x64_sys_openat+0x138/0x170 [ 194.725623][ T7062] do_syscall_64+0x166/0x520 [ 194.725646][ T7062] ? trace_irq_disable+0x3b/0x140 [ 194.725670][ T7062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.725693][ T7062] ? clear_bhb_loop+0x70/0xc0 [ 194.725720][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.725750][ T7062] RIP: 0033:0x7f9feb39e559 [ 194.725771][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.725790][ T7062] RSP: 002b:00007f9fe95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.725814][ T7062] RAX: ffffffffffffffda RBX: 00007f9feb625fa0 RCX: 00007f9feb39e559 [ 194.725830][ T7062] RDX: 0000000000000001 RSI: 000020000003df80 RDI: ffffffffffffff9c [ 194.725845][ T7062] RBP: 00007f9feb4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 194.725860][ T7062] R10: 00000000000001d4 R11: 0000000000000246 R12: 0000000000000000 [ 194.725872][ T7062] R13: 00007f9feb626038 R14: 00007f9feb625fa0 R15: 00007ffc5f1b5208 [ 194.725908][ T7062] [ 194.807138][ T7062] FAULT_INJECTION: forcing a failure. [ 194.807138][ T7062] name failslab, interval 1, probability 5, space 0, times 9999 [ 194.807229][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.3.281 Not tainted syzkaller #0 PREEMPT(full) [ 194.807295][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.807309][ T7062] Call Trace: [ 194.807318][ T7062] [ 194.807328][ T7062] dump_stack_lvl+0xe8/0x150 [ 194.807369][ T7062] should_fail_ex+0x3eb/0x540 [ 194.807406][ T7062] should_failslab+0xa8/0x100 [ 194.807438][ T7062] __kvmalloc_node_noprof+0x171/0x820 [ 194.807469][ T7062] ? bpf_compute_live_registers+0x147/0x1d20 [ 194.807496][ T7062] ? bpf_compute_live_registers+0x147/0x1d20 [ 194.807532][ T7062] bpf_compute_live_registers+0x147/0x1d20 [ 194.807612][ T7062] ? kfree+0x1c5/0x650 [ 194.807721][ T7062] ? bpf_insn_successors+0x31e/0x6a0 [ 194.807798][ T7062] ? bpf_compute_loops+0x3d92/0x3e80 [ 194.807943][ T7062] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 194.808054][ T7062] bpf_check+0x2d5d/0x3560 [ 194.808181][ T7062] ? ktime_get_with_offset+0x93/0x2d0 [ 194.808269][ T7062] ? ktime_get_with_offset+0x93/0x2d0 [ 194.808355][ T7062] ? __pfx_bpf_check+0x10/0x10 [ 194.808455][ T7062] ? bpf_obj_name_cpy+0x194/0x1e0 [ 194.808534][ T7062] bpf_prog_load+0x158f/0x1d60 [ 194.808659][ T7062] ? __pfx_bpf_prog_load+0x10/0x10 [ 194.808809][ T7062] ? __might_fault+0xaf/0x130 [ 194.808914][ T7062] __sys_bpf+0xd86/0xe00 [ 194.809036][ T7062] ? __pfx___sys_bpf+0x10/0x10 [ 194.809153][ T7062] ? do_futex+0x3e7/0x4e0 [ 194.809327][ T7062] ? rcu_is_watching+0x16/0xb0 [ 194.809440][ T7062] __x64_sys_bpf+0xba/0xd0 [ 194.809530][ T7062] do_syscall_64+0x166/0x520 [ 194.809599][ T7062] ? trace_irq_disable+0x3b/0x140 [ 194.809678][ T7062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.809745][ T7062] ? clear_bhb_loop+0x70/0xc0 [ 194.809835][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.809902][ T7062] RIP: 0033:0x7f9feb39e559 [ 194.809959][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.810008][ T7062] RSP: 002b:00007f9fe95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.810076][ T7062] RAX: ffffffffffffffda RBX: 00007f9feb625fa0 RCX: 00007f9feb39e559 [ 194.810130][ T7062] RDX: 0000000000000048 RSI: 0000200000042580 RDI: 0000000000000005 [ 194.810166][ T7062] RBP: 00007f9feb4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 194.810202][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.810245][ T7062] R13: 00007f9feb626038 R14: 00007f9feb625fa0 R15: 00007ffc5f1b5208 [ 194.810333][ T7062] [ 195.044538][ T7062] FAULT_INJECTION: forcing a failure. [ 195.044538][ T7062] name failslab, interval 1, probability 5, space 0, times 9998 [ 195.044638][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.3.281 Not tainted syzkaller #0 PREEMPT(full) [ 