last executing test programs: 37.806278422s ago: executing program 4 (id=268): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) r1 = dup(r0) sendfile(r0, r1, 0x0, 0x80006) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000180)="1d49aa11c186e6186957", 0xa}, {&(0x7f00000005c0)="9792796a7749ce5d7d801cc6cb3caae4114a98bdff6129a8cd98be9d291ebd2bbdfd0f1e8f2a159bdcf59262bd3c6918186be1604eb8444806d3ab5066435a4cb7ee92cb8fb16d0e7671f1336a86243b07d954a783c30bd08ccab3b7b9d9712a03be89520e31955ee2315ed5b48e397f6825cfd70df8dabbb702644fcf9b7ae74ccb1b578ee1ae273c20cbc3e0f084ec2b916a40325d5a32f5f1140353e23160ebe038f13dd643544b6f076074c1e2e7b7f804a1560d29158a10b29dda9aa7be", 0xc0}, {&(0x7f0000000b40)="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", 0x1000}], 0x3) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000280)='./file2\x00', 0x1009010, &(0x7f0000000500)=ANY=[], 0x1, 0x1ec, &(0x7f0000000780)="$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") creat(0x0, 0x9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60842, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0edc041, &(0x7f00000002c0)={[{@errors_continue}, {@noinit_itable}, {@nodelalloc}, {@dioread_lock}, {@journal_ioprio}, {@i_version}, {@usrjquota}, {@dax_never}]}, 0xf6, 0x486, &(0x7f0000001b40)="$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") setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 33.471302749s ago: executing program 4 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000009100850000008600000085000000070000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 33.374608904s ago: executing program 4 (id=280): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xf, 0x2, 0x10, 0xe, 0x10, 0x2, 0x3e, 0x4, 0x4, 0x40, 0x0, 0x3, 0x4, 0x38, 0x2, 0x9, 0x5, 0x6}, [{0x2, 0x4, 0x80000001, 0x8, 0x3, 0xea, 0x2, 0x480}, {0x6474e551, 0x1, 0x5, 0x524, 0x10000, 0x6, 0x59a, 0x4}]}, 0xb0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x2, 0x0, 0x600, 0x3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 31.438733551s ago: executing program 4 (id=283): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000611208000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000280)="$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") linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, 0x0, 0x1400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000280)='./file0\x00', 0x80) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 30.913194968s ago: executing program 4 (id=285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0xf5ffffff}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0) 27.842680496s ago: executing program 4 (id=289): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x800, 0x185) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00feffffff000000000000000040000000050000000000000000000000000000000000380001"], 0x78) close(r0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r1, 0x0) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='\"', 0x1}, {&(0x7f0000001580)="bd2b8f4c2ce6c668465c6da66c18f7db6e1f7b8efaff458e016d8458af671c38b97b41854a88e655e931eec350263c23fdd3854ed69a7cb54e37497d", 0x3c}], 0x2, 0x1002020, 0x1020884, 0x12) (async) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)) (async, rerun: 64) execveat(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) (rerun: 64) 26.64553653s ago: executing program 32 (id=289): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x800, 0x185) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00feffffff000000000000000040000000050000000000000000000000000000000000380001"], 0x78) close(r0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r1, 0x0) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='\"', 0x1}, {&(0x7f0000001580)="bd2b8f4c2ce6c668465c6da66c18f7db6e1f7b8efaff458e016d8458af671c38b97b41854a88e655e931eec350263c23fdd3854ed69a7cb54e37497d", 0x3c}], 0x2, 0x1002020, 0x1020884, 0x12) (async) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)) (async, rerun: 64) execveat(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) (rerun: 64) 18.61834745s ago: executing program 2 (id=302): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff00", 0x5}]) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) iopl(0x3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109"], 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0xc, {"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", 0x5c1}}, 0x505) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r7, 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000001c0)={"dba48dd08c5c65053ee06cf3f665ae95da0efb46d1d8faaa0b481be6810a", 0x4, 0x0, 0x1, 0x7f, 0x80000000, 0x80000001, 0x9, 0x4, [0x6, 0x0, 0xf, 0x7, 0x49a3, 0x3, 0x3, 0x870, 0x4, 0xa92a, 0x9, 0xfffffff8, 0x6, 0x0, 0xfff, 0x402, 0x7, 0x2b8d5821, 0x44]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_disconnect(r4) io_pgetevents(r1, 0x1, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000080)={r2, r3+60000000}, &(0x7f0000000200)={&(0x7f00000000c0)={[0x5]}, 0x8}) 17.435116898s ago: executing program 3 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/189, &(0x7f0000000040)=0xbd) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r3, &(0x7f00000000c0)={0x18}, 0xfffffdef) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000480)={{0x401, 0x81}, 0x100, './file1\x00'}) truncate(&(0x7f0000000000)='./file1\x00', 0x5e00) 16.214987566s ago: executing program 3 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b703257a3d77ba65f617bee62a9d1612402e69cc86c8fce5989be545ce26a9c4f5f2165f08000000b40d94de59edbb0507bf01e357e13bef384234e823d8137beac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f673cd22ef303bcddff402dacf8c1372a5e8ff5bc596a5375037cf99b4ee7eb6f41587c2904d5cc071c32bc429a286bddc094a"], 0x1, 0x10600, &(0x7f0000020cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='1', 0x1, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$packet(0x11, 0x2, 0x300) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000940), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x20000f7e) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09", 0x17) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0x4, 0x800081, 0x4, 0x7fe, 0x5, 0x8, 0x10002}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x7ffffffd, 0xffffffffffffffff}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsopen(0x0, 0x0) keyctl$update(0x2, r1, 0x0, 0x0) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 13.842208918s ago: executing program 0 (id=310): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x1e, 0x4, 0x6d9e) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r7, 0x277f826df11ec41b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r9, 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102376, 0x18fe8) sendfile(r3, r4, 0x0, 0x80006) 13.033552097s ago: executing program 2 (id=311): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x3}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x232000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r4, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff5295e8cd6f55ce071b304aa0a588b3b7a2efa2f167dd9c1b8b016268d37d9a30983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402c76caf85d4569a75dde2f64", 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) fsetxattr$security_ima(r7, &(0x7f0000000040), &(0x7f0000000400)=ANY=[@ANYBLOB], 0x2, 0x0) execveat(r7, 0x0, 0x0, 0x0, 0x1000) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 11.458580487s ago: executing program 1 (id=312): pipe2(&(0x7f00000000c0), 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'team_slave_0\x00', 0x80}) r1 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x1002, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x73, &(0x7f00000000c0)=@can, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000f000f00000100000e1000"}}}]}, 0x48}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0xf, 0x2ad, &(0x7f0000000e80)="$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") mknodat(0xffffffffffffffff, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) fchdir(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850200007600000095000810000000009500a50500000000d48c476bf1347360979df102787de3d364063caad686f37eb470465259455141c9831f8a94decdc31e5d5ddd1808cda39028d57bc13a1a1c85c10ad232b2cbb794fb7a947905f31e6e149f210f35ca6117e0aa4e0f3ba4e780425455d5a8ae029fae2ed4ba1e4953b786f2a800"/172], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000001900bd0a00000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 11.44067376s ago: executing program 3 (id=313): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(r3, 0x1) 11.166135255s ago: executing program 2 (id=314): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={r5}) 10.86515689s ago: executing program 2 (id=315): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000780)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@debug}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086607, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)={[{@nodiscard}, {@order_strict}, {@nobarrier}, {@norecovery}, {@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xa75, &(0x7f0000000ac0)="$eJzs3V2IXNUBAOBzZ3c2f2szsUldNWpaW7Q/7roxabWpJmKglEII9KGgfQkxpiFrWhqRKkJTH0pfREHMUx9i6UtflLYU9aUEH4oUlFJahD5Z6WsKQh+koFN25pzZ2ZMZ7kyyu3dm5/vgzJl7z517zp25c+fOvecnABOr1no8cGBrCOGVt14+etur77y4POdwZ4lG63G6a6oeQiji9HS2vg+m2vEnHz13sldchP2txzQdjl3pvHZHCOFC2Bcuh0Z44bGL0++/cey918LZp48ffffN9dn6FcV6ZwAAACPg+OVDB/b866+37vrf67cfCVs689P5eSNOz8bz/iPxRDmdL9fC6umiK3SbyZabjqGWLTfVY7nufOrZctN98p/J1lvvs9yWkvynuub12m4YZ2k/boSiNr9qulabn2//Jw+t//Uzxfy5M0tPnK+ooMCa++8dIYR9giBMYmjurPoIBNCW3y+8yoW1vVPXWdv0YPlfebjW+/Vd6mtaQibC1na00ft/Tv6jnf9vfq6mAmtnE+5Nf7+ha7vS92g2Tuf3EfL6S8N+/9P68vsRg54D9LuPMC73F/qVc2qDy3Gt+pU/3y82qwdjnN6Hh7L0+D1o3U7LP9Nx+YyB3j52/V8Q1iTcXFRfhmFDs+oDEDCy8npzzSil5/X68vQtJelbS9K3laRvL0nfUZIOk+wPT70YXipWrnfl/+mHvR42m63iM0OWJ78eOWz+eb3fYV1v/nl9YhhpO/588f7HH/1bu/5/0dn/P437+7443YjfrctxgXS9ML+u3qn731idTa3Pcjdmxbmhx/Kt57tXL1fsXllP6DrOXFWOufSK9hXdnf2W27t6/Y1suW0xbM3Km5+fbM9el84/0kFxdlVpVra3nm3HTFaOdFzZFeO8HHAt0v64uv7/8t7Xqv/fuY01F+rFE2eWTt0bp9N++s5Ufcvy/MWNLjhw3QZt/zMXVrf/me3Mr9e6jws7V+YX3ceFRjZ/f5/598Xp9Dv3w6ltrfnzJ3+09PhabzxMuPPPPHv2xNLSqZ94MmpPwoUQRqAYnkzSk3RcOLFU7XEJWH8LTz3544Xzzzx7z5knT5w+dfrUucWDi/c/cHBx8esPLLTO6xe6z+43Y3VhmFwrv/5VlwQAAAAAAAAAAAAY1OkPFy794+1v/LPd/n+l/V9q/59q/qb2/7/M2v9nzfw7FYRTO8DUju+q9vZZB6sz2XL1GD6brX93ls+e7HWfi3FnHL/Y/j9ll/frmspzUzY/7783LTeXzc/7S5nJ+iApwi+2d5fvCzF+Psa/DlChYlvv2TEu69867eupfwr9Uoyn9LmlvSH1Y5Laf6f23qm/ktT/Qzr+79qAMrL2NqJdYdXbCPT2n83c/3c6iam6HIIwoqHZNIoHMBqqHv8zXfdM8bk/fWfrckiLXXl49fEy778Urseojz8p/8rH/1zT4YU7498NfPzLRszLbwAN6NDz3/13V7bhlkHzz8c/Tf1A7x4u/2/F/NPW3BUGy7/5apZ/fkNoQA9m+W8fMP+rtn/vteX/UMw/vW133zlo/u0SF7XV5civG6f7f+m68fez/A9n25/69hx6+69xoMYjMX+YZOMyzuywxmX8337yehgH43Q6EKZ6Dvl4J8OWP9WvSL8De7L1FyW/b5tw/N/mz5rNX03KOC7fjHHZ92E2fqZpf2z0mK51Tdd7vLeb9VgD4+qDzXz/Txj/sG0EynD9of2z2j0v/RhWXLZms1lpn746FK5W1e9/1f8Tqs6/6ve/TD7+b34On4//m6fn4/9+L0vPx//NX5+Pr5en5+P/5u9nPv5vnn5Ttt58fOC5kvSbS9JvKUm/tSR9b0n6bSXpny9Jv70k/Y6S9BtL0u8sSf9iSfqX+qd/3L1ov9ffXbL+L5ekb3apPcqkbj9Msrx9nu8/TI50/6ff9393STowvi6+vvjIo7//QaPd/n+mcz0k3cc7Eqfr8b/zT+N0ft87dE0vp70dpz/M0kf9egdMkrz/jPz3/a6SdGB8pXpevt8wgYrePfbk99v69VvV7zyf8fKVGH81xl+L8T0xno/xQowXY7x/g8rH+njkd3889FKx8n9/Z5Y+aH3yvD1Q3k/UfQOWJ78+MGx99rwfv2Fdb/7X2BwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgMrXW44EDc0UIr7z18tFLf/n2b5fnHO4s0Wg9TndN1TuvC+HeGE/F+FJ88slHz53sjj+NcRH2hyIUnfnh2JVOTjtCCBfCvnA5NMILj12cfv+NY++9Fs4+ffzou2+u3zvQVqx3BgAAAFCh/wcAAP//z2EOoA==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x80186e82, &(0x7f0000000800)={@desc={0x4, 0x0, @auto="000010005c00"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) pipe2$9p(0x0, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007200a14300000000000b000007"], 0x18}}, 0x0) unshare(0x26020480) r7 = socket$can_j1939(0x1d, 0x2, 0x7) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000240), 0x4) 9.035128182s ago: executing program 1 (id=316): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x78b, r1}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="a800000000000080e8dec85a44e0f01cf138ee1fe6e1a2ac1fd2be1c2d88"], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 8.839262757s ago: executing program 0 (id=317): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x12, 0x6, "6b823e9f6d602471eba34d04a876"}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}], {0x14}}, 0xcc}}, 0x4000040) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0xf365, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80}]}]}]}}]}, 0x9c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'geneve0\x00', &(0x7f00000003c0)=@ethtool_stats={0x1d, 0x4, [0x5, 0x2, 0xd4, 0x81]}}) 8.250663058s ago: executing program 1 (id=318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ab, @void, @value}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="096baafd51599fd5094faa89e14b3124a811ffe66454d90a6d53de451cbfb68afd2cb5215d020db3433dad9062a1b94599d39e30d4e5d1639320157ac8535e8c88eec2707aa57234b3bebff758049e610791a88075eaa253ce77e4050df6ae588538092173f6e4dccd959f2fd919ed76f69ea4245d4a9f23d52bd75f191fe57957e83c1f826f3d3d24b0fa4220fb04000000caee020edea23ae46078818ed034ffd1ce73ce1d23e178bf62fdc6426748c73d832d83b45c02652d9f340c17926d4a1bd7a795efca4e5a34f5d7f596c303", 0xffffff18}, {0x0}], 0x2, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)="d93db731205681d52d10713337237ab8f409e9d0286ac4f933a70765062bd617", 0x20}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000500)={[0x0, 0x0, &(0x7f0000000300)='\xff\xff', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\xff\xff']}, &(0x7f0000000640)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$alg(0x26, 0x5, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, 0x0, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r5}) 5.143867063s ago: executing program 0 (id=319): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, 0x0) fcntl$lock(r3, 0x25, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ff"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)={[{@disable_ext_identify}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@jqfmt_vfsold}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{d\xc4\x05\x00\x96\xa1\xfcy0dy\r%\x1b\x11h@\xb8\xf1\xdd\xe4\x7f\xec\xe1Rv\xa7\xabiy\xb2\xaa\x1a\f\xe2\x86d\xbb\'\xbe\x9d\xd8\x06\xcc\xff\xabt\x87<\x92\x02SE\x0f\x04v,\x0e\x0f\x04F\xe6\x1e\x83x\x12\xb3W63?6\xef\x91\xf2\x88\xf5\xe7u\xa8\xf5\xc8\xf83\x1a\xdb\x0e`\xa3\xbf\x8e]\x00\x00\x00\x00\x00\x00'}}, {@nocheckpoint_merge}, {@extent_cache}, {@memory_low}]}, 0x1, 0x5500, &(0x7f0000005840)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1898c1, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') write$binfmt_script(r7, &(0x7f0000000180)={'#! ', './file0'}, 0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 5.069131547s ago: executing program 3 (id=320): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f70359d746d69737369836e"]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYBLOB]) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_PCM_READ_RATE(r6, 0x80045002, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, r6, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x178, 0x9, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff8}}]}, @IPSET_ATTR_DATA={0x7c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'gro\t\x00_id'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3b}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x783}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}}]}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9bf}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffffb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x400c094}, 0x48000) 5.065737853s ago: executing program 2 (id=321): socket(0x2, 0x80805, 0x0) lsm_get_self_attr(0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x2, 0x5, 0x520, 0x118, 0x310, 0xffffffff, 0x220, 0x220, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x16}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@local, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, @gre_key=0x6, @port=0x4e24}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}], 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x40}, [0x0, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x14, 0x1a, 0x1}}, @common=@hl={{0x28}, {0x3, 0xd}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@private=0xa010100, @ipv6=@local, @gre_key=0x3, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 2.758755668s ago: executing program 1 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000080a05000000000000000000020000060900020073797a32000000000900010073797a3000000000140000001100010004000000000000000a00000aca33dc22eacb77da015d010a5a3f912ee4440b5624aae9d0187903d3083bf85dadc5a1e020646ef51b65195d8174c0b6ea6a6acc1bcf74712420b81660e89fdf8308b12bc22553139c58c4951bf7fcb9f2c12aaf9180684cc88c8cfe7a7375f56c8324950e85971ad7cf4b761ab0b58cbb52515d4558c8f11c0cb3b0687ca8363c511f8b"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2844e0}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) getrlimit(0x8, &(0x7f0000000040)) 2.721844267s ago: executing program 0 (id=323): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdc) 2.278166919s ago: executing program 1 (id=324): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={r5}) 2.029369798s ago: executing program 1 (id=325): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f00000001c0), 0x1, 0x450, &(0x7f0000000d80)="$eJzs3M1vFOUfAPDvzG7hx9uvK0GUF7WKRuJLSwsiBy8aTTxoYqIHPNa2EGShhtZECFE0Bo+GxLsxnkz8CzzpxagnExNPejckxPQCelozuzN0u2y3tGw76H4+ycDzzDzt83z3mafzzDydBjCwRrJ/kojtEfFbRAy3sksLjLT+u7FwceqvhYtTSTQar/+ZNMtdX7g4VRQtvm5bkalGpB8nsa9LvXPnL5yerNdnzuX5sfkz74zNnb/w9KkzkydnTs6cnTh27Mjh8WePTjzTlzizuK7vfX92/56X37zy6tTxK2/9+HVSxN8RR5+M9Dr4WKPR5+rKtaMtnVRLbAirUmkN0xhqjv/hqMRi5w3HSx+V2jhgXTUajcbu7GqddD18qQH8hyVRdguAchQX+uz+t9g2cv5RtmvPt26Asrhv5FvrSDXSvMxQx/1tP41ExPFLf3+ebbE+zyEAAJb4Npv/PNVt/pfG7rZy/8/XUGoRcU9E7IyIoxGxKyLujWiWvS8i7l9l/Z2LJLfOf9KrawrsNmXzv+fyta2l879i9he1Sp7b0Yx/KDlxqj5zKP9MDsbQ5iw/3qOO71785dPljrXP/7Itq7+YC+btuFrd3Kdgu7j2YcTearf4k5srAUlE7ImIvWus49QTX+1f7tjK8ffQh3WmxhcRj7f6/1J0xF9Ieq9Pjv0v6jOHxoqz4lY//Xz5teXqv6P4+yDr/61dz/8i/h21pH29dm71dVz+/ZNl72nWcv5PT85PbkreWLLvvcn5+XPjEZuSV5r5Wvv+iY5yE4vls/gPHug+/nfG4iexLyKyk/iBiHgwIh7K2/5wRDwSEQd6xP/DC4++vfb411cW/3TP/o+O/l9MbIrOPd0TldPff7Ok0tpq4s/6/0gzdTDfk/X/SnHdTrvWdjYDAADAv08aEdsjSUdvptN0dLT1O/y7Ymtan52bf/LE7Ltnp1vvCNRiKC2edA23PQ8dz2/ri/xER/5w/tz4s8qWZn50arY+XXbwMOC2LTP+M39Uym4dsO68rwWDy/iHwWX8w+DqOf6/3Lh2ABuvy/jfUkY7gI3X7fr/QQntADZex/i37AcDxPM/GFxV9/swsFz/YSDNbYmVX5If3ETxRxDulvbcRYlI7/T7/Lq9/CgGN5FGRK8yJf9gAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6JN/AgAA///BZ+DP") capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xffffffffffffffff, 0xee01) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000003c0)={0x4, 0x0, [{}, {}, {}, {}]}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x3}, 0x0) 1.957797823s ago: executing program 3 (id=326): r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x4, 0x5549, &(0x7f000000b080)="$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") bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce11480949455bc37f5f30c92774dcb201629979039d7c8943b21be5bdf9ab8eed9ace110469c51f4f211dd9fad8", 0x44, 0x6d91fb6126dcc988, 0x0, 0x53) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f00000000c0)) recvfrom(r0, &(0x7f0000001a80)=""/4085, 0xff5, 0x40010020, 0x0, 0x0) 1.74469784s ago: executing program 2 (id=327): socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000340)={[{@nodioread_nolock}, {@min_batch_time}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@nodelalloc}]}, 0x5, 0x795, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newspdinfo={0x1c, 0x24, 0x16f87866b7b1d371, 0x70bd25, 0x25dfdbff, 0x1, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0xc56, &(0x7f0000001480)={{0x12, 0x1, 0x310, 0x6e, 0xe8, 0x48, 0x40, 0x681, 0x40, 0x89f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc44, 0x4, 0x7, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0x9d, 0xfe, 0x6, 0xf0, 0xe0, 0x22, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0xc1, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x2, 0x1}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x3, 0x3, [0x1, 0x2, 0x6], 0x2}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0xfc}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x3, 0x7f, "ebba23"}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x4, 0x4, [0xa, 0x9, 0x9, 0x6], 0xe}]}], [{{0x9, 0x5, 0xf, 0x10, 0x200, 0xe, 0x9, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x1}, @generic={0xf, 0x3, "b635fbcaebde1ec39614d4fdfb"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x7f, 0x2e, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x9, 0x4, 0x65}}, {{0x9, 0x5, 0x82, 0x0, 0x400, 0x7, 0x2, 0x4}}, {{0x9, 0x5, 0xb, 0x5, 0x8, 0x0, 0x6, 0x7, [@generic={0xe, 0x10, "96d93b1cf8d5d5b7fd40c904"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x1ff, 0x6, 0x69, 0x0, [@generic={0x77, 0xc, "8612e4af546720dcdd4ad5afa68e16643c472cc9bb6e5748f02abb4b83e64f554ef0767313aab2794685179ad42cf07881415536616891e7b7cb71939e0dd5bcc8e808090cda88bc1b13ff22a84cc72443e2f17a6b5d7fc031ec25e91849ca5cf2150a810ea5bf537e8853f60dfa38c99bc744b795"}]}}]}}, {{0x9, 0x4, 0xb, 0x3, 0x8, 0xff, 0xb7, 0xd0, 0x0, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x6, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2d, 0x7eb}, @generic={0x4, 0x8, "d60e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x440, 0x6, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x45}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x10, 0x2, 