last executing test programs: 6m18.755473017s ago: executing program 4 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40014) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) sendmsg$nl_generic(r1, 0x0, 0x40000) write(r1, &(0x7f0000000d80)="e95a95dd13c6973a9ffcd7c3e478e9640eb8f23b3304fc5416d2c34357ec00c4d684c50d697994cd91dff9e5844c757910d0f46be7dac097018bc6b34ef628f715a8b4066283e3d0ce1dfc4c57aac73a27f0e1c6ac6b7324956210ce829384a42c04326246007b4a34f569697267eacd68765341a787dc1e68bc0eb85211fd1f61ec09dedc370530a593dd3afe6f3f50c169d963224cdcdbc9b34615f5d8950b4f661c4d12d55f3bd3dce301f246099bc7dda297f5f3235fd563249fcf4da5f04ea51aabc9995bc038431d1b27563010d0b7b7e9df5e86fa5e1f17dd00556a67e01b5d3fe4feb740c14008dd35d7d5c45d162110772a135e421c23121b223934c7c0f53dfb17317ec16cae20f2fff1998c63f90b9157baec8b881453270e25601ae605afcf31ffe0bb1893ed4e8e390a43e1077da667ca51f8625db790f0e8812490f94bd9b15afb8359905994994ce9a2909f701e95ca596f866019e9874aa396775df86e7566d7b3ef017b60852ea303d9bc637f34a95238c775373a5b819b3fd94f346097f1771ba3633a72c169e77c0f95425f89258c8c9c4dd070e4de1df0e12e278dd457a75a1a4d4ccd8ac496b9d839c9a49b3b7228324c3ef70d2afc8b1060426296903a2aded77485040f1e1ac4f929e6bb047a54714be78ad6426c9e86e335ef8a45699529f094c4541bded5744fd1feca165c2b19275672141bad920241e24f9777452946890fee3c1119a89fe64afe2d43d9378205c9449f630483ed882611f4a58f83370a583b3346803990bfdefd32cd8de56790bf8c506004289e5d0fd191238c50fdcb2b41145854f555e04d8e595ad1295aeec56422f93543386eb236b6cf6956474a4592d3eb585c89b290fd6bca7ca977325967614a0527c8e625dd13013b3132adfa84afd5926b3444360f212ff202e256b2309ab97e8f3115f8c6425af4a989e8a57b381f050dd1a8db9201f8ec0a6ae8cfe0512ef09beb3a7fc920e67068919cbea6e2da9272df5107ca3eb4f8f7399629858223700b23a3d561ebebaa0e32ac4a56ca2703d578e90681cc650f1cdb3ee56d59606a44f1c162a65d05ea390f1a199d7bb0e38b349936d573f74ca94ee5595d932d5fbfc34bb0e459ed7c1c549e2c1f74b034bb3ad7678498ef03ae9b150bada69a269c97d0a4dcb5738ecdee44c6966215be1b4aafd439e5f065a87410e74e7a482015eb93db64bfd81b3dd87be0c555bb85983c43ff0af0a25bf26a9a7153b834063f613882c1fc4b85953d6580e7a06b8de62f458c8da764f99e8fe93eeb6d31f922657f1ee76a1db24b933beb4c7c845b0f2ea1348e909cca7b0aa3d12cc5dcb57c6bca1751f9d9acdb0ce549550ff531c9574fb9b373721f37dec8d61a287e1a6cc113b29fbbb5d09b5a7308eaee69a07fa165025f867778465b031c2e34e717e5049f77dad973bf2969270b7031f019427dba66fee2d02d1c854d1227c7783bf3eb77fbcc65ae222a80c26b5d6db24724b8ed316be9d442ee683b280361e04fba9f6fc6f2c901842c9f2fd960c884709aeb68ce6ff3119fa8f444b7dbb20fa7c05c2cff6cb12a1aab3284fe245f94f1bffb359108a8980f9e43a1bf80295a3e73216255f3b0802693fdc3d6a499396d96ff4036b48f8931ed25fcf1d148a5942b443f171eb034b5f76aba2a5244c1274f02b20e78423b470d39599f0d45b2c7937de1d7ea5df9f311c54f35a5181d383e2ffbc7821b7683240e654daa9f151dfab07d2cccb4aea451e5d84c86f0baea4eb1f823d4ceaeb8b2f20da3a3a36df9d1959a2b45b97b21012f017e554e3af5e98de03278d3c57d2a1139085d9e218b057dfd8486e45238beb944f3f5025aea1a45f3423a815ea55bc1a947ee81ddbe6ac78e4e1c5794e2759ab391f22a65b6c7a4a5f09258d81e5f6b859d33c033c9615c4e0f2b74dd4baec20ee2338b959adc5a93027264fed368918ce19251bf53b40aac19ebf625b5633d6fc133305d15794b89e7ede2b32ec2a908707d3fc0d50566a31ceb281e572031ec9254e606c0dfda1978fc0e16dc29085109a59a64d612e2dd17cd505e791f881a1ff5c9cb4b04d77cecc88db9ec5eac37a3edd91e5d9a77b2bdc4cea10bc0898f4ced162cfc4d3f3c0ad431ae4c333a23c4b9b8e9dc4fcdcfe08ef181f94beedd592027ff7c2872c928bbe284f62ca4002d443103b760b3a5312b5280a18a0f5b8e1752d0ebe25436b1f7f9038a16878f5f1b731cc6ac2ef892fef052f900cec9943658225d60d0caedd593d0da3e78b7e1c6da424abb671c7fca061802888777f5ce24d976471cc34cf1fca2fad0fbd536a9abc6888654566068208628532afde94f4599e30ca13c1702bf38131e9e667322148017b5e8127bb1ef67e0cdf282683901af5bc16d341210fdc7c64b65e9c744638ec71d0bda852a2728c20ead067668398b23d24874e6c06660fcbcc1479a484f073f6c672c709c48b44ce92183dc3d2646b45cdaad664d4e008e30bc7b619493ab58408c575bbb08e6a6b6ee6576087bdf39df02db4822c9398e33a58eea9fd2ef93f9094ab486b5d696bc7bdaa545626a42e65c7a274da1d5a4b0ef5c062d2c6fcb9b60810366a69d5470efd4164fd65d6a77a452cc61aca804ec0d726d38a351f3f3fafc10a750b5d20a3ff70c2f00cf2bd89b99955390844214c28fd494f0afdff344a14a30443461b315efca380396e1ce799690e1c6c6e2eafd71eb6b2d0304aa9af0586e96a1aeaed130599d87cb47bc5ad9a5d38a0ec64c538fb6286ccb11b8107c6087ee4875885a471c52d9fe6a22b00d4cea28fb90539a8f99c8278c402e7e615fdce61cc33a2c827acba565808bf54f1a53507777f5f191001bfefc4b1b00f7998f6ba520bf1d4ecf479b538a335905546ad1e410ae08f70a106c51f21bbd1aa999804258164dc483b36a1df46b76f613423fa23442f31fc77f64bf04b9981a3ef5eeac952e3f3b4a1d5a28bc0ad86a553415f3d08f93b38dce39b2ad384785e0bee2a6f4f3c9679295371f7966bc22b8f22b47e1770b6d3b3d33b730df7dccc5e7d3310e516f50a62764dc923329f6984334ce4be843740b3e54ca420fc60b948034bfc7b1b392a8438d8a63d47588c5ec3f71e02765b3f733e0d286afd8daa3abeb8c964dc3485eda02e3122e7b5c6e5c2ae819715e90f0c8196284bf7811756d70514fbb5084dede610b98e26b95641f15f93a62a09fa48f4bbd1a699d71000aba304569785aca02cb59beb9501307975631f185a9e49333d66371950ddf2f7b9293f3bdb57e60449c90243a8fa3db10f97dff195de80cd2bbaa8a5c98e7925cf78c8b55c6cf5deec5181cde67ff678df57cdd52a9a0d0ddc8b369486234255d1bbbaabff509bc09ae7292b0148fa7a9f770d99981b4066484cb1983b171a86dc8c1035d51b0b29ea7759e8d59a51967bc78e2fdae767dd3962f77f3b52d5c3fe0883e3abd59c3e19cbf42e762936d412838abd52321ca4b94817e5ed1852f16a1117b1f1e71e3f7030caa21496d2e33302ea158dc97dc4e8ae2d657cfc68cb2918c9c2e6029c8f45efa30fd5508f23b34533b4c2d3cf00be265b533d2c304fbc0c4a70c93f93c2c5a9379754242458b18817c98f92f8337cddc12ce36b19af5dfcbba4bcdc5376c31418521a35ac9587623e78e4d4e4688d0ddbfa29cef80c12cbdb72b9bd8b4b1373c3580abb23be3d36e827de7c6ea5beb11341cd6008ed332163cfaa179e86c3153e6c24db69ef7422b6ab2b7001a285ba18d4fcabd2828ec4f86275e0468708279369079c4b4e80ffd04f67c1930165dac2f37a7989b081352a62139f993d8fc533a505d0a627132b118d2ee4b28fd9349f7896d42514fe71d2c753cb6b6026b0ee73b8089775b5e8288868c5aaf16af34eb28ee0f5501653e7f11a983be412a1d15004d6809c180dc75dfa36b671dbea10af709ea8927fbfb04efded57f7e96463a2bbb98af446da1eb0dbf8a2d1dffe1435250e5ee3118afce40e0570a861adf0a8e2aa40dc5def93c18dcbd8e50cfb600fd3218c73aa9c5de38132b2ca89369bf2a38010e96ba672058ca4067006f52a5d2f1acbcf51319d8fbd7b2c8b5b5a9cb852fdd97e504239ce5df34adbfcfa3e9f4a27d31318a36e91f311844b7b97fdb1df3a5cd22a6eb69e4106ad7241a0cd5ce770c21ab749b52cac6da08f62f7a8b96370f259084f1a450c209d75b8b659b9d8483687d2cdc710edcaa54d76f26fa0b1914ec48c0c0b7ad29421b3bcd859298ac29f7401c61e0da373ff8568c4ec145cd08761279473c2e8727575571a210ca2ea9a7ea49bf173239674c03dc00896c8a762bb260a7d12810a82114ff15a40bb0eaaf5155e9c0097ea3823029aa038cc07e191e5fb908abd8bda59568f137d954b7579e517a289d41a5b2ec4b00b356062554fc8de5120b7403370f0e499c92ee3dfdcf5a6273b351076dc294e8c7e8153637d57790b1d12a5ae99692c7780136cad377b0be6f69ab16a1de0055c48c4e6bd5a85472c4376d78a015947822780c7367f9df5e1604bcc51c0e60508c8181b2eff519f7183a90b135f30764966197c6e258a7c1ec45c9ab7609af7228e953237aaaa9978f280ef6d3af78fd75c5c9413dd89847e715b192b39db403150b5d6012073d20585df367565602bc8569de68108a65206975281aff54a8acf36ed5901ada9c6291057d6264e04dd48af6afdbc612cf8c1c0ddec7ab8d23e750259528460dd4de704d642db9316415d2f19b157f7e5ddfcab12f96fed0b27ef284415e78d87bc65acc08a9c2708e55f8bd40904d50f792d4f0e1f382ce554974582b9e816a704570333e7e246ca3d73a17cd0368508446d0922835e004769c55a3a64390b271edd74b26396770940053f7a516a67f6d33aad8639a21337f53a35a791a09226000b6e04524c58b6006227e2d3ea8030ef1f2f0ec5967eb9dd3e9c63e2fabe77b43a6cb7a776a46ac9866cb67845405e093b6c14153ae8d2e541a696b9664e3c4012bf88088b6cdaa8ad28d187e0c87a290eb1e37fb5e86d08e52bd7903f9957b0a702c7fff758bb9444977f13d0d47b70d706eb0d13ad30647dfa30b9b2487d386394650fa027812b57ffc4f8c69626fb4b8a88d5d84467f265aa0fa1128f9c6990d51d887ec6f72c248202ee948c29792f8943355ac9f7117c282346c42adf7c9bbe599020881e3fa552543daefd754304feed6c0af4e16a764fb95e622c7098cf2a84fcdca49f5ad76aa5afde2e12d998a18f0d926b27148565a1df91233647f3f1edc9baa2f7d1ce5919876e96485d4b408e8b2e7597428ee38b565132094bfc31d4bd5eff9b215d51f9012a65ca6ebac52e21b556b9b7125b5363c2ca877a5ca243ae168420650cc26ddd2904442da06e8bd9c97171e360c53400773267ebbca7ccf6def65ea67efea845c5ba156674f3ad7f50825fde22d9c9b6ce8b7de46367f658480b2d07c0da8e54873bccebb9bead90397b77c28c0dd5d6193a683c711ac10e4b38702058f38090a9b8d1a2f0e366bd8db941b65301eb149c3e525299876f79835fa73fb0d715efb7f123914d69aac44902b69331fea4d89e7c4b5c47eb31c90f21464e998ff1015657fa6d43e213f4d9e7cc7e832b808d3d55da8886592c1b34ab407690697ea6a490ac6397020125e69ff78f174102f1ae05aa9f507f2870c1f8b31af3fbc3b1db598666551eb522cd9659608b97c6321c518497d36d38b498cea6bee69", 0x1000) 6m17.916664705s ago: executing program 4 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000380)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x400000, 0x1, 0x6040000}) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m17.679143489s ago: executing program 4 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000180), 0x0}, 0x20) 6m17.492663098s ago: executing program 4 (id=250): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xe, &(0x7f00000002c0)={[{}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f00000005c0)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000a80), 0x208e24b) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m16.391496522s ago: executing program 4 (id=256): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='G', 0x1}], 0x1}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="22d20493ad00000000000000", 0xc, 0x4000a01, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) ptrace(0x4207, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) 6m15.802134015s ago: executing program 4 (id=261): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x11, &(0x7f00000001c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000240)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000011c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000001240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001380), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x4, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000002440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002480), 0x87}, 0x48) 6m15.337335715s ago: executing program 32 (id=261): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x11, &(0x7f00000001c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000240)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000011c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000001240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001380), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x4, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720aa3fe00000000850000000a000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f587e05000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc9271aa8b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d1b4b8345f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d5100000000b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb82e4541f92cb59b197a600331887e92dbcbad7b6b9af3c6f2d42ab9e591f57cc93d629b634518686492e0378547e1a33df35cbc133308dc1a87371bba153f03b8f177560732000000"], &(0x7f0000002440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002480), 0x87}, 0x48) 3m32.480127527s ago: executing program 3 (id=722): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000380)='.\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='wchan\x00') pread64(r2, &(0x7f0000000440)=""/15, 0xf, 0x4) 3m30.657849091s ago: executing program 3 (id=728): pipe(&(0x7f0000000540)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x400, 0x0, 0x158}, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x14d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x2038, 0x3000, 0xffffffff, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3m29.529298803s ago: executing program 3 (id=733): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000280)={0xffff, 0xd4, 0x0, 0x400c, 0x5, "00009be7b7170000000090684aeabe4d665b00", 0x70000000, 0x1ff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000001080)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) syz_emit_ethernet(0x23a, &(0x7f0000001540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0b08004500022c006700000206907864ee0001ac1414aa00004e22dc1b0dcf037e98da8865c63e1367c3c6bbed7390b30c0751d068f8cd389d23a858c75d16f3d94e4b2ab770b23ce452e210c8033ee3e94c50e9dcb1c259d82ee9d504a813996fc78e812804489350946af93a2671a823a533224bc9b1b53ed9e09b68fe85cdf5cffa8b5eac187d8b458b3d11620bd5f1d1bde4d7dc50c0595699d43e1d28dcb3a12015131ab42f889ee6ab0dfbbdaacde929422b4f57f5aceb816352286852ff826463a113d7b9216ee7738494d16c6eef4faf3106ccf5be0ee530707686efee5412376e024b6c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=0x0], 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") 3m27.555413182s ago: executing program 3 (id=736): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000700)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='p:p1 ./file0:0', 0xe) 3m27.006263225s ago: executing program 3 (id=738): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e00)='status\x00') setgroups(0x1, &(0x7f0000000e40)=[0xee00]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001700)={0x1, &(0x7f0000001740)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0xa208}], 0x1, 0x0, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) statx(r0, &(0x7f0000000400)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000011c0)) 3m26.101125459s ago: executing program 3 (id=745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="080000000400000004000000040000"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r0, &(0x7f00000004c0)}, 0x20) 3m24.084552987s ago: executing program 33 (id=745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="080000000400000004000000040000"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r0, &(0x7f00000004c0)}, 0x20) 3m3.669040701s ago: executing program 6 (id=804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xca341, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) pread64(r3, &(0x7f0000000340)=""/222, 0xfffffe3f, 0x9) 3m1.94283631s ago: executing program 6 (id=807): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='G', 0x1}], 0x1}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="22d20493ad00000000000000", 0xc, 0x4000a01, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) ptrace(0x4207, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m0.2673131s ago: executing program 6 (id=811): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x18b) flock(r0, 0x1780f9c373410de4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000300)='pstore\x00', 0x10005, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x242000, 0x110, 0x32}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xb}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f0000000000)) 2m58.909143145s ago: executing program 2 (id=819): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@oldalloc}]}, 0x5, 0x491, &(0x7f0000000300)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x100008}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 2m58.381255907s ago: executing program 2 (id=820): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x75b0, 0x31e2dc9471aa16b8, 0x2, 0x6a}, &(0x7f00000000c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f16, 0x4, 0x0, 0x25b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3065, 0x1000, 0x3, 0x3c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa555, 0x80000, 0x2, 0x3ce}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac67, 0x1000, 0x2, 0x382}, 0xffffffffffffffff}], 0x4, &(0x7f0000001340)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x1, 0xb70, 0x0, &(0x7f0000000340)=@buf_4k="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"}}, &(0x7f00000013c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001480)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000014c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000015c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000001600), 0x10106, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001640)=0x2) epoll_create(0x628) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x1000009, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000001740)={0x3, &(0x7f0000001780)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f00000017c0), 0x4000190, 0x0) 2m57.242491817s ago: executing program 2 (id=823): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, 0x0, 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000600)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m56.072695895s ago: executing program 2 (id=826): mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000a00)='.