195.044709][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.044734][ T7062] Call Trace: [ 195.044743][ T7062] [ 195.044761][ T7062] dump_stack_lvl+0xe8/0x150 [ 195.044804][ T7062] should_fail_ex+0x3eb/0x540 [ 195.044880][ T7062] ? __pfx_proc_alloc_inode+0x10/0x10 [ 195.044991][ T7062] should_failslab+0xa8/0x100 [ 195.045081][ T7062] ? __pfx_proc_alloc_inode+0x10/0x10 [ 195.045160][ T7062] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 195.045257][ T7062] ? proc_alloc_inode+0x2a/0xc0 [ 195.045335][ T7062] ? proc_alloc_inode+0x2a/0xc0 [ 195.045429][ T7062] ? __pfx_proc_alloc_inode+0x10/0x10 [ 195.045508][ T7062] proc_alloc_inode+0x2a/0xc0 [ 195.045589][ T7062] alloc_inode+0x6a/0x1b0 [ 195.045711][ T7062] new_inode+0x1f/0x170 [ 195.045829][ T7062] ? proc_get_inode+0x1a/0x6a0 [ 195.045930][ T7062] proc_get_inode+0x22/0x6a0 [ 195.046023][ T7062] proc_lookup_de+0x251/0x340 [ 195.046124][ T7062] lookup_open+0x94b/0x1970 [ 195.046272][ T7062] path_openat+0x70c/0x20f0 [ 195.046441][ T7062] do_file_open+0x258/0x570 [ 195.046530][ T7062] ? __pfx_do_file_open+0x10/0x10 [ 195.046672][ T7062] ? _raw_spin_unlock+0x28/0x50 [ 195.046773][ T7062] ? alloc_fd+0x6af/0x760 [ 195.046908][ T7062] do_sys_openat2+0x115/0x200 [ 195.046999][ T7062] ? __se_sys_futex+0x3a8/0x450 [ 195.047100][ T7062] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.047205][ T7062] ? rcu_is_watching+0x16/0xb0 [ 195.047329][ T7062] __x64_sys_openat+0x138/0x170 [ 195.047441][ T7062] do_syscall_64+0x166/0x520 [ 195.047509][ T7062] ? trace_irq_disable+0x3b/0x140 [ 195.047588][ T7062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.047662][ T7062] ? clear_bhb_loop+0x70/0xc0 [ 195.047743][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.047821][ T7062] RIP: 0033:0x7f9feb39e559 [ 195.047887][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.047943][ T7062] RSP: 002b:00007f9fe95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.048013][ T7062] RAX: ffffffffffffffda RBX: 00007f9feb625fa0 RCX: 00007f9feb39e559 [ 195.048059][ T7062] RDX: 0000000000022240 RSI: 0000200000038400 RDI: ffffffffffffff9c [ 195.048107][ T7062] RBP: 00007f9feb4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 195.048122][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.048136][ T7062] R13: 00007f9feb626038 R14: 00007f9feb625fa0 R15: 00007ffc5f1b5208 [ 195.048210][ T7062] [ 195.580386][ T10] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 195.832011][ T6737] IPVS: starting estimator thread 0... [ 196.322236][ T7080] IPVS: using max 26 ests per chain, 62400 per kthread [ 196.526602][ T7067] fido_id[7067]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 197.024250][ T7102] loop0: detected capacity change from 0 to 2048 [ 197.086202][ T7102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.319369][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 197.319394][ C1] bridge0: topology change detected, propagating [ 197.515281][ T7118] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 197.536568][ T7118] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 197.536604][ T7118] EXT4-fs (loop0): This should not happen!! Data will be lost [ 197.536604][ T7118] [ 197.536621][ T7118] EXT4-fs (loop0): Total free blocks count 0 [ 197.536636][ T7118] EXT4-fs (loop0): Free/Dirty block details [ 197.536651][ T7118] EXT4-fs (loop0): free_blocks=2415919504 [ 197.536667][ T7118] EXT4-fs (loop0): dirty_blocks=32 [ 197.536681][ T7118] EXT4-fs (loop0): Block reservation details [ 197.536694][ T7118] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 198.053622][ T7124] loop3: detected capacity change from 0 to 4096 [ 198.074626][ T7124] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 200.191463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 