0x0, [@generic={0xef, 0x4, "4a1b5a665812ea7a32ad4b9d093c28f6384191a3ec0036cc9297b51e778eaf01a74f09c762b90d6cc2689d805f0e3ad3e66019acc8c9dd6226cf0258f25958ba093692c8ecbec44e53ab370c13b4bbfbd70408dcdfdf30f0101b1258c4fa8ab36d138632722b7e70f15bd20a62b9a72686ff41f38ff8bc98f8245809d440d2f7dc81d5d85c7c5bdfb9f845ffcc1573cf9a6345a09dac3b23144b01790236b7d21c201639cfc001baba8af0c36a06879b5e1f69241472cb1107cf258401256b702cd568f22f2598e3d487ab97f18650b9666725a535f0d0cfee9921e63176d44d366501bcac5500963391aee23f"}, @generic={0x91, 0x31, "cac0c56e5c4fc0a4a532c3f9812f356095524b5842aa85225a606056230bd215e334ba88ed4a985791cfe3e0070de43101dfbe0a4363f177432d6269211010fca6acf5f5414c173a9baec07f52cc64994edcc2127b362234cfa42d69b0c5a92c2806f0180e1a8e5503de77475aea57312dd0a76424c6c4d20b7fa14e424076abf36dd4a652c463f1198519b9250c17"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x8, 0x81, 0x2, [@generic={0xb3, 0x11, "1268d6858ea8692a86f510da5237c94972323b98cb9b7d60295df7a35a5db44723f67b454c21ea89013d83b12fdc66f51529eafa1cd1f2dbb4d117c4bd75d0c2684a203fc5edb8ec64188b33d52d0a6f553d98016c885e96c49a3596f0101ed9269aecd148b59a5dc77ed5d0ee48c3161dbb17a3389e64ac23cb7df917b8d9fed65868fa623f19423d53820c27f05709a330b85f2f3c44d323722ced6c79d2d1d4e08dba0794a45df13b1faa5e08ad4db9"}, @generic={0xc7, 0x23, "d99dc08f8bef2d80d261b77bb5bb56332c1f4f5c8d7a81da7aa14459106f9998a034f8aaf4f4b717ce44728adb3316330726ab5c1294e8c31cdacf6d103ebfc836300f5ce97eb8fb9b7cee69fd79ae57e9d591054bd369903f19982d958d7dac3971a1ed5de4fd4da09bc101624ec967cf30c5a776498e5f19d4cd827b888e3d1796010c2a05f9b9e8b6f3d90d2aa664fb23778c6fbd4ab772579b9b2bcdd4fcc2f44526ee1ffd5d70c9d81e3a6accf990723f533abcec37298a5f1f7f22de35261254962c"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x3, 0xfb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc9, 0x80}, @generic={0xca, 0xe, "df4c130ecd567ae262b207c01120866d58f340338718c1b9bfd5e4f6277c4dc03bf8816e5fc50780e75581cd66a74b2af5b251c5410f5a4cd57cbad3435351cb87e74e8cf34859b3f3341d4130932d0e405880e9dc1f597940fea0be6eaf367d38ba2013f1e009b65baf038fc64e1f07a6b262f0d79ce8dcba1d6621a1b4459e796e3c53e5dd345aac70e88719f7ce74235b07d3e3d388028d2ba6d8b135d091f85adfc79f89f44543d95fdc8122903ca827338c3db8582ab8c9f9ed2a017c310e275644b9624ab6"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x5, 0x2, 0xf}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xa1, 0x80, 0x10}}]}}, {{0x9, 0x4, 0xd2, 0x7, 0x9, 0xed, 0x13, 0x9a, 0x8, [], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0xa7, 0x1, 0x4, [@generic={0xea, 0xf, "d87803f6bfe01691c6a08a197717612c239616efe706dd115e31358e7076e6effbdaaca51ba2a52cae729a0daa0819f54179670e87f91260573a236a8db165d96f707e5a8a91d55147e9d6beb99f46e65a9acb91a0f48861d9ab7ce75bd28194e8aff8711c1dc84bb7f529358e3c598b1630cc5240fe29a89441aeae7fe9e23071cdeb5c5ed583f2f70a16af0de9e299d4799b9c56775864bbef8c504698de571beb30acd8151b0e26968ee8eb40eba51398326fb9cfe3c296f70ec8747f757c4f3750ec53078a55af58bed5f842774b58a7a776a3fcbb120fd142b8c23be6833cdfd127bd8e1d8f"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x8, 0x7, 0x3}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x9, 0x9, 0x9, [@generic={0x93, 0x22, "ab37d360dc25c3f56ebd89f4bc51548f07cdaa653ecff907659d494d7c5a3a20ce5dde0988d488e4a58533d3393477ff41e013a3b7ef3400b36cf00b2869f418671dae5ca52dfd486f43200e873009ab65503b0a7b4b233875e6bc4367368946933f9ee71643772ce73909f62151d7a1b80ed912b945291d56bf4bd2707162785673de79066f342bcab5d5313df91f8b58"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x6, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x6, 0x1, 0xfa}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x80, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x6, 0x1, 0x3, [@generic={0xd0, 0x22, "7fdacb64d4f072dc43eda458b0076e0b4c3c2a37df5872d9434109ac17149814a23e59dc1f442e0d8edabc6dbe55321be934d6244d0a7de97d1558cd408edbfebcce441140a69ff62139ae04dd4c1378669fac62338d5f20fb9004e3bd9da6a66c3c02026cdfd5b725835790fe4c49bde0356b3ca92193b5985153f33e66d15fee553a6133258d0afd227b468aa3ffd00b07358a6cb31f5f70ed82f7e360b94a7d24ad564887d1b198c962950ca441ae166d4b019d44050ec831adcfa473d7c3dc1ac2e737cbd19ec6d19fab0ad9"}, @generic={0xaf, 0x21, "fd14cf1895257c12f4216a0cb88919552fb4b9d020da2c86ce9fee8905e8e74b3fa0c2a1258fc83d1c3ccf6b93654ac663577f425e4264af64bc3be21175b48cb92ae537d3f60df3b3594cca8afea513df8dfbf18b43119b340a6ea4780413f2a50b3251d02a2a484aef6d3dc4ddf1f870bbb8761cbe6b89db5858f7ef136e1eaf27caaa1d548910204cadde9eee42463017103091b74fada9cf1061546a201b3c7be522cbc7d31f5bd1eee9e1"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x3, 0xe2, 0xe2, [@generic={0x3b, 0x4, "9a0bd8b62f3229bcdf9d04ca2701d821cdf52c4ae2d57ea736f9a44a9be72d2c2d34ba15ed3260aafd4fbeccad87456a8e72607a6a1778664f"}, @generic={0x94, 0x5, "131345f2177d326adde8f610fe6cc60844e6c4bfb00b3f18112ee0cf7ce265a605aec17781058ffdd37b745296262eb6cdc221a39bd55e1c955f1d190314e912726f9fd6b6189b33e7231a4bfb6ef512e22b8f74abebe79afda6b54f2ee67b9e7b57667daa6497d124d97f0f0f432f74748b93b5ec5b33235bc303e0fbf3156f02ce5cf71c6c89d8167d46b51f745919dca9"}]}}, {{0x9, 0x5, 0x93, 0x2, 0x8, 0x3, 0x0, 0xf7}}]}}, {{0x9, 0x4, 0x7d, 0x3e, 0x6, 0xc7, 0x10, 0x0, 0x5, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7f}, @generic={0xe9, 0x1, "c4718081afc168aff673ff3c94a2dfc1266fc7c29736289d518a066dc7798a1aae72e6dd45141375aa22993a5d2052e50a4745f05cf7ce62d89c7d30be98ec5050361a2dd22d7e38ef8293f7202454bc01784a00b53f15ed0fb15d139a74ed83e4f1f5f0f087a02d439483ba79d02b376e9fe3678e858db6d93af872283d45991050bd0be12be86510c20f51693614d6bc9126421b65e55dee44fff231f0866e516654595b1b26cbbbd268f5a881caa2ff274cc6861f4218f352330e515df7edf8fa236792d9fa51013dcee0bade5fbc8623ac1075f1fb60cd761f2ce600ba290225201bc34927"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x73, 0xf8, 0x4}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xf7, 0x8, 0xa, [@generic={0x8e, 0x15, "f9e55b7010b2b8cf8b5beb6a2fdc43b4f6960ef0abb17275ee148b40927ee19910298b023cb21177b7c6be83fbb2ce626852b2851b63b36ed855968c4fefbb16884a77a3a6abc0350996455350d87cd5ced044d2a4b62954d1f4f39d5704e67828ec9c1e38f1078d95372e4811ec62f0ebdacbed2c24a1943ad4f9977d32387ccd8d7aa6a3210f368ff6fa93"}, @uac_iso={0x7, 0x25, 0x1, 0x1d7564a93247ee04, 0x2, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x2, 0x4, 0x5, [@generic={0x32, 0x4, "7165d9b15e374d186c53aec5bf0a549913adc2d1a0b0683229bd242d26411c20d90371e2f6e89d9d5b2b4805046d6ff9"}]}}, {{0x9, 0x5, 0x3, 0x16, 0x10, 0x8, 0xe, 0xd}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x8, 0x9, 0x80, [@generic={0xbf, 0x0, "d40eedee5cd486b83b2ae2ddcc348e4991b3ec680b367188f673a89c5caeeef1b1920165a82ced55ac9466bc9423dad05727fe732c8cda97dd994c405920b13c0743d44c1b57c349758a60c74ed21e199185c17526db12b5f3f69db8b114430477c51583b06d07a41b67cd870ec90caee4d6416566eb8bbc4bc3717e69b06f297e5e864fecbce92ca8695bc1bf90952caba80597309483c62df69a36f5aeec0cd0dbb955c6b624d4bfba8f21aa1d2849a9aefad454731fc5c8577cbae7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x1, 0x3, 0x5, 0x8, 0x6}, 0x1b, &(0x7f0000000280)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xfd, 0x8, 0xd, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x1d, 0x7, 0x8}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1054}}, {0x63, &(0x7f00000006c0)=@string={0x63, 0x3, "7fd9cadfbd6bd204e4376090b75ab8fcbeb58ccf60d81ed917823449eee3322a667fa29d1562cdff93ba7040da17bd239bc6d54c23725f6463022f48dc9cf61d5f26b0d59d016d790033ea7197ea0b6cd1e874b9635d4b43412c328479b9abbbd3"}}]}) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100000060000006608000000000000180000000000000000000000000000009500000000000000360a020000000000950000000000000084352ea3fc6407e37abe8c80fe946f4c0724a4c0cb2d4e51eb3612766759f136cff93bb605a4b31615353811c0dbfe78779969017517c0f024b9f1240ab33c31a68a0ba21bd712704d3ed2c8dbed77c1768d0b84788a746fe8ee"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 742.709663ms ago: executing program 0 (id=328): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write(r0, &(0x7f0000000080)="2c74eb2f", 0x4) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) write(r0, &(0x7f0000000080)="2c74eb2f", 0x4) (async) chdir(&(0x7f00000001c0)='./file0\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) (async) getdents64(r1, 0x0, 0x0) (async) 359.323725ms ago: executing program 0 (id=329): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(r4, 0x1) 0s ago: executing program 3 (id=330): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008100)={0x2020, 0x0, 0x0, 0x0}, 0xfffffddd) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0xfdfffffd, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x8000000004, 0x0, 0x7, 0x0, 0x8000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): [ 197.280435][ T5896] usb 5-1: Product: syz [ 197.308416][ T5896] usb 5-1: Manufacturer: syz [ 197.318710][ T5896] usb 5-1: SerialNumber: syz [ 197.571462][ T6699] loop4: detected capacity change from 0 to 1024 [ 198.057927][ T6699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.141676][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.348540][ T30] audit: type=1804 audit(1749010719.075:17): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.192" name="/newroot/27/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 198.436519][ T30] audit: type=1804 audit(1749010719.155:18): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.192" name="/newroot/27/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 198.494716][ T5896] usb 5-1: USB disconnect, device number 7 [ 198.590354][ T6710] loop3: detected capacity change from 0 to 32768 [ 198.602032][ T977] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.611480][ T6710] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.196 (6710) [ 198.976352][ T6734] loop2: detected capacity change from 0 to 40427 [ 199.005851][ T977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.005954][ T6710] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.028829][ T6710] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 199.031275][ T6734] F2FS-fs (loop2): invalid crc value [ 199.039481][ T6710] BTRFS info (device loop3): disk space caching is enabled [ 199.051985][ T6710] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 199.118414][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 199.145985][ T6734] F2FS-fs (loop2): Start checkpoint disabled! [ 199.171756][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.180320][ T6734] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 199.612168][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.642204][ T977] usb 2-1: config 1 has no interface number 0 [ 199.648494][ T977] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.696326][ T977] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.712524][ T6710] BTRFS info (device loop3): rebuilding free space tree [ 199.722903][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.731211][ T977] usb 2-1: Product: syz [ 199.741814][ T977] usb 2-1: Manufacturer: syz [ 199.746479][ T977] usb 2-1: SerialNumber: syz [ 199.800530][ T977] usb 2-1: selecting invalid altsetting 1 [ 199.847861][ T6710] BTRFS info (device loop3): disabling free space tree [ 199.859259][ T6710] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 199.878098][ T6710] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 199.974475][ T1101] kworker/u8:7: attempt to access beyond end of device [ 199.974475][ T1101] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.050160][ T1101] CPU: 1 UID: 0 PID: 1101 Comm: kworker/u8:7 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 200.050193][ T1101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.050207][ T1101] Workqueue: writeback wb_workfn (flush-7:2) [ 200.050246][ T1101] Call Trace: [ 200.050255][ T1101] [ 200.050266][ T1101] dump_stack_lvl+0x189/0x250 [ 200.050295][ T1101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.050313][ T1101] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 200.050343][ T1101] ? __pfx_queue_work_on+0x10/0x10 [ 200.050365][ T1101] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 200.050394][ T1101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 200.050426][ T1101] ? f2fs_hw_is_readonly+0x39b/0x470 [ 200.050459][ T1101] f2fs_handle_critical_error+0x37c/0x540 [ 200.050496][ T1101] f2fs_write_end_io+0x495/0x810 [ 200.050528][ T1101] ? blkg_put+0x22/0x240 [ 200.050566][ T1101] __submit_merged_bio+0x27a/0x6a0 [ 200.050602][ T1101] __submit_merged_write_cond+0x255/0x530 [ 200.050639][ T1101] f2fs_write_data_pages+0x261d/0x3000 [ 200.050709][ T1101] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 200.050757][ T1101] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 200.050825][ T1101] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 200.050870][ T1101] ? trace_f2fs_writepages+0x7f/0x200 [ 200.050901][ T1101] ? f2fs_write_node_pages+0x478/0x6e0 [ 200.050934][ T1101] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 200.050977][ T1101] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 200.051011][ T1101] do_writepages+0x32e/0x550 [ 200.051038][ T1101] ? reacquire_held_locks+0x127/0x1d0 [ 200.051059][ T1101] ? writeback_sb_inodes+0x372/0x1000 [ 200.051089][ T1101] __writeback_single_inode+0x145/0xff0 [ 200.051112][ T1101] ? do_raw_spin_unlock+0x122/0x240 [ 200.051142][ T1101] writeback_sb_inodes+0x6b5/0x1000 [ 200.051194][ T1101] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 200.051261][ T1101] ? rcu_is_watching+0x15/0xb0 [ 200.051293][ T1101] wb_writeback+0x43b/0xaf0 [ 200.051323][ T1101] ? queue_io+0x3d1/0x590 [ 200.051347][ T1101] ? __pfx_wb_writeback+0x10/0x10 [ 200.051377][ T1101] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.051412][ T1101] wb_workfn+0x409/0xef0 [ 200.051460][ T1101] ? __pfx_wb_workfn+0x10/0x10 [ 200.051494][ T1101] ? __lock_acquire+0xab9/0xd20 [ 200.051537][ T1101] ? process_scheduled_works+0x9ef/0x17b0 [ 200.051577][ T1101] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.051606][ T1101] ? process_scheduled_works+0x9ef/0x17b0 [ 200.051637][ T1101] ? process_scheduled_works+0x9ef/0x17b0 [ 200.051670][ T1101] process_scheduled_works+0xae1/0x17b0 [ 200.051734][ T1101] ? __pfx_process_scheduled_works+0x10/0x10 [ 200.051792][ T1101] worker_thread+0x8a0/0xda0 [ 200.051815][ T1101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 200.051853][ T1101] ? __kthread_parkme+0x7b/0x200 [ 200.051886][ T1101] kthread+0x70e/0x8a0 [ 200.051916][ T1101] ? __pfx_worker_thread+0x10/0x10 [ 200.051935][ T1101] ? __pfx_kthread+0x10/0x10 [ 200.051961][ T1101] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.051987][ T1101] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.052015][ T1101] ? __pfx_kthread+0x10/0x10 [ 200.052041][ T1101] ret_from_fork+0x3fc/0x770 [ 200.052076][ T1101] ? __pfx_ret_from_fork+0x10/0x10 [ 200.052114][ T1101] ? __switch_to_asm+0x39/0x70 [ 200.052134][ T1101] ? __switch_to_asm+0x33/0x70 [ 200.052155][ T1101] ? __pfx_kthread+0x10/0x10 [ 200.052180][ T1101] ret_from_fork_asm+0x1a/0x30 [ 200.052222][ T1101] [ 200.072710][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.204'. [ 200.151777][ T1101] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 200.214903][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.437553][ T977] usb 2-1: selecting invalid altsetting 1 [ 200.443899][ T977] cdc_ncm 2-1:1.1: bind() failure [ 200.480389][ T5845] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.251688][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.629169][ T6764] loop3: detected capacity change from 0 to 128 [ 202.020841][ T43] usb 2-1: USB disconnect, device number 7 [ 202.291691][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.391838][ T980] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.413810][ T6775] PM: Enabling pm_trace changes system date and time during resume. [ 202.413810][ T6775] PM: Correct system time has to be restored manually after resume. [ 202.547764][ T6775] syz.3.208: attempt to access beyond end of device [ 202.547764][ T6775] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 202.562374][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 202.577117][ T980] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.599834][ T980] usb 3-1: config 0 has no interface number 0 [ 202.630392][ T980] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 202.656349][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.677190][ T980] usb 3-1: Product: syz [ 202.695241][ T980] usb 3-1: Manufacturer: syz [ 202.700410][ T980] usb 3-1: SerialNumber: syz [ 202.732531][ T980] usb 3-1: config 0 descriptor?? [ 202.760647][ T980] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.017351][ T980] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.331700][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.403866][ T980] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 203.483277][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 203.503947][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 203.524592][ T980] usb 3-1: USB disconnect, device number 10 [ 203.882576][ T980] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.925340][ T980] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.974685][ T980] quatech2 3-1:0.51: device disconnected [ 204.371720][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.735685][ T6801] loop2: detected capacity change from 0 to 40427 [ 204.794834][ T6801] F2FS-fs (loop2): invalid crc value [ 204.892985][ T6801] F2FS-fs (loop2): Start checkpoint disabled! [ 204.907015][ T6801] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 205.374183][ T6792] loop1: detected capacity change from 0 to 32768 [ 205.411683][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.450657][ T12] kworker/u8:0: attempt to access beyond end of device [ 205.450657][ T12] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.488265][ T6792] (syz.1.213,6792,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 205.539044][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 205.539076][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.539091][ T12] Workqueue: writeback wb_workfn (flush-7:2) [ 205.539129][ T12] Call Trace: [ 205.539138][ T12] [ 205.539148][ T12] dump_stack_lvl+0x189/0x250 [ 205.539176][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.539195][ T12] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 205.539225][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 205.539250][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 205.539279][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 205.539317][ T12] ? f2fs_hw_is_readonly+0x39b/0x470 [ 205.539354][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 205.539393][ T12] f2fs_write_end_io+0x495/0x810 [ 205.539425][ T12] ? blkg_put+0x22/0x240 [ 205.539467][ T12] __submit_merged_bio+0x27a/0x6a0 [ 205.539506][ T12] __submit_merged_write_cond+0x255/0x530 [ 205.539544][ T12] f2fs_write_data_pages+0x261d/0x3000 [ 205.539632][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 205.539684][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 205.539821][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 205.539855][ T12] do_writepages+0x32e/0x550 [ 205.539884][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 205.539904][ T12] ? writeback_sb_inodes+0x372/0x1000 [ 205.539938][ T12] __writeback_single_inode+0x145/0xff0 [ 205.539960][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 205.539992][ T12] writeback_sb_inodes+0x6b5/0x1000 [ 205.540051][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 205.540130][ T12] ? rcu_is_watching+0x15/0xb0 [ 205.540163][ T12] wb_writeback+0x43b/0xaf0 [ 205.540196][ T12] ? queue_io+0x3d1/0x590 [ 205.540221][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 205.540255][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.540291][ T12] wb_workfn+0x409/0xef0 [ 205.540343][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 205.540380][ T12] ? __lock_acquire+0xab9/0xd20 [ 205.540427][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 205.540469][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.540495][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 205.540527][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 205.540563][ T12] process_scheduled_works+0xae1/0x17b0 [ 205.540643][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 205.540702][ T12] worker_thread+0x8a0/0xda0 [ 205.540761][ T12] kthread+0x70e/0x8a0 [ 205.540791][ T12] ? __pfx_worker_thread+0x10/0x10 [ 205.540811][ T12] ? __pfx_kthread+0x10/0x10 [ 205.540839][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.540867][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.540896][ T12] ? __pfx_kthread+0x10/0x10 [ 205.540923][ T12] ret_from_fork+0x3fc/0x770 [ 205.540958][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 205.540999][ T12] ? __switch_to_asm+0x39/0x70 [ 205.541020][ T12] ? __switch_to_asm+0x33/0x70 [ 205.541040][ T12] ? __pfx_kthread+0x10/0x10 [ 205.541067][ T12] ret_from_fork_asm+0x1a/0x30 [ 205.541114][ T12] [ 205.549136][ T6792] (syz.1.213,6792,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 205.571863][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 205.934739][ T6809] loop3: detected capacity change from 0 to 8 [ 206.268866][ T6799] loop4: detected capacity change from 0 to 32768 [ 206.445140][ T6799] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.461680][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.550321][ T6814] loop1: detected capacity change from 0 to 16 [ 206.562148][ T6814] erofs (device loop1): mounted with root inode @ nid 36. [ 206.574223][ T6814] syz.1.222: attempt to access beyond end of device [ 206.574223][ T6814] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 206.588229][ T6814] erofs (device loop1): read