\x00', 0x8000, 0x14b) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000a40)={@id={0x2, 0x0, @c}}) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 2m55.556953857s ago: executing program 2 (id=827): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xff7f, 0x7, 0x0, 0x7ff7, 0xf, "68e086e2df361089000000000000000400"}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f0000000200)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$MSR(&(0x7f00000002c0), 0x2, 0x0) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000380), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000440)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendmmsg(r5, &(0x7f0000000700), 0x800001d, 0x0) 2m53.533211341s ago: executing program 6 (id=828): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file1\x00', 0x200) 2m53.264310039s ago: executing program 2 (id=831): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0x9, 0x0, 0x80}, 0x20) 2m51.893048534s ago: executing program 34 (id=831): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0x9, 0x0, 0x80}, 0x20) 2m50.655484099s ago: executing program 6 (id=834): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1000800, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x2, 0x5524, &(0x7f0000000280)="$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") r0 = creat(0x0, 0x182) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000059c0), 0x651, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000005c80)=ANY=[], 0x5000) fallocate(r0, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000005cc0)={0x17c04, 0xffffffffffffffff, 0x6, 0x7fe, 0x8}) lseek(r0, 0x3ff, 0x3) 2m47.864274016s ago: executing program 6 (id=840): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) chdir(&(0x7f0000000540)='./cgroup\x00') fchown(0xffffffffffffffff, 0x0, 0xee01) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000980), 0x208e24b) 2m47.322638712s ago: executing program 35 (id=840): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) chdir(&(0x7f0000000540)='./cgroup\x00') fchown(0xffffffffffffffff, 0x0, 0xee01) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000980), 0x208e24b) 10.255940533s ago: executing program 1 (id=1365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.039774742s ago: executing program 1 (id=1368): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0xb, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 9.953661093s ago: executing program 7 (id=1369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.894909661s ago: executing program 0 (id=1370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8090) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) add_key(0x0, 0x0, &(0x7f0000000940)="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", 0xff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x18, 0x1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000f40)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0xd2f47b3efeeb54bb}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001000)={0x1c, r5, 0x1, 0x74bd2c, 0x25dfcbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x539, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x5010}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}}, 0x0) 8.46515398s ago: executing program 1 (id=1373): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) 7.855700914s ago: executing program 0 (id=1374): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000007c0), 0xc, &(0x7f0000000800)=ANY=[]) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002500)={0xa, 0x4e22, 0x0, @private0}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000002540)={0xa, 0x4e23, 0x0, @private0}, 0x1c) connect$inet6(r1, &(0x7f0000002580)={0xa, 0x4e22, 0x0, @private0}, 0x1c) syz_emit_ethernet(0x56, &(0x7f00000025c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7fffffff}]}}}}}}}}, 0x0) 7.713377364s ago: executing program 1 (id=1376): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x114, 0xfffffffffffffffe) 7.713150215s ago: executing program 7 (id=1377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x2, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0xb, 0x2, r1}) 7.527510795s ago: executing program 0 (id=1378): r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0xa0000681) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) 7.017687947s ago: executing program 7 (id=1381): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0xd, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000000000000000000061157c000000000095000000000000"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 6.524072383s ago: executing program 7 (id=1383): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000440), 0x20200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 6.479011819s ago: executing program 1 (id=1384): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xff7f, 0x7, 0x0, 0x7ff7, 0xf, "68e086e2df361089000000000000000400"}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$MSR(&(0x7f00000002c0), 0x2, 0x0) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r3, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000440)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendmmsg(r5, &(0x7f0000000700), 0x800001d, 0x0) 6.2612665s ago: executing program 0 (id=1385): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mmap(&(0x7f0000d9c000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x6a1f3000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x5) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000200), 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 6.040523008s ago: executing program 7 (id=1386): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x0, 0x9f21d88eb2fac37f, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x8140) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffcfff}, {0x6, 0x3}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0xc03e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x2, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffa, 0x5, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) 5.610693266s ago: executing program 8 (id=1387): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000540)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xdd, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000001c0)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000900)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0x6, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0x80, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4242, 0x0, 0x0, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b80), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000bc0)={0x3, 0x2, 0x0, 'queue1\x00', 0x3}) write$sndseq(r1, &(0x7f0000000c80), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="fdffffff", @ANYRES16=0x0], 0x128}, 0x1, 0x0, 0x0, 0x5}, 0x400c001) r2 = socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x181) setxattr$incfs_metadata(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@known='user.incfs.metadata\x00', 0x0, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000440)={0x18, 0x8, 0x4}) r5 = fsopen(&(0x7f0000000240)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000340)='test_dummy_encryption', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) 5.184285387s ago: executing program 1 (id=1388): socket$kcm(0xa, 0x1, 0x106) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0xe07e872420dfefca) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x22400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x442, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000008940)={0x0, {}, 0x0, {}, 0x4000002, 0x0, 0x19, 0x1, "9e959f16deab7b08aa26e66c4056a516950773ff0000000000eef4fb0efcc1d8a6078ef9d5f8643902dd8f6fac274de9d940ffa5e592bbd48685450d004b0b00", "f625c10e6e0080ffffffffffffffff7e904dc8df6aa3a893ec00347f41be6908", [0x8000000e, 0x80000476]}) open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40804) 5.137640395s ago: executing program 0 (id=1389): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000007c0), 0xc, &(0x7f0000000800)=ANY=[]) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002500)={0xa, 0x4e22, 0x0, @private0}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000002540)={0xa, 0x4e23, 0x0, @private0}, 0x1c) connect$inet6(r1, &(0x7f0000002580)={0xa, 0x4e22, 0x0, @private0}, 0x1c) syz_emit_ethernet(0x56, &(0x7f00000025c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7fffffff}]}}}}}}}}, 0x0) 5.047862579s ago: executing program 8 (id=1390): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) 4.944446903s ago: executing program 0 (id=1391): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000100), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.804839436s ago: executing program 8 (id=1393): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1) 4.397401017s ago: executing program 8 (id=1395): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4.10497291s ago: executing program 5 (id=1396): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syncfs(r0) syz_clone3(&(0x7f0000000480)={0x941400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000580), 0x111, 0x1}}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, &(0x7f0000000380)="0f00d30f009005000000f2f46426660fc7b0d90000000f217af3650f20d2640f787baa260fc75883a5ea000000003901", 0x30}], 0x1, 0x0, &(0x7f0000000440), 0x0) 3.755057502s ago: executing program 5 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mkdirat(0xffffffffffffff9c, 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/llc/socket\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0xf0}, {0x7800}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000dc0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000006340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 3.064517496s ago: executing program 5 (id=1398): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xff7f, 0x7, 0x0, 0x7ff7, 0xf, "68e086e2df361089000000000000000400"}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$MSR(&(0x7f00000002c0), 0x2, 0x0) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r3, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000440)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendmmsg(r5, &(0x7f0000000700), 0x800001d, 0x0) 2.865480721s ago: executing program 8 (id=1399): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x2, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.649819838s ago: executing program 8 (id=1400): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x75b0, 0x31e2dc9471aa16b8, 0x2, 0x6a}, &(0x7f00000000c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f16, 0x4, 0x0, 0x25b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3065, 0x1000, 0x3, 0x3c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa555, 0x80000, 0x2, 0x3ce}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac67, 0x1000, 0x2, 0x382}}], 0x4, &(0x7f0000001340)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x1, 0xb70, 0x0, &(0x7f0000000340)=@buf_4k="951a0330a8a2aaa37df759b4cdaf342e18d3f328fe1e661dcb18fb11d6b632909344ed35a0dd192dfa36f7934f8abdd5e86d72b279817a4e6e6e1fb013fdf877e4688db21685f58a1ed51f835f52e01c11915ca04d0a00432281bd5b600f324ddc328e01d4a59c46692331c5b629cc33d38302280d157ea1898f974dc46162d9aec7093b084ea0c8f1c56909c0c8acfb36afe5ee655316df225243aee8b987438e7e8c5036b063883e705b62a06c7ba8d216f6b3f476223e0f430e99ad6aa63a802606980790af40bbec5616731b25b87fc48775055699e1d40d83040e295a2fdb96e76c3834e2763a08acfd139c6cb684a1cd4b8418065fb01c65d38bd3d4dd40211785c775fa1663004a6f080ba6c18f87bf1de4ce9c4cfcac2c721fd0e5ca1ba5ebeda932d95abf51a6d7d85e9735d211b453853bd3725c98850c64acfe85d20d5e0c6d5c1f5b3e2bb1702579ad66c422030e5ec6ef023e9582b387a100ab23db1cd6d5a337af16e61791b16b6e2ecf0ba518b4056437f30293f84cf9b7931e0b02abead21f9d0ab66ec6845d4fdcafc27f97e410df2fe5ed176e4eafabc95618a665290c21630b30430c976ceb009871009b2df6aa173dcc384d775767b7124a17f9185771b69bd27dfd1f374f2c0cadc022221dcb5470972965900927cf13da831d326043236c7cce725387a8f8e362c3bcde082ad6b5588e2c3b671029111c318b0030fc2465bb7d8e95e0bb3bc4db797bae9d8c6ad4b710fa61d4263def741e2bcf4879487b25d105b39b65c40609088b9a80a87071ed8c05a338b2196be8c42e98ff6fd2e0cedbb5b60a57010bec1b34de3bef21c1497a1b284ca34281c853abb0086a6dfa984a4f63bcd0187f16031bf53cc103c811f8ed47e4fc0273bd4045f5cd335f6deb96e3820acf9f0090be7c2c64218d0b296781c47cd534453c74951dda9bfe04047077c12eccbc5ab2b9f3702a5043e4c88ba31bcabac7332773d440ca3d143b6f91ef76448b3b3b1573250e96f8fa46331f415e8111fdf316e8c971c3e5bc19daa1e92d3c055d7ff8c8e87048406676af2bb62bdbca36766fb3f96c4190684610ba2f99b610e23f07cf2502236e0b6773542bf93b1b3c62cb74800c5ddd47572bce8316868da50277ea2482682a4e56fe29e02e0eca405aed7640c07df6e3781deb9fa110ef36ba383348469e5e20ee46a266888ae798222272e2a9d95252210bb88226ce0d33c940e5377a4d546619260b69204886ebbd6a04ac4dce9681546fe9d04cdf1ace132710c581c94090f7f3f8fa90808fa1ad5f9d2cd84cc05fb9bd998cfb72e29956484ad25c0dddd99386b8f819c2daef9777888f97a8da672afb5a3d0f8af989d2d83f27daa5013016cf67dee82ed7a9473ec05df72d3403b1b4faa39fae5ec0c072adccd951f2caaa3149ef99d8055c76255ef1f592ac4b96babcc22317dc63a8770be0ef1759ce357f5e3287006e222d5701e87c73d90adde5707463486728e923ed969dd7b24edf80905e8c3d56a08085941c84c58c96ca24717d68d706ada31eaa5449ea53ac3b07492607b1390153ebc3347843c2c4db6cd5374744c6ac749c9e21803544260a310519564d0bfda7e86bb57ff496d08beb2bbf04850c8df5c6f69f2cf53f076fe0748c09fef885b6d756a8c5f09c205ed2a9ae04e7829b8ec9937c68c76d81a933d8c2d89fb46361a9f4fbdac67ad772ddd61bb4e9db59069b927dcb58aba27922e9a2210c8c6c47131e35f40e046f1cadb2eae9b8ced83a05baedc219bb3f2d1836be2074e3a3fd3408cba6744ff7cf1ba90b1e6695600e2f18ce1b45d69013215ed88ddddf0f8a1b4c4baa2c2c943dc66ed576133ca937a07c107f756d1f3dfd27cff674465b3ed1ec5e598394cc29806abe9b929ad599486d0565c42b0346f5db9c58330e7d1d56171796d9539abcf637e2dd179479082311c557e74e2a373097cf7263812877e81daa7f5e7d9b52d8b41ba0e3f30d75910ced1eaa42eccfb5cc5acecfc6677a6c07b61c23d8b8255a80159df935b2beea209d4724118b6701393239ec80a5bd01ab3c55ba1a8f8d61b6ff90e6d27ea447e06e492f2d94fd7d46f6643bd599c40b47df4c61daff1262f235813bdaa09457d8a0ff349efb6314a7426b79597c37d731923a827974fdc7a43230020e39ec480765d8834ee37e8713c2cdf8552cd797beb076f6ac008c6e5e6d628767b1e8ca4226f1ac5d4363a5a557034ebc83e7f8fe743db3781ed437a1c67e553506cdec9ec6b04c4d3efe72700497a0ee10fbf73a6297110fc1bd02b8feb43496b6f42836072eefa788191a28bee34b3ac1d10a0b8d3931f12c0fa8a4fb18da8b6b4b657fba8231ac5c1be3374158f684739209ae90b3aa410c1140323531d47c698524c050a170cf14c06f8187c7d7fa889e811f98e00ae8ecf73c388076ff98f4425b222c7299e124c0937b0c4c9be47a6610fd6063df00b87f293c4a7c70c8ca5fbbaa74d48c6949e086effc3479c19178ea009e919b55fdcd0cc3ac2aee14e845ca53995aa70422a8d5897dd1e56670e3e044e22b525bc0c154a2c8aba9525cc769158a082198262375108079eff3aec506003735f51b7af016908e0fd126f789a2e5c08df9f3a5360bf6c13b61f8323bd6b7453aff441c59a77d8e6a2c01fd4014c656a76ea223e31bdb46dc934421d24074e1345a83e54f88f09ed120f571624d1a8b03a6502f2a36789b6f5e35ca3c38c4d93d17fdd5dd86a1d2d4f3cc1dbbff0e1454dfae8702ecdd8b6840529abf9d3b5729f50b8c0bf7525e9e5b5003abaf47767f2f341f1d8f0cabe4f82810dd5f06a18aef3433fd75ae1bf03fa9590c73fe1b0ba5cbcf6d4c840a1a42d843376672c798ad458fa3609c8cf5692c7f7b988747c2a227bdfe073efc98ab93d1e9f107a954753691845ed51964a4630bb8c34e8d1158e6583e074b0603804217670f4862ece321aa8816ab92bc548f88059ea6ff6cd3f17f8e9858fb07694e5eceba341f43066df16ddb3d27c44a9be57b423b90c989e3c2a36d694b87c059d894ffc43c4c546f2f9142893dcd43452cec1567658d929de68bf4dff3ec8ea3dd6a60c2573f7cc52567cbfdf7f0a46503b7dbfe74268b56fb484d8a3873c204c715f562a62664a06b8abaeb91c0fff646c2f6a56a46d17d25a733b635aad81c210db73d80a7715c44c8c28b2486706374755d1a89d2374b501634b7071175b23c63ba04b2c64cb2dd0fa081b5df96ab5d68f8b6133767c205fe25e86363eff2cb019a316851aa8f1ffa3787b5fc31a0d52d0b1d7942359af724ff6b21b5491eca1cb524b26c121166827a52c777cc4ba1d212841dee562c02317712df0c7de50872053c389bc2d1be8b514483e91b51932922548fc7472916c6f6590f0c2bba7ec5bf2467e2244aa417463514f4d91c2042aa8acd5ee47b92a4a2c3022dc1f20a33ec4c9c5aa90c8efd1b83eec513852d7f502050513322fb305e8d3858e9d7a0da6e2039746aa8b0a2c6dbf46574bf45dcdb4b0a15c88784866501c8240520c88736d7dac5c9b7cdad97d28856a04a7e6f27434127f8a1867a405dfa83bb3aa0ac393757a0d00c28d6b8078bfbde936e3c71ce599174d4b5c9ec2ceaf631316bfba34fe00943f3cdfd508487beb4f29e7a4811b19786caacaf06e26cae24427e3434ada7687769976cd31b5b615fa22a3e1bd02f5838e17fb306856c094f0f820844d91ccb33e5d063cd04074939fc61a0fa4dfedac27fcfc5ca4edd2e7ded3a8431cba804fed9ad749c0fbdb370377242144c36c0c97d88ac624d389536f184308b0c76b0808f03a94f357f57bc49f7a8daecb9704b289b2655178b58137254e8b46f6356bf248fd76e855183f4ce53e216ffeac2572d4c1d0b1262b4be4d5444a118985e84f719c60fa3ce0b69310cddef9b656c63b042c28c8abf16fa7db5df317f82bdec1e085177374e9fe8bff17babae5de3f6cb557561f17a4effa6a8639e18f5bd32df5e70b57dece9ec78f361a00e95b287689b01b3862e60dbd5ff56b8c9b923f4ca926e3a2b68dc1199b7db4ebd80deb4c780cc24db2dd0149b05e542cd977c0a15f01f35bc6503b5ad777abf5811848d39e4f54b3067f63b04fefcd2639ea869e279074d804a0fcf531b46a2aa0ede9ef5feacdfbec506d13b532867c6b848d2300002ff29c505e1d8c397b4a8fbccdd82c07bbb2e41fd3cc4bbfde412877b410ab4ed6bd901a7a9a79b763c4437ab7fd5ea85307d927c3d729312077de20e0cfb44935220063cd1df8ffece6e767cda179cbb8912d08ffe7464f92a8cf60f79f1ad5e457b50d39c27fd05ff82d0b5e0e84e66deb09037778899609ce422c88ca66e1b515556ef0e448284afa82ebd44b666c4717da2f10ab50029397ad45f69541532d33bdccfaa5a452799faf0b2c47a44d3cc34ae2416b145f112a65e50ebdd9e38d4afd60b6482d777b39c5f0b50c0dfdc4b1fb2973420a81bca9f6154785a363479d2ef1be9da7f470d83fb2572159180eaba2e6f514d884ff3491385473662d2c83b1f24a9fc7a6ff9961ef12951e406886c33141464e00871d1742fb1ade68e7fc2777bfa9d65b64be2ec4afb11d07f3b48087f94e42ccc42e54835842d498795ee3103b3b0b5a85e3d3eab8c95a8a7e08bb63d2d560f1a0b451ff60cddc1ebf109698dd8f61c3fe5e4fc423814180376d0d36445f00fb27563d88fd96fbfbdec30338506ca6baf5f87a779f5d8c47a2db40a153d6289239c4707b3b55d7d75683f890c231793efc59fe73710ac16a2bd9352d64d603977a61bb7ddd0cdccbc0b1ad496e4082df09f6f8a541c4053ff2a4efdd6b10ce67590a95991ebae30945a38089f0f288149295f52e8bc135be9bba833caf1e9303810c7a7efef0584cbab539640080928d70d7428c74dc70386adf50c34bfafe1bd3d901329061a7119c2ed70e8c18bdf9f618355016895a332bee6b9b37ff8993719ea8b562c75191e008658d7d2af2ace7750c3e72b83da29455af5023f07d91c6e178610dc8c98a7d1a5909816f1edc4c30611fc79cd587c1a3306a55294f301516d5f3e4ced0284dd78777d0be1674cf6ac0e5864c4f5f03b7fad71f89adc732d4195b4753a6b169b34f1dbf4cc61589113c4e1cb5219078839cf87808810bd7bbcae6029be0b5b1e0d67eefd4a6538f977d197c51f34ab6d9c514b1f7d69cad5c23716fb8a5ca455813e0c1b3391961ebe679e485173a112fd2a13541052bbc3febfbc3dd2452f259877de243710c93201796b6933d850ff5977adf24efb3b7e6bc413a4ec00d736840070b6962695599c9c63e9e5f6bd397584a40969a6a93fc2d8cd5c9eca1d05ad02a28dff3fa7bb150ffd6bbef503d82ff5a9255aff1e188ad60b1d8d55a265647e9effb976d2b38d09b062c092201305baa5fdf7f95e953735c3a95f5bd83f92ae0143b74b3fe43db85b501d6c3dcce5f70c6138aeaa313ee29386ae4b8ade6c826022ad423bb06ced22491de14ca251721f3104e76c9db009d1bf8c3e0a11f1c6a87d9dc7f6a178fee67542c2822cf171acdf0dfdda9cd207aa0784dc21dba12158158b2dc9517d3b2defbf0489595f967b6ea5572dde26711cfcc6c7dce19c094d2ae7ff175aaa35cf69537402c3776ec43e5eaeb7e5e9de493935efe36bd4f05cb51f3f9bab08bfe053f7eb2a26345ab17d9d0cb73eb22e88121a7a51f5421494cd8bb2d00992ab94e0b88886c53878f48bbd37"}}, &(0x7f00000013c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001480)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000014c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000015c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001600), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001740)={0x3, &(0x7f0000001780)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f00000017c0), 