201.485654][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.485724][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.651261][ T7167] loop4: detected capacity change from 0 to 512 [ 201.679468][ T7167] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.679496][ T7167] EXT4-fs (loop4): blocks per group (42) and clusters per group (32768) inconsistent [ 201.790276][ T5909] IPVS: starting estimator thread 0... [ 201.806947][ T5742] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 201.882650][ T7172] IPVS: using max 42 ests per chain, 100800 per kthread [ 201.974129][ T5742] usb 4-1: Using ep0 maxpacket: 32 [ 201.982372][ T5742] usb 4-1: New USB device found: idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 201.985283][ T5742] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 201.985302][ T5742] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 202.016581][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.016608][ T5742] usb 4-1: Product: syz [ 202.016623][ T5742] usb 4-1: Manufacturer: syz [ 202.016637][ T5742] usb 4-1: SerialNumber: syz [ 202.289312][ T7176] xt_hashlimit: size too large, truncated to 1048576 [ 202.956230][ T7187] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 203.657540][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 204.416152][ T5821] IPVS: starting estimator thread 0... [ 204.524284][ T7214] IPVS: using max 29 ests per chain, 69600 per kthread [ 204.715630][ T7216] loop4: detected capacity change from 0 to 512 [ 204.772761][ T7216] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 204.772791][ T7216] EXT4-fs (loop4): blocks per group (42) and clusters per group (32768) inconsistent [ 205.524104][ T5821] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 205.524139][ T5821] EXT4-fs (loop0): This should not happen!! Data will be lost [ 205.524139][ T5821] [ 205.524155][ T5821] EXT4-fs (loop0): Total free blocks count 0 [ 205.524169][ T5821] EXT4-fs (loop0): Free/Dirty block details [ 205.524184][ T5821] EXT4-fs (loop0): free_blocks=2415919504 [ 205.524200][ T5821] EXT4-fs (loop0): dirty_blocks=16 [ 205.524214][ T5821] EXT4-fs (loop0): Block reservation details [ 205.524227][ T5821] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 205.620658][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.666094][ T5742] apple-mfi-fastcharge 4-1: USB disconnect, device number 3 [ 207.589344][ T7272] loop4: detected capacity change from 0 to 512 [ 207.601603][ T7272] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.601632][ T7272] EXT4-fs (loop4): blocks per group (42) and clusters per group (32768) inconsistent [ 208.022237][ T7288] loop2: detected capacity change from 0 to 16 [ 208.077240][ T7288] erofs (device loop2): mounted with root inode @ nid 36. [ 208.098235][ T7288] erofs (device loop2): compressed inode (nid 89) is invalid in a plain filesystem [ 208.129594][ T7288] tipc: Enabling of bearer rejected, failed to enable media [ 208.653581][ T7298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 208.705933][ T7300] netlink: 20 bytes leftover after parsing attributes in process `syz.5.354'. [ 209.576694][ T2247] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 209.652606][ T927] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 209.740022][ T2247] usb 5-1: New USB device found: idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 209.742498][ T2247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.747928][ T2247] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 209.747959][ T2247] usb 5-1: Product: syz [ 209.747984][ T2247] usb 5-1: Manufacturer: syz [ 209.748001][ T2247] usb 5-1: SerialNumber: syz [ 209.771492][ T2247] usb 5-1: config 0 descriptor?? [ 209.827260][ T2247] imon_raw 5-1:0.0: IR endpoint missing [ 209.828018][ T927] usb 4-1: Using ep0 maxpacket: 16 [ 209.830368][ T927] usb 4-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 209.839496][ T927] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.839576][ T927] usb 4-1: config 0 has no interface number 0 [ 209.867558][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.867638][ T927] usb 4-1: Product: syz [ 209.867684][ T927] usb 4-1: Manufacturer: syz [ 209.867729][ T927] usb 4-1: SerialNumber: syz [ 209.911922][ T927] usb 4-1: config 0 descriptor?? [ 209.940229][ T927] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 210.072329][ T2247] usb 5-1: USB disconnect, device number 6 [ 210.871701][ C0] [ 210.874105][ C0] ============================= [ 210.878979][ C0] [ BUG: Invalid wait context ] [ 210.883867][ C0] syzkaller #0 Not tainted [ 210.888321][ C0] ----------------------------- [ 210.893217][ C0] syz.4.362/7327 is trying to lock: [ 210.898437][ C0] ffff88807ea85bc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 210.907976][ C0] other info that might help us debug this: [ 210.913889][ C0] context-{2:2} [ 210.917371][ C0] locks held by syz.4.362/7327: 4, last CPU#0: [ 210.923544][ C0] #0: ffff88805a1851a8 (&vcpu->mutex){+.+.}-{4:4}, at: kvm_vcpu_ioctl+0x27f/0xfd0 [ 210.932922][ C0] #1: ffff88807ea85b48 (&kvm->arch.xen.xen_lock){+.+.}-{4:4}, at: kvm_xen_vcpu_set_attr+0x4d/0x1230 [ 210.943871][ C0] #2: ffff88807ea86118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_vcpu_set_attr+0x8e/0x1230 [ 210.953705][ C0] #3: ffff88807ea86118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 210.963691][ C0] stack backtrace: [ 210.967473][ C0] CPU: 0 UID: 0 PID: 7327 Comm: syz.4.362 Not tainted syzkaller #0 PREEMPT(full) [ 210.976701][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.986804][ C0] Call Trace: [ 210.990119][ C0] [ 210.992990][ C0] dump_stack_lvl+0xe8/0x150 [ 210.997636][ C0] __lock_acquire+0xf5b/0x2de0 [ 211.002457][ C0] lock_acquire+0x115/0x350 [ 211.006995][ C0] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 211.012675][ C0] ? xa_load+0x1db/0x210 [ 211.016965][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 211.022202][ C0] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 211.027883][ C0] kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 211.033397][ C0] ? kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 211.039083][ C0] xen_timer_callback+0x109/0x220 [ 211.044162][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 211.049758][ C0] __hrtimer_run_queues+0x371/0xa10 [ 211.055110][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 211.060125][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 211.066158][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 211.071839][ C0] [ 211.074894][ C0] [ 211.077855][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 211.083885][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 211.090356][ C0] Code: f7 e8 4d 7e ad f5 f7 c3 00 02 00 00 74 05 e8 d0 1a da f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 71 9e f5 65 48 8b 05 0c 13 a2 08 48 85 c0 74 18 5b 41 5e e9 [ 211.110009][ C0] RSP: 0018:ffffc90004a673e8 EFLAGS: 00000206 [ 211.116160][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 211.124172][ C0] RDX: 0000000000000007 RSI: ffffffff8e46e1bd RDI: 0000000000000001 [ 211.132190][ C0] RBP: ffffc90004a67528 R08: ffffffff917a69bf R09: 1ffffffff22f4d37 [ 211.140208][ C0] R10: dffffc0000000000 R11: fffffbfff22f4d38 R12: 0000002f48b7e274 [ 211.148217][ C0] R13: ffff88805a186638 R14: ffff8880b84285c0 R15: dffffc0000000000 [ 211.156232][ C0] kvm_xen_start_timer+0x37f/0x5f0 [ 211.161393][ C0] ? __pfx_kvm_xen_start_timer+0x10/0x10 [ 211.167145][ C0] ? lock_acquire+0x115/0x350 [ 211.171905][ C0] ? hrtimer_try_to_cancel+0x1f7/0x680 [ 211.177416][ C0] kvm_xen_vcpu_set_attr+0xb29/0x1230 [ 211.182840][ C0] ? __might_fault+0xaf/0x130 [ 