error -5 @ 43 of nid 36 [ 206.618198][ T6812] loop0: detected capacity change from 0 to 4096 [ 206.649370][ T6825] syz.1.222: attempt to access beyond end of device [ 206.649370][ T6825] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 206.663522][ T6825] erofs (device loop1): read error -5 @ 43 of nid 36 [ 206.673583][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 206.861562][ T6812] NILFS (loop0): invalid segment: Checksum error in segment payload [ 206.864190][ T6814] syz.1.222 (6814): drop_caches: 2 [ 206.945013][ T6826] loop3: detected capacity change from 0 to 256 [ 206.999449][ T6812] NILFS (loop0): trying rollback from an earlier position [ 207.074364][ T6826] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.206909][ T6812] NILFS (loop0): recovery complete [ 207.372019][ T6828] FAULT_INJECTION: forcing a failure. [ 207.372019][ T6828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.385503][ T6828] CPU: 0 UID: 0 PID: 6828 Comm: syz.1.224 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 207.385524][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.385534][ T6828] Call Trace: [ 207.385540][ T6828] [ 207.385546][ T6828] dump_stack_lvl+0x189/0x250 [ 207.385565][ T6828] ? __pfx____ratelimit+0x10/0x10 [ 207.385588][ T6828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.385602][ T6828] ? __pfx__printk+0x10/0x10 [ 207.385628][ T6828] should_fail_ex+0x414/0x560 [ 207.385651][ T6828] _copy_to_user+0x31/0xb0 [ 207.385666][ T6828] copy_to_sockptr+0x5e/0xa0 [ 207.385686][ T6828] do_tcp_getsockopt+0x144d/0x2610 [ 207.385712][ T6828] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 207.385729][ T6828] ? sock_recv_errqueue+0x4d0/0x510 [ 207.385777][ T6828] ? __mutex_trylock_common+0x153/0x260 [ 207.385795][ T6828] ? __pfx___mutex_trylock_common+0x10/0x10 [ 207.385815][ T6828] ? rcu_is_watching+0x15/0xb0 [ 207.385829][ T6828] ? trace_contention_end+0x39/0x120 [ 207.385844][ T6828] ? __mutex_lock+0x330/0xe80 [ 207.385874][ T6828] ? smc_getsockopt+0x123/0x380 [ 207.385897][ T6828] ? __pfx___mutex_lock+0x10/0x10 [ 207.385919][ T6828] ? __lock_acquire+0xab9/0xd20 [ 207.385945][ T6828] tcp_getsockopt+0x89/0x130 [ 207.385961][ T6828] ? sock_recv_errqueue+0x4d0/0x510 [ 207.385984][ T6828] ? sock_recv_errqueue+0x4d0/0x510 [ 207.386008][ T6828] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 207.386031][ T6828] smc_getsockopt+0x1b7/0x380 [ 207.386054][ T6828] ? __pfx_smc_getsockopt+0x10/0x10 [ 207.386084][ T6828] do_sock_getsockopt+0x35d/0x650 [ 207.386104][ T6828] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 207.386121][ T6828] ? do_syscall_64+0xa0/0x3b0 [ 207.386143][ T6828] ? __fget_files+0x3a0/0x420 [ 207.386161][ T6828] ? __fget_files+0x2a/0x420 [ 207.386185][ T6828] __x64_sys_getsockopt+0x1a5/0x250 [ 207.386202][ T6828] ? do_syscall_64+0xa0/0x3b0 [ 207.386226][ T6828] ? do_syscall_64+0xa0/0x3b0 [ 207.386252][ T6828] do_syscall_64+0xfa/0x3b0 [ 207.386273][ T6828] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.386295][ T6828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.386310][ T6828] ? clear_bhb_loop+0x60/0xb0 [ 207.386329][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.386343][ T6828] RIP: 0033:0x7f8adff8e969 [ 207.386357][ T6828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.386371][ T6828] RSP: 002b:00007f8ae0e59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 207.386387][ T6828] RAX: ffffffffffffffda RBX: 00007f8ae01b5fa0 RCX: 00007f8adff8e969 [ 207.386404][ T6828] RDX: 000000000000000b RSI: 0000000000000006 RDI: 0000000000000004 [ 207.386413][ T6828] RBP: 00007f8ae0e59090 R08: 0000200000000040 R09: 0000000000000000 [ 207.386423][ T6828] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 207.386433][ T6828] R13: 0000000000000000 R14: 00007f8ae01b5fa0 R15: 00007ffc235a5108 [ 207.386456][ T6828] [ 207.491713][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.812053][ T6831] loop1: detected capacity change from 0 to 128 [ 208.009866][ T6831] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 208.015899][ T6832] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.033522][ T6831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.083936][ T6799] XFS (loop4): Ending clean mount [ 208.498846][ T6835] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 208.506730][ T6835] FAT-fs (loop3): Filesystem has been set read-only [ 208.518598][ T6835] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.531781][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.972594][ T5834] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.135475][ T6837] loop1: detected capacity change from 0 to 4096 [ 209.277086][ T6838] kvm: pic: non byte write [ 209.308284][ T6837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.571707][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.774054][ T6837] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #15: comm syz.1.225: corrupted inode contents [ 209.868921][ T6837] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #15: comm syz.1.225: mark_inode_dirty error [ 209.993339][ T6845] EXT4-fs (loop1): shut down requested (1) [ 210.621670][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.727687][ T6837] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #15: comm syz.1.225: corrupted inode contents [ 211.039730][ T30] audit: type=1800 audit(1749010731.635:19): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.219" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 211.226476][ T6856] loop4: detected capacity change from 0 to 256 [ 211.306088][ T6856] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.651679][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.705532][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.816037][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 211.945555][ T12] Quota error (device loop1): write_blk: dquota write failed [ 211.961817][ T12] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 212.691680][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.398892][ T6866] loop3: detected capacity change from 0 to 8 [ 213.525737][ T6870] loop1: detected capacity change from 0 to 8 [ 213.549123][ T6853] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 213.601205][ T6853] FAT-fs (loop4): Filesystem has been set read-only [ 213.650483][ T6853] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 213.731666][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.036308][ T6880] Zero length message leads to an empty skb [ 214.322481][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 214.342037][ T5837] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 214.612796][ T5837] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 214.641845][ T5837] usb 5-1: config 0 has no interface number 0 [ 214.652481][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.687220][ T43] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 214.707805][ T5837] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=17.08 [ 214.754610][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.762045][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.771688][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.804990][ T5837] usb 5-1: Product: syz [ 214.809228][ T5837] usb 5-1: Manufacturer: syz [ 214.809909][ T43] usb 4-1: config 0 descriptor?? [ 214.846875][ T5837] usb 5-1: SerialNumber: syz [ 214.897271][ T5837] usb 5-1: config 0 descriptor?? [ 214.897678][ T43] option 4-1:0.0: GSM modem (1-port) converter detected [ 215.204127][ T5893] usb 4-1: USB disconnect, device number 5 [ 215.231394][ T5893] option 4-1:0.0: device disconnected [ 215.811671][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.851684][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.966208][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 216.972501][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 216.978764][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 216.986942][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 217.274500][ T43] usb 5-1: USB disconnect, device number 8 [ 217.568690][ T6902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.244'. [ 217.821968][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 217.891785][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.253899][ T24] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 218.272008][ T24] usb 4-1: config 5 has no interface number 0 [ 218.301873][ T24] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 218.375169][ T24] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 218.420886][ T6913] loop2: detected capacity change from 0 to 256 [ 218.431101][ T24] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 218.458297][ T24] usb 4-1: config 5 interface 123 has no altsetting 0 [ 218.469350][ T24] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 218.478905][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.487387][ T6913] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.498512][ T24] usb 4-1: Product: syz [ 218.503067][ T24] usb 4-1: Manufacturer: syz [ 218.507703][ T24] usb 4-1: SerialNumber: syz [ 218.812311][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 218.941690][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.194787][ T6912] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 219.203186][ T6912] FAT-fs (loop2): Filesystem has been set read-only [ 219.209829][ T6912] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 219.236251][ T6904] loop3: detected capacity change from 0 to 1764 [ 219.280285][ T6904] iso9660: Bad value for 'mode' [ 219.326199][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.346489][ T6919] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 219.377638][ T43] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.396646][ T6919] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 219.434942][ T43] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 219.479500][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.523019][ T43] usb 1-1: config 0 descriptor?? [ 219.684699][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589bb800: rx timeout, send abort [ 219.978759][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.184812][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589ba000: rx timeout, send abort [ 220.196488][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589bb800: abort rx timeout. Force session deactivation [ 220.693122][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589ba000: abort rx timeout. Force session deactivation [ 221.011667][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.086216][ T24] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 221.113484][ T24] usb 4-1: USB disconnect, device number 6 [ 221.205028][ T5934] usb 1-1: USB disconnect, device number 9 [ 221.601815][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 221.641719][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 221.813408][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 221.919528][ T43] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 222.029794][ T24] usb 4-1: config 0 has an invalid interface number: 215 but max is 0 [ 222.041325][ T43] usb 5-1: config 0 has no interface number 0 [ 222.061655][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.118425][ T43] usb 5-1: config 0 interface 12 has no altsetting 0 [ 222.130524][ T24] usb 4-1: config 0 has no interface number 0 [ 222.238029][ T24] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=17.08 [ 222.283018][ T43] usb 5-1: New USB device found, idVendor=ac42, idProduct=1202, bcdDevice=85.40 [ 222.325391][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.365500][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.401066][ T24] usb 4-1: Product: syz [ 222.408363][ T43] usb 5-1: Product: syz [ 222.419219][ T24] usb 4-1: Manufacturer: syz [ 222.424312][ T43] usb 5-1: Manufacturer: syz [ 222.434222][ T24] usb 4-1: SerialNumber: syz [ 222.442004][ T43] usb 5-1: SerialNumber: syz [ 222.463151][ T43] usb 5-1: config 0 descriptor?? [ 222.470885][ T24] usb 4-1: config 0 descriptor?? [ 223.091714][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.131661][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.906561][ T24] usb 5-1: USB disconnect, device number 9 [ 225.049430][ T6959] loop2: detected capacity change from 0 to 256 [ 225.171655][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.312611][ T5896] usb 4-1: USB disconnect, device number 7 [ 225.495004][ T6959] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.132942][ T5837] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 226.211709][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.555037][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 226.677453][ T5837] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 226.723261][ T5837] usb 1-1: config 0 has no interface number 0 [ 226.790251][ T5837] usb 1-1: config 0 interface 12 has no altsetting 0 [ 226.816756][ T6971] loop3: detected capacity change from 0 to 512 [ 226.841654][ T5837] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 226.846981][ T6975] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 226.853944][ T6971] EXT4-fs: Ignoring removed bh option [ 226.873699][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.886049][ T5837] usb 1-1: Product: syz [ 226.890271][ T5837] usb 1-1: Manufacturer: syz [ 226.895475][ T6971] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.902452][ T5837] usb 1-1: SerialNumber: syz [ 226.912634][ T6971] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 226.925931][ T5837] usb 1-1: config 0 descriptor?? [ 226.935571][ T6975] FAT-fs (loop2): Filesystem has been set read-only [ 226.948955][ T6971] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 226.962606][ T6975] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 226.978691][ T6971] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.265: Invalid inode table block 0 in block_group 0 [ 226.995615][ T6971] EXT4-fs (loop3): Remounting filesystem read-only [ 227.004173][ T6971] EXT4-fs (loop3): get root inode failed [ 227.020608][ T6971] EXT4-fs (loop3): mount failed [ 227.251665][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.290075][ T6981] netlink: 'syz.4.268': attribute type 4 has an invalid length. [ 227.303451][ T6981] loop4: detected capacity change from 0 to 64 [ 227.334133][ T6980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.269'. [ 227.965423][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.044552][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.125279][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.156299][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.302077][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.360547][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.372177][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.551843][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.646529][ T5837] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 228.671937][ T5837] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 228.721803][ T5837] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 228.729651][ T5837] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 228.765160][ T6981] loop4: detected capacity change from 0 to 512 [ 228.802576][ T5837] usb 1-1: USB disconnect, device number 10 [ 228.810397][ T6981] EXT4-fs: Ignoring removed i_version option [ 228.826587][ T6974] loop1: detected capacity change from 0 to 32768 [ 228.892767][ T6981] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 228.930025][ T6981] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 228.932894][ T30] audit: type=1800 audit(1749010749.655:20): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 228.955669][ T6981] EXT4-fs (loop4): group descriptors corrupted! [ 229.341656][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.481833][ T5896] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.622423][ T5837] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 229.800497][ T5896] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 229.854293][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.884463][ T5896] usb 3-1: config 0 descriptor?? [ 229.896836][ T5896] cp210x 3-1:0.0: cp210x converter detected [ 229.964650][ T5837] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 229.992017][ T5837] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 230.033934][ T5837] usb 2-1: config 0 has no interface number 0 [ 230.055885][ T5837] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=17.08 [ 230.075581][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.091722][ T5837] usb 2-1: Product: syz [ 230.107103][ T5837] usb 2-1: Manufacturer: syz [ 230.122217][ T5837] usb 2-1: SerialNumber: syz [ 230.144062][ T5837] usb 2-1: config 0 descriptor?? [ 230.314758][ T5896] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 230.337416][ T5896] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 230.361735][ T5896] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 230.371654][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.386885][ T5896] usb 3-1: cp210x converter now attached to ttyUSB0 [ 230.419535][ T5896] usb 3-1: USB disconnect, device number 11 [ 230.452987][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 230.482347][ T5896] cp210x 3-1:0.0: device disconnected [ 231.411662][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.490342][ T7016] process 'syz.4.280' launched './file0' with NULL argv: empty string added [ 231.610421][ T7018] loop2: detected capacity change from 0 to 2048 [ 231.705708][ T7018] UDF-fs: error (device loop2): udf_read_inode: (ino 832) failed !bh [ 231.743511][ T7018] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 231.785405][ T7005] loop0: detected capacity change from 0 to 40427 [ 231.892864][ T7018] loop2: detected capacity change from 0 to 2048 [ 231.916392][ T7018] EXT4-fs: Ignoring removed i_version option [ 231.966465][ T7018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.020460][ T7018] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.041561][ T7005] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 232.075606][ T7018] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.279: bg 0: block 345: padding at end of block bitmap is not set [ 232.104670][ T7004] syz.0.276: attempt to access beyond end of device [ 232.104670][ T7004] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 232.118807][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.0.276 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 232.118843][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.118856][ T7004] Call Trace: [ 232.118865][ T7004] [ 232.118875][ T7004] dump_stack_lvl+0x189/0x250 [ 232.118906][ T7004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.118925][ T7004] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 232.118958][ T7004] ? __pfx_queue_work_on+0x10/0x10 [ 232.118982][ T7004] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 232.119012][ T7004] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 232.119045][ T7004] ? f2fs_hw_is_readonly+0x39b/0x470 [ 232.119079][ T7004] f2fs_handle_critical_error+0x37c/0x540 [ 232.119118][ T7004] f2fs_write_end_io+0x495/0x810 [ 232.119148][ T7004] ? blkg_put+0x22/0x240 [ 232.119189][ T7004] __submit_merged_bio+0x27a/0x6a0 [ 232.119214][ T7004] ? up_write+0x1c4/0x420 [ 232.119244][ T7004] __submit_merged_write_cond+0x44c/0x530 [ 232.119280][ T7004] f2fs_sync_node_pages+0x1871/0x1a10 [ 232.119336][ T7004] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 232.119394][ T7004] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 232.119434][ T7004] ? up_write+0x1c4/0x420 [ 232.119455][ T7004] ? do_raw_spin_unlock+0x122/0x240 [ 232.119487][ T7004] f2fs_write_checkpoint+0xe5f/0x1de0 [ 232.119548][ T7004] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 232.119632][ T7004] ? __pfx_down_write+0x10/0x10 [ 232.119667][ T7004] f2fs_issue_checkpoint+0x3ac/0x570 [ 232.119708][ T7004] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 232.119748][ T7004] ? __lock_acquire+0xab9/0xd20 [ 232.119796][ T7004] ? __up_read+0x280/0x680 [ 232.119841][ T7004] ? f2fs_sync_fs+0x200/0x3d0 [ 232.119873][ T7004] f2fs_do_sync_file+0x86a/0x1860 [ 232.119921][ T7004] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 232.120008][ T7004] ? f2fs_file_write_iter+0x4dd/0x2340 [ 232.120037][ T7004] ? vfs_fsync_range+0x12c/0x1c0 [ 232.120064][ T7004] ? f2fs_sync_file+0xe9/0x160 [ 232.120102][ T7004] f2fs_file_write_iter+0x78e/0x2340 [ 232.120153][ T7004] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 232.120174][ T7004] ? rcu_read_lock_any_held+0xb3/0x120 [ 232.120219][ T7004] vfs_write+0x54b/0xa90 [ 232.120248][ T7004] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 232.120273][ T7004] ? __pfx_vfs_write+0x10/0x10 [ 232.120310][ T7004] ? __fget_files+0x2a/0x420 [ 232.120350][ T7004] ksys_write+0x145/0x250 [ 232.120376][ T7004] ? __pfx_ksys_write+0x10/0x10 [ 232.120395][ T7004] ? rcu_is_watching+0x15/0xb0 [ 232.120423][ T7004] ? do_syscall_64+0xbe/0x3b0 [ 232.120462][ T7004] do_syscall_64+0xfa/0x3b0 [ 232.120495][ T7004] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.120526][ T7004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.120547][ T7004] ? clear_bhb_loop+0x60/0xb0 [ 232.120576][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.120598][ T7004] RIP: 0033:0x7f537f58e969 [ 232.120619][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.120639][ T7004] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.120662][ T7004] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 232.120679][ T7004] RDX: 000000000000000b RSI: 