0x4000190, 0x0) 1.531834238s ago: executing program 5 (id=1401): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000007c0), 0xc, &(0x7f0000000800)=ANY=[]) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002500)={0xa, 0x4e22, 0x0, @private0}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000002540)={0xa, 0x4e23, 0x0, @private0}, 0x1c) connect$inet6(r1, &(0x7f0000002580)={0xa, 0x4e22, 0x0, @private0}, 0x1c) syz_emit_ethernet(0x56, &(0x7f00000025c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7fffffff}]}}}}}}}}, 0x0) 1.292992511s ago: executing program 7 (id=1402): openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$MEMREADOOB(r1, 0xc00c4d04, &(0x7f0000000640)={0x5, 0x82, &(0x7f0000000400)="4504abc72f8b931be088bf611468ec80998d7b1b40aeec7927e20b8853f9e1d2b0519a7696b7791c64b9809826e4f6e0eec541aaf64fa9433e9925d839251da52166083e2bbaff69ef7afe53a48c7fcde1a402832a85cf6183b07c6ab4a3fd155c77aabd092e6aadaae4c41b9f50755104c89656c1c02137066b9c23f2e1761f7555"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f07d860b02ffed56c8e87181fef57148d14b0a4b887c94260d313a440ca0b91ed6af131ac2b0014a6b9eba5fe8ea4afa0d6682156bc4645fd0aceba49cd181cf2d73d1ce1905d190a753e008d971bb355240448cfd4f92"], 0x50) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz0\x00'}) 1.163755512s ago: executing program 5 (id=1403): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) 0s ago: executing program 5 (id=1404): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): tering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.321451][ T109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.489493][ T109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.546448][ T9023] loop6: detected capacity change from 0 to 40427 [ 385.565961][ T9023] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 385.565984][ T9023] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 385.591485][ T9023] F2FS-fs (loop6): invalid crc value [ 385.685028][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.698234][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.707596][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.716346][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.716912][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.042268][ T9023] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 386.105532][ T9023] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 386.105559][ T9023] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 386.381302][ T109] bridge_slave_1: left allmulticast mode [ 386.381328][ T109] bridge_slave_1: left promiscuous mode [ 386.381537][ T109] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.388238][ T109] bridge_slave_0: left allmulticast mode [ 386.388261][ T109] bridge_slave_0: left promiscuous mode [ 386.425995][ T109] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.600049][ T8634] syz-executor: attempt to access beyond end of device [ 386.600049][ T8634] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 386.601419][ T8634] syz-executor: attempt to access beyond end of device [ 386.601419][ T8634] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 386.883006][ T109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.887029][ T109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.907925][ T109] bond0 (unregistering): Released all slaves [ 387.167038][ T109] tipc: Left network mode [ 387.247322][ T5828] kworker/u8:10: attempt to access beyond end of device [ 387.247322][ T5828] loop6: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 387.247408][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u8:10 Tainted: G Y syzkaller #0 PREEMPT(full) [ 387.247436][ T5828] Tainted: [Y]=FORCED_BIND [ 387.247444][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.247457][ T5828] Workqueue: writeback wb_workfn (flush-7:6) [ 387.247489][ T5828] Call Trace: [ 387.247498][ T5828] [ 387.247507][ T5828] dump_stack_lvl+0xe8/0x150 [ 387.247533][ T5828] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 387.247562][ T5828] f2fs_write_end_bio+0xda7/0x11c0 [ 387.247600][ T5828] __submit_merged_bio+0x258/0x6a0 [ 387.247620][ T5828] ? rcu_is_watching+0x16/0xb0 [ 387.247647][ T5828] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 387.247672][ T5828] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 387.247719][ T5828] f2fs_write_data_pages+0x2a13/0x36e0 [ 387.247774][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 387.247837][ T5828] ? __pfx_read_node_cache+0x10/0x10 [ 387.247947][ T5828] ? __lock_acquire+0x747/0x2de0 [ 387.247984][ T5828] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 387.248047][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 387.248069][ T5828] do_writepages+0x338/0x560 [ 387.248100][ T5828] ? reacquire_held_locks+0x117/0x1a0 [ 387.248119][ T5828] ? writeback_sb_inodes+0x450/0x1af0 [ 387.248145][ T5828] __writeback_single_inode+0x136/0x1220 [ 387.248168][ T5828] ? do_raw_spin_unlock+0xf5/0x200 [ 387.248192][ T5828] writeback_sb_inodes+0x9de/0x1af0 [ 387.248211][ T5828] ? __lock_acquire+0x747/0x2de0 [ 387.248237][ T5828] ? __css_rstat_updated+0x237/0x540 [ 387.248269][ T5828] ? lock_acquire+0x115/0x350 [ 387.248294][ T5828] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 387.248361][ T5828] ? rcu_is_watching+0x16/0xb0 [ 387.248383][ T5828] ? queue_io+0x2d3/0x470 [ 387.248404][ T5828] wb_writeback+0x41c/0xad0 [ 387.248426][ T5828] ? queue_io+0x231/0x470 [ 387.248452][ T5828] ? __pfx_wb_writeback+0x10/0x10 [ 387.248469][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.248505][ T5828] wb_workfn+0x431/0x10f0 [ 387.248545][ T5828] ? __pfx_wb_workfn+0x10/0x10 [ 387.248579][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.248608][ T5828] ? lock_acquire+0x115/0x350 [ 387.248636][ T5828] ? rcu_is_watching+0x16/0xb0 [ 387.248657][ T5828] ? process_scheduled_works+0x97a/0x1630 [ 387.248680][ T5828] process_scheduled_works+0xc3d/0x1630 [ 387.248734][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.248763][ T5828] ? assign_work+0x3cf/0x5d0 [ 387.248789][ T5828] worker_thread+0xa47/0xfb0 [ 387.248838][ T5828] kthread+0x38b/0x480 [ 387.248857][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 387.248875][ T5828] ? __pfx_kthread+0x10/0x10 [ 387.248895][ T5828] ret_from_fork+0x514/0xb70 [ 387.248920][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 387.248940][ T5828] ? __switch_to+0xc78/0x1410 [ 387.248964][ T5828] ? __pfx_kthread+0x10/0x10 [ 387.248985][ T5828] ret_from_fork_asm+0x1a/0x30 [ 387.249023][ T5828] [ 387.258472][ T5828] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 387.258548][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u8:10 Tainted: G Y syzkaller #0 PREEMPT(full) [ 387.258577][ T5828] Tainted: [Y]=FORCED_BIND [ 387.258585][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.258599][ T5828] Workqueue: writeback wb_workfn (flush-7:6) [ 387.258628][ T5828] Call Trace: [ 387.258637][ T5828] [ 387.258645][ T5828] dump_stack_lvl+0xe8/0x150 [ 387.258670][ T5828] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 387.258698][ T5828] f2fs_write_end_bio+0xda7/0x11c0 [ 387.258739][ T5828] __submit_merged_bio+0x258/0x6a0 [ 387.258759][ T5828] ? rcu_is_watching+0x16/0xb0 [ 387.258784][ T5828] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 387.258809][ T5828] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 387.258853][ T5828] f2fs_write_data_pages+0x2a13/0x36e0 [ 387.258908][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 387.258969][ T5828] ? __pfx_read_node_cache+0x10/0x10 [ 387.259012][ T5828] ? __lock_acquire+0x747/0x2de0 [ 387.259047][ T5828] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 387.259070][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 387.259092][ T5828] do_writepages+0x338/0x560 [ 387.259121][ T5828] ? reacquire_held_locks+0x117/0x1a0 [ 387.259140][ T5828] ? writeback_sb_inodes+0x450/0x1af0 [ 387.259165][ T5828] __writeback_single_inode+0x136/0x1220 [ 387.259187][ T5828] ? do_raw_spin_unlock+0xf5/0x200 [ 387.259212][ T5828] writeback_sb_inodes+0x9de/0x1af0 [ 387.259230][ T5828] ? __lock_acquire+0x747/0x2de0 [ 387.259255][ T5828] ? __css_rstat_updated+0x237/0x540 [ 387.259280][ T5828] ? lock_acquire+0x115/0x350 [ 387.259306][ T5828] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 387.259372][ T5828] ? rcu_is_watching+0x16/0xb0 [ 387.259391][ T5828] ? queue_io+0x2d3/0x470 [ 387.259413][ T5828] wb_writeback+0x41c/0xad0 [ 387.259434][ T5828] ? queue_io+0x231/0x470 [ 387.259459][ T5828] ? __pfx_wb_writeback+0x10/0x10 [ 387.259474][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.259509][ T5828] wb_workfn+0x431/0x10f0 [ 387.259544][ T5828] ? __pfx_wb_workfn+0x10/0x10 [ 387.259576][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.259603][ T5828] ? lock_acquire+0x115/0x350 [ 387.259630][ T5828] ? rcu_is_watching+0x16/0xb0 [ 387.259650][ T5828] ? process_scheduled_works+0x97a/0x1630 [ 387.259671][ T5828] process_scheduled_works+0xc3d/0x1630 [ 387.259720][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.259747][ T5828] ? assign_work+0x3cf/0x5d0 [ 387.259771][ T5828] worker_thread+0xa47/0xfb0 [ 387.259815][ T5828] kthread+0x38b/0x480 [ 387.259834][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 387.259851][ T5828] ? __pfx_kthread+0x10/0x10 [ 387.259870][ T5828] ret_from_fork+0x514/0xb70 [ 387.259893][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 387.259912][ T5828] ? __switch_to+0xc78/0x1410 [ 387.259934][ T5828] ? __pfx_kthread+0x10/0x10 [ 387.259954][ T5828] ret_from_fork_asm+0x1a/0x30 [ 387.259988][ T5828] [ 387.269117][ T5828] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 387.269194][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u8:10 Tainted: G Y syzkaller #0 PREEMPT(full) [ 387.269221][ T5828] Tainted: [Y]=FORCED_BIND [ 387.269229][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.269241][ T5828] Workqueue: writeback wb_workfn (flush-7:6) [ 387.269269][ T5828] Call Trace: [ 387.269277][ T5828] [ 387.269285][ T5828] dump_stack_lvl+0xe8/0x150 [ 387.269309][ T5828] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 387.269335][ T5828] f2fs_write_end_bio+0xda7/0x11c0 [ 387.269380][ T5828] __submit_merged_bio+0x258/0x6a0 [ 387.269399][ T5828] ? rcu_is_watching+0x16/0xb0 [ 387.269424][ T5828] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 387.269447][ T5828] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 387.269490][ T5828] f2fs_write_data_pages+0x2a13/0x36e0 [ 387.269543][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 387.269605][ T5828] ? __pfx_read_node_cache+0x10/0x10 [ 387.269646][ T5828] ? __lock_acquire+0x747/0x2de0 [ 387.269680][ T5828] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 387.269703][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 387.269724][ T5828] do_writepages+0x338/0x560 [ 387.269752][ T5828] ? reacquire_held_locks+0x117/0x1a0 [ 387.269770][ T5828] ? writeback_sb_inodes+0x450/0x1af0 [ 387.269794][ T5828] __writeback_single_inode+0x136/0x1220 [ 387.269816][ T5828] ? do_raw_spin_unlock+0xf5/0x200 [ 387.269839][ T5828] writeback_sb_inodes+0x9de/0x1af0 [ 387.269857][ T5828] ? __lock_acquire+0x747/0x2de0 [ 387.269881][ T5828] ? __css_rstat_updated+0x237/0x540 [ 387.269905][ T5828] ? lock_acquire+0x115/0x350 [ 387.269930][ T5828] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 387.269989][ T5828] ? rcu_is_watching+0x16/0xb0 [ 387.270007][ T5828] ? queue_io+0x2d3/0x470 [ 387.270029][ T5828] wb_writeback+0x41c/0xad0 [ 387.270050][ T5828] ? queue_io+0x231/0x470 [ 387.270074][ T5828] ? __pfx_wb_writeback+0x10/0x10 [ 387.270090][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.270125][ T5828] wb_workfn+0x431/0x10f0 [ 387.270161][ T5828] ? __pfx_wb_workfn+0x10/0x10 [ 387.270192][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.270219][ T5828] ? lock_acquire+0x115/0x350 [ 387.270246][ T5828] ? rcu_is_watching+0x16/0xb0 [ 387.270266][ T5828] ? process_scheduled_works+0x97a/0x1630 [ 387.270286][ T5828] process_scheduled_works+0xc3d/0x1630 [ 387.270337][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.270370][ T5828] ? assign_work+0x3cf/0x5d0 [ 387.270395][ T5828] worker_thread+0xa47/0xfb0 [ 387.270440][ T5828] kthread+0x38b/0x480 [ 387.270459][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 387.270475][ T5828] ? __pfx_kthread+0x10/0x10 [ 387.270494][ T5828] ret_from_fork+0x514/0xb70 [ 387.270516][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 387.270536][ T5828] ? __switch_to+0xc78/0x1410 [ 387.270558][ T5828] ? __pfx_kthread+0x10/0x10 [ 387.270578][ T5828] ret_from_fork_asm+0x1a/0x30 [ 387.270615][ T5828] [ 387.278957][ T5828] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 387.779878][ T54] Bluetooth: hci0: command tx timeout [ 389.269072][ T109] hsr_slave_0: left promiscuous mode [ 389.270217][ T109] hsr_slave_1: left promiscuous mode [ 389.272486][ T109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.272507][ T109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.277079][ T109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.277099][ T109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.767549][ T109] veth1_macvtap: left promiscuous mode [ 389.767588][ T109] veth0_macvtap: left promiscuous mode [ 389.767706][ T109] veth1_vlan: left promiscuous mode [ 389.767771][ T109] veth0_vlan: left promiscuous mode [ 389.859813][ T54] Bluetooth: hci0: command tx timeout [ 390.159259][ T9115] overlayfs: failed to resolve './file0': -2 [ 390.232176][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.236671][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.261214][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.264241][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.266689][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.500710][ T9123] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 390.512843][ T109] team0 (unregistering): Port device team_slave_1 removed [ 390.550076][ T109] team0 (unregistering): Port device team_slave_0 removed [ 390.811910][ T9113] loop1: detected capacity change from 0 to 40427 [ 390.842670][ T9113] F2FS-fs (loop1): invalid crc value [ 391.128161][ T9113] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 391.169607][ T9113] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 391.938795][ T54] Bluetooth: hci0: command tx timeout [ 391.949742][ T9137] loop5: detected capacity change from 0 to 40427 [ 391.964937][ T9137] F2FS-fs (loop5): invalid crc value [ 392.026813][ T109] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.199168][ T9137] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 392.255473][ T9137] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 392.304992][ T109] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.339871][ T54] Bluetooth: hci4: command tx timeout [ 392.450147][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.450253][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.450410][ T9053] bridge_slave_0: entered allmulticast mode [ 392.460100][ T9053] bridge_slave_0: entered promiscuous mode [ 392.497366][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.497531][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.497671][ T9053] bridge_slave_1: entered allmulticast mode [ 392.527302][ T9053] bridge_slave_1: entered promiscuous mode [ 392.677806][ T109] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.728103][ T9169] loop1: detected capacity change from 0 to 40427 [ 392.739520][ T9169] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 392.739547][ T9169] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 392.887133][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.954431][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.036231][ T109] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.180192][ T9169] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 393.229320][ T9053] team0: Port device team_slave_0 added [ 393.247719][ T9053] team0: Port device team_slave_1 added [ 393.280309][ T9169] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 393.280339][ T9169] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 393.318308][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.318326][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.318353][ T9053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.424541][ T9186] ip_tables: iptables: counters copy to user failed while replacing table [ 393.476805][ T9186] loop5: detected capacity change from 0 to 512 [ 393.764268][ T9186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.058576][ T54] Bluetooth: hci0: command tx timeout [ 394.123815][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 394.140131][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.140150][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.140177][ T9053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.203653][ T9190] ip_tables: iptables: counters copy to user failed while replacing table [ 394.419811][ T54] Bluetooth: hci4: command tx timeout [ 394.635251][ T5611] syz-executor: attempt to access beyond end of device [ 394.635251][ T5611] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 394.666682][ T9053] hsr_slave_0: entered promiscuous mode [ 394.675696][ T9053] hsr_slave_1: entered promiscuous mode [ 394.676444][ T9053] debugfs: 'hsr0' already exists in 'hsr' [ 394.676463][ T9053] Cannot create hsr debugfs directory [ 394.703027][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Tainted: G Y syzkaller #0 PREEMPT(full) [ 394.703059][ T5611] Tainted: [Y]=FORCED_BIND [ 394.703067][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.703079][ T5611] Call Trace: [ 394.703087][ T5611] [ 394.703096][ T5611] dump_stack_lvl+0xe8/0x150 [ 394.703124][ T5611] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 394.703152][ T5611] f2fs_write_end_bio+0xda7/0x11c0 [ 394.703192][ T5611] __submit_merged_bio+0x258/0x6a0 [ 394.703212][ T5611] ? rcu_is_watching+0x16/0xb0 [ 394.703238][ T5611] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 394.703263][ T5611] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 394.703309][ T5611] f2fs_write_data_pages+0x2a13/0x36e0 [ 394.703367][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 394.703389][ T5611] ? is_bpf_text_address+0x26/0x2b0 [ 394.703419][ T5611] ? arch_stack_walk+0xfb/0x150 [ 394.703468][ T5611] ? add_lock_to_list+0xc7/0x100 [ 394.703490][ T5611] ? lockdep_unlock+0x5c/0xd0 [ 394.703507][ T5611] ? __lock_acquire+0x1511/0x2de0 [ 394.703556][ T5611] ? do_raw_spin_lock+0x12b/0x2f0 [ 394.703587][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 394.703607][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 394.703629][ T5611] do_writepages+0x338/0x560 [ 394.703667][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 394.703691][ T5611] filemap_fdatawrite+0x1e9/0x2f0 [ 394.703714][ T5611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 394.703778][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 394.703803][ T5611] f2fs_sync_dirty_inodes+0x471/0x970 [ 394.703840][ T5611] f2fs_write_checkpoint+0x860/0x24d0 [ 394.703898][ T5611] kill_f2fs_super+0x2dc/0x700 [ 394.703930][ T5611] ? rcu_do_enqueue+0x616/0x870 [ 394.703950][ T5611] ? lockdep_hardirqs_on+0x7b/0x110 [ 394.703972][ T5611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 394.704008][ T5611] ? __pfx_call_rcu+0x10/0x10 [ 394.704032][ T5611] ? shrinker_free+0x2a7/0x3b0 [ 394.704055][ T5611] deactivate_locked_super+0xbe/0x110 [ 394.704079][ T5611] cleanup_mnt+0x204/0x2a0 [ 394.704106][ T5611] task_work_run+0x1d9/0x260 [ 394.704129][ T5611] ? __pfx_task_work_run+0x10/0x10 [ 394.704158][ T5611] exit_to_user_mode_loop+0x204/0x770 [ 394.704179][ T5611] ? rcu_is_watching+0x16/0xb0 [ 394.704202][ T5611] do_syscall_64+0x328/0x520 [ 394.704221][ T5611] ? trace_irq_disable+0x3b/0x140 [ 394.704239][ T5611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.704261][ T5611] ? clear_bhb_loop+0x70/0xc0 [ 394.704283][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.704303][ T5611] RIP: 0033:0x7fbdd239f417 [ 394.704322][ T5611] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 394.704338][ T5611] RSP: 002b:00007ffdaf0dc478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 394.704360][ T5611] RAX: 0000000000000000 RBX: 00007fbdd2434ccb RCX: 00007fbdd239f417 [ 394.704374][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaf0dc530 [ 394.704387][ T5611] RBP: 00007ffdaf0dc530 R08: 00007ffdaf0dd530 R09: 00000000ffffffff [ 394.704402][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaf0dd5c0 [ 394.704415][ T5611] R13: 00007fbdd2434ccb R14: 000000000006051a R15: 00007ffdaf0dd600 [ 394.704449][ T5611] [ 394.704469][ T5611] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 394.708016][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Tainted: G Y syzkaller #0 PREEMPT(full) [ 394.708046][ T5611] Tainted: [Y]=FORCED_BIND [ 394.708054][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.708067][ T5611] Call Trace: [ 394.708075][ T5611] [ 394.708084][ T5611] dump_stack_lvl+0xe8/0x150 [ 394.708110][ T5611] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 394.708138][ T5611] f2fs_write_end_bio+0xda7/0x11c0 [ 394.708176][ T5611] __submit_merged_bio+0x258/0x6a0 [ 394.708197][ T5611] ? rcu_is_watching+0x16/0xb0 [ 394.708221][ T5611] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 394.708245][ T5611] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 394.708290][ T5611] f2fs_write_data_pages+0x2a13/0x36e0 [ 394.708348][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 394.708367][ T5611] ? is_bpf_text_address+0x26/0x2b0 [ 394.708399][ T5611] ? arch_stack_walk+0xfb/0x150 [ 394.708443][ T5611] ? add_lock_to_list+0xc7/0x100 [ 394.708464][ T5611] ? lockdep_unlock+0x5c/0xd0 [ 394.708481][ T5611] ? __lock_acquire+0x1511/0x2de0 [ 394.708528][ T5611] ? do_raw_spin_lock+0x12b/0x2f0 [ 394.708559][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 394.708579][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 394.708600][ T5611] do_writepages+0x338/0x560 [ 394.708631][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 394.708653][ T5611] filemap_fdatawrite+0x1e9/0x2f0 [ 394.708676][ T5611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 394.708742][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 394.708766][ T5611] f2fs_sync_dirty_inodes+0x471/0x970 [ 394.708803][ T5611] f2fs_write_checkpoint+0x860/0x24d0 [ 394.708860][ T5611] kill_f2fs_super+0x2dc/0x700 [ 394.708884][ T5611] ? rcu_do_enqueue+0x616/0x870 [ 394.708904][ T5611] ? lockdep_hardirqs_on+0x7b/0x110 [ 394.708940][ T5611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 394.708975][ T5611] ? __pfx_call_rcu+0x10/0x10 [ 394.709000][ T5611] ? shrinker_free+0x2a7/0x3b0 [ 394.709023][ T5611] deactivate_locked_super+0xbe/0x110 [ 394.709047][ T5611] cleanup_mnt+0x204/0x2a0 [ 394.709072][ T5611] task_work_run+0x1d9/0x260 [ 394.709094][ T5611] ? __pfx_task_work_run+0x10/0x10 [ 394.709124][ T5611] exit_to_user_mode_loop+0x204/0x770 [ 394.709143][ T5611] ? rcu_is_watching+0x16/0xb0 [ 394.709168][ T5611] do_syscall_64+0x328/0x520 [ 394.709186][ T5611] ? trace_irq_disable+0x3b/0x140 [ 394.709203][ T5611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.709223][ T5611] ? clear_bhb_loop+0x70/0xc0 [ 394.709244][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.709263][ T5611] RIP: 0033:0x7fbdd239f417 [ 394.709282][ T5611] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 394.709299][ T5611] RSP: 002b:00007ffdaf0dc478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 394.709320][ T5611] RAX: 0000000000000000 RBX: 00007fbdd2434ccb RCX: 00007fbdd239f417 [ 394.709335][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaf0dc530 [ 394.709348][ T5611] RBP: 00007ffdaf0dc530 R08: 00007ffdaf0dd530 R09: 00000000ffffffff [ 394.709362][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaf0dd5c0 [ 394.709376][ T5611] R13: 00007fbdd2434ccb R14: 000000000006051a R15: 00007ffdaf0dd600 [ 394.709410][ T5611] [ 394.842837][ T5611] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 395.030140][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.856232][ T109] bridge_slave_1: left allmulticast mode [ 395.856259][ T109] bridge_slave_1: left promiscuous mode [ 395.856468][ T109] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.865977][ T109] bridge_slave_0: left allmulticast mode [ 395.866001][ T109] bridge_slave_0: left promiscuous mode [ 395.866191][ T109] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.531093][ T5620] Bluetooth: hci4: command tx timeout [ 396.734596][ T9216] loop1: detected capacity change from 0 to 256 [ 397.438094][ T9222] loop1: detected capacity change from 0 to 16 [ 397.512499][ T9222] erofs (device loop1): mounted with root inode @ nid 36. [ 398.005772][ T109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.020778][ T109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.025284][ T109] bond0 (unregistering): Released all slaves [ 398.041551][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 398.240103][ T9226] bridge_slave_1: left allmulticast mode [ 398.240133][ T9226] bridge_slave_1: left promiscuous mode [ 398.240407][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.245384][ T9226] bridge_slave_0: left allmulticast mode [ 398.245409][ T9226] bridge_slave_0: left promiscuous mode [ 398.245590][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.378704][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 398.524045][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.524214][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.524331][ T9116] bridge_slave_0: entered allmulticast mode [ 398.525895][ T9116] bridge_slave_0: entered promiscuous mode [ 398.568790][ T980] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 398.578969][ T5620] Bluetooth: hci4: command tx timeout [ 398.606322][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.606468][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.606584][ T9116] bridge_slave_1: entered allmulticast mode [ 398.628698][ T9116] bridge_slave_1: entered promiscuous mode [ 398.719066][ T980] usb 6-1: Using ep0 maxpacket: 8 [ 398.723699][ T980] usb 6-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 398.726465][ T980] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 398.726490][ T980] usb 6-1: config 179 has no interface number 0 [ 398.726538][ T980] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 398.726564][ T980] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 398.726593][ T980] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 398.726617][ T980] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 398.726640][ T980] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 398.726676][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.832771][ T9232] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 398.897511][ T109] hsr_slave_0: left promiscuous mode [ 398.898152][ T109] hsr_slave_1: left promiscuous mode [ 398.908122][ T109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.908144][ T109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.910440][ T109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.910459][ T109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.935782][ T109] veth1_macvtap: left promiscuous mode [ 398.935906][ T109] veth0_macvtap: left promiscuous mode [ 398.935999][ T109] veth1_vlan: left promiscuous mode [ 398.936059][ T109] veth0_vlan: left promiscuous mode [ 399.386662][ T5714] usb 6-1: USB disconnect, device number 3 [ 399.386740][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 399.386787][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 399.810250][ T109] team0 (unregistering): Port device team_slave_1 removed [ 399.838242][ T109] team0 (unregistering): Port device team_slave_0 removed [ 400.241256][ T9256] overlayfs: failed to clone upperpath [ 400.624857][ T9116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.658221][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 400.671862][ T9116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.781657][ T9116] team0: Port device team_slave_0 added [ 400.784309][ T9116] team0: Port device team_slave_1 added [ 400.821972][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.821989][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.822014][ T9116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.823761][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.823774][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.823801][ T9116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.295841][ T9116] hsr_slave_0: entered promiscuous mode [ 401.304545][ T9263] ip_tables: iptables: counters copy to user failed while replacing table [ 401.368558][ T9263] loop5: detected capacity change from 0 to 512 [ 402.052536][ T9116] hsr_slave_1: entered promiscuous mode [ 402.078484][ T9116] debugfs: 'hsr0' already exists in 'hsr' [ 402.078508][ T9116] Cannot create hsr debugfs directory [ 403.132075][ T9263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.832918][ T9053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 403.867665][ T9053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.879563][ T9053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 403.901961][ T9053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.991787][ T9053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 404.008600][ T9053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.029715][ T9053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 404.064121][ T9053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.118936][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.592861][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 408.498311][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.635856][ T9116] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 408.665841][ T9116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.673921][ T9116] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 408.696472][ T9116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.705241][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.709340][ T9116] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 408.733166][ T9116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.733952][ T9116] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 408.749599][ T9116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.776831][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.776918][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.847263][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.847365][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.233753][ T9116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.281146][ T9116] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.304849][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.304949][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.334390][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.334520][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.453743][ T9116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.908322][ T9345] loop1: detected capacity change from 0 to 4096 [ 409.956007][ T9345] EXT4-fs (loop1): DAX unsupported by block device. [ 409.972574][ T9345] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 410.165890][ T9352] ip_tables: iptables: counters copy to user failed while replacing table [ 410.578225][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 413.119013][ T9361] loop5: detected capacity change from 0 to 256 [ 413.803599][ T9361] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 414.248902][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.522304][ T9116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.997974][ T9053] veth0_vlan: entered promiscuous mode [ 416.031181][ T9053] veth1_vlan: entered promiscuous mode [ 416.103142][ T9053] veth0_macvtap: entered promiscuous mode [ 416.115926][ T9053] veth1_macvtap: entered promiscuous mode [ 416.163547][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.196008][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.510848][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 416.512539][ T9420] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 