211.187558][ C0] ? kvm_xen_vcpu_set_attr+0x8e/0x1230 [ 211.193065][ C0] kvm_arch_vcpu_ioctl+0x148b/0x23a0 [ 211.198396][ C0] ? lock_acquire+0x115/0x350 [ 211.203111][ C0] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 211.208790][ C0] ? lock_acquire+0x115/0x350 [ 211.213500][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 211.218732][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 211.224069][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 211.229304][ C0] ? kernel_text_address+0xa5/0xe0 [ 211.234479][ C0] ? __kernel_text_address+0xd/0x30 [ 211.239704][ C0] ? unwind_get_return_address+0x4d/0x90 [ 211.245404][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 211.251609][ C0] ? arch_stack_walk+0xfb/0x150 [ 211.256518][ C0] ? stack_trace_save+0xa9/0x100 [ 211.261507][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 211.266941][ C0] ? kasan_save_track+0x4f/0x80 [ 211.271820][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 211.277320][ C0] ? __lock_acquire+0x747/0x2de0 [ 211.282301][ C0] ? kfree+0x1c5/0x650 [ 211.286436][ C0] ? __se_sys_ioctl+0x47/0x170 [ 211.291317][ C0] ? do_syscall_64+0x166/0x520 [ 211.296118][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.302219][ C0] ? __mutex_trylock_common+0x15f/0x270 [ 211.307891][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 211.313848][ C0] ? rcu_is_watching+0x16/0xb0 [ 211.318779][ C0] ? trace_contention_end+0x3d/0x140 [ 211.324113][ C0] ? __mutex_lock+0x305/0x15a0 [ 211.328907][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 211.334237][ C0] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 211.339208][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 211.344267][ C0] ? do_vfs_ioctl+0x116f/0x1530 [ 211.349164][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 211.354219][ C0] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 211.358939][ C0] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 211.364167][ C0] ? do_futex+0x458/0x4e0 [ 211.368549][ C0] ? __fget_files+0x2a/0x420 [ 211.373168][ C0] ? __fget_files+0x2a/0x420 [ 211.377792][ C0] ? __fget_files+0x2a/0x420 [ 211.382405][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 211.387370][ C0] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 211.392597][ C0] __se_sys_ioctl+0xfc/0x170 [ 211.397228][ C0] do_syscall_64+0x166/0x520 [ 211.401947][ C0] ? trace_irq_disable+0x3b/0x140 [ 211.407016][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.413106][ C0] ? clear_bhb_loop+0x70/0xc0 [ 211.417819][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.423763][ C0] RIP: 0033:0x7f44d579e559 [ 211.428198][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.447835][ C0] RSP: 002b:00007f44d659c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.456305][ C0] RAX: ffffffffffffffda RBX: 00007f44d5a25fa0 RCX: 00007f44d579e559 [ 211.464327][ C0] RDX: 0000200000000100 RSI: 000000004048aecb RDI: 0000000000000005 [ 211.472331][ C0] RBP: 00007f44d58358b0 R08: 0000000000000000 R09: 0000000000000000 [ 211.480370][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.488375][ C0] R13: 00007f44d5a26038 R14: 00007f44d5a25fa0 R15: 00007fff7a624ab8 [ 211.496388][ C0] [ 211.666545][ T7330] loop5: detected capacity change from 0 to 512 [ 211.681781][ T7330] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.681810][ T7330] EXT4-fs (loop5): blocks per group (42) and clusters per group (32768) inconsistent [ 211.928741][ T927] gspca_spca1528: reg_w err -110 [ 211.928830][ T927] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 212.018676][ T5751] usb 4-1: USB disconnect, device number 4 [ 220.386737][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 220.386770][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 220.386790][ T5619] Bluetooth: hci0: command 0x0406 tx timeout