0000200000000180 RDI: 0000000000000009 [ 232.120693][ T7004] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 232.120707][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.120720][ T7004] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 232.120757][ T7004] [ 232.120766][ T7004] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 232.454552][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.511804][ T5923] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.524791][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.0.276 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 232.524823][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.524837][ T7004] Call Trace: [ 232.524846][ T7004] [ 232.524856][ T7004] dump_stack_lvl+0x189/0x250 [ 232.524887][ T7004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.524907][ T7004] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 232.524938][ T7004] ? __pfx_queue_work_on+0x10/0x10 [ 232.524962][ T7004] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 232.524992][ T7004] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 232.525026][ T7004] ? f2fs_hw_is_readonly+0x39b/0x470 [ 232.525062][ T7004] f2fs_handle_critical_error+0x37c/0x540 [ 232.525101][ T7004] f2fs_write_end_io+0x495/0x810 [ 232.525155][ T7004] __submit_merged_bio+0x27a/0x6a0 [ 232.525182][ T7004] ? up_write+0x1c4/0x420 [ 232.525217][ T7004] __submit_merged_write_cond+0x44c/0x530 [ 232.525255][ T7004] f2fs_sync_node_pages+0x1871/0x1a10 [ 232.525309][ T7004] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 232.525371][ T7004] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 232.525411][ T7004] ? up_write+0x1c4/0x420 [ 232.525431][ T7004] ? do_raw_spin_unlock+0x122/0x240 [ 232.525462][ T7004] f2fs_write_checkpoint+0xe5f/0x1de0 [ 232.525525][ T7004] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 232.525609][ T7004] ? __pfx_down_write+0x10/0x10 [ 232.525643][ T7004] f2fs_issue_checkpoint+0x3ac/0x570 [ 232.525683][ T7004] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 232.525721][ T7004] ? __lock_acquire+0xab9/0xd20 [ 232.525779][ T7004] ? __up_read+0x280/0x680 [ 232.525815][ T7004] ? f2fs_sync_fs+0x200/0x3d0 [ 232.525848][ T7004] f2fs_do_sync_file+0x86a/0x1860 [ 232.525895][ T7004] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 232.525982][ T7004] ? f2fs_file_write_iter+0x4dd/0x2340 [ 232.526012][ T7004] ? vfs_fsync_range+0x12c/0x1c0 [ 232.526040][ T7004] ? f2fs_sync_file+0xe9/0x160 [ 232.526078][ T7004] f2fs_file_write_iter+0x78e/0x2340 [ 232.526131][ T7004] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 232.526152][ T7004] ? rcu_read_lock_any_held+0xb3/0x120 [ 232.526198][ T7004] vfs_write+0x54b/0xa90 [ 232.526228][ T7004] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 232.526254][ T7004] ? __pfx_vfs_write+0x10/0x10 [ 232.526291][ T7004] ? __fget_files+0x2a/0x420 [ 232.526328][ T7004] ksys_write+0x145/0x250 [ 232.526354][ T7004] ? __pfx_ksys_write+0x10/0x10 [ 232.526373][ T7004] ? rcu_is_watching+0x15/0xb0 [ 232.526401][ T7004] ? do_syscall_64+0xbe/0x3b0 [ 232.526441][ T7004] do_syscall_64+0xfa/0x3b0 [ 232.526471][ T7004] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.526501][ T7004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.526522][ T7004] ? clear_bhb_loop+0x60/0xb0 [ 232.526549][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.526571][ T7004] RIP: 0033:0x7f537f58e969 [ 232.526591][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.526609][ T7004] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.526633][ T7004] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 232.526649][ T7004] RDX: 000000000000000b RSI: 0000200000000180 RDI: 0000000000000009 [ 232.526662][ T7004] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 232.526676][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.526689][ T7004] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 232.526724][ T7004] [ 232.526833][ T7004] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 232.531865][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.537997][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.0.276 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 232.538025][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.538036][ T7004] Call Trace: [ 232.538044][ T7004] [ 232.538052][ T7004] dump_stack_lvl+0x189/0x250 [ 232.538078][ T7004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.538094][ T7004] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 232.538121][ T7004] ? __pfx_queue_work_on+0x10/0x10 [ 232.538143][ T7004] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 232.538176][ T7004] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 232.538213][ T7004] ? f2fs_hw_is_readonly+0x39b/0x470 [ 232.538252][ T7004] f2fs_handle_critical_error+0x37c/0x540 [ 232.538295][ T7004] f2fs_write_end_io+0x495/0x810 [ 232.538352][ T7004] __submit_merged_bio+0x27a/0x6a0 [ 232.538382][ T7004] ? up_write+0x1c4/0x420 [ 232.538415][ T7004] __submit_merged_write_cond+0x44c/0x530 [ 232.538458][ T7004] f2fs_sync_node_pages+0x1871/0x1a10 [ 232.538518][ T7004] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 232.538586][ T7004] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 232.538631][ T7004] ? up_write+0x1c4/0x420 [ 232.538653][ T7004] ? do_raw_spin_unlock+0x122/0x240 [ 232.538688][ T7004] f2fs_write_checkpoint+0xe5f/0x1de0 [ 232.538766][ T7004] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 232.538858][ T7004] ? __pfx_down_write+0x10/0x10 [ 232.538897][ T7004] f2fs_issue_checkpoint+0x3ac/0x570 [ 232.538941][ T7004] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 232.538985][ T7004] ? __lock_acquire+0xab9/0xd20 [ 232.539038][ T7004] ? __up_read+0x280/0x680 [ 232.539076][ T7004] ? f2fs_sync_fs+0x200/0x3d0 [ 232.539109][ T7004] f2fs_do_sync_file+0x86a/0x1860 [ 232.539162][ T7004] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 232.539255][ T7004] ? f2fs_file_write_iter+0x4dd/0x2340 [ 232.539286][ T7004] ? vfs_fsync_range+0x12c/0x1c0 [ 232.539317][ T7004] ? f2fs_sync_file+0xe9/0x160 [ 232.539359][ T7004] f2fs_file_write_iter+0x78e/0x2340 [ 232.539416][ T7004] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 232.539439][ T7004] ? rcu_read_lock_any_held+0xb3/0x120 [ 232.539487][ T7004] vfs_write+0x54b/0xa90 [ 232.539519][ T7004] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 232.539547][ T7004] ? __pfx_vfs_write+0x10/0x10 [ 232.539585][ T7004] ? __fget_files+0x2a/0x420 [ 232.539630][ T7004] ksys_write+0x145/0x250 [ 232.539658][ T7004] ? __pfx_ksys_write+0x10/0x10 [ 232.539680][ T7004] ? rcu_is_watching+0x15/0xb0 [ 232.539710][ T7004] ? do_syscall_64+0xbe/0x3b0 [ 232.539753][ T7004] do_syscall_64+0xfa/0x3b0 [ 232.539794][ T7004] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.539828][ T7004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.539852][ T7004] ? clear_bhb_loop+0x60/0xb0 [ 232.539882][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.539905][ T7004] RIP: 0033:0x7f537f58e969 [ 232.539929][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.539950][ T7004] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.539975][ T7004] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 232.539993][ T7004] RDX: 000000000000000b RSI: 0000200000000180 RDI: 0000000000000009 [ 232.540008][ T7004] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 232.540024][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.540038][ T7004] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 232.540077][ T7004] [ 232.540087][ T7004] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 232.841867][ T5923] usb 3-1: device descriptor read/64, error -71 [ 232.842057][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.0.276 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 232.842090][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.842106][ T7004] Call Trace: [ 232.842116][ T7004] [ 232.842127][ T7004] dump_stack_lvl+0x189/0x250 [ 232.842160][ T7004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.842182][ T7004] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 232.842216][ T7004] ? __pfx_queue_work_on+0x10/0x10 [ 232.842241][ T7004] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 232.842275][ T7004] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 232.842310][ T7004] ? f2fs_hw_is_readonly+0x39b/0x470 [ 232.842350][ T7004] f2fs_handle_critical_error+0x37c/0x540 [ 232.842392][ T7004] f2fs_write_end_io+0x495/0x810 [ 232.842451][ T7004] __submit_merged_bio+0x27a/0x6a0 [ 232.842480][ T7004] ? up_write+0x1c4/0x420 [ 232.842514][ T7004] __submit_merged_write_cond+0x44c/0x530 [ 232.842556][ T7004] f2fs_sync_node_pages+0x1871/0x1a10 [ 232.842617][ T7004] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 232.842685][ T7004] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 232.842728][ T7004] ? up_write+0x1c4/0x420 [ 232.842751][ T7004] ? do_raw_spin_unlock+0x122/0x240 [ 232.842785][ T7004] f2fs_write_checkpoint+0xe5f/0x1de0 [ 232.842855][ T7004] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 232.842948][ T7004] ? __pfx_down_write+0x10/0x10 [ 232.842994][ T7004] f2fs_issue_checkpoint+0x3ac/0x570 [ 232.843038][ T7004] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 232.843082][ T7004] ? __lock_acquire+0xab9/0xd20 [ 232.843136][ T7004] ? __up_read+0x280/0x680 [ 232.843174][ T7004] ? f2fs_sync_fs+0x200/0x3d0 [ 232.843208][ T7004] f2fs_do_sync_file+0x86a/0x1860 [ 232.843261][ T7004] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 232.843355][ T7004] ? f2fs_file_write_iter+0x4dd/0x2340 [ 232.843387][ T7004] ? vfs_fsync_range+0x12c/0x1c0 [ 232.843417][ T7004] ? f2fs_sync_file+0xe9/0x160 [ 232.843462][ T7004] f2fs_file_write_iter+0x78e/0x2340 [ 232.843521][ T7004] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 232.843544][ T7004] ? rcu_read_lock_any_held+0xb3/0x120 [ 232.843591][ T7004] vfs_write+0x54b/0xa90 [ 232.843623][ T7004] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 232.843651][ T7004] ? __pfx_vfs_write+0x10/0x10 [ 232.843689][ T7004] ? __fget_files+0x2a/0x420 [ 232.843730][ T7004] ksys_write+0x145/0x250 [ 232.843752][ T7004] ? __pfx_ksys_write+0x10/0x10 [ 232.843773][ T7004] ? rcu_is_watching+0x15/0xb0 [ 232.843803][ T7004] ? do_syscall_64+0xbe/0x3b0 [ 232.843846][ T7004] do_syscall_64+0xfa/0x3b0 [ 232.843881][ T7004] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.843915][ T7004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.843941][ T7004] ? clear_bhb_loop+0x60/0xb0 [ 232.843977][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.844001][ T7004] RIP: 0033:0x7f537f58e969 [ 232.844024][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.844046][ T7004] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.844072][ T7004] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 232.844091][ T7004] RDX: 000000000000000b RSI: 0000200000000180 RDI: 0000000000000009 [ 232.844106][ T7004] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 232.844121][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.844136][ T7004] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 232.844175][ T7004] [ 232.844185][ T7004] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 233.059369][ T7011] loop3: detected capacity change from 0 to 32768 [ 233.066107][ T43] usb 2-1: USB disconnect, device number 8 [ 233.181728][ T5923] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 233.501660][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.675597][ T7037] loop4: detected capacity change from 0 to 8 [ 233.701490][ T7037] SQUASHFS error: Unable to read inode 0x2 [ 233.979182][ T5834] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 234.015101][ T5834] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 234.051992][ T5923] usb 3-1: device descriptor read/64, error -71 [ 234.060204][ T7031] loop1: detected capacity change from 0 to 2048 [ 234.173447][ T5923] usb usb3-port1: attempt power cycle [ 234.531671][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.696526][ T7043] loop3: detected capacity change from 0 to 40427 [ 234.854028][ T7043] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 234.877039][ T7042] syz.3.286: attempt to access beyond end of device [ 234.877039][ T7042] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 234.891161][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.3.286 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 234.891191][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.891205][ T7042] Call Trace: [ 234.891214][ T7042] [ 234.891224][ T7042] dump_stack_lvl+0x189/0x250 [ 234.891255][ T7042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.891274][ T7042] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 234.891306][ T7042] ? __pfx_queue_work_on+0x10/0x10 [ 234.891329][ T7042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 234.891360][ T7042] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 234.891392][ T7042] ? f2fs_hw_is_readonly+0x39b/0x470 [ 234.891428][ T7042] f2fs_handle_critical_error+0x37c/0x540 [ 234.891467][ T7042] f2fs_write_end_io+0x495/0x810 [ 234.891498][ T7042] ? blkg_put+0x22/0x240 [ 234.891540][ T7042] __submit_merged_bio+0x27a/0x6a0 [ 234.891572][ T7042] ? up_write+0x1c4/0x420 [ 234.891601][ T7042] __submit_merged_write_cond+0x44c/0x530 [ 234.891638][ T7042] f2fs_sync_node_pages+0x1871/0x1a10 [ 234.891693][ T7042] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 234.891756][ T7042] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 234.891794][ T7042] ? up_write+0x1c4/0x420 [ 234.891824][ T7042] ? do_raw_spin_unlock+0x122/0x240 [ 234.891867][ T7042] f2fs_write_checkpoint+0xe5f/0x1de0 [ 234.891933][ T7042] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 234.892020][ T7042] ? __pfx_down_write+0x10/0x10 [ 234.892056][ T7042] f2fs_issue_checkpoint+0x3ac/0x570 [ 234.892096][ T7042] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 234.892135][ T7042] ? __lock_acquire+0xab9/0xd20 [ 234.892184][ T7042] ? __up_read+0x280/0x680 [ 234.892219][ T7042] ? f2fs_sync_fs+0x200/0x3d0 [ 234.892250][ T7042] f2fs_do_sync_file+0x86a/0x1860 [ 234.892296][ T7042] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 234.892384][ T7042] ? f2fs_file_write_iter+0x4dd/0x2340 [ 234.892412][ T7042] ? vfs_fsync_range+0x12c/0x1c0 [ 234.892440][ T7042] ? f2fs_sync_file+0xe9/0x160 [ 234.892494][ T7042] f2fs_file_write_iter+0x78e/0x2340 [ 234.892548][ T7042] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 234.892569][ T7042] ? rcu_read_lock_any_held+0xb3/0x120 [ 234.892614][ T7042] vfs_write+0x54b/0xa90 [ 234.892642][ T7042] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 234.892667][ T7042] ? __pfx_vfs_write+0x10/0x10 [ 234.892704][ T7042] ? __fget_files+0x2a/0x420 [ 234.892742][ T7042] ksys_write+0x145/0x250 [ 234.892768][ T7042] ? __pfx_ksys_write+0x10/0x10 [ 234.892798][ T7042] ? do_syscall_64+0xbe/0x3b0 [ 234.892842][ T7042] do_syscall_64+0xfa/0x3b0 [ 234.892873][ T7042] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.892903][ T7042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.892925][ T7042] ? clear_bhb_loop+0x60/0xb0 [ 234.892952][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.892974][ T7042] RIP: 0033:0x7fb65a78e969 [ 234.892994][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.893014][ T7042] RSP: 002b:00007fb65b5b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.893037][ T7042] RAX: ffffffffffffffda RBX: 00007fb65a9b5fa0 RCX: 00007fb65a78e969 [ 234.893054][ T7042] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 234.893068][ T7042] RBP: 00007fb65a810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 234.893081][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.893094][ T7042] R13: 0000000000000000 R14: 00007fb65a9b5fa0 R15: 00007ffe85bab048 [ 234.893131][ T7042] [ 235.234988][ T7042] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 235.243236][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.3.286 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 235.243267][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.243280][ T7042] Call Trace: [ 235.243289][ T7042] [ 235.243299][ T7042] dump_stack_lvl+0x189/0x250 [ 235.243330][ T7042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.243349][ T7042] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 235.243381][ T7042] ? __pfx_queue_work_on+0x10/0x10 [ 235.243405][ T7042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 235.243435][ T7042] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 235.243467][ T7042] ? f2fs_hw_is_readonly+0x39b/0x470 [ 235.243503][ T7042] f2fs_handle_critical_error+0x37c/0x540 [ 235.243551][ T7042] f2fs_write_end_io+0x495/0x810 [ 235.243605][ T7042] __submit_merged_bio+0x27a/0x6a0 [ 235.243632][ T7042] ? up_write+0x1c4/0x420 [ 235.243662][ T7042] __submit_merged_write_cond+0x44c/0x530 [ 235.243701][ T7042] f2fs_sync_node_pages+0x1871/0x1a10 [ 235.243757][ T7042] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 235.243820][ T7042] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 235.243862][ T7042] ? up_write+0x1c4/0x420 [ 235.243882][ T7042] ? do_raw_spin_unlock+0x122/0x240 [ 235.243914][ T7042] f2fs_write_checkpoint+0xe5f/0x1de0 [ 235.243976][ T7042] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 235.244062][ T7042] ? __pfx_down_write+0x10/0x10 [ 235.244098][ T7042] f2fs_issue_checkpoint+0x3ac/0x570 [ 235.244137][ T7042] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 235.244179][ T7042] ? __lock_acquire+0xab9/0xd20 [ 235.244228][ T7042] ? __up_read+0x280/0x680 [ 235.244263][ T7042] ? f2fs_sync_fs+0x200/0x3d0 [ 235.244294][ T7042] f2fs_do_sync_file+0x86a/0x1860 [ 235.244342][ T7042] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 235.244430][ T7042] ? f2fs_file_write_iter+0x4dd/0x2340 [ 235.244460][ T7042] ? vfs_fsync_range+0x12c/0x1c0 [ 235.244497][ T7042] ? f2fs_sync_file+0xe9/0x160 [ 235.244534][ T7042] f2fs_file_write_iter+0x78e/0x2340 [ 235.244676][ T7042] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 235.244699][ T7042] ? rcu_read_lock_any_held+0xb3/0x120 [ 235.244745][ T7042] vfs_write+0x54b/0xa90 [ 235.244773][ T7042] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 235.244799][ T7042] ? __pfx_vfs_write+0x10/0x10 [ 235.244837][ T7042] ? __fget_files+0x2a/0x420 [ 235.244877][ T7042] ksys_write+0x145/0x250 [ 235.244904][ T7042] ? __pfx_ksys_write+0x10/0x10 [ 235.244935][ T7042] ? do_syscall_64+0xbe/0x3b0 [ 235.244977][ T7042] do_syscall_64+0xfa/0x3b0 [ 235.245009][ T7042] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.245039][ T7042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.245062][ T7042] ? clear_bhb_loop+0x60/0xb0 [ 235.245090][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.245111][ T7042] RIP: 0033:0x7fb65a78e969 [ 235.245131][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.245151][ T7042] RSP: 002b:00007fb65b5b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.245174][ T7042] RAX: ffffffffffffffda RBX: 00007fb65a9b5fa0 RCX: 00007fb65a78e969 [ 235.245190][ T7042] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 235.245211][ T7042] RBP: 00007fb65a810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 235.245225][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.245238][ T7042] R13: 0000000000000000 R14: 00007fb65a9b5fa0 R15: 00007ffe85bab048 [ 235.245276][ T7042] [ 235.245644][ T7042] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 235.573855][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.606864][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.3.286 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 235.606886][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.606897][ T7042] Call Trace: [ 235.606904][ T7042] [ 235.606911][ T7042] dump_stack_lvl+0x189/0x250 [ 235.606933][ T7042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.606946][ T7042] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 235.606969][ T7042] ? __pfx_queue_work_on+0x10/0x10 [ 235.606986][ T7042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 235.607007][ T7042] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 235.607030][ T7042] ? f2fs_hw_is_readonly+0x39b/0x470 [ 235.607056][ T7042] f2fs_handle_critical_error+0x37c/0x540 [ 235.607083][ T7042] f2fs_write_end_io+0x495/0x810 [ 235.607120][ T7042] __submit_merged_bio+0x27a/0x6a0 [ 235.607141][ T7042] ? up_write+0x1c4/0x420 [ 235.607162][ T7042] __submit_merged_write_cond+0x44c/0x530 [ 235.607188][ T7042] f2fs_sync_node_pages+0x1871/0x1a10 [ 235.607227][ T7042] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 235.607278][ T7042] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 235.607308][ T7042] ? up_write+0x1c4/0x420 [ 235.607322][ T7042] ? do_raw_spin_unlock+0x122/0x240 [ 235.607344][ T7042] f2fs_write_checkpoint+0xe5f/0x1de0 [ 235.607390][ T7042] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 235.607448][ T7042] ? __pfx_down_write+0x10/0x10 [ 235.607477][ T7042] f2fs_issue_checkpoint+0x3ac/0x570 [ 235.607506][ T7042] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 235.607535][ T7042] ? __lock_acquire+0xab9/0xd20 [ 235.607569][ T7042] ? __up_read+0x280/0x680 [ 235.607593][ T7042] ? f2fs_sync_fs+0x200/0x3d0 [ 235.607615][ T7042] f2fs_do_sync_file+0x86a/0x1860 [ 235.607648][ T7042] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 235.607708][ T7042] ? f2fs_file_write_iter+0x4dd/0x2340 [ 235.607728][ T7042] ? vfs_fsync_range+0x12c/0x1c0 [ 235.607748][ T7042] ? f2fs_sync_file+0xe9/0x160 [ 235.607775][ T7042] f2fs_file_write_iter+0x78e/0x2340 [ 235.607811][ T7042] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 235.607826][ T7042] ? rcu_read_lock_any_held+0xb3/0x120 [ 235.607857][ T7042] vfs_write+0x54b/0xa90 [ 235.607877][ T7042] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 235.607895][ T7042] ? __pfx_vfs_write+0x10/0x10 [ 235.607919][ T7042] ? __fget_files+0x2a/0x420 [ 235.607946][ T7042] ksys_write+0x145/0x250 [ 235.607964][ T7042] ? __pfx_ksys_write+0x10/0x10 [ 235.607985][ T7042] ? do_syscall_64+0xbe/0x3b0 [ 235.608013][ T7042] do_syscall_64+0xfa/0x3b0 [ 235.608036][ T7042] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.608059][ T7042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.608075][ T7042] ? clear_bhb_loop+0x60/0xb0 [ 235.608095][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.608110][ T7042] RIP: 0033:0x7fb65a78e969 [ 235.608125][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.608139][ T7042] RSP: 002b:00007fb65b5b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.608156][ T7042] RAX: ffffffffffffffda RBX: 00007fb65a9b5fa0 RCX: 00007fb65a78e969 [ 235.608168][ T7042] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 235.608178][ T7042] RBP: 00007fb65a810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 235.608187][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.608196][ T7042] R13: 0000000000000000 R14: 00007fb65a9b5fa0 R15: 00007ffe85bab048 [ 235.608221][ T7042] [ 235.608227][ T7042] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 235.981323][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.3.286 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 235.981355][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.981370][ T7042] Call Trace: [ 235.981379][ T7042] [ 235.981389][ T7042] dump_stack_lvl+0x189/0x250 [ 235.981422][ T7042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.981452][ T7042] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 235.981486][ T7042] ? __pfx_queue_work_on+0x10/0x10 [ 235.981511][ T7042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 235.981542][ T7042] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 235.981578][ T7042] ? f2fs_hw_is_readonly+0x39b/0x470 [ 235.981615][ T7042] f2fs_handle_critical_error+0x37c/0x540 [ 235.981653][ T7042] f2fs_write_end_io+0x495/0x810 [ 235.981708][ T7042] __submit_merged_bio+0x27a/0x6a0 [ 235.981736][ T7042] ? up_write+0x1c4/0x420 [ 235.981767][ T7042] __submit_merged_write_cond+0x44c/0x530 [ 235.981807][ T7042] f2fs_sync_node_pages+0x1871/0x1a10 [ 235.981870][ T7042] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 235.981938][ T7042] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 235.981980][ T7042] ? up_write+0x1c4/0x420 [ 235.982000][ T7042] ? do_raw_spin_unlock+0x122/0x240 [ 235.982034][ T7042] f2fs_write_checkpoint+0xe5f/0x1de0 [ 235.982105][ T7042] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 235.982201][ T7042] ? __pfx_down_write+0x10/0x10 [ 235.982243][ T7042] f2fs_issue_checkpoint+0x3ac/0x570 [ 235.982286][ T7042] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 235.982329][ T7042] ? __lock_acquire+0xab9/0xd20 [ 235.982384][ T7042] ? __up_read+0x280/0x680 [ 235.982421][ T7042] ? f2fs_sync_fs+0x200/0x3d0 [ 235.982465][ T7042] f2fs_do_sync_file+0x86a/0x1860 [ 235.982517][ T7042] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 235.982616][ T7042] ? f2fs_file_write_iter+0x4dd/0x2340 [ 235.982648][ T7042] ? vfs_fsync_range+0x12c/0x1c0 [ 235.982677][ T7042] ? f2fs_sync_file+0xe9/0x160 [ 235.982717][ T7042] f2fs_file_write_iter+0x78e/0x2340 [ 235.982777][ T7042] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 235.982799][ T7042] ? rcu_read_lock_any_held+0xb3/0x120 [ 235.982849][ T7042] vfs_write+0x54b/0xa90 [ 235.982881][ T7042] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 235.982907][ T7042] ? __pfx_vfs_write+0x10/0x10 [ 235.982948][ T7042] ? __fget_files+0x2a/0x420 [ 235.982991][ T7042] ksys_write+0x145/0x250 [ 235.983019][ T7042] ? __pfx_ksys_write+0x10/0x10 [ 235.983050][ T7042] ? do_syscall_64+0xbe/0x3b0 [ 235.983092][ T7042] do_syscall_64+0xfa/0x3b0 [ 235.983124][ T7042] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.983156][ T7042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.983178][ T7042] ? clear_bhb_loop+0x60/0xb0 [ 235.983206][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.983227][ T7042] RIP: 0033:0x7fb65a78e969 [ 235.983247][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.983266][ T7042] RSP: 002b:00007fb65b5b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.983289][ T7042] RAX: ffffffffffffffda RBX: 00007fb65a9b5fa0 RCX: 00007fb65a78e969 [ 235.983306][ T7042] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 235.983319][ T7042] RBP: 00007fb65a810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 235.983332][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.983346][ T7042] R13: 0000000000000000 R14: 00007fb65a9b5fa0 R15: 00007ffe85bab048 [ 235.983386][ T7042] [ 236.041788][ T5923] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 236.046859][ T7042] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 236.344187][ T7031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.406159][ T7031] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.418544][ T5923] usb 3-1: device descriptor read/8, error -71 [ 236.577370][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.612447][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.204635][ T5962] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.651657][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.706683][ T5962] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.084517][ T5962] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.388344][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.581917][ T5923] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 238.607753][ T5962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.691660][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.850062][ T5923] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 238.873199][ T5923] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 238.907622][ T5923] usb 1-1: config 0 has no interface number 0 [ 239.002165][ T5923] usb 1-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=17.08 [ 239.031964][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.052160][ T5923] usb 1-1: Product: syz [ 239.056467][ T5923] usb 1-1: Manufacturer: syz [ 239.061106][ T5923] usb 1-1: SerialNumber: syz [ 239.161699][ T5923] usb 1-1: config 0 descriptor?? [ 239.304239][ T7074] devtmpfs: Too few inodes for current use [ 239.731649][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.457522][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.459168][ T7077] loop2: detected capacity change from 0 to 256 [ 240.648400][ T5962] bridge_slave_1: left allmulticast mode [ 240.661723][ T7077] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 240.694926][ T5962] bridge_slave_1: left promiscuous mode [ 240.723378][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.771678][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.840648][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.852555][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.876160][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.884243][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.893750][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.968953][ T5962] bridge_slave_0: left allmulticast mode [ 240.981509][ T5962] bridge_slave_0: left promiscuous mode [ 240.991219][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.594911][ T7086] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 241.608835][ T7086] FAT-fs (loop2): Filesystem has been set read-only [ 241.675214][ T5893] usb 1-1: USB disconnect, device number 11 [ 241.703506][ T7086] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 241.811648][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.546769][ T7093] loop0: detected capacity change from 0 to 40427 [ 242.749663][ T7093] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 242.770946][ T7092] syz.0.298: attempt to access beyond end of device [ 242.770946][ T7092] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 242.785321][ T7092] CPU: 1 UID: 0 PID: 7092 Comm: syz.0.298 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 242.785341][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.785358][ T7092] Call Trace: [ 242.785364][ T7092] [ 242.785370][ T7092] dump_stack_lvl+0x189/0x250 [ 242.785392][ T7092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.785406][ T7092] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 242.785428][ T7092] ? __pfx_queue_work_on+0x10/0x10 [ 242.785444][ T7092] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 242.785465][ T7092] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 242.785488][ T7092] ? f2fs_hw_is_readonly+0x39b/0x470 [ 242.785513][ T7092] f2fs_handle_critical_error+0x37c/0x540 [ 242.785546][ T7092] f2fs_write_end_io+0x495/0x810 [ 242.785576][ T7092] ? blkg_put+0x22/0x240 [ 242.785610][ T7092] __submit_merged_bio+0x27a/0x6a0 [ 242.785634][ T7092] ? up_write+0x1c4/0x420 [ 242.785659][ T7092] __submit_merged_write_cond+0x44c/0x530 [ 242.785690][ T7092] f2fs_sync_node_pages+0x1871/0x1a10 [ 242.785736][ T7092] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 242.785787][ T7092] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 242.785822][ T7092] ? up_write+0x1c4/0x420 [ 242.785846][ T7092] ? do_raw_spin_unlock+0x122/0x240 [ 242.785874][ T7092] f2fs_write_checkpoint+0xe5f/0x1de0 [ 242.785925][ T7092] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 242.785993][ T7092] ? __pfx_down_write+0x10/0x10 [ 242.786022][ T7092] f2fs_issue_checkpoint+0x3ac/0x570 [ 242.786057][ T7092] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 242.786095][ T7092] ? __lock_acquire+0xab9/0xd20 [ 242.786136][ T7092] ? __up_read+0x280/0x680 [ 242.786165][ T7092] ? f2fs_sync_fs+0x200/0x3d0 [ 242.786192][ T7092] f2fs_do_sync_file+0x86a/0x1860 [ 242.786232][ T7092] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 242.786301][ T7092] ? f2fs_file_write_iter+0x4dd/0x2340 [ 242.786327][ T7092] ? vfs_fsync_range+0x12c/0x1c0 [ 242.786351][ T7092] ? f2fs_sync_file+0xe9/0x160 [ 242.786385][ T7092] f2fs_file_write_iter+0x78e/0x2340 [ 242.786423][ T7092] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 242.786438][ T7092] ? rcu_read_lock_any_held+0xb3/0x120 [ 242.786469][ T7092] vfs_write+0x54b/0xa90 [ 242.786488][ T7092] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 242.786506][ T7092] ? __pfx_vfs_write+0x10/0x10 [ 242.786531][ T7092] ? __fget_files+0x2a/0x420 [ 242.786558][ T7092] ksys_write+0x145/0x250 [ 242.786576][ T7092] ? __pfx_ksys_write+0x10/0x10 [ 242.786596][ T7092] ? do_syscall_64+0xbe/0x3b0 [ 242.786623][ T7092] do_syscall_64+0xfa/0x3b0 [ 242.786646][ T7092] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.786668][ T7092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.786683][ T7092] ? clear_bhb_loop+0x60/0xb0 [ 242.786702][ T7092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.786717][ T7092] RIP: 0033:0x7f537f58e969 [ 242.786732][ T7092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.786746][ T7092] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.786762][ T7092] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 242.786774][ T7092] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 242.786783][ T7092] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 242.786792][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.786801][ T7092] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 242.786826][ T7092] [ 242.786833][ T7092] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 242.854141][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.951799][ T5847] Bluetooth: hci1: command tx timeout [ 242.953249][ T7092] CPU: 1 UID: 0 PID: 7092 Comm: syz.0.298 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 242.953274][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.953286][ T7092] Call Trace: [ 242.953294][ T7092] [ 242.953303][ T7092] dump_stack_lvl+0x189/0x250 [ 242.953330][ T7092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.953346][ T7092] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 242.953374][ T7092] ? __pfx_queue_work_on+0x10/0x10 [ 242.953399][ T7092] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 242.953433][ T7092] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 242.953470][ T7092] ? f2fs_hw_is_readonly+0x39b/0x470 [ 242.953511][ T7092] f2fs_handle_critical_error+0x37c/0x540 [ 242.953553][ T7092] f2fs_write_end_io+0x495/0x810 [ 242.953613][ T7092] __submit_merged_bio+0x27a/0x6a0 [ 242.953643][ T7092] ? up_write+0x1c4/0x420 [ 242.953675][ T7092] __submit_merged_write_cond+0x44c/0x530 [ 242.953716][ T7092] f2fs_sync_node_pages+0x1871/0x1a10 [ 242.953780][ T7092] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 242.953857][ T7092] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 242.953902][ T7092] ? up_write+0x1c4/0x420 [ 242.953925][ T7092] ? do_raw_spin_unlock+0x122/0x240 [ 242.953959][ T7092] f2fs_write_checkpoint+0xe5f/0x1de0 [ 242.954030][ T7092] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 242.954123][ T7092] ? __pfx_down_write+0x10/0x10 [ 242.954162][ T7092] f2fs_issue_checkpoint+0x3ac/0x570 [ 242.954205][ T7092] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 242.954249][ T7092] ? __lock_acquire+0xab9/0xd20 [ 242.954303][ T7092] ? __up_read+0x280/0x680 [ 242.954340][ T7092] ? f2fs_sync_fs+0x200/0x3d0 [ 242.954374][ T7092] f2fs_do_sync_file+0x86a/0x1860 [ 242.954426][ T7092] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 242.954520][ T7092] ? f2fs_file_write_iter+0x4dd/0x2340 [ 242.954553][ T7092] ? vfs_fsync_range+0x12c/0x1c0 [ 242.954583][ T7092] ? f2fs_sync_file+0xe9/0x160 [ 242.954625][ T7092] f2fs_file_write_iter+0x78e/0x2340 [ 242.954682][ T7092] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 242.954705][ T7092] ? rcu_read_lock_any_held+0xb3/0x120 [ 242.954753][ T7092] vfs_write+0x54b/0xa90 [ 242.954785][ T7092] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 242.954821][ T7092] ? __pfx_vfs_write+0x10/0x10 [ 242.954862][ T7092] ? __fget_files+0x2a/0x420 [ 242.954906][ T7092] ksys_write+0x145/0x250 [ 242.954936][ T7092] ? __pfx_ksys_write+0x10/0x10 [ 242.954968][ T7092] ? do_syscall_64+0xbe/0x3b0 [ 242.955010][ T7092] do_syscall_64+0xfa/0x3b0 [ 242.955044][ T7092] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.955077][ T7092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.955101][ T7092] ? clear_bhb_loop+0x60/0xb0 [ 242.955132][ T7092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.955156][ T7092] RIP: 0033:0x7f537f58e969 [ 242.955180][ T7092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.955200][ T7092] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.955225][ T7092] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 242.955242][ T7092] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 242.955259][ T7092] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 242.955274][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.955288][ T7092] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 242.955328][ T7092] [ 242.955339][ T7092] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 243.501084][ T7092] CPU: 1 UID: 0 PID: 7092 Comm: syz.0.298 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 243.501112][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.501125][ T7092] Call Trace: [ 243.501134][ T7092] [ 243.501146][ T7092] dump_stack_lvl+0x189/0x250 [ 243.501170][ T7092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.501183][ T7092] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 243.501206][ T7092] ? __pfx_queue_work_on+0x10/0x10 [ 243.501223][ T7092] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 243.501244][ T7092] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 243.501267][ T7092] ? f2fs_hw_is_readonly+0x39b/0x470 [ 243.501297][ T7092] f2fs_handle_critical_error+0x37c/0x540 [ 243.501327][ T7092] f2fs_write_end_io+0x495/0x810 [ 243.501375][ T7092] __submit_merged_bio+0x27a/0x6a0 [ 243.501399][ T7092] ? up_write+0x1c4/0x420 [ 243.501420][ T7092] __submit_merged_write_cond+0x44c/0x530 [ 243.501448][ T7092] f2fs_sync_node_pages+0x1871/0x1a10 [ 243.501487][ T7092] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 243.501532][ T7092] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 243.501570][ T7092] ? up_write+0x1c4/0x420 [ 243.501594][ T7092] ? do_raw_spin_unlock+0x122/0x240 [ 243.501624][ T7092] f2fs_write_checkpoint+0xe5f/0x1de0 [ 243.501687][ T7092] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 243.501768][ T7092] ? __pfx_down_write+0x10/0x10 [ 243.501805][ T7092] f2fs_issue_checkpoint+0x3ac/0x570 [ 243.501845][ T7092] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 243.501885][ T7092] ? __lock_acquire+0xab9/0xd20 [ 243.501934][ T7092] ? __up_read+0x280/0x680 [ 243.501965][ T7092] ? f2fs_sync_fs+0x200/0x3d0 [ 243.502012][ T7092] f2fs_do_sync_file+0x86a/0x1860 [ 243.502048][ T7092] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 243.502107][ T7092] ? f2fs_file_write_iter+0x4dd/0x2340 [ 243.502127][ T7092] ? vfs_fsync_range+0x12c/0x1c0 [ 243.502147][ T7092] ? f2fs_sync_file+0xe9/0x160 [ 243.502173][ T7092] f2fs_file_write_iter+0x78e/0x2340 [ 243.502210][ T7092] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 243.502224][ T7092] ? rcu_read_lock_any_held+0xb3/0x120 [ 243.502255][ T7092] vfs_write+0x54b/0xa90 [ 243.502275][ T7092] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 243.502292][ T7092] ? __pfx_vfs_write+0x10/0x10 [ 243.502317][ T7092] ? __fget_files+0x2a/0x420 [ 243.502343][ T7092] ksys_write+0x145/0x250 [ 243.502361][ T7092] ? __pfx_ksys_write+0x10/0x10 [ 243.502382][ T7092] ? do_syscall_64+0xbe/0x3b0 [ 243.502410][ T7092] do_syscall_64+0xfa/0x3b0 [ 243.502434][ T7092] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.502456][ T7092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.502472][ T7092] ? clear_bhb_loop+0x60/0xb0 [ 243.502492][ T7092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.502507][ T7092] RIP: 0033:0x7f537f58e969 [ 243.502523][ T7092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.502538][ T7092] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.502555][ T7092] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 243.502567][ T7092] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 243.502577][ T7092] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 243.502587][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.502596][ T7092] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 243.502622][ T7092] [ 243.869515][ T7092] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 243.876825][ T7092] CPU: 1 UID: 0 PID: 7092 Comm: syz.0.298 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 243.876855][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.876869][ T7092] Call Trace: [ 243.876878][ T7092] [ 243.876888][ T7092] dump_stack_lvl+0x189/0x250 [ 243.876918][ T7092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.876937][ T7092] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 243.876970][ T7092] ? __pfx_queue_work_on+0x10/0x10 [ 243.876994][ T7092] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 243.877026][ T7092] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 243.877060][ T7092] ? f2fs_hw_is_readonly+0x39b/0x470 [ 243.877099][ T7092] f2fs_handle_critical_error+0x37c/0x540 [ 243.877141][ T7092] f2fs_write_end_io+0x495/0x810 [ 243.877201][ T7092] __submit_merged_bio+0x27a/0x6a0 [ 243.877229][ T7092] ? up_write+0x1c4/0x420 [ 243.877262][ T7092] __submit_merged_write_cond+0x44c/0x530 [ 243.877303][ T7092] f2fs_sync_node_pages+0x1871/0x1a10 [ 243.877359][ T7092] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 243.877427][ T7092] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 243.877472][ T7092] ? up_write+0x1c4/0x420 [ 243.877491][ T7092] ? do_raw_spin_unlock+0x122/0x240 [ 243.877523][ T7092] f2fs_write_checkpoint+0xe5f/0x1de0 [ 243.877595][ T7092] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 243.877693][ T7092] ? __pfx_down_write+0x10/0x10 [ 243.877745][ T7092] f2fs_issue_checkpoint+0x3ac/0x570 [ 243.877787][ T7092] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 243.877829][ T7092] ? __lock_acquire+0xab9/0xd20 [ 243.877882][ T7092] ? __up_read+0x280/0x680 [ 243.877919][ T7092] ? f2fs_sync_fs+0x200/0x3d0 [ 243.877953][ T7092] f2fs_do_sync_file+0x86a/0x1860 [ 243.878005][ T7092] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 243.878104][ T7092] ? f2fs_file_write_iter+0x4dd/0x2340 [ 243.878137][ T7092] ? vfs_fsync_range+0x12c/0x1c0 [ 243.878165][ T7092] ? f2fs_sync_file+0xe9/0x160 [ 243.878204][ T7092] f2fs_file_write_iter+0x78e/0x2340 [ 243.878261][ T7092] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 243.878283][ T7092] ? rcu_read_lock_any_held+0xb3/0x120 [ 243.878328][ T7092] vfs_write+0x54b/0xa90 [ 243.878358][ T7092] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 243.878386][ T7092] ? __pfx_vfs_write+0x10/0x10 [ 243.878425][ T7092] ? __fget_files+0x2a/0x420 [ 243.878466][ T7092] ksys_write+0x145/0x250 [ 243.878493][ T7092] ? __pfx_ksys_write+0x10/0x10 [ 243.878525][ T7092] ? do_syscall_64+0xbe/0x3b0 [ 243.878564][ T7092] do_syscall_64+0xfa/0x3b0 [ 243.878597][ T7092] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.878629][ T7092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.878652][ T7092] ? clear_bhb_loop+0x60/0xb0 [ 243.878681][ T7092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.878712][ T7092] RIP: 0033:0x7f537f58e969 [ 243.878732][ T7092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.878752][ T7092] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.878775][ T7092] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 243.878792][ T7092] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 243.878806][ T7092] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 243.878820][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.878833][ T7092] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 243.878875][ T7092] [ 243.878885][ T7092] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 243.900228][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.931686][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.266938][ T5847] Bluetooth: hci1: command tx timeout [ 245.971811][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.523663][ T5893] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 246.733407][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 246.756640][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 246.804852][ T5893] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 246.840135][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 246.863835][ T5893] usb 3-1: Product: syz [ 246.868069][ T5893] usb 3-1: Manufacturer: syz [ 246.882147][ T5893] usb 3-1: SerialNumber: syz [ 246.906623][ T5893] usb 3-1: config 0 descriptor?? [ 246.928232][ T7116] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.011647][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.215184][ T7116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.227997][ T7116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.331232][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.332999][ T5847] Bluetooth: hci1: command tx timeout [ 247.339201][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.356486][ T5962] bond0 (unregistering): Released all slaves [ 247.521898][ T5933] usb 3-1: USB disconnect, device number 16 [ 247.904571][ T7139] loop3: detected capacity change from 0 to 64 [ 248.051781][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.091659][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.481084][ T7147] loop0: detected capacity change from 0 to 40427 [ 249.489127][ T5847] Bluetooth: hci1: command tx timeout [ 249.494792][ T5933] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 249.614553][ T7147] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 249.637871][ T7146] syz.0.309: attempt to access beyond end of device [ 249.637871][ T7146] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 249.652138][ T7146] CPU: 1 UID: 0 PID: 7146 Comm: syz.0.309 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 249.652168][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.652183][ T7146] Call Trace: [ 249.652192][ T7146] [ 249.652201][ T7146] dump_stack_lvl+0x189/0x250 [ 249.652233][ T7146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.652253][ T7146] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 249.652285][ T7146] ? __pfx_queue_work_on+0x10/0x10 [ 249.652308][ T7146] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 249.652339][ T7146] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.652372][ T7146] ? f2fs_hw_is_readonly+0x39b/0x470 [ 249.652409][ T7146] f2fs_handle_critical_error+0x37c/0x540 [ 249.652455][ T7146] f2fs_write_end_io+0x495/0x810 [ 249.652487][ T7146] ? blkg_put+0x22/0x240 [ 249.652528][ T7146] __submit_merged_bio+0x27a/0x6a0 [ 249.652555][ T7146] ? up_write+0x1c4/0x420 [ 249.652585][ T7146] __submit_merged_write_cond+0x44c/0x530 [ 249.652622][ T7146] f2fs_sync_node_pages+0x1871/0x1a10 [ 249.652679][ T7146] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 249.652742][ T7146] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 249.652783][ T7146] ? up_write+0x1c4/0x420 [ 249.652804][ T7146] ? do_raw_spin_unlock+0x122/0x240 [ 249.652835][ T7146] f2fs_write_checkpoint+0xe5f/0x1de0 [ 249.652898][ T7146] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 249.652984][ T7146] ? __pfx_down_write+0x10/0x10 [ 249.653020][ T7146] f2fs_issue_checkpoint+0x3ac/0x570 [ 249.653060][ T7146] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 249.653101][ T7146] ? __lock_acquire+0xab9/0xd20 [ 249.653148][ T7146] ? __up_read+0x280/0x680 [ 249.653183][ T7146] ? f2fs_sync_fs+0x200/0x3d0 [ 249.653215][ T7146] f2fs_do_sync_file+0x86a/0x1860 [ 249.653262][ T7146] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 249.653347][ T7146] ? f2fs_file_write_iter+0x4dd/0x2340 [ 249.653377][ T7146] ? vfs_fsync_range+0x12c/0x1c0 [ 249.653405][ T7146] ? f2fs_sync_file+0xe9/0x160 [ 249.653450][ T7146] f2fs_file_write_iter+0x78e/0x2340 [ 249.653503][ T7146] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 249.653524][ T7146] ? rcu_read_lock_any_held+0xb3/0x120 [ 249.653568][ T7146] vfs_write+0x54b/0xa90 [ 249.653598][ T7146] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 249.653624][ T7146] ? __pfx_vfs_write+0x10/0x10 [ 249.653660][ T7146] ? __fget_files+0x2a/0x420 [ 249.653699][ T7146] ksys_write+0x145/0x250 [ 249.653725][ T7146] ? __pfx_ksys_write+0x10/0x10 [ 249.653745][ T7146] ? rcu_is_watching+0x15/0xb0 [ 249.653772][ T7146] ? do_syscall_64+0xbe/0x3b0 [ 249.653810][ T7146] do_syscall_64+0xfa/0x3b0 [ 249.653842][ T7146] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.653873][ T7146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.653896][ T7146] ? clear_bhb_loop+0x60/0xb0 [ 249.653924][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.653945][ T7146] RIP: 0033:0x7f537f58e969 [ 249.653966][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.653986][ T7146] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.654010][ T7146] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 249.654026][ T7146] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 249.654040][ T7146] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 249.654054][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.654067][ T7146] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 249.654103][ T7146] [ 249.654113][ T7146] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 249.957657][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.023862][ T7146] CPU: 1 UID: 0 PID: 7146 Comm: syz.0.309 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 250.023898][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.023912][ T7146] Call Trace: [ 250.023922][ T7146] [ 250.023931][ T7146] dump_stack_lvl+0x189/0x250 [ 250.023968][ T7146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.023992][ T7146] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 250.024030][ T7146] ? __pfx_queue_work_on+0x10/0x10 [ 250.024060][ T7146] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 250.024101][ T7146] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.024139][ T7146] ? f2fs_hw_is_readonly+0x39b/0x470 [ 250.024176][ T7146] f2fs_handle_critical_error+0x37c/0x540 [ 250.024228][ T7146] f2fs_write_end_io+0x495/0x810 [ 250.024287][ T7146] __submit_merged_bio+0x27a/0x6a0 [ 250.024315][ T7146] ? up_write+0x1c4/0x420 [ 250.024345][ T7146] __submit_merged_write_cond+0x44c/0x530 [ 250.024384][ T7146] f2fs_sync_node_pages+0x1871/0x1a10 [ 250.024455][ T7146] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 250.024523][ T7146] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 250.024571][ T7146] ? up_write+0x1c4/0x420 [ 250.024592][ T7146] ? do_raw_spin_unlock+0x122/0x240 [ 250.024624][ T7146] f2fs_write_checkpoint+0xe5f/0x1de0 [ 250.024688][ T7146] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 250.024773][ T7146] ? __pfx_down_write+0x10/0x10 [ 250.024810][ T7146] f2fs_issue_checkpoint+0x3ac/0x570 [ 250.024850][ T7146] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 250.024891][ T7146] ? __lock_acquire+0xab9/0xd20 [ 250.024938][ T7146] ? __up_read+0x280/0x680 [ 250.024973][ T7146] ? f2fs_sync_fs+0x200/0x3d0 [ 250.025004][ T7146] f2fs_do_sync_file+0x86a/0x1860 [ 250.025051][ T7146] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 250.025138][ T7146] ? f2fs_file_write_iter+0x4dd/0x2340 [ 250.025168][ T7146] ? vfs_fsync_range+0x12c/0x1c0 [ 250.025196][ T7146] ? f2fs_sync_file+0xe9/0x160 [ 250.025239][ T7146] f2fs_file_write_iter+0x78e/0x2340 [ 250.025293][ T7146] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 250.025314][ T7146] ? rcu_read_lock_any_held+0xb3/0x120 [ 250.025358][ T7146] vfs_write+0x54b/0xa90 [ 250.025388][ T7146] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 250.025422][ T7146] ? __pfx_vfs_write+0x10/0x10 [ 250.025459][ T7146] ? __fget_files+0x2a/0x420 [ 250.025498][ T7146] ksys_write+0x145/0x250 [ 250.025524][ T7146] ? __pfx_ksys_write+0x10/0x10 [ 250.025544][ T7146] ? rcu_is_watching+0x15/0xb0 [ 250.025571][ T7146] ? do_syscall_64+0xbe/0x3b0 [ 250.025610][ T7146] do_syscall_64+0xfa/0x3b0 [ 250.025642][ T7146] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.025672][ T7146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.025695][ T7146] ? clear_bhb_loop+0x60/0xb0 [ 250.025723][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.025744][ T7146] RIP: 0033:0x7f537f58e969 [ 250.025765][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.025785][ T7146] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.025809][ T7146] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 250.025825][ T7146] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 250.025839][ T7146] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 250.025853][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.025866][ T7146] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 250.025904][ T7146] [ 250.025914][ T7146] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 250.136693][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.221959][ T7144] loop3: detected capacity change from 0 to 131072 [ 250.226191][ T7146] CPU: 1 UID: 0 PID: 7146 Comm: syz.0.309 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 250.226225][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.226240][ T7146] Call Trace: [ 250.226250][ T7146] [ 250.226261][ T7146] dump_stack_lvl+0x189/0x250 [ 250.226294][ T7146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.226315][ T7146] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 250.226349][ T7146] ? __pfx_queue_work_on+0x10/0x10 [ 250.226382][ T7146] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 250.226415][ T7146] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.226451][ T7146] ? f2fs_hw_is_readonly+0x39b/0x470 [ 250.226490][ T7146] f2fs_handle_critical_error+0x37c/0x540 [ 250.226531][ T7146] f2fs_write_end_io+0x495/0x810 [ 250.226590][ T7146] __submit_merged_bio+0x27a/0x6a0 [ 250.226620][ T7146] ? up_write+0x1c4/0x420 [ 250.226653][ T7146] __submit_merged_write_cond+0x44c/0x530 [ 250.226703][ T7146] f2fs_sync_node_pages+0x1871/0x1a10 [ 250.226772][ T7146] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 250.226846][ T7146] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 250.226891][ T7146] ? up_write+0x1c4/0x420 [ 250.226913][ T7146] ? do_raw_spin_unlock+0x122/0x240 [ 250.226961][ T7146] f2fs_write_checkpoint+0xe5f/0x1de0 [ 250.227056][ T7146] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 250.227168][ T7146] ? __pfx_down_write+0x10/0x10 [ 250.227217][ T7146] f2fs_issue_checkpoint+0x3ac/0x570 [ 250.227279][ T7146] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 250.227329][ T7146] ? __lock_acquire+0xab9/0xd20 [ 250.227397][ T7146] ? __up_read+0x280/0x680 [ 250.227435][ T7146] ? f2fs_sync_fs+0x200/0x3d0 [ 250.227469][ T7146] f2fs_do_sync_file+0x86a/0x1860 [ 250.227522][ T7146] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 250.227618][ T7146] ? f2fs_file_write_iter+0x4dd/0x2340 [ 250.227652][ T7146] ? vfs_fsync_range+0x12c/0x1c0 [ 250.227682][ T7146] ? f2fs_sync_file+0xe9/0x160 [ 250.227725][ T7146] f2fs_file_write_iter+0x78e/0x2340 [ 250.227782][ T7146] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 250.227805][ T7146] ? rcu_read_lock_any_held+0xb3/0x120 [ 250.227853][ T7146] vfs_write+0x54b/0xa90 [ 250.227884][ T7146] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 250.227912][ T7146] ? __pfx_vfs_write+0x10/0x10 [ 250.227951][ T7146] ? __fget_files+0x2a/0x420 [ 250.227994][ T7146] ksys_write+0x145/0x250 [ 250.228023][ T7146] ? __pfx_ksys_write+0x10/0x10 [ 250.228045][ T7146] ? rcu_is_watching+0x15/0xb0 [ 250.228074][ T7146] ? do_syscall_64+0xbe/0x3b0 [ 250.228117][ T7146] do_syscall_64+0xfa/0x3b0 [ 250.228152][ T7146] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.228185][ T7146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.228212][ T7146] ? clear_bhb_loop+0x60/0xb0 [ 250.228241][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.228266][ T7146] RIP: 0033:0x7f537f58e969 [ 250.228287][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.228309][ T7146] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.228334][ T7146] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 250.228353][ T7146] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 250.228368][ T7146] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 250.228389][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.228403][ T7146] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 250.228442][ T7146] [ 250.228452][ T7146] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 250.257542][ T7144] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 250.260814][ T7146] CPU: 1 UID: 0 PID: 7146 Comm: syz.0.309 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 250.260849][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.260865][ T7146] Call Trace: [ 250.260878][ T7146] [ 250.260888][ T7146] dump_stack_lvl+0x189/0x250 [ 250.260946][ T7146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.260966][ T7146] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 250.261001][ T7146] ? __pfx_queue_work_on+0x10/0x10 [ 250.261027][ T7146] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 250.261060][ T7146] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.261097][ T7146] ? f2fs_hw_is_readonly+0x39b/0x470 [ 250.261134][ T7146] f2fs_handle_critical_error+0x37c/0x540 [ 250.261177][ T7146] f2fs_write_end_io+0x495/0x810 [ 250.261236][ T7146] __submit_merged_bio+0x27a/0x6a0 [ 250.261266][ T7146] ? up_write+0x1c4/0x420 [ 250.261299][ T7146] __submit_merged_write_cond+0x44c/0x530 [ 250.261340][ T7146] f2fs_sync_node_pages+0x1871/0x1a10 [ 250.261409][ T7146] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 250.261478][ T7146] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 250.261523][ T7146] ? up_write+0x1c4/0x420 [ 250.261545][ T7146] ? do_raw_spin_unlock+0x122/0x240 [ 250.261584][ T7146] f2fs_write_checkpoint+0xe5f/0x1de0 [ 250.261654][ T7146] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 250.261747][ T7146] ? __pfx_down_write+0x10/0x10 [ 250.261787][ T7146] f2fs_issue_checkpoint+0x3ac/0x570 [ 250.261831][ T7146] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 250.261877][ T7146] ? __lock_acquire+0xab9/0xd20 [ 250.261930][ T7146] ? __up_read+0x280/0x680 [ 250.261969][ T7146] ? f2fs_sync_fs+0x200/0x3d0 [ 250.262004][ T7146] f2fs_do_sync_file+0x86a/0x1860 [ 250.262057][ T7146] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 250.262149][ T7146] ? f2fs_file_write_iter+0x4dd/0x2340 [ 250.262183][ T7146] ? vfs_fsync_range+0x12c/0x1c0 [ 250.262214][ T7146] ? f2fs_sync_file+0xe9/0x160 [ 250.262255][ T7146] f2fs_file_write_iter+0x78e/0x2340 [ 250.262313][ T7146] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 250.262336][ T7146] ? rcu_read_lock_any_held+0xb3/0x120 [ 250.262391][ T7146] vfs_write+0x54b/0xa90 [ 250.262424][ T7146] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 250.262452][ T7146] ? __pfx_vfs_write+0x10/0x10 [ 250.262491][ T7146] ? __fget_files+0x2a/0x420 [ 250.262534][ T7146] ksys_write+0x145/0x250 [ 250.262563][ T7146] ? __pfx_ksys_write+0x10/0x10 [ 250.262584][ T7146] ? rcu_is_watching+0x15/0xb0 [ 250.262614][ T7146] ? do_syscall_64+0xbe/0x3b0 [ 250.262657][ T7146] do_syscall_64+0xfa/0x3b0 [ 250.262694][ T7146] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.262729][ T7146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.262756][ T7146] ? clear_bhb_loop+0x60/0xb0 [ 250.262786][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.262810][ T7146] RIP: 0033:0x7f537f58e969 [ 250.262834][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.262854][ T7146] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.262880][ T7146] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 250.262899][ T7146] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 250.262914][ T7146] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 250.262929][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.262943][ T7146] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 250.262983][ T7146] [ 250.263110][ T7146] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 250.265376][ T7144] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 250.457742][ T5933] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 250.475414][ T7144] F2FS-fs (loop3): invalid crc value [ 250.581969][ T5933] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 250.906342][ T7144] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 250.912113][ T5933] usb 2-1: config 0 has no interface number 0 [ 250.915305][ T7144] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 250.993583][ T5933] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=17.08 [ 251.062357][ T30] audit: type=1800 audit(1749010771.805:21): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.308" name="file2" dev="loop3" ino=8 res=0 errno=0 [ 251.072519][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.073748][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.175721][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.211646][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.854246][ T5933] usb 2-1: Product: syz [ 252.858613][ T5933] usb 2-1: Manufacturer: syz [ 252.868406][ T5933] usb 2-1: SerialNumber: syz [ 253.251647][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.288791][ T5933] usb 2-1: config 0 descriptor?? [ 253.298989][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 253.322085][ T7162] loop2: detected capacity change from 0 to 256 [ 253.442144][ T5933] usb 2-1: can't set config #0, error -32 [ 253.540768][ T5933] usb 2-1: USB disconnect, device number 9 [ 253.608740][ T30] audit: type=1804 audit(1749010774.335:22): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.311" name="/newroot/72/file1/file0" dev="loop2" ino=1048617 res=1 errno=0 [ 254.158592][ T7166] loop1: detected capacity change from 0 to 256 [ 254.174840][ T7082] chnl_net:caif_netlink_parms(): no params data found [ 254.207938][ T7166] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.252353][ T7179] loop2: detected capacity change from 0 to 512 [ 254.260201][ T7179] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.291976][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.302359][ T7179] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 254.412745][ T7179] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 254.421876][ T5962] hsr_slave_0: left promiscuous mode [ 254.472071][ T5962] hsr_slave_1: left promiscuous mode [ 254.491167][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.495718][ T7179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 254.523042][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.561040][ T7179] System zones: 1-12 [ 254.573122][ T7167] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 254.580699][ T7167] FAT-fs (loop1): Filesystem has been set read-only [ 254.591514][ T7167] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 254.607110][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.621795][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.909743][ T7179] EXT4-fs (loop2): 1 truncate cleaned up [ 255.076621][ T5962] veth1_macvtap: left promiscuous mode [ 255.122839][ T7179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.148743][ T5962] veth0_macvtap: left promiscuous mode [ 255.174817][ T5962] veth1_vlan: left promiscuous mode [ 255.180360][ T5962] veth0_vlan: left promiscuous mode [ 255.331662][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.816424][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816731][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.850851][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.371653][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.411664][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.451642][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.735396][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 258.804553][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 259.491655][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.843694][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.433065][ T7219] loop0: detected capacity change from 0 to 40427 [ 260.531656][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.571750][ T7219] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.591795][ T7218] syz.0.319: attempt to access beyond end of device [ 260.591795][ T7218] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 260.605779][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.319 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 260.605809][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.605823][ T7218] Call Trace: [ 260.605832][ T7218] [ 260.605842][ T7218] dump_stack_lvl+0x189/0x250 [ 260.605873][ T7218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.605893][ T7218] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 260.605924][ T7218] ? __pfx_queue_work_on+0x10/0x10 [ 260.605949][ T7218] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 