416.820352][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.820848][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.821127][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.216590][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.216612][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.774155][ T9116] veth0_vlan: entered promiscuous mode [ 417.832280][ T109] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.947849][ T9116] veth1_vlan: entered promiscuous mode [ 417.953025][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.953044][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.072571][ T9116] veth0_macvtap: entered promiscuous mode [ 418.097118][ T9116] veth1_macvtap: entered promiscuous mode [ 418.186027][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.227996][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.318602][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.335004][ T88] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.335184][ T88] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.390383][ T88] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.653963][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.653985][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.721983][ T9449] Invalid logical block size (1) [ 418.822031][ T6491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.822054][ T6491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.036419][ T9443] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 419.155143][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 419.191467][ T9459] loop1: detected capacity change from 0 to 512 [ 419.234515][ T9443] usb 8-1: New USB device found: idVendor=056a, idProduct=4001, bcdDevice=0.00 [ 419.334073][ T9443] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.335820][ T9443] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.336269][ T9443] usb 8-1: config 0 interface 0 has no altsetting 0 [ 419.351634][ T9443] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.732527][ T9459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.990481][ T9443] usb 8-1: config 0 descriptor?? [ 420.546085][ T9443] hid_parser_main: 5 callbacks suppressed [ 420.546148][ T9443] wacom 0003:056A:4001.0005: unknown main item tag 0x0 [ 420.662646][ T9443] usb 8-1: USB disconnect, device number 2 [ 420.781186][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.935195][ T9472] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 421.030946][ T9480] ip_tables: iptables: counters copy to user failed while replacing table [ 421.420188][ T9484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.899'. [ 421.529106][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15 [ 421.757438][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.903'. [ 421.854716][ T9493] loop7: detected capacity change from 0 to 256 [ 421.885437][ T9493] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 421.885455][ T9493] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 421.921574][ T9493] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 421.922270][ T9493] exFAT-fs (loop7): failed to load alloc-bitmap [ 421.922284][ T9493] exFAT-fs (loop7): failed to recognize exfat type [ 422.280446][ T9508] loop8: detected capacity change from 0 to 1024 [ 422.284393][ T9508] EXT4-fs: Mount option(s) incompatible with ext3 [ 422.713323][ T9468] loop5: detected capacity change from 0 to 131072 [ 422.718274][ T9468] F2FS-fs (loop5): Test dummy encryption mode enabled [ 422.720395][ T9468] F2FS-fs (loop5): invalid crc value [ 423.019300][ T9468] F2FS-fs (loop5): access invalid blkaddr:0 [ 423.019334][ T9468] CPU: 1 UID: 0 PID: 9468 Comm: syz.5.896 Tainted: G Y syzkaller #0 PREEMPT(full) [ 423.019366][ T9468] Tainted: [Y]=FORCED_BIND [ 423.019375][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.019389][ T9468] Call Trace: [ 423.019399][ T9468] [ 423.019408][ T9468] dump_stack_lvl+0xe8/0x150 [ 423.019439][ T9468] __f2fs_is_valid_blkaddr+0xe76/0x1520 [ 423.019472][ T9468] sanity_check_extent_cache+0x15c/0x9e0 [ 423.019594][ T9468] ? set_nlink+0x5f/0x170 [ 423.019620][ T9468] f2fs_iget+0x36ff/0x5370 [ 423.019665][ T9468] f2fs_fill_super+0x5548/0x7d50 [ 423.019734][ T9468] get_tree_bdev_flags+0x430/0x4f0 [ 423.019758][ T9468] ? __pfx_f2fs_fill_super+0x10/0x10 [ 423.019778][ T9468] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 423.019809][ T9468] vfs_get_tree+0x92/0x2a0 [ 423.019830][ T9468] do_new_mount+0x325/0xb00 [ 423.019856][ T9468] ? __pfx_do_new_mount+0x10/0x10 [ 423.019879][ T9468] ? ns_capable+0x84/0xe0 [ 423.019912][ T9468] ? path_mount+0x647/0x1050 [ 423.019936][ T9468] ? user_path_at+0xd4/0x160 [ 423.019960][ T9468] __se_sys_mount+0x31d/0x420 [ 423.019989][ T9468] ? __pfx___se_sys_mount+0x10/0x10 [ 423.020017][ T9468] ? __x64_sys_mount+0x20/0xc0 [ 423.020039][ T9468] do_syscall_64+0x166/0x520 [ 423.020060][ T9468] ? trace_irq_disable+0x3b/0x140 [ 423.020079][ T9468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.020107][ T9468] ? clear_bhb_loop+0x70/0xc0 [ 423.020131][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.020152][ T9468] RIP: 0033:0x7f3aa999f44a [ 423.020173][ T9468] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.020191][ T9468] RSP: 002b:00007f3aa7bf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 423.020214][ T9468] RAX: ffffffffffffffda RBX: 00007f3aa7bf5ee0 RCX: 00007f3aa999f44a [ 423.020231][ T9468] RDX: 0000200000000100 RSI: 0000200000000140 RDI: 00007f3aa7bf5ea0 [ 423.020247][ T9468] RBP: 0000200000000100 R08: 00007f3aa7bf5ee0 R09: 0000000000000010 [ 423.020263][ T9468] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000140 [ 423.020278][ T9468] R13: 00007f3aa7bf5ea0 R14: 00000000000105e9 R15: 0000200000000280 [ 423.020313][ T9468] [ 423.022730][ T9468] loop5: lost filesystem error report for type 5 error -117 [ 423.022748][ T9468] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 423.022826][ T9468] loop5: lost filesystem error report for type 5 error -117 [ 423.022842][ T9468] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 423.023870][ T9468] F2FS-fs (loop5): Failed to read root inode [ 423.671221][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16 [ 423.677826][ T9477] loop1: detected capacity change from 0 to 40427 [ 423.713055][ T9477] F2FS-fs (loop1): build fault injection rate: 174 [ 423.713077][ T9477] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 423.716933][ T9477] F2FS-fs (loop1): invalid crc value [ 424.058762][ T9477] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 424.156930][ T9523] loop8: detected capacity change from 0 to 40427 [ 424.177367][ T9523] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 424.177392][ T9523] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 424.187889][ T9523] F2FS-fs (loop8): invalid crc value [ 424.613725][ T9523] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 424.675396][ T9523] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 424.675426][ T9523] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 424.896929][ T9116] syz-executor: attempt to access beyond end of device [ 424.896929][ T9116] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 424.924948][ T9116] CPU: 0 UID: 0 PID: 9116 Comm: syz-executor Tainted: G Y syzkaller #0 PREEMPT(full) [ 424.924981][ T9116] Tainted: [Y]=FORCED_BIND [ 424.924990][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.925002][ T9116] Call Trace: [ 424.925010][ T9116] [ 424.925019][ T9116] dump_stack_lvl+0xe8/0x150 [ 424.925047][ T9116] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 424.925074][ T9116] f2fs_write_end_bio+0xda7/0x11c0 [ 424.925111][ T9116] __submit_merged_bio+0x258/0x6a0 [ 424.925130][ T9116] ? rcu_is_watching+0x16/0xb0 [ 424.925153][ T9116] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 424.925177][ T9116] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 424.925218][ T9116] f2fs_write_data_pages+0x2a13/0x36e0 [ 424.925274][ T9116] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 424.925292][ T9116] ? is_bpf_text_address+0x26/0x2b0 [ 424.925324][ T9116] ? arch_stack_walk+0xfb/0x150 [ 424.925371][ T9116] ? add_lock_to_list+0xc7/0x100 [ 424.925394][ T9116] ? lockdep_unlock+0x5c/0xd0 [ 424.925410][ T9116] ? __lock_acquire+0x1511/0x2de0 [ 424.925457][ T9116] ? do_raw_spin_lock+0x12b/0x2f0 [ 424.925488][ T9116] ? do_raw_spin_unlock+0xf5/0x200 [ 424.925507][ T9116] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 424.925529][ T9116] do_writepages+0x338/0x560 [ 424.925560][ T9116] ? do_raw_spin_unlock+0xf5/0x200 [ 424.925584][ T9116] filemap_fdatawrite+0x1e9/0x2f0 [ 424.925606][ T9116] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 424.925670][ T9116] ? do_raw_spin_unlock+0xf5/0x200 [ 424.925694][ T9116] f2fs_sync_dirty_inodes+0x471/0x970 [ 424.925731][ T9116] f2fs_write_checkpoint+0x860/0x24d0 [ 424.925787][ T9116] kill_f2fs_super+0x2dc/0x700 [ 424.925812][ T9116] ? rcu_do_enqueue+0x616/0x870 [ 424.925830][ T9116] ? lockdep_hardirqs_on+0x7b/0x110 [ 424.925850][ T9116] ? __pfx_kill_f2fs_super+0x10/0x10 [ 424.925894][ T9116] ? __pfx_call_rcu+0x10/0x10 [ 424.925919][ T9116] ? shrinker_free+0x2a7/0x3b0 [ 424.925943][ T9116] deactivate_locked_super+0xbe/0x110 [ 424.925966][ T9116] cleanup_mnt+0x204/0x2a0 [ 424.925990][ T9116] task_work_run+0x1d9/0x260 [ 424.926013][ T9116] ? __pfx_task_work_run+0x10/0x10 [ 424.926041][ T9116] exit_to_user_mode_loop+0x204/0x770 [ 424.926059][ T9116] ? rcu_is_watching+0x16/0xb0 [ 424.926083][ T9116] do_syscall_64+0x328/0x520 [ 424.926102][ T9116] ? trace_irq_disable+0x3b/0x140 [ 424.926120][ T9116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.926141][ T9116] ? clear_bhb_loop+0x70/0xc0 [ 424.926164][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.926184][ T9116] RIP: 0033:0x7f3c92f9f417 [ 424.926204][ T9116] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 424.926222][ T9116] RSP: 002b:00007ffd28dac598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 424.926244][ T9116] RAX: 0000000000000000 RBX: 00007f3c93034ccb RCX: 00007f3c92f9f417 [ 424.926258][ T9116] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd28dac650 [ 424.926271][ T9116] RBP: 00007ffd28dac650 R08: 00007ffd28dad650 R09: 00000000ffffffff [ 424.926286][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd28dad6e0 [ 424.926299][ T9116] R13: 00007f3c93034ccb R14: 0000000000067b21 R15: 00007ffd28dad720 [ 424.926332][ T9116] [ 424.927974][ T9116] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 425.616069][ T9552] loop1: detected capacity change from 0 to 256 [ 426.001873][ T9569] ip_tables: iptables: counters copy to user failed while replacing table [ 426.361444][ T9575] loop1: detected capacity change from 0 to 4096 [ 426.375912][ T9575] EXT4-fs (loop1): DAX unsupported by block device. [ 426.395702][ T9575] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 426.586086][ T9582] kvm: pic: non byte write [ 426.963786][ T9591] loop7: detected capacity change from 0 to 2048 [ 427.027731][ T9591] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.038585][ T9591] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.924: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 427.074713][ T9591] EXT4-fs (loop7): Remounting filesystem read-only [ 427.332531][ T9586] loop1: detected capacity change from 0 to 40427 [ 427.335683][ T9053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.336791][ T9586] F2FS-fs: heap/no_heap options were deprecated [ 427.595607][ T9586] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 427.623249][ T9586] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 427.623278][ T9586] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 427.623304][ T9586] F2FS-fs (loop1): Start checkpoint disabled! [ 427.658687][ T9586] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 427.807753][ T9586] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 427.908793][ T9619] netlink: 40 bytes leftover after parsing attributes in process `syz.8.932'. [ 427.911486][ T9614] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 428.017431][ T9624] loop7: detected capacity change from 0 to 512 [ 428.092947][ T9624] EXT4-fs (loop7): Test dummy encryption mode enabled [ 428.092971][ T9624] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 428.092985][ T9624] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 428.132314][ T9609] loop5: detected capacity change from 0 to 40427 [ 428.140495][ T7546] kworker/u8:18: attempt to access beyond end of device [ 428.140495][ T7546] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 428.140968][ T9609] F2FS-fs (loop5): build fault injection rate: 174 [ 428.140987][ T9609] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 428.143105][ T9609] F2FS-fs (loop5): invalid crc value [ 428.143748][ T7546] CPU: 0 UID: 0 PID: 7546 Comm: kworker/u8:18 Tainted: G Y syzkaller #0 PREEMPT(full) [ 428.143778][ T7546] Tainted: [Y]=FORCED_BIND [ 428.143785][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.143797][ T7546] Workqueue: writeback wb_workfn (flush-7:1) [ 428.143827][ T7546] Call Trace: [ 428.143835][ T7546] [ 428.143843][ T7546] dump_stack_lvl+0xe8/0x150 [ 428.143866][ T7546] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 428.143891][ T7546] f2fs_write_end_bio+0xda7/0x11c0 [ 428.143926][ T7546] __submit_merged_bio+0x258/0x6a0 [ 428.143944][ T7546] ? rcu_is_watching+0x16/0xb0 [ 428.143967][ T7546] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 428.143989][ T7546] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 428.144036][ T7546] f2fs_write_data_pages+0x2a13/0x36e0 [ 428.144092][ T7546] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 428.144161][ T7546] ? __lock_acquire+0x747/0x2de0 [ 428.144188][ T7546] ? __lock_acquire+0x747/0x2de0 [ 428.144243][ T7546] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 428.144264][ T7546] do_writepages+0x338/0x560 [ 428.144294][ T7546] ? reacquire_held_locks+0x117/0x1a0 [ 428.144313][ T7546] ? writeback_sb_inodes+0x450/0x1af0 [ 428.144339][ T7546] __writeback_single_inode+0x136/0x1220 [ 428.144361][ T7546] ? do_raw_spin_unlock+0xf5/0x200 [ 428.144384][ T7546] writeback_sb_inodes+0x9de/0x1af0 [ 428.144403][ T7546] ? __lock_acquire+0x747/0x2de0 [ 428.144447][ T7546] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 428.144510][ T7546] ? rcu_is_watching+0x16/0xb0 [ 428.144529][ T7546] ? queue_io+0x2d3/0x470 [ 428.144551][ T7546] wb_writeback+0x41c/0xad0 [ 428.144571][ T7546] ? queue_io+0x231/0x470 [ 428.144596][ T7546] ? __pfx_wb_writeback+0x10/0x10 [ 428.144612][ T7546] ? do_raw_spin_lock+0x12b/0x2f0 [ 428.144648][ T7546] wb_workfn+0x431/0x10f0 [ 428.144683][ T7546] ? __pfx_wb_workfn+0x10/0x10 [ 428.144708][ T7546] ? trace_hrtimer_start+0x82/0x200 [ 428.144731][ T7546] ? do_raw_spin_lock+0x12b/0x2f0 [ 428.144759][ T7546] ? lock_acquire+0x115/0x350 [ 428.144786][ T7546] ? rcu_is_watching+0x16/0xb0 [ 428.144807][ T7546] ? process_scheduled_works+0x97a/0x1630 [ 428.144828][ T7546] process_scheduled_works+0xc3d/0x1630 [ 428.144880][ T7546] ? __pfx_process_scheduled_works+0x10/0x10 [ 428.144908][ T7546] ? assign_work+0x3cf/0x5d0 [ 428.144933][ T7546] worker_thread+0xa47/0xfb0 [ 428.144964][ T7546] ? __kthread_parkme+0x71/0x1f0 [ 428.144994][ T7546] kthread+0x38b/0x480 [ 428.145014][ T7546] ? __pfx_worker_thread+0x10/0x10 [ 428.145031][ T7546] ? __pfx_kthread+0x10/0x10 [ 428.145050][ T7546] ret_from_fork+0x514/0xb70 [ 428.145072][ T7546] ? __pfx_ret_from_fork+0x10/0x10 [ 428.145092][ T7546] ? __switch_to+0xc78/0x1410 [ 428.145122][ T7546] ? __pfx_kthread+0x10/0x10 [ 428.145141][ T7546] ret_from_fork_asm+0x1a/0x30 [ 428.145174][ T7546] [ 428.150500][ T7546] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 428.155463][ T9624] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.933: bad orphan inode 131083 [ 428.155490][ T9624] loop7: lost filesystem error report for type 5 error -117 [ 428.158417][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 428.158435][ C1] EXT4-fs (loop7): initial error at time 1791704348: ext4_orphan_get:1430 [ 428.158457][ C1] EXT4-fs (loop7): last error at time 1791704348: ext4_orphan_get:1430 [ 428.217857][ T9624] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.231791][ T9609] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 428.437368][ T9609] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 428.505076][ T9609] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8e0 [ 428.563693][ T9633] ip_tables: iptables: counters copy to user failed while replacing table [ 428.711158][ T9613] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 428.877040][ T6762] syz-executor: attempt to access beyond end of device [ 428.877040][ T6762] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 428.904028][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz-executor Tainted: G Y syzkaller #0 PREEMPT(full) [ 428.904062][ T6762] Tainted: [Y]=FORCED_BIND [ 428.904070][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.904083][ T6762] Call Trace: [ 428.904092][ T6762] [ 428.904101][ T6762] dump_stack_lvl+0xe8/0x150 [ 428.904129][ T6762] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 428.904158][ T6762] f2fs_write_end_bio+0xda7/0x11c0 [ 428.904196][ T6762] __submit_merged_bio+0x258/0x6a0 [ 428.904216][ T6762] ? rcu_is_watching+0x16/0xb0 [ 428.904242][ T6762] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 428.904267][ T6762] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 428.904313][ T6762] f2fs_write_data_pages+0x2a13/0x36e0 [ 428.904371][ T6762] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 428.904389][ T6762] ? is_bpf_text_address+0x26/0x2b0 [ 428.904421][ T6762] ? arch_stack_walk+0xfb/0x150 [ 428.904477][ T6762] ? add_lock_to_list+0xc7/0x100 [ 428.904499][ T6762] ? lockdep_unlock+0x5c/0xd0 [ 428.904516][ T6762] ? __lock_acquire+0x1511/0x2de0 [ 428.904564][ T6762] ? do_raw_spin_lock+0x12b/0x2f0 [ 428.904596][ T6762] ? do_raw_spin_unlock+0xf5/0x200 [ 428.904616][ T6762] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 428.904638][ T6762] do_writepages+0x338/0x560 [ 428.904670][ T6762] ? do_raw_spin_unlock+0xf5/0x200 [ 428.904695][ T6762] filemap_fdatawrite+0x1e9/0x2f0 [ 428.904718][ T6762] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 428.904784][ T6762] ? do_raw_spin_unlock+0xf5/0x200 [ 428.904808][ T6762] f2fs_sync_dirty_inodes+0x471/0x970 [ 428.904845][ T6762] f2fs_write_checkpoint+0x860/0x24d0 [ 428.904902][ T6762] kill_f2fs_super+0x2dc/0x700 [ 428.904927][ T6762] ? rcu_do_enqueue+0x616/0x870 [ 428.904946][ T6762] ? lockdep_hardirqs_on+0x7b/0x110 [ 428.904966][ T6762] ? __pfx_kill_f2fs_super+0x10/0x10 [ 428.905003][ T6762] ? __pfx_call_rcu+0x10/0x10 [ 428.905028][ T6762] ? shrinker_free+0x2a7/0x3b0 [ 428.905052][ T6762] deactivate_locked_super+0xbe/0x110 [ 428.905075][ T6762] cleanup_mnt+0x204/0x2a0 [ 428.905099][ T6762] task_work_run+0x1d9/0x260 [ 428.905121][ T6762] ? __pfx_task_work_run+0x10/0x10 [ 428.905151][ T6762] exit_to_user_mode_loop+0x204/0x770 [ 428.905170][ T6762] ? rcu_is_watching+0x16/0xb0 [ 428.905194][ T6762] do_syscall_64+0x328/0x520 [ 428.905213][ T6762] ? trace_irq_disable+0x3b/0x140 [ 428.905230][ T6762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.905251][ T6762] ? clear_bhb_loop+0x70/0xc0 [ 428.905273][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.905293][ T6762] RIP: 0033:0x7f3aa999f417 [ 428.905313][ T6762] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 428.905329][ T6762] RSP: 002b:00007ffdd13d0758 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 428.905351][ T6762] RAX: 0000000000000000 RBX: 00007f3aa9a34ccb RCX: 00007f3aa999f417 [ 428.905366][ T6762] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd13d0810 [ 428.905380][ T6762] RBP: 00007ffdd13d0810 R08: 00007ffdd13d1810 R09: 00000000ffffffff [ 428.905394][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd13d18a0 [ 428.905408][ T6762] R13: 00007f3aa9a34ccb R14: 0000000000068a54 R15: 00007ffdd13d18e0 [ 428.905442][ T6762] [ 428.905450][ T6762] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 429.270660][ T9635] loop8: detected capacity change from 0 to 512 [ 429.284102][ T9635] EXT4-fs (loop8): Test dummy encryption mode enabled [ 429.317878][ T9635] EXT4-fs error (device loop8): ext4_orphan_get:1404: inode #15: comm syz.8.937: inode has both inline data and extents flags [ 429.317915][ T9635] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 429.318425][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 429.318445][ C0] EXT4-fs (loop8): initial error at time 1791704349: ext4_orphan_get:1404: inode 15 [ 429.318473][ C0] EXT4-fs (loop8): last error at time 1791704349: ext4_orphan_get:1404: inode 15 [ 429.369793][ T9635] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.937: couldn't read orphan inode 15 (err -117) [ 429.369827][ T9635] loop8: lost filesystem error report for type 5 error -117 [ 429.373129][ T9635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.860903][ T54] Bluetooth: hci0: command 0x080f tx timeout [ 430.215125][ T9645] ip_tables: iptables: counters copy to user failed while replacing table [ 430.465760][ T9053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.330430][ T9116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.544150][ T9674] loop5: detected capacity change from 0 to 4096 [ 431.574809][ T9674] EXT4-fs (loop5): DAX unsupported by block device. [ 432.127944][ T9674] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 432.200719][ T9674] loop5: detected capacity change from 0 to 256 [ 432.237643][ T9674] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 432.241116][ T33] audit: type=1800 audit(1791704352.430:28): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.945" name="file2" dev="loop5" ino=53 res=0 errno=-22 [ 433.052990][ T9689] loop7: detected capacity change from 0 to 40427 [ 433.085169][ T9689] F2FS-fs (loop7): build fault injection rate: 174 [ 433.085193][ T9689] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 433.087480][ T9689] F2FS-fs (loop7): invalid crc value [ 433.237998][ T9689] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 433.289463][ T9689] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 433.343717][ T9689] F2FS-fs (loop7): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8e0 [ 434.103660][ T9707] loop5: detected capacity change from 0 to 512 [ 434.165753][ T9053] syz-executor: attempt to access beyond end of device [ 434.165753][ T9053] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 434.763690][ T9711] loop1: detected capacity change from 0 to 2048 [ 435.360790][ T9053] CPU: 1 UID: 0 PID: 9053 Comm: syz-executor Tainted: G Y syzkaller #0 PREEMPT(full) [ 435.360827][ T9053] Tainted: [Y]=FORCED_BIND [ 435.360835][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.360848][ T9053] Call Trace: [ 435.360856][ T9053] [ 435.360866][ T9053] dump_stack_lvl+0xe8/0x150 [ 435.360895][ T9053] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 435.360924][ T9053] f2fs_write_end_bio+0xda7/0x11c0 [ 435.360963][ T9053] __submit_merged_bio+0x258/0x6a0 [ 435.360983][ T9053] ? rcu_is_watching+0x16/0xb0 [ 435.361017][ T9053] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 435.361043][ T9053] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 435.361089][ T9053] f2fs_write_data_pages+0x2a13/0x36e0 [ 435.361147][ T9053] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 435.361166][ T9053] ? is_bpf_text_address+0x26/0x2b0 [ 435.361198][ T9053] ? arch_stack_walk+0xfb/0x150 [ 435.361248][ T9053] ? add_lock_to_list+0xc7/0x100 [ 435.361270][ T9053] ? lockdep_unlock+0x5c/0xd0 [ 435.361287][ T9053] ? __lock_acquire+0x1511/0x2de0 [ 435.361335][ T9053] ? do_raw_spin_lock+0x12b/0x2f0 [ 435.361366][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 435.361386][ T9053] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 435.361409][ T9053] do_writepages+0x338/0x560 [ 435.361440][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 435.361464][ T9053] filemap_fdatawrite+0x1e9/0x2f0 [ 435.361488][ T9053] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 435.361553][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 435.361577][ T9053] f2fs_sync_dirty_inodes+0x471/0x970 [ 435.361617][ T9053] f2fs_write_checkpoint+0x860/0x24d0 [ 435.361675][ T9053] kill_f2fs_super+0x2dc/0x700 [ 435.361700][ T9053] ? rcu_do_enqueue+0x616/0x870 [ 435.361720][ T9053] ? lockdep_hardirqs_on+0x7b/0x110 [ 435.361741][ T9053] ? __pfx_kill_f2fs_super+0x10/0x10 [ 435.361778][ T9053] ? __pfx_call_rcu+0x10/0x10 [ 435.361803][ T9053] ? shrinker_free+0x2a7/0x3b0 [ 435.361827][ T9053] deactivate_locked_super+0xbe/0x110 [ 435.361851][ T9053] cleanup_mnt+0x204/0x2a0 [ 435.361876][ T9053] task_work_run+0x1d9/0x260 [ 435.361899][ T9053] ? __pfx_task_work_run+0x10/0x10 [ 435.361929][ T9053] exit_to_user_mode_loop+0x204/0x770 [ 435.361949][ T9053] ? rcu_is_watching+0x16/0xb0 [ 435.361973][ T9053] do_syscall_64+0x328/0x520 [ 435.361991][ T9053] ? trace_irq_disable+0x3b/0x140 [ 435.362015][ T9053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.362035][ T9053] ? clear_bhb_loop+0x70/0xc0 [ 435.362058][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.362079][ T9053] RIP: 0033:0x7fc01d79f417 [ 435.362098][ T9053] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 435.362115][ T9053] RSP: 002b:00007ffef308ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 435.362138][ T9053] RAX: 0000000000000000 RBX: 00007fc01d834ccb RCX: 00007fc01d79f417 [ 435.362152][ T9053] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef308ed20 [ 435.362166][ T9053] RBP: 00007ffef308ed20 R08: 00007ffef308fd20 R09: 00000000ffffffff [ 435.362181][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef308fdb0 [ 435.362194][ T9053] R13: 00007fc01d834ccb R14: 0000000000069d19 R15: 00007ffef308fdf0 [ 435.362228][ T9053] [ 435.367219][ T9053] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 435.386526][ T9711] loop1: p1 < > p4 [ 435.386526][ T9711] p4: [ 436.136369][ T5804] loop7: lost filesystem error report for type 5 error -108 [ 436.154358][ T9707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.172453][ T9711] loop1: p4 size 722688 extends beyond EOD, truncated [ 436.741836][ T4975] loop1: p1 < > p4 [ 436.741836][ T4975] p4: [ 436.760495][ T4975] loop1: p4 size 722688 extends beyond EOD, truncated [ 436.919884][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.930555][ T9311] udevd[9311]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 436.958051][ T9680] udevd[9680]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 437.098106][ T9451] udevd[9451]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 437.120645][ T9680] udevd[9680]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 437.292158][ T9729] loop5: detected capacity change from 0 to 2048 [ 437.369754][ T9716] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 437.416315][ T9729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.554142][ T9721] loop1: detected capacity change from 0 to 8192 [ 437.601366][ T9721] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 437.636012][ T9729] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 437.750175][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.576160][ T9761] loop1: detected capacity change from 0 to 256 [ 439.892951][ T9773] loop8: detected capacity change from 0 to 512 [ 439.909760][ T9773] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 439.909780][ T9773] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 440.034666][ T9773] EXT4-fs (loop8): 1 truncate cleaned up [ 440.049312][ T9773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.125043][ T5803] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 440.153034][ T9116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.186856][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.186910][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.293180][ T5803] usb 8-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=1.00 [ 440.294189][ T5803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.294220][ T5803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.294259][ T5803] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.304374][ T5803] usb 8-1: config 0 descriptor?? [ 440.790795][ T5803] wacom 0003:056A:0331.0006: unbalanced collection at end of report description [ 440.791475][ T5803] wacom 0003:056A:0331.0006: parse failed [ 440.791637][ T5803] wacom 0003:056A:0331.0006: probe with driver wacom failed with error -22 [ 440.970457][ T9758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.985556][ T9758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.004271][ T1603] usb 8-1: USB disconnect, device number 3 [ 441.048370][ T9777] loop5: detected capacity change from 0 to 40427 [ 441.098180][ T9777] F2FS-fs (loop5): invalid crc value [ 441.411978][ T9777] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 441.424382][ T9777] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 441.424410][ T9777] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 441.424434][ T9777] F2FS-fs (loop5): Start checkpoint disabled! [ 441.447069][ T9777] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 441.464367][ T9777] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 443.747445][ T9854] batadv_slave_1: entered promiscuous mode [ 443.794145][ T9854] macsec1: entered promiscuous mode [ 443.804522][ T9863] loop1: detected capacity change from 0 to 512 [ 443.819039][ T9863] EXT4-fs (loop1): invalid journal inode [ 443.820089][ T9863] EXT4-fs (loop1): can't get journal size [ 444.377540][ T9863] EXT4-fs (loop1): 1 truncate cleaned up [ 444.392975][ T9863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.651074][ T9878] loop5: detected capacity change from 0 to 256 [ 444.687957][ T9878] FAT-fs (loop5): Directory bread(block 1285) failed [ 444.687992][ T9878] FAT-fs (loop5): Directory bread(block 1286) failed [ 444.688016][ T9878] FAT-fs (loop5): Directory bread(block 1287) failed [ 444.688182][ T9878] FAT-fs (loop5): Directory bread(block 1288) failed [ 444.999015][ T9878] FAT-fs (loop5): Directory bread(block 1285) failed [ 444.999051][ T9878] FAT-fs (loop5): Directory bread(block 1286) failed [ 444.999076][ T9878] FAT-fs (loop5): Directory bread(block 1287) failed [ 444.999101][ T9878] FAT-fs (loop5): Directory bread(block 1288) failed [ 444.999361][ T9878] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 445.216226][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.241151][ T9897] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 446.256200][ T9869] loop7: detected capacity change from 0 to 40427 [ 446.295722][ T9869] F2FS-fs (loop7): invalid crc value [ 446.613303][ T9869] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 446.653882][ T9869] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0 [ 446.653909][ T9869] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 446.653935][ T9869] F2FS-fs (loop7): Start checkpoint disabled! [ 446.817307][ T9869] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0 [ 446.828478][ T9869] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 447.173070][ T13] kworker/u8:1: attempt to access beyond end of device [ 447.173070][ T13] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 447.173156][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G Y syzkaller #0 PREEMPT(full) [ 447.173185][ T13] Tainted: [Y]=FORCED_BIND [ 447.173194][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.173207][ T13] Workqueue: writeback wb_workfn (flush-7:7) [ 447.173238][ T13] Call Trace: [ 447.173246][ T13] [ 447.173255][ T13] dump_stack_lvl+0xe8/0x150 [ 447.173280][ T13] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 447.173308][ T13] f2fs_write_end_bio+0xda7/0x11c0 [ 447.173346][ T13] __submit_merged_bio+0x258/0x6a0 [ 447.173366][ T13] ? rcu_is_watching+0x16/0xb0 [ 447.173391][ T13] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 447.173416][ T13] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 447.173462][ T13] f2fs_write_data_pages+0x2a13/0x36e0 [ 447.173519][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 447.173611][ T13] ? __lock_acquire+0x747/0x2de0 [ 447.173649][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 447.173671][ T13] do_writepages+0x338/0x560 [ 447.173695][ T13] ? __lock_acquire+0x747/0x2de0 [ 447.173719][ T13] ? reacquire_held_locks+0x117/0x1a0 [ 447.173738][ T13] ? writeback_sb_inodes+0x450/0x1af0 [ 447.173765][ T13] __writeback_single_inode+0x136/0x1220 [ 447.173788][ T13] ? do_raw_spin_unlock+0xf5/0x200 [ 447.173813][ T13] writeback_sb_inodes+0x9de/0x1af0 [ 447.173832][ T13] ? __lock_acquire+0x747/0x2de0 [ 447.173875][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 447.173937][ T13] ? rcu_is_watching+0x16/0xb0 [ 447.173956][ T13] ? queue_io+0x2d3/0x470 [ 447.173979][ T13] wb_writeback+0x41c/0xad0 [ 447.174001][ T13] ? queue_io+0x231/0x470 [ 447.174026][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 447.174044][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 447.174083][ T13] wb_workfn+0x431/0x10f0 [ 447.174127][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 447.174161][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 447.174190][ T13] ? lock_acquire+0x115/0x350 [ 447.174219][ T13] ? rcu_is_watching+0x16/0xb0 [ 447.174240][ T13] ? process_scheduled_works+0x97a/0x1630 [ 447.174262][ T13] process_scheduled_works+0xc3d/0x1630 [ 447.174315][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 447.174345][ T13] ? assign_work+0x3cf/0x5d0 [ 447.174372][ T13] worker_thread+0xa47/0xfb0 [ 447.174419][ T13] kthread+0x38b/0x480 [ 447.174439][ T13] ? __pfx_worker_thread+0x10/0x10 [ 447.174457][ T13] ? __pfx_kthread+0x10/0x10 [ 447.174478][ T13] ret_from_fork+0x514/0xb70 [ 447.174502][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 447.174523][ T13] ? __switch_to+0xc78/0x1410 [ 447.174546][ T13] ? __pfx_kthread+0x10/0x10 [ 447.174567][ T13] ret_from_fork_asm+0x1a/0x30 [ 447.174604][ T13] [ 447.177834][ T13] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 447.177908][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G Y syzkaller #0 PREEMPT(full) [ 