260.605978][ T7218] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 260.606010][ T7218] ? f2fs_hw_is_readonly+0x39b/0x470 [ 260.606046][ T7218] f2fs_handle_critical_error+0x37c/0x540 [ 260.606084][ T7218] f2fs_write_end_io+0x495/0x810 [ 260.606115][ T7218] ? blkg_put+0x22/0x240 [ 260.606164][ T7218] __submit_merged_bio+0x27a/0x6a0 [ 260.606193][ T7218] ? up_write+0x1c4/0x420 [ 260.606222][ T7218] __submit_merged_write_cond+0x44c/0x530 [ 260.606261][ T7218] f2fs_sync_node_pages+0x1871/0x1a10 [ 260.606319][ T7218] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 260.606381][ T7218] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 260.606422][ T7218] ? up_write+0x1c4/0x420 [ 260.606442][ T7218] ? do_raw_spin_unlock+0x122/0x240 [ 260.606474][ T7218] f2fs_write_checkpoint+0xe5f/0x1de0 [ 260.606538][ T7218] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 260.606622][ T7218] ? __pfx_down_write+0x10/0x10 [ 260.606658][ T7218] f2fs_issue_checkpoint+0x3ac/0x570 [ 260.606698][ T7218] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 260.606738][ T7218] ? __lock_acquire+0xab9/0xd20 [ 260.606787][ T7218] ? __up_read+0x280/0x680 [ 260.606822][ T7218] ? f2fs_sync_fs+0x200/0x3d0 [ 260.606853][ T7218] f2fs_do_sync_file+0x86a/0x1860 [ 260.606899][ T7218] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 260.606986][ T7218] ? f2fs_file_write_iter+0x4dd/0x2340 [ 260.607016][ T7218] ? vfs_fsync_range+0x12c/0x1c0 [ 260.607043][ T7218] ? f2fs_sync_file+0xe9/0x160 [ 260.607082][ T7218] f2fs_file_write_iter+0x78e/0x2340 [ 260.607142][ T7218] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 260.607164][ T7218] ? rcu_read_lock_any_held+0xb3/0x120 [ 260.607210][ T7218] vfs_write+0x54b/0xa90 [ 260.607239][ T7218] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 260.607264][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 260.607300][ T7218] ? __fget_files+0x2a/0x420 [ 260.607335][ T7218] ksys_write+0x145/0x250 [ 260.607361][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 260.607476][ T7218] ? do_syscall_64+0xbe/0x3b0 [ 260.607523][ T7218] do_syscall_64+0xfa/0x3b0 [ 260.607554][ T7218] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.607585][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.607607][ T7218] ? clear_bhb_loop+0x60/0xb0 [ 260.607633][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.607654][ T7218] RIP: 0033:0x7f537f58e969 [ 260.607675][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.607694][ T7218] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.607723][ T7218] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 260.607738][ T7218] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 260.607752][ T7218] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 260.607765][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.607778][ T7218] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 260.607814][ T7218] [ 260.607824][ T7218] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 260.962079][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.319 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 260.962101][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.962111][ T7218] Call Trace: [ 260.962119][ T7218] [ 260.962126][ T7218] dump_stack_lvl+0x189/0x250 [ 260.962148][ T7218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.962161][ T7218] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 260.962184][ T7218] ? __pfx_queue_work_on+0x10/0x10 [ 260.962202][ T7218] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 260.962224][ T7218] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 260.962246][ T7218] ? f2fs_hw_is_readonly+0x39b/0x470 [ 260.962272][ T7218] f2fs_handle_critical_error+0x37c/0x540 [ 260.962299][ T7218] f2fs_write_end_io+0x495/0x810 [ 260.962343][ T7218] __submit_merged_bio+0x27a/0x6a0 [ 260.962363][ T7218] ? up_write+0x1c4/0x420 [ 260.962389][ T7218] __submit_merged_write_cond+0x44c/0x530 [ 260.962416][ T7218] f2fs_sync_node_pages+0x1871/0x1a10 [ 260.962455][ T7218] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 260.962498][ T7218] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 260.962527][ T7218] ? up_write+0x1c4/0x420 [ 260.962541][ T7218] ? do_raw_spin_unlock+0x122/0x240 [ 260.962563][ T7218] f2fs_write_checkpoint+0xe5f/0x1de0 [ 260.962608][ T7218] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 260.962666][ T7218] ? __pfx_down_write+0x10/0x10 [ 260.962690][ T7218] f2fs_issue_checkpoint+0x3ac/0x570 [ 260.962719][ T7218] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 260.962748][ T7218] ? __lock_acquire+0xab9/0xd20 [ 260.962782][ T7218] ? __up_read+0x280/0x680 [ 260.962805][ T7218] ? f2fs_sync_fs+0x200/0x3d0 [ 260.962827][ T7218] f2fs_do_sync_file+0x86a/0x1860 [ 260.962861][ T7218] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 260.962920][ T7218] ? f2fs_file_write_iter+0x4dd/0x2340 [ 260.962940][ T7218] ? vfs_fsync_range+0x12c/0x1c0 [ 260.962960][ T7218] ? f2fs_sync_file+0xe9/0x160 [ 260.962986][ T7218] f2fs_file_write_iter+0x78e/0x2340 [ 260.963022][ T7218] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 260.963037][ T7218] ? rcu_read_lock_any_held+0xb3/0x120 [ 260.963067][ T7218] vfs_write+0x54b/0xa90 [ 260.963087][ T7218] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 260.963105][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 260.963129][ T7218] ? __fget_files+0x2a/0x420 [ 260.963156][ T7218] ksys_write+0x145/0x250 [ 260.963174][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 260.963194][ T7218] ? do_syscall_64+0xbe/0x3b0 [ 260.963222][ T7218] do_syscall_64+0xfa/0x3b0 [ 260.963245][ T7218] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.963268][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.963283][ T7218] ? clear_bhb_loop+0x60/0xb0 [ 260.963303][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.963318][ T7218] RIP: 0033:0x7f537f58e969 [ 260.963333][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.963347][ T7218] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.963364][ T7218] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 260.963381][ T7218] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 260.963392][ T7218] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 260.963401][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.963411][ T7218] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 260.963435][ T7218] [ 260.963441][ T7218] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 261.310192][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.319 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 261.310214][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.310224][ T7218] Call Trace: [ 261.310232][ T7218] [ 261.310239][ T7218] dump_stack_lvl+0x189/0x250 [ 261.310261][ T7218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.310274][ T7218] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 261.310297][ T7218] ? __pfx_queue_work_on+0x10/0x10 [ 261.310313][ T7218] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 261.310335][ T7218] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 261.310357][ T7218] ? f2fs_hw_is_readonly+0x39b/0x470 [ 261.310383][ T7218] f2fs_handle_critical_error+0x37c/0x540 [ 261.310410][ T7218] f2fs_write_end_io+0x495/0x810 [ 261.310448][ T7218] __submit_merged_bio+0x27a/0x6a0 [ 261.310468][ T7218] ? up_write+0x1c4/0x420 [ 261.310489][ T7218] __submit_merged_write_cond+0x44c/0x530 [ 261.310515][ T7218] f2fs_sync_node_pages+0x1871/0x1a10 [ 261.310555][ T7218] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 261.310598][ T7218] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 261.310627][ T7218] ? up_write+0x1c4/0x420 [ 261.310641][ T7218] ? do_raw_spin_unlock+0x122/0x240 [ 261.310663][ T7218] f2fs_write_checkpoint+0xe5f/0x1de0 [ 261.310709][ T7218] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 261.310767][ T7218] ? __pfx_down_write+0x10/0x10 [ 261.310792][ T7218] f2fs_issue_checkpoint+0x3ac/0x570 [ 261.310820][ T7218] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 261.310849][ T7218] ? __lock_acquire+0xab9/0xd20 [ 261.310883][ T7218] ? __up_read+0x280/0x680 [ 261.310907][ T7218] ? f2fs_sync_fs+0x200/0x3d0 [ 261.310929][ T7218] f2fs_do_sync_file+0x86a/0x1860 [ 261.310962][ T7218] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 261.311022][ T7218] ? f2fs_file_write_iter+0x4dd/0x2340 [ 261.311042][ T7218] ? vfs_fsync_range+0x12c/0x1c0 [ 261.311062][ T7218] ? f2fs_sync_file+0xe9/0x160 [ 261.311094][ T7218] f2fs_file_write_iter+0x78e/0x2340 [ 261.311130][ T7218] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 261.311145][ T7218] ? rcu_read_lock_any_held+0xb3/0x120 [ 261.311176][ T7218] vfs_write+0x54b/0xa90 [ 261.311196][ T7218] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 261.311214][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 261.311238][ T7218] ? __fget_files+0x2a/0x420 [ 261.311266][ T7218] ksys_write+0x145/0x250 [ 261.311284][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 261.311304][ T7218] ? do_syscall_64+0xbe/0x3b0 [ 261.311332][ T7218] do_syscall_64+0xfa/0x3b0 [ 261.311356][ T7218] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.311379][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.311394][ T7218] ? clear_bhb_loop+0x60/0xb0 [ 261.311414][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.311429][ T7218] RIP: 0033:0x7f537f58e969 [ 261.311444][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.311459][ T7218] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.311475][ T7218] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 261.311486][ T7218] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 261.311496][ T7218] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 261.311506][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.311515][ T7218] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 261.311545][ T7218] [ 261.647038][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.656663][ T7218] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 261.664324][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.319 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 261.664346][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.664356][ T7218] Call Trace: [ 261.664362][ T7218] [ 261.664369][ T7218] dump_stack_lvl+0x189/0x250 [ 261.664392][ T7218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.664405][ T7218] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 261.664428][ T7218] ? __pfx_queue_work_on+0x10/0x10 [ 261.664445][ T7218] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 261.664467][ T7218] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 261.664490][ T7218] ? f2fs_hw_is_readonly+0x39b/0x470 [ 261.664516][ T7218] f2fs_handle_critical_error+0x37c/0x540 [ 261.664544][ T7218] f2fs_write_end_io+0x495/0x810 [ 261.664585][ T7218] __submit_merged_bio+0x27a/0x6a0 [ 261.664605][ T7218] ? up_write+0x1c4/0x420 [ 261.664627][ T7218] __submit_merged_write_cond+0x44c/0x530 [ 261.664655][ T7218] f2fs_sync_node_pages+0x1871/0x1a10 [ 261.664699][ T7218] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 261.664747][ T7218] ? f2fs_write_checkpoint+0xe33/0x1de0 [ 261.664777][ T7218] ? up_write+0x1c4/0x420 [ 261.664792][ T7218] ? do_raw_spin_unlock+0x122/0x240 [ 261.664815][ T7218] f2fs_write_checkpoint+0xe5f/0x1de0 [ 261.664864][ T7218] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 261.664929][ T7218] ? __pfx_down_write+0x10/0x10 [ 261.664956][ T7218] f2fs_issue_checkpoint+0x3ac/0x570 [ 261.664985][ T7218] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 261.665015][ T7218] ? __lock_acquire+0xab9/0xd20 [ 261.665059][ T7218] ? __up_read+0x280/0x680 [ 261.665085][ T7218] ? f2fs_sync_fs+0x200/0x3d0 [ 261.665108][ T7218] f2fs_do_sync_file+0x86a/0x1860 [ 261.665143][ T7218] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 261.665213][ T7218] ? f2fs_file_write_iter+0x4dd/0x2340 [ 261.665234][ T7218] ? vfs_fsync_range+0x12c/0x1c0 [ 261.665254][ T7218] ? f2fs_sync_file+0xe9/0x160 [ 261.665282][ T7218] f2fs_file_write_iter+0x78e/0x2340 [ 261.665322][ T7218] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 261.665337][ T7218] ? rcu_read_lock_any_held+0xb3/0x120 [ 261.665371][ T7218] vfs_write+0x54b/0xa90 [ 261.665392][ T7218] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 261.665410][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 261.665438][ T7218] ? __fget_files+0x2a/0x420 [ 261.665466][ T7218] ksys_write+0x145/0x250 [ 261.665485][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 261.665507][ T7218] ? do_syscall_64+0xbe/0x3b0 [ 261.665536][ T7218] do_syscall_64+0xfa/0x3b0 [ 261.665559][ T7218] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.665582][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.665598][ T7218] ? clear_bhb_loop+0x60/0xb0 [ 261.665618][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.665634][ T7218] RIP: 0033:0x7f537f58e969 [ 261.665649][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.665662][ T7218] RSP: 002b:00007f5380427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.665679][ T7218] RAX: ffffffffffffffda RBX: 00007f537f7b5fa0 RCX: 00007f537f58e969 [ 261.665691][ T7218] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000a [ 261.665701][ T7218] RBP: 00007f537f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 261.665710][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.665719][ T7218] R13: 0000000000000000 R14: 00007f537f7b5fa0 R15: 00007ffe9aecf798 [ 261.665747][ T7218] [ 261.665754][ T7218] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 261.733336][ T7226] fuse: Unknown parameter 'default_p5tmissin' [ 262.252185][ T7237] xt_connbytes: Forcing CT accounting to be enabled [ 262.259090][ T7237] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 262.691907][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.943995][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.982331][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.989616][ T7082] bridge_slave_0: entered allmulticast mode [ 262.993065][ T7244] loop1: detected capacity change from 0 to 512 [ 263.027151][ T7082] bridge_slave_0: entered promiscuous mode [ 263.046675][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.080765][ T7244] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 263.116475][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.175107][ T7082] bridge_slave_1: entered allmulticast mode [ 263.193154][ T7082] bridge_slave_1: entered promiscuous mode [ 263.205125][ T7244] EXT4-fs (loop1): 1 truncate cleaned up [ 263.213078][ T7244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.430231][ T7249] loop2: detected capacity change from 0 to 2048 [ 263.603534][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.615758][ T7249] EXT4-fs (loop2): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.731766][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.869562][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.190639][ T7265] loop0: detected capacity change from 0 to 64 [ 264.332954][ T7082] team0: Port device team_slave_0 added [ 264.374109][ T7082] team0: Port device team_slave_1 added [ 264.392875][ T7243] loop3: detected capacity change from 0 to 40427 [ 264.411653][ T5933] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 264.427502][ T7243] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 264.452969][ T7243] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 264.520248][ T7243] F2FS-fs (loop3): invalid crc value [ 264.556596][ T7243] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 264.606574][ T5833] Bad inode number on dev loop0: 4160749571 is out of range [ 264.644829][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.647178][ T5933] usb 3-1: not running at top speed; connect to a high speed hub [ 264.665403][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.676412][ T5833] Bad inode number on dev loop0: 4160749571 is out of range [ 264.722514][ T5933] usb 3-1: config 7 has an invalid interface number: 157 but max is 3 [ 264.730756][ T5933] usb 3-1: config 7 has an invalid interface number: 11 but max is 3 [ 264.771748][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.774602][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.830070][ T5933] usb 3-1: config 7 has an invalid interface number: 74 but max is 3 [ 264.859378][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.878770][ T5933] usb 3-1: config 7 has an invalid interface number: 210 but max is 3 [ 264.901666][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.922171][ T5933] usb 3-1: config 7 has an invalid interface number: 154 but max is 3 [ 265.016793][ T5933] usb 3-1: config 7 has an invalid interface number: 125 but max is 3 [ 265.042178][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.071427][ T5933] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 265.106155][ T5933] usb 3-1: config 7 has an invalid interface number: 113 but max is 3 [ 265.107415][ T7275] FAULT_INJECTION: forcing a failure. [ 265.107415][ T7275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.109246][ T7275] [ 265.109257][ T7275] ====================================================== [ 265.109266][ T7275] WARNING: possible circular locking dependency detected [ 265.109283][ T7275] 6.15.0-next-20250603-syzkaller #0 Not tainted [ 265.109297][ T7275] ------------------------------------------------------ [ 265.109306][ T7275] syz.3.330/7275 is trying to acquire lock: [ 265.109319][ T7275] ffffffff8e132fc0 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 265.109376][ T7275] [ 265.109376][ T7275] but task is already holding lock: [ 265.109383][ T7275] ffff8880b863b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 265.109444][ T7275] [ 265.109444][ T7275] which lock already depends on the new lock. [ 265.109444][ T7275] [ 265.109453][ T7275] [ 265.109453][ T7275] the existing dependency chain (in reverse order) is: [ 265.109461][ T7275] [ 265.109461][ T7275] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 265.109491][ T7275] lock_acquire+0x120/0x360 [ 265.109520][ T7275] _raw_spin_lock_nested+0x32/0x50 [ 265.109551][ T7275] raw_spin_rq_lock_nested+0x2a/0x140 [ 265.109582][ T7275] task_rq_lock+0xbc/0x470 [ 265.109613][ T7275] cgroup_move_task+0x9a/0x590 [ 265.109633][ T7275] css_set_move_task+0x658/0x9e0 [ 265.109672][ T7275] cgroup_post_fork+0x1ef/0x790 [ 265.109694][ T7275] copy_process+0x3862/0x3c00 [ 265.109713][ T7275] kernel_clone+0x21e/0x870 [ 265.109733][ T7275] user_mode_thread+0xdd/0x140 [ 265.109753][ T7275] rest_init+0x23/0x300 [ 265.109774][ T7275] start_kernel+0x47d/0x500 [ 265.109807][ T7275] x86_64_start_reservations+0x24/0x30 [ 265.109833][ T7275] x86_64_start_kernel+0x143/0x1c0 [ 265.109857][ T7275] common_startup_64+0x13e/0x147 [ 265.109881][ T7275] [ 265.109881][ T7275] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 265.109911][ T7275] lock_acquire+0x120/0x360 [ 265.109939][ T7275] _raw_spin_lock_irqsave+0xa7/0xf0 [ 265.109965][ T7275] try_to_wake_up+0x6e/0x1290 [ 265.109996][ T7275] __wake_up_common_lock+0x134/0x1f0 [ 265.110022][ T7275] tty_port_default_wakeup+0xa2/0xf0 [ 265.110045][ T7275] serial8250_tx_chars+0x72e/0x970 [ 265.110080][ T7275] serial8250_handle_irq+0x633/0xbb0 [ 265.110098][ T7275] serial8250_default_handle_irq+0xbf/0x1b0 [ 265.110122][ T7275] serial8250_interrupt+0xa2/0x1d0 [ 265.110151][ T7275] __handle_irq_event_percpu+0x28c/0x980 [ 265.110175][ T7275] handle_irq_event+0x8b/0x1e0 [ 265.110198][ T7275] handle_edge_irq+0x267/0x9c0 [ 265.110218][ T7275] __common_interrupt+0x140/0x250 [ 265.110245][ T7275] common_interrupt+0xb6/0xe0 [ 265.110267][ T7275] asm_common_interrupt+0x26/0x40 [ 265.110288][ T7275] pv_native_safe_halt+0x13/0x20 [ 265.110317][ T7275] default_idle+0x13/0x20 [ 265.110335][ T7275] default_idle_call+0x74/0xb0 [ 265.110355][ T7275] do_idle+0x1e8/0x510 [ 265.110372][ T7275] cpu_startup_entry+0x44/0x60 [ 265.110390][ T7275] rest_init+0x2de/0x300 [ 265.110410][ T7275] start_kernel+0x47d/0x500 [ 265.110442][ T7275] x86_64_start_reservations+0x24/0x30 [ 265.110468][ T7275] x86_64_start_kernel+0x143/0x1c0 [ 265.110493][ T7275] common_startup_64+0x13e/0x147 [ 265.110516][ T7275] [ 265.110516][ T7275] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 265.110548][ T7275] lock_acquire+0x120/0x360 [ 265.110575][ T7275] _raw_spin_lock_irqsave+0xa7/0xf0 [ 265.110603][ T7275] __wake_up_common_lock+0x2f/0x1f0 [ 265.110627][ T7275] tty_port_default_wakeup+0xa2/0xf0 [ 265.110650][ T7275] serial8250_tx_chars+0x72e/0x970 [ 265.110682][ T7275] serial8250_handle_irq+0x633/0xbb0 [ 265.110701][ T7275] serial8250_default_handle_irq+0xbf/0x1b0 [ 265.110725][ T7275] serial8250_interrupt+0xa2/0x1d0 [ 265.110754][ T7275] __handle_irq_event_percpu+0x28c/0x980 [ 265.110777][ T7275] handle_irq_event+0x8b/0x1e0 [ 265.110800][ T7275] handle_edge_irq+0x267/0x9c0 [ 265.110820][ T7275] __common_interrupt+0x140/0x250 [ 265.110846][ T7275] common_interrupt+0xb6/0xe0 [ 265.110867][ T7275] asm_common_interrupt+0x26/0x40 [ 265.110887][ T7275] pv_native_safe_halt+0x13/0x20 [ 265.110916][ T7275] default_idle+0x13/0x20 [ 265.110933][ T7275] default_idle_call+0x74/0xb0 [ 265.110953][ T7275] do_idle+0x1e8/0x510 [ 265.110969][ T7275] cpu_startup_entry+0x44/0x60 [ 265.110994][ T7275] rest_init+0x2de/0x300 [ 265.111013][ T7275] start_kernel+0x47d/0x500 [ 265.111045][ T7275] x86_64_start_reservations+0x24/0x30 [ 265.111070][ T7275] x86_64_start_kernel+0x143/0x1c0 [ 265.111093][ T7275] common_startup_64+0x13e/0x147 [ 265.111116][ T7275] [ 265.111116][ T7275] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 265.111146][ T7275] lock_acquire+0x120/0x360 [ 265.111174][ T7275] _raw_spin_lock_irqsave+0xa7/0xf0 [ 265.111201][ T7275] serial8250_console_write+0x17e/0x1ba0 [ 265.111222][ T7275] console_flush_all+0x728/0xc40 [ 265.111245][ T7275] console_unlock+0xc4/0x270 [ 265.111263][ T7275] vprintk_emit+0x5b7/0x7a0 [ 265.111281][ T7275] _printk+0xcf/0x120 [ 265.111302][ T7275] register_console+0xa8b/0xf90 [ 265.111324][ T7275] univ8250_console_init+0x52/0x90 [ 265.111348][ T7275] console_init+0x1a1/0x670 [ 265.111368][ T7275] start_kernel+0x2cc/0x500 [ 265.111399][ T7275] x86_64_start_reservations+0x24/0x30 [ 265.111425][ T7275] x86_64_start_kernel+0x143/0x1c0 [ 265.111449][ T7275] common_startup_64+0x13e/0x147 [ 265.111472][ T7275] [ 265.111472][ T7275] -> #0 (console_owner){-.-.}-{0:0}: [ 265.111500][ T7275] validate_chain+0xb9b/0x2140 [ 265.111520][ T7275] __lock_acquire+0xab9/0xd20 [ 265.111551][ T7275] lock_acquire+0x120/0x360 [ 265.111578][ T7275] vprintk_emit+0x460/0x7a0 [ 265.111599][ T7275] _printk+0xcf/0x120 [ 265.111619][ T7275] should_fail_ex+0x3f5/0x560 [ 265.111643][ T7275] strncpy_from_user+0x36/0x290 [ 265.111665][ T7275] strncpy_from_user_nofault+0x72/0x150 [ 265.111696][ T7275] bpf_probe_read_user_str+0x2a/0x70 [ 265.111728][ T7275] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 265.111745][ T7275] bpf_trace_run4+0x28b/0x4a0 [ 265.111769][ T7275] __bpf_trace_sched_switch+0x17a/0x1e0 [ 265.111793][ T7275] __traceiter_sched_switch+0x9d/0xd0 [ 265.111817][ T7275] __schedule+0x2328/0x4d00 [ 265.111843][ T7275] schedule+0x165/0x360 [ 265.111870][ T7275] __fuse_simple_request+0xc94/0x18d0 [ 265.111891][ T7275] fuse_do_getattr+0x33b/0x620 [ 265.111919][ T7275] fuse_permission+0x940/0xdc0 [ 265.111949][ T7275] inode_permission+0x282/0x470 [ 265.111975][ T7275] may_open+0x297/0x470 [ 265.112012][ T7275] path_openat+0x2d91/0x3830 [ 265.112043][ T7275] do_filp_open+0x1fa/0x410 [ 265.112074][ T7275] do_open_execat+0x135/0x450 [ 265.112105][ T7275] alloc_bprm+0x28/0x5b0 [ 265.112122][ T7275] do_execveat_common+0x1b3/0x6a0 [ 265.112143][ T7275] __x64_sys_execve+0x94/0xb0 [ 265.112162][ T7275] do_syscall_64+0xfa/0x3b0 [ 265.112194][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.112214][ T7275] [ 265.112214][ T7275] other info that might help us debug this: [ 265.112214][ T7275] [ 265.112221][ T7275] Chain exists of: [ 265.112221][ T7275] console_owner --> &p->pi_lock --> &rq->__lock [ 265.112221][ T7275] [ 265.112258][ T7275] Possible unsafe locking scenario: [ 265.112258][ T7275] [ 265.112264][ T7275] CPU0 CPU1 [ 265.112272][ T7275] ---- ---- [ 265.112277][ T7275] lock(&rq->__lock); [ 265.112292][ T7275] lock(&p->pi_lock); [ 265.112308][ T7275] lock(&rq->__lock); [ 265.112324][ T7275] lock(console_owner); [ 265.112339][ T7275] [ 265.112339][ T7275] *** DEADLOCK *** [ 265.112339][ T7275] [ 265.112345][ T7275] 2 locks held by syz.3.330/7275: [ 265.112359][ T7275] #0: ffff8880b863b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 265.112422][ T7275] #1: ffffffff8e13ee80 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 265.112479][ T7275] [ 265.112479][ T7275] stack backtrace: [ 265.112490][ T7275] CPU: 0 UID: 0 PID: 7275 Comm: syz.3.330 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 265.112516][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.112530][ T7275] Call Trace: [ 265.112539][ T7275] [ 265.112548][ T7275] dump_stack_lvl+0x189/0x250 [ 265.112571][ T7275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.112591][ T7275] ? __pfx__printk+0x10/0x10 [ 265.112616][ T7275] ? print_lock_name+0xde/0x100 [ 265.112641][ T7275] print_circular_bug+0x2ee/0x310 [ 265.112666][ T7275] check_noncircular+0x134/0x160 [ 265.112692][ T7275] validate_chain+0xb9b/0x2140 [ 265.112726][ T7275] __lock_acquire+0xab9/0xd20 [ 265.112759][ T7275] ? vprintk_emit+0x444/0x7a0 [ 265.112779][ T7275] lock_acquire+0x120/0x360 [ 265.112808][ T7275] ? vprintk_emit+0x444/0x7a0 [ 265.112834][ T7275] ? do_raw_spin_unlock+0x122/0x240 [ 265.112860][ T7275] ? vprintk_emit+0x444/0x7a0 [ 265.112881][ T7275] vprintk_emit+0x460/0x7a0 [ 265.112902][ T7275] ? vprintk_emit+0x444/0x7a0 [ 265.112924][ T7275] ? __pfx_vprintk_emit+0x10/0x10 [ 265.112956][ T7275] _printk+0xcf/0x120 [ 265.112979][ T7275] ? __pfx____ratelimit+0x10/0x10 [ 265.113018][ T7275] ? __pfx__printk+0x10/0x10 [ 265.113049][ T7275] should_fail_ex+0x3f5/0x560 [ 265.113076][ T7275] strncpy_from_user+0x36/0x290 [ 265.113104][ T7275] strncpy_from_user_nofault+0x72/0x150 [ 265.113137][ T7275] bpf_probe_read_user_str+0x2a/0x70 [ 265.113173][ T7275] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 265.113192][ T7275] bpf_trace_run4+0x28b/0x4a0 [ 265.113219][ T7275] ? bpf_trace_run4+0x19c/0x4a0 [ 265.113247][ T7275] ? __pfx_bpf_trace_run4+0x10/0x10 [ 265.113273][ T7275] ? kvm_sched_clock_read+0x11/0x20 [ 265.113304][ T7275] ? sched_clock_cpu+0x74/0x430 [ 265.113341][ T7275] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 265.113370][ T7275] __bpf_trace_sched_switch+0x17a/0x1e0 [ 265.113398][ T7275] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 265.113424][ T7275] ? psi_group_change+0xbc7/0x1210 [ 265.113444][ T7275] ? rcu_read_lock_sched_held+0x89/0x100 [ 265.113467][ T7275] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 265.113491][ T7275] ? psi_task_switch+0x39a/0x6d0 [ 265.113514][ T7275] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 265.113543][ T7275] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 265.113570][ T7275] __traceiter_sched_switch+0x9d/0xd0 [ 265.113599][ T7275] __schedule+0x2328/0x4d00 [ 265.113634][ T7275] ? do_raw_spin_lock+0x121/0x290 [ 265.113660][ T7275] ? schedule+0x165/0x360 [ 265.113689][ T7275] ? __lock_acquire+0xab9/0xd20 [ 265.113720][ T7275] ? __pfx___schedule+0x10/0x10 [ 265.113757][ T7275] ? schedule+0x91/0x360 [ 265.113787][ T7275] schedule+0x165/0x360 [ 265.113817][ T7275] __fuse_simple_request+0xc94/0x18d0 [ 265.113845][ T7275] ? __pfx___fuse_simple_request+0x10/0x10 [ 265.113868][ T7275] ? __pfx_autoremove_wake_function+0x10/0x10 [ 265.113901][ T7275] ? is_bpf_text_address+0x26/0x2b0 [ 265.113939][ T7275] ? is_bpf_text_address+0x292/0x2b0 [ 265.113973][ T7275] ? is_bpf_text_address+0x26/0x2b0 [ 265.114020][ T7275] fuse_do_getattr+0x33b/0x620 [ 265.114049][ T7275] ? unwind_get_return_address+0x4d/0x90 [ 265.114087][ T7275] ? __pfx_fuse_do_getattr+0x10/0x10 [ 265.114136][ T7275] ? make_vfsuid+0x49/0xa0 [ 265.114167][ T7275] ? generic_permission+0x404/0x690 [ 265.114200][ T7275] fuse_permission+0x940/0xdc0 [ 265.114236][ T7275] ? __pfx_fuse_permission+0x10/0x10 [ 265.114268][ T7275] ? do_raw_spin_lock+0x121/0x290 [ 265.114300][ T7275] ? leave_rcu+0xef/0x160 [ 265.114332][ T7275] inode_permission+0x282/0x470 [ 265.114358][ T7275] ? __pfx_fuse_permission+0x10/0x10 [ 265.114385][ T7275] may_open+0x297/0x470 [ 265.114411][ T7275] path_openat+0x2d91/0x3830 [ 265.114450][ T7275] ? __pfx_path_openat+0x10/0x10 [ 265.114475][ T7275] ? unwind_get_return_address+0x4d/0x90 [ 265.114500][ T7275] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 265.114519][ T7275] ? arch_stack_walk+0xfc/0x150 [ 265.114540][ T7275] do_filp_open+0x1fa/0x410 [ 265.114564][ T7275] ? stack_depot_save_flags+0x40/0x900 [ 265.114585][ T7275] ? __pfx_do_filp_open+0x10/0x10 [ 265.114622][ T7275] ? do_open_execat+0x93/0x450 [ 265.114649][ T7275] do_open_execat+0x135/0x450 [ 265.114674][ T7275] ? __pfx_do_open_execat+0x10/0x10 [ 265.114705][ T7275] alloc_bprm+0x28/0x5b0 [ 265.114721][ T7275] do_execveat_common+0x1b3/0x6a0 [ 265.114744][ T7275] __x64_sys_execve+0x94/0xb0 [ 265.114760][ T7275] do_syscall_64+0xfa/0x3b0 [ 265.114784][ T7275] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.114807][ T7275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.114824][ T7275] ? clear_bhb_loop+0x60/0xb0 [ 265.114842][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.114858][ T7275] RIP: 0033:0x7fb65a78e969 [ 265.114873][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.114888][ T7275] RSP: 002b:00007fb65b5b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 265.114905][ T7275] RAX: ffffffffffffffda RBX: 00007fb65a9b5fa0 RCX: 00007fb65a78e969 [ 265.114917][ T7275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 265.114928][ T7275] RBP: 00007fb65b5b3090 R08: 0000000000000000 R09: 0000000000000000 [ 265.114939][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.114949][ T7275] R13: 0000000000000000 R14: 00007fb65a9b5fa0 R15: 00007ffe85bab048 [ 265.114967][ T7275] [ 266.434470][ T7275] CPU: 0 UID: 0 PID: 7275 Comm: syz.3.330 Not tainted 6.15.0-next-20250603-syzkaller #0 PREEMPT(full) [ 266.434491][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.434501][ T7275] Call Trace: [ 266.434510][ T7275] [ 266.434517][ T7275] dump_stack_lvl+0x189/0x250 [ 266.434535][ T7275] ? __pfx____ratelimit+0x10/0x10 [ 266.434557][ T7275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.434571][ T7275] ? __pfx__printk+0x10/0x10 [ 266.434591][ T7275] should_fail_ex+0x414/0x560 [ 266.434610][ T7275] strncpy_from_user+0x36/0x290 [ 266.434628][ T7275] strncpy_from_user_nofault+0x72/0x150 [ 266.434651][ T7275] bpf_probe_read_user_str+0x2a/0x70 [ 266.434675][ T7275] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 266.434688][ T7275] bpf_trace_run4+0x28b/0x4a0 [ 266.434705][ T7275] ? bpf_trace_run4+0x19c/0x4a0 [ 266.434723][ T7275] ? __pfx_bpf_trace_run4+0x10/0x10 [ 266.434739][ T7275] ? kvm_sched_clock_read+0x11/0x20 [ 266.434758][ T7275] ? sched_clock_cpu+0x74/0x430 [ 266.434782][ T7275] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 266.434801][ T7275] __bpf_trace_sched_switch+0x17a/0x1e0 [ 266.434819][ T7275] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 266.434835][ T7275] ? psi_group_change+0xbc7/0x1210 [ 266.434848][ T7275] ? rcu_read_lock_sched_held+0x89/0x100 [ 266.434868][ T7275] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 266.434884][ T7275] ? psi_task_switch+0x39a/0x6d0 [ 266.434899][ T7275] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 266.434918][ T7275] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 266.434935][ T7275] __traceiter_sched_switch+0x9d/0xd0 [ 266.434954][ T7275] __schedule+0x2328/0x4d00 [ 266.434979][ T7275] ? do_raw_spin_lock+0x121/0x290 [ 266.434997][ T7275] ? schedule+0x165/0x360 [ 266.435015][ T7275] ? __lock_acquire+0xab9/0xd20 [ 266.435035][ T7275] ? __pfx___schedule+0x10/0x10 [ 266.435060][ T7275] ? schedule+0x91/0x360 [ 266.435079][ T7275] schedule+0x165/0x360 [ 266.435098][ T7275] __fuse_simple_request+0xc94/0x18d0 [ 266.435116][ T7275] ? __pfx___fuse_simple_request+0x10/0x10 [ 266.435131][ T7275] ? __pfx_autoremove_wake_function+0x10/0x10 [ 266.435152][ T7275] ? is_bpf_text_address+0x26/0x2b0 [ 266.435176][ T7275] ? is_bpf_text_address+0x292/0x2b0 [ 266.435198][ T7275] ? is_bpf_text_address+0x26/0x2b0 [ 266.435226][ T7275] fuse_do_getattr+0x33b/0x620 [ 266.435246][ T7275] ? unwind_get_return_address+0x4d/0x90 [ 266.435272][ T7275] ? __pfx_fuse_do_getattr+0x10/0x10 [ 266.435304][ T7275] ? make_vfsuid+0x49/0xa0 [ 266.435326][ T7275] ? generic_permission+0x404/0x690 [ 266.435348][ T7275] fuse_permission+0x940/0xdc0 [ 266.435371][ T7275] ? __pfx_fuse_permission+0x10/0x10 [ 266.435393][ T7275] ? do_raw_spin_lock+0x121/0x290 [ 266.435414][ T7275] ? leave_rcu+0xef/0x160 [ 266.435435][ T7275] inode_permission+0x282/0x470 [ 266.435453][ T7275] ? __pfx_fuse_permission+0x10/0x10 [ 266.435474][ T7275] may_open+0x297/0x470 [ 266.435497][ T7275] path_openat+0x2d91/0x3830 [ 266.435532][ T7275] ? __pfx_path_openat+0x10/0x10 [ 266.435554][ T7275] ? unwind_get_return_address+0x4d/0x90 [ 266.435577][ T7275] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 266.435594][ T7275] ? arch_stack_walk+0xfc/0x150 [ 266.435613][ T7275] do_filp_open+0x1fa/0x410 [ 266.435635][ T7275] ? stack_depot_save_flags+0x40/0x900 [ 266.435655][ T7275] ? __pfx_do_filp_open+0x10/0x10 [ 266.435688][ T7275] ? do_open_execat+0x93/0x450 [ 266.435712][ T7275] do_open_execat+0x135/0x450 [ 266.435734][ T7275] ? __pfx_do_open_execat+0x10/0x10 [ 266.435762][ T7275] alloc_bprm+0x28/0x5b0 [ 266.435777][ T7275] do_execveat_common+0x1b3/0x6a0 [ 266.435796][ T7275] __x64_sys_execve+0x94/0xb0 [ 266.435811][ T7275] do_syscall_64+0xfa/0x3b0 [ 266.435833][ T7275] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.435854][ T7275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.435875][ T7275] ? clear_bhb_loop+0x60/0xb0 [ 266.435891][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.435906][ T7275] RIP: 0033:0x7fb65a78e969 [ 266.435919][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.435932][ T7275] RSP: 002b:00007fb65b5b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 266.435948][ T7275] RAX: ffffffffffffffda RBX: 00007fb65a9b5fa0 RCX: 00007fb65a78e969 [ 266.435959][ T7275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 266.435969][ T7275] RBP: 00007fb65b5b3090 R08: 0000000000000000 R09: 0000000000000000 [ 266.435978][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.435987][ T7275] R13: 0000000000000000 R14: 00007fb65a9b5fa0 R15: 00007ffe85bab048 [ 266.436003][ T7275] [ 266.436144][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.892457][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.899170][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.022111][ T7248] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 267.090923][ T5933] usb 3-1: config 7 has 7 interfaces, different from the descriptor's value: 4 [ 267.100112][ T5933] usb 3-1: config 7 has no interface number 0 [ 267.111406][ T7248] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 267.137735][ T5933] usb 3-1: config 7 has no interface number 1 [ 267.146639][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 267.188122][ T5933] usb 3-1: config 7 has no interface number 2 [ 267.195020][ T5933] usb 3-1: config 7 has no interface number 3 [ 267.201140][ T5933] usb 3-1: config 7 has no interface number 4 [ 267.207297][ T5933] usb 3-1: config 7 has no interface number 5 [ 267.213574][ T5933] usb 3-1: config 7 has no interface number 6 [ 267.219783][ T5933] usb 3-1: config 7 interface 157 altsetting 254 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 267.231000][ T5933] usb 3-1: config 7 interface 157 altsetting 254 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 267.243773][ T5933] usb 3-1: config 7 interface 157 altsetting 254 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 267.254987][ T5933] usb 3-1: config 7 interface 157 altsetting 254 has a duplicate endpoint with address 0x82, skipping [ 267.266038][ T5933] usb 3-1: config 7 interface 157 altsetting 254 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 267.277253][ T5933] usb 3-1: config 7 interface 11 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 267.290694][ T5933] usb 3-1: config 7 interface 11 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 267.301983][ T5933] usb 3-1: config 7 interface 11 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 267.312854][ T5933] usb 3-1: config 7 interface 11 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 267.326033][ T5933] usb 3-1: too many endpoints for config 7 interface 74 altsetting 27: 90, using maximum allowed: 30 [ 267.337052][ T5933] usb 3-1: config 7 interface 74 altsetting 27 has a duplicate endpoint with address 0xF, skipping [ 267.347875][ T5933] usb 3-1: config 7 interface 74 altsetting 27 has a duplicate endpoint with address 0xD, skipping [ 267.358661][ T5933] usb 3-1: config 7 interface 74 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 267.369464][ T5933] usb 3-1: config 7 interface 74 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 267.380405][ T5933] usb 3-1: config 7 interface 74 altsetting 27 has 5 endpoint descriptors, different from the interface descriptor's value: 90 [ 267.393635][ T5933] usb 3-1: config 7 interface 210 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 267.407441][ T5933] usb 3-1: config 7 interface 210 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 267.418216][ T5933] usb 3-1: config 7 interface 210 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 267.429011][ T7082] hsr_slave_0: entered promiscuous mode [ 267.429260][ T5933] usb 3-1: config 7 interface 210 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 267.445673][ T5933] usb 3-1: config 7 interface 210 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 267.456471][ T5933] usb 3-1: config 7 interface 210 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 267.467400][ T5933] usb 3-1: config 7 interface 210 altsetting 7 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 267.469467][ T7082] hsr_slave_1: entered promiscuous mode [ 267.480506][ T5933] usb 3-1: too many endpoints for config 7 interface 154 altsetting 11: 216, using maximum allowed: 30 [ 267.480551][ T5933] usb 3-1: config 7 interface 154 altsetting 11 has an endpoint descriptor with address 0x13, changing to 0x3 [ 267.480580][ T5933] usb 3-1: config 7 interface 154 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 267.480604][ T5933] usb 3-1: config 7 interface 154 altsetting 11 has an endpoint descriptor with address 0x93, changing to 0x83 [ 267.480630][ T5933] usb 3-1: config 7 interface 154 altsetting 11 has a duplicate endpoint with address 0x83, skipping [ 267.480654][ T5933] usb 3-1: config 7 interface 154 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 216 [ 267.480693][ T5933] usb 3-1: config 7 interface 125 altsetting 62 has a duplicate endpoint with address 0x8, skipping [ 267.545698][ T7082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.556570][ T5933] usb 3-1: config 7 interface 125 altsetting 62 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 267.586226][ T5933] usb 3-1: config 7 interface 125 altsetting 62 has a duplicate endpoint with address 0xD, skipping [ 267.597130][ T5933] usb 3-1: config 7 interface 125 altsetting 62 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 267.611127][ T5933] usb 3-1: too many endpoints for config 7 interface 113 altsetting 101: 217, using maximum allowed: 30 [ 267.622416][ T5933] usb 3-1: config 7 interface 113 altsetting 101 has a duplicate endpoint with address 0x3, skipping [ 267.624417][ T7082] Cannot create hsr debugfs directory [ 267.633542][ T5933] usb 3-1: config 7 interface 113 altsetting 101 has a duplicate endpoint with address 0xC, skipping [ 267.633580][ T5933] usb 3-1: config 7 interface 113 altsetting 101 has 2 endpoint descriptors, different from the interface descriptor's value: 217 [ 267.633626][ T5933] usb 3-1: config 7 interface 157 has no altsetting 0 [ 267.633655][ T5933] usb 3-1: config 7 interface 11 has no altsetting 0 [ 267.633689][ T5933] usb 3-1: config 7 interface 74 has no altsetting 0 [ 267.683861][ T5933] usb 3-1: config 7 interface 210 has no altsetting 0 [ 267.690747][ T5933] usb 3-1: config 7 interface 154 has no altsetting 0 [ 267.697635][ T5933] usb 3-1: config 7 interface 125 has no altsetting 0 [ 267.705082][ T5933] usb 3-1: config 7 interface 113 has no altsetting 0 [ 267.712558][ T5933] usb 3-1: string descriptor 0 read error: -71 [ 267.718873][ T5933] usb 3-1: New USB device found, idVendor=0681, idProduct=0040, bcdDevice=89.f2 [ 267.728047][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.738638][ T5933] usb 3-1: can't set config #7, error -71 [ 267.748870][ T5933] usb 3-1: USB disconnect, device number 17 [ 267.971647][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.124652][ T7082] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.162797][ T7082] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.184314][ T7082] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.185451][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.204601][ T7082] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.363675][ T7082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.385445][ T7082] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.401580][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.408762][ T6927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.442632][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.449878][ T6927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.738158][ T7082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.011666][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.078455][ T7082] veth0_vlan: entered promiscuous mode [ 269.091499][ T7082] veth1_vlan: entered promiscuous mode [ 269.149391][ T7082] veth0_macvtap: entered promiscuous mode [ 269.175322][ T7082] veth1_macvtap: entered promiscuous mode [ 269.214583][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.243785][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.265173][ T7082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.279730][ T7082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.294668][ T7082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.303937][ T7082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.359576][ T7082] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 269.407362][ T5962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.418112][ T7082] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 269.434089][ T5962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.485856][ T6927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.502692][ T6927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.051649][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.091653][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.131627][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.171665][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.211631][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available