447.177937][ T13] Tainted: [Y]=FORCED_BIND [ 447.177945][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.177959][ T13] Workqueue: writeback wb_workfn (flush-7:7) [ 447.177987][ T13] Call Trace: [ 447.177996][ T13] [ 447.178005][ T13] dump_stack_lvl+0xe8/0x150 [ 447.178029][ T13] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 447.178057][ T13] f2fs_write_end_bio+0xda7/0x11c0 [ 447.178094][ T13] __submit_merged_bio+0x258/0x6a0 [ 447.178115][ T13] ? rcu_is_watching+0x16/0xb0 [ 447.178146][ T13] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 447.178168][ T13] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 447.178207][ T13] f2fs_write_data_pages+0x2a13/0x36e0 [ 447.178257][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 447.178341][ T13] ? __lock_acquire+0x747/0x2de0 [ 447.178382][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 447.178402][ T13] do_writepages+0x338/0x560 [ 447.178425][ T13] ? __lock_acquire+0x747/0x2de0 [ 447.178446][ T13] ? reacquire_held_locks+0x117/0x1a0 [ 447.178464][ T13] ? writeback_sb_inodes+0x450/0x1af0 [ 447.178488][ T13] __writeback_single_inode+0x136/0x1220 [ 447.178511][ T13] ? do_raw_spin_unlock+0xf5/0x200 [ 447.178535][ T13] writeback_sb_inodes+0x9de/0x1af0 [ 447.178554][ T13] ? __lock_acquire+0x747/0x2de0 [ 447.178598][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 447.178659][ T13] ? rcu_is_watching+0x16/0xb0 [ 447.178679][ T13] ? queue_io+0x2d3/0x470 [ 447.178701][ T13] wb_writeback+0x41c/0xad0 [ 447.178724][ T13] ? queue_io+0x231/0x470 [ 447.178749][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 447.178764][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 447.178799][ T13] wb_workfn+0x431/0x10f0 [ 447.178834][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 447.178867][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 447.178894][ T13] ? lock_acquire+0x115/0x350 [ 447.178921][ T13] ? rcu_is_watching+0x16/0xb0 [ 447.178940][ T13] ? process_scheduled_works+0x97a/0x1630 [ 447.178960][ T13] process_scheduled_works+0xc3d/0x1630 [ 447.179011][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 447.179038][ T13] ? assign_work+0x3cf/0x5d0 [ 447.179064][ T13] worker_thread+0xa47/0xfb0 [ 447.179109][ T13] kthread+0x38b/0x480 [ 447.179135][ T13] ? __pfx_worker_thread+0x10/0x10 [ 447.179152][ T13] ? __pfx_kthread+0x10/0x10 [ 447.179172][ T13] ret_from_fork+0x514/0xb70 [ 447.179194][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 447.179214][ T13] ? __switch_to+0xc78/0x1410 [ 447.179237][ T13] ? __pfx_kthread+0x10/0x10 [ 447.179256][ T13] ret_from_fork_asm+0x1a/0x30 [ 447.179289][ T13] [ 447.356687][ T13] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 447.767294][ T9918] 9p: Bad value for 'rfdno' [ 449.102222][ T9935] loop1: detected capacity change from 0 to 40427 [ 449.107511][ T9935] F2FS-fs (loop1): build fault injection rate: 174 [ 449.107531][ T9935] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 449.132619][ T9935] F2FS-fs (loop1): invalid crc value [ 449.237690][ T9935] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 449.249919][ T9935] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 449.270584][ T9935] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8e0 [ 449.334319][ T9952] loop7: detected capacity change from 0 to 4096 [ 449.347136][ T9952] EXT4-fs: Ignoring removed mblk_io_submit option [ 449.398371][ T9952] EXT4-fs (loop7): Test dummy encryption mode enabled [ 449.445277][ T5611] syz-executor: attempt to access beyond end of device [ 449.445277][ T5611] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 449.446438][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz-executor Tainted: G Y syzkaller #0 PREEMPT(full) [ 449.446470][ T5611] Tainted: [Y]=FORCED_BIND [ 449.446478][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.446491][ T5611] Call Trace: [ 449.446499][ T5611] [ 449.446508][ T5611] dump_stack_lvl+0xe8/0x150 [ 449.446541][ T5611] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 449.446570][ T5611] f2fs_write_end_bio+0xda7/0x11c0 [ 449.446611][ T5611] __submit_merged_bio+0x258/0x6a0 [ 449.446631][ T5611] ? rcu_is_watching+0x16/0xb0 [ 449.446658][ T5611] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 449.446684][ T5611] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 449.446734][ T5611] f2fs_write_data_pages+0x2a13/0x36e0 [ 449.446796][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 449.446815][ T5611] ? is_bpf_text_address+0x26/0x2b0 [ 449.446847][ T5611] ? arch_stack_walk+0xfb/0x150 [ 449.446897][ T5611] ? add_lock_to_list+0xc7/0x100 [ 449.446920][ T5611] ? lockdep_unlock+0x5c/0xd0 [ 449.446937][ T5611] ? __lock_acquire+0x1511/0x2de0 [ 449.446989][ T5611] ? do_raw_spin_lock+0x12b/0x2f0 [ 449.447022][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 449.447042][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 449.447065][ T5611] do_writepages+0x338/0x560 [ 449.447099][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 449.447125][ T5611] filemap_fdatawrite+0x1e9/0x2f0 [ 449.447148][ T5611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 449.447217][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 449.447242][ T5611] f2fs_sync_dirty_inodes+0x471/0x970 [ 449.447282][ T5611] f2fs_write_checkpoint+0x860/0x24d0 [ 449.447343][ T5611] kill_f2fs_super+0x2dc/0x700 [ 449.447369][ T5611] ? rcu_do_enqueue+0x616/0x870 [ 449.447396][ T5611] ? lockdep_hardirqs_on+0x7b/0x110 [ 449.447417][ T5611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 449.447456][ T5611] ? __pfx_call_rcu+0x10/0x10 [ 449.447481][ T5611] ? shrinker_free+0x2a7/0x3b0 [ 449.447505][ T5611] deactivate_locked_super+0xbe/0x110 [ 449.447529][ T5611] cleanup_mnt+0x204/0x2a0 [ 449.447556][ T5611] task_work_run+0x1d9/0x260 [ 449.447580][ T5611] ? __pfx_task_work_run+0x10/0x10 [ 449.447611][ T5611] exit_to_user_mode_loop+0x204/0x770 [ 449.447632][ T5611] ? rcu_is_watching+0x16/0xb0 [ 449.447656][ T5611] do_syscall_64+0x328/0x520 [ 449.447675][ T5611] ? trace_irq_disable+0x3b/0x140 [ 449.447693][ T5611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.447714][ T5611] ? clear_bhb_loop+0x70/0xc0 [ 449.447738][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.447757][ T5611] RIP: 0033:0x7fbdd239f417 [ 449.447778][ T5611] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 449.447793][ T5611] RSP: 002b:00007ffdaf0dc478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 449.447815][ T5611] RAX: 0000000000000000 RBX: 00007fbdd2434ccb RCX: 00007fbdd239f417 [ 449.447830][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaf0dc530 [ 449.447843][ T5611] RBP: 00007ffdaf0dc530 R08: 00007ffdaf0dd530 R09: 00000000ffffffff [ 449.447858][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaf0dd5c0 [ 449.447871][ T5611] R13: 00007fbdd2434ccb R14: 000000000006db2c R15: 00007ffdaf0dd600 [ 449.447907][ T5611] [ 449.531059][ T9952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.658579][ T5611] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 450.090224][ T9053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.376228][ T9971] loop5: detected capacity change from 0 to 512 [ 450.447250][ T9971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.447377][ T9971] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.918850][T10005] loop7: detected capacity change from 0 to 128 [ 451.969989][T10005] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.978770][T10005] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 451.993205][T10010] loop1: detected capacity change from 0 to 256 [ 452.223178][ T9053] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.549451][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.058767][ T5728] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 453.144744][T10038] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 453.329556][ T5728] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 453.330673][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.330703][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.330735][ T5728] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.330776][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.335705][ T5728] usb 6-1: config 0 descriptor?? [ 453.534132][T10025] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 453.838127][ T5728] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 453.996095][ T5728] usb 6-1: USB disconnect, device number 4 [ 454.060256][T10050] fido_id[10050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 454.738804][ T5620] Bluetooth: hci0: command 0x080f tx timeout [ 455.089630][T10061] overlayfs: failed to resolve './bus': -2 [ 455.125891][T10063] loop7: detected capacity change from 0 to 256 [ 457.401239][ T54] Bluetooth: hci0: command 0x080f tx timeout [ 457.548563][T10070] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 458.078222][T10087] loop1: detected capacity change from 0 to 256 [ 458.499416][ T9866] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 458.653490][ T9866] usb 2-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 458.680057][ T9866] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 458.680165][ T9866] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 458.680301][ T9866] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 458.680489][ T9866] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 458.681341][ T9866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.691178][T10087] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 459.691312][T10087] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 459.717555][ T9866] pl2303 2-1:1.0: pl2303 converter detected [ 459.765518][ T9866] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 459.923610][ T9866] usb 2-1: USB disconnect, device number 6 [ 459.970505][ T9866] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 459.985575][ T9866] pl2303 2-1:1.0: device disconnected [ 460.015825][T10102] overlayfs: failed to clone upperpath [ 461.025343][T10124] loop1: detected capacity change from 0 to 4096 [ 461.048110][T10122] loop5: detected capacity change from 0 to 2048 [ 461.061182][T10124] EXT4-fs (loop1): DAX unsupported by block device. [ 461.093188][T10124] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 461.150848][T10122] loop5: p1 < > p4 [ 461.150848][T10122] p4: [ 461.187356][T10122] loop5: p4 size 722688 extends beyond EOD, truncated [ 463.975121][T10143] loop1: detected capacity change from 0 to 8192 [ 465.237242][T10161] loop1: detected capacity change from 0 to 512 [ 465.266874][T10161] EXT4-fs error (device loop1): ext4_iget_extra_inode:6003: inode #15: comm syz.1.1071: corrupted in-inode xattr: invalid ea_ino [ 465.266910][T10161] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.267437][T10161] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1071: couldn't read orphan inode 15 (err -117) [ 465.267468][T10161] loop1: lost filesystem error report for type 5 error -117 [ 465.271120][T10161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.391604][T10163] loop5: detected capacity change from 0 to 4096 [ 465.421482][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.481194][T10163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.672035][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.936793][T10178] loop5: detected capacity change from 0 to 512 [ 465.937906][T10178] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 468.205431][T10199] loop7: detected capacity change from 0 to 256 [ 468.410439][T10199] FAT-fs (loop7): data area starts beyond volume (274 > 64) [ 468.410500][T10199] FAT-fs (loop7): Can't find a valid FAT filesystem [ 469.540391][T10205] loop5: detected capacity change from 0 to 256 [ 469.542055][T10205] exfat: Deprecated parameter 'namecase' [ 469.588050][T10205] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 471.107367][T10224] loop5: detected capacity change from 0 to 512 [ 471.130417][T10224] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 471.130437][T10224] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 471.169194][T10224] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 471.169330][T10224] System zones: 1-12 [ 471.171819][T10224] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1090: bad orphan inode 131072 [ 471.171850][T10224] loop5: lost filesystem error report for type 5 error -117 [ 471.175671][T10224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.280723][T10224] 9p: Bad value for 'rfdno' [ 471.427606][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.016818][T10239] loop7: detected capacity change from 0 to 512 [ 473.041352][T10239] EXT4-fs (loop7): invalid journal inode [ 473.041425][T10239] EXT4-fs (loop7): can't get journal size [ 473.147272][T10239] EXT4-fs (loop7): 1 truncate cleaned up [ 473.155936][T10239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.188500][ T9866] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 473.530722][ T9053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.579780][ T9866] usb 2-1: Using ep0 maxpacket: 32 [ 473.580470][ T9866] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 473.581430][ T9866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.581466][ T9866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.581503][ T9866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.583977][ T9866] usb 2-1: config 0 descriptor?? [ 473.661157][ T9866] hub 2-1:0.0: USB hub found [ 473.934172][ T9866] hub 2-1:0.0: 1 port detected [ 473.956270][T10247] loop5: detected capacity change from 0 to 256 [ 473.972462][T10247] exfat: Deprecated parameter 'namecase' [ 473.972504][T10247] exfat: Deprecated parameter 'namecase' [ 473.972592][T10247] exfat: Deprecated parameter 'namecase' [ 474.418593][T10247] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 474.422370][ T9866] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 474.459694][ T9866] usbhid 2-1:0.0: can't add hid device: -71 [ 474.459790][ T9866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 474.514081][ T9866] usb 2-1: USB disconnect, device number 7 [ 474.525202][ T33] audit: type=1800 audit(1791704394.710:29): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1098" name="file0" dev="loop5" ino=56 res=0 errno=-22 [ 474.541173][T10247] Invalid ELF header magic: != ELF [ 474.673611][T10257] loop5: detected capacity change from 0 to 512 [ 474.677919][T10257] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 474.677936][T10257] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 474.719680][T10257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 474.719800][T10257] System zones: 1-12 [ 474.720048][T10257] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1102: bad orphan inode 131072 [ 474.720075][T10257] loop5: lost filesystem error report for type 5 error -117 [ 474.747720][T10257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.772711][T10257] 9p: Bad value for 'rfdno' [ 474.831612][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.697943][T10286] loop5: detected capacity change from 0 to 1024 [ 475.731673][T10286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.992606][T10294] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 477.083506][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.860093][T10321] loop5: detected capacity change from 0 to 4096 [ 478.884417][T10321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 478.884441][T10321] EXT4-fs (loop5): Test dummy encryption mode enabled [ 478.904361][ T33] audit: type=1326 audit(1791704399.070:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10324 comm="syz.0.1121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda8dd9e1d9 code=0x0 [ 478.953676][T10321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.908769][T10338] ip_tables: iptables: counters copy to user failed while replacing table [ 480.356010][T10340] loop7: detected capacity change from 0 to 1024 [ 480.372706][T10340] EXT4-fs: Mount option(s) incompatible with ext3 [ 481.919528][T10351] loop7: detected capacity change from 0 to 512 [ 481.936453][T10351] EXT4-fs: Ignoring removed oldalloc option [ 481.945886][T10351] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 481.945905][T10351] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 481.987937][T10351] EXT4-fs (loop7): 1 truncate cleaned up [ 481.998170][T10351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.362726][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.472547][ T9053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.730899][T10364] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 483.865688][T10386] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1139'. [ 483.865714][T10386] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1139'. [ 484.258668][ T1603] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 484.319591][T10391] loop7: detected capacity change from 0 to 40427 [ 484.326327][T10391] F2FS-fs (loop7): build fault injection rate: 174 [ 484.326346][T10391] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 484.354059][T10391] F2FS-fs (loop7): invalid crc value [ 484.429292][ T1603] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 484.430442][ T1603] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 484.430470][ T1603] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 484.431580][ T1603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 484.431603][ T1603] usb 2-1: SerialNumber: syz [ 484.483202][T10388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 484.579521][T10391] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 484.604826][T10391] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 484.771763][T10388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 484.856087][ T9053] syz-executor: attempt to access beyond end of device [ 484.856087][ T9053] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 484.871039][ T9053] CPU: 0 UID: 0 PID: 9053 Comm: syz-executor Tainted: G Y syzkaller #0 PREEMPT(full) [ 484.871070][ T9053] Tainted: [Y]=FORCED_BIND [ 484.871078][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.871090][ T9053] Call Trace: [ 484.871098][ T9053] [ 484.871106][ T9053] dump_stack_lvl+0xe8/0x150 [ 484.871138][ T9053] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 484.871164][ T9053] f2fs_write_end_bio+0xda7/0x11c0 [ 484.871199][ T9053] __submit_merged_bio+0x258/0x6a0 [ 484.871219][ T9053] ? rcu_is_watching+0x16/0xb0 [ 484.871242][ T9053] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 484.871265][ T9053] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 484.871307][ T9053] f2fs_write_data_pages+0x2a13/0x36e0 [ 484.871360][ T9053] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 484.871378][ T9053] ? is_bpf_text_address+0x26/0x2b0 [ 484.871408][ T9053] ? arch_stack_walk+0xfb/0x150 [ 484.871453][ T9053] ? add_lock_to_list+0xc7/0x100 [ 484.871474][ T9053] ? lockdep_unlock+0x5c/0xd0 [ 484.871490][ T9053] ? __lock_acquire+0x1511/0x2de0 [ 484.871534][ T9053] ? do_raw_spin_lock+0x12b/0x2f0 [ 484.871563][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 484.871581][ T9053] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 484.871602][ T9053] do_writepages+0x338/0x560 [ 484.871631][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 484.871654][ T9053] filemap_fdatawrite+0x1e9/0x2f0 [ 484.871676][ T9053] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 484.871736][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 484.871759][ T9053] f2fs_sync_dirty_inodes+0x471/0x970 [ 484.871800][ T9053] f2fs_write_checkpoint+0x860/0x24d0 [ 484.871853][ T9053] kill_f2fs_super+0x2dc/0x700 [ 484.871877][ T9053] ? rcu_do_enqueue+0x616/0x870 [ 484.871895][ T9053] ? lockdep_hardirqs_on+0x7b/0x110 [ 484.871915][ T9053] ? __pfx_kill_f2fs_super+0x10/0x10 [ 484.871949][ T9053] ? __pfx_call_rcu+0x10/0x10 [ 484.871973][ T9053] ? shrinker_free+0x2a7/0x3b0 [ 484.871995][ T9053] deactivate_locked_super+0xbe/0x110 [ 484.872017][ T9053] cleanup_mnt+0x204/0x2a0 [ 484.872040][ T9053] task_work_run+0x1d9/0x260 [ 484.872061][ T9053] ? __pfx_task_work_run+0x10/0x10 [ 484.872089][ T9053] exit_to_user_mode_loop+0x204/0x770 [ 484.872108][ T9053] ? rcu_is_watching+0x16/0xb0 [ 484.872130][ T9053] do_syscall_64+0x328/0x520 [ 484.872147][ T9053] ? trace_irq_disable+0x3b/0x140 [ 484.872164][ T9053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.872183][ T9053] ? clear_bhb_loop+0x70/0xc0 [ 484.872203][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.872222][ T9053] RIP: 0033:0x7fc01d79f417 [ 484.872241][ T9053] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 484.872257][ T9053] RSP: 002b:00007ffef308ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 484.872277][ T9053] RAX: 0000000000000000 RBX: 00007fc01d834ccb RCX: 00007fc01d79f417 [ 484.872291][ T9053] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef308ed20 [ 484.872303][ T9053] RBP: 00007ffef308ed20 R08: 00007ffef308fd20 R09: 00000000ffffffff [ 484.872317][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef308fdb0 [ 484.872329][ T9053] R13: 00007fc01d834ccb R14: 000000000007652f R15: 00007ffef308fdf0 [ 484.872360][ T9053] [ 484.872390][ T9053] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 485.405425][ T1603] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 485.574652][ T9443] usb 2-1: USB disconnect, device number 8 [ 485.576808][ T9443] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 487.992479][T10430] loop9: detected capacity change from 0 to 2640 [ 487.997318][T10430] Buffer I/O error on dev loop9, logical block 0, async page read [ 487.998015][T10430] Buffer I/O error on dev loop9, logical block 0, async page read [ 487.998221][T10430] Buffer I/O error on dev loop9, logical block 0, async page read [ 487.998533][T10430] Buffer I/O error on dev loop9, logical block 0, async page read [ 487.998703][T10430] Buffer I/O error on dev loop9, logical block 0, async page read [ 487.999027][T10430] Buffer I/O error on dev loop9, logical block 0, async page read [ 487.999315][T10430] Buffer I/O error on dev loop9, logical block 0, async page read [ 487.999460][T10430] Buffer I/O error on dev loop9, logical block 0, async page read [ 487.999515][T10430] ldm_validate_partition_table(): Disk read failed. [ 487.999681][T10430] Buffer I/O error on dev loop9, logical block 0, async page read [ 487.999850][T10430] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.000051][T10430] Dev loop9: unable to read RDB block 0 [ 488.001009][T10430] loop9: unable to read partition table [ 488.002478][T10430] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 488.938122][T10435] ip_tables: iptables: counters copy to user failed while replacing table [ 488.947062][T10435] loop1: detected capacity change from 0 to 512 [ 489.230797][T10435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.727674][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.518219][T10451] loop1: detected capacity change from 0 to 512 [ 490.561926][T10451] EXT4-fs (loop1): invalid journal inode [ 490.562104][T10451] EXT4-fs (loop1): can't get journal size [ 490.593777][T10451] EXT4-fs (loop1): 1 truncate cleaned up [ 490.616021][T10451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.830316][T10456] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1160'. [ 490.837467][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.263544][T10462] futex_wake_op: syz.5.1151 tries to shift op by 144; fix this program [ 493.199737][T10484] loop5: detected capacity change from 0 to 256 [ 493.216421][T10484] exfat: Deprecated parameter 'namecase' [ 493.216578][T10484] exfat: Deprecated parameter 'namecase' [ 493.432206][T10484] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 493.870052][T10493] loop1: detected capacity change from 0 to 4096 [ 493.875047][T10493] EXT4-fs (loop1): DAX unsupported by block device. [ 493.896190][T10493] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 494.266065][T10496] loop5: detected capacity change from 0 to 512 [ 494.302261][T10496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 494.302380][T10496] System zones: 1-12 [ 494.304578][T10496] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.1173: missing EA_INODE flag [ 494.304607][T10496] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 494.308207][T10496] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1173: error while reading EA inode 12 err=-117 [ 494.308237][T10496] loop5: lost filesystem error report for type 5 error -117 [ 494.310154][T10496] EXT4-fs (loop5): 1 orphan inode deleted [ 494.319838][T10497] loop1: detected capacity change from 0 to 256 [ 494.341978][T10496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.546887][T10497] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 494.571067][ T33] audit: type=1800 audit(1791704414.760:31): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1172" name="file2" dev="loop1" ino=58 res=0 errno=-22 [ 495.300621][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.662685][T10512] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 497.415877][T10536] loop7: detected capacity change from 0 to 40427 [ 497.448900][T10536] F2FS-fs (loop7): build fault injection rate: 174 [ 497.448927][T10536] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 497.449707][T10536] F2FS-fs (loop7): invalid crc value [ 497.534463][T10536] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 497.554346][T10536] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 499.363386][ T9053] syz-executor: attempt to access beyond end of device [ 499.363386][ T9053] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 499.378259][ T9053] CPU: 0 UID: 0 PID: 9053 Comm: syz-executor Tainted: G Y syzkaller #0 PREEMPT(full) [ 499.378294][ T9053] Tainted: [Y]=FORCED_BIND [ 499.378301][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.378314][ T9053] Call Trace: [ 499.378322][ T9053] [ 499.378330][ T9053] dump_stack_lvl+0xe8/0x150 [ 499.378357][ T9053] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 499.378388][ T9053] f2fs_write_end_bio+0xda7/0x11c0 [ 499.378425][ T9053] __submit_merged_bio+0x258/0x6a0 [ 499.378444][ T9053] ? rcu_is_watching+0x16/0xb0 [ 499.378469][ T9053] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 499.378489][ T9053] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 499.378531][ T9053] f2fs_write_data_pages+0x2a13/0x36e0 [ 499.378584][ T9053] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 499.378602][ T9053] ? is_bpf_text_address+0x26/0x2b0 [ 499.378632][ T9053] ? arch_stack_walk+0xfb/0x150 [ 499.378678][ T9053] ? add_lock_to_list+0xc7/0x100 [ 499.378699][ T9053] ? lockdep_unlock+0x5c/0xd0 [ 499.378715][ T9053] ? __lock_acquire+0x1511/0x2de0 [ 499.378761][ T9053] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.378789][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 499.378808][ T9053] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 499.378829][ T9053] do_writepages+0x338/0x560 [ 499.378859][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 499.378882][ T9053] filemap_fdatawrite+0x1e9/0x2f0 [ 499.378905][ T9053] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 499.378967][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 499.378996][ T9053] f2fs_sync_dirty_inodes+0x471/0x970 [ 499.379031][ T9053] f2fs_write_checkpoint+0x860/0x24d0 [ 499.379085][ T9053] kill_f2fs_super+0x2dc/0x700 [ 499.379109][ T9053] ? rcu_do_enqueue+0x616/0x870 [ 499.379127][ T9053] ? lockdep_hardirqs_on+0x7b/0x110 [ 499.379148][ T9053] ? __pfx_kill_f2fs_super+0x10/0x10 [ 499.379182][ T9053] ? __pfx_call_rcu+0x10/0x10 [ 499.379206][ T9053] ? shrinker_free+0x2a7/0x3b0 [ 499.379228][ T9053] deactivate_locked_super+0xbe/0x110 [ 499.379251][ T9053] cleanup_mnt+0x204/0x2a0 [ 499.379275][ T9053] task_work_run+0x1d9/0x260 [ 499.379296][ T9053] ? __pfx_task_work_run+0x10/0x10 [ 499.379324][ T9053] exit_to_user_mode_loop+0x204/0x770 [ 499.379343][ T9053] ? rcu_is_watching+0x16/0xb0 [ 499.379366][ T9053] do_syscall_64+0x328/0x520 [ 499.379383][ T9053] ? trace_irq_disable+0x3b/0x140 [ 499.379400][ T9053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.379420][ T9053] ? clear_bhb_loop+0x70/0xc0 [ 499.379441][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.379460][ T9053] RIP: 0033:0x7fc01d79f417 [ 499.379479][ T9053] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 499.379495][ T9053] RSP: 002b:00007ffef308ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 499.379515][ T9053] RAX: 0000000000000000 RBX: 00007fc01d834ccb RCX: 00007fc01d79f417 [ 499.379529][ T9053] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef308ed20 [ 499.379541][ T9053] RBP: 00007ffef308ed20 R08: 00007ffef308fd20 R09: 00000000ffffffff [ 499.379555][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef308fdb0 [ 499.379567][ T9053] R13: 00007fc01d834ccb R14: 000000000007978d R15: 00007ffef308fdf0 [ 499.379599][ T9053] [ 499.385757][ T9053] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 502.571155][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.571212][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.818692][ T54] Bluetooth: hci0: command 0x080f tx timeout [ 509.158130][ T33] audit: type=1326 audit(1791704429.340:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.1.1219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd239e1d9 code=0x7ffc0000 [ 509.158260][ T33] audit: type=1326 audit(1791704429.340:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.1.1219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd239e1d9 code=0x7ffc0000 [ 509.178502][ T33] audit: type=1326 audit(1791704429.350:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.1.1219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdd239e1d9 code=0x7ffc0000 [ 509.178555][ T33] audit: type=1326 audit(1791704429.350:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.1.1219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd239e1d9 code=0x7ffc0000 [ 509.178597][ T33] audit: type=1326 audit(1791704429.350:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.1.1219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd239e1d9 code=0x7ffc0000 [ 509.178639][ T33] audit: type=1326 audit(1791704429.350:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.1.1219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbdd239e1d9 code=0x7ffc0000 [ 509.178680][ T33] audit: type=1326 audit(1791704429.350:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.1.1219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd239e1d9 code=0x7ffc0000 [ 509.178720][ T33] audit: type=1326 audit(1791704429.350:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.1.1219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd239e1d9 code=0x7ffc0000 [ 509.178793][ T33] audit: type=1326 audit(1791704429.350:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.1.1219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbdd239e1d9 code=0x7ffc0000 [ 509.178834][ T33] audit: type=1326 audit(1791704429.350:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.1.1219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd239e1d9 code=0x7ffc0000 [ 509.418544][ T5859] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 509.483268][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1204'. [ 509.569611][ T5859] usb 2-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 509.574932][ T5859] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.574984][ T5859] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 509.575006][ T5859] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 509.575028][ T5859] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 509.588527][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.588553][ T5859] usb 2-1: Product: syz [ 509.588567][ T5859] usb 2-1: Manufacturer: syz [ 509.588581][ T5859] usb 2-1: SerialNumber: syz [ 509.614529][ T5859] sisusb 2-1:1.0: Invalid USB2VGA device [ 509.614553][ T5859] sisusb 2-1:1.0: probe with driver sisusb failed with error -22 [ 509.925504][ T1603] usb 2-1: USB disconnect, device number 9 [ 510.039884][ T5859] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 510.188501][ T5859] usb 6-1: Using ep0 maxpacket: 32 [ 510.189321][ T5859] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 510.192258][ T5859] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 510.192284][ T5859] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 510.192305][ T5859] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 510.192349][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 510.192370][ T5859] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 510.192394][ T5859] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 510.192443][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.217082][ T5859] usb 6-1: config 0 descriptor?? [ 510.351283][T10655] loop7: detected capacity change from 0 to 40427 [ 510.367675][T10655] F2FS-fs (loop7): build fault injection rate: 174 [ 510.367701][T10655] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 510.380166][T10655] F2FS-fs (loop7): invalid crc value [ 510.481513][ T5859] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 510.514724][ T5859] usb 6-1: USB disconnect, device number 5 [ 510.550805][ T5859] usblp0: removed [ 510.652448][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 510.794810][T10655] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 510.824587][T10655] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 510.883417][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 511.037019][ T9053] syz-executor: attempt to access beyond end of device [ 511.037019][ T9053] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 511.048693][ T9053] CPU: 0 UID: 0 PID: 9053 Comm: syz-executor Tainted: G Y syzkaller #0 PREEMPT(full) [ 511.048727][ T9053] Tainted: [Y]=FORCED_BIND [ 511.048735][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.048747][ T9053] Call Trace: [ 511.048756][ T9053] [ 511.048765][ T9053] dump_stack_lvl+0xe8/0x150 [ 511.048795][ T9053] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 511.048825][ T9053] f2fs_write_end_bio+0xda7/0x11c0 [ 511.048863][ T9053] __submit_merged_bio+0x258/0x6a0 [ 511.048887][ T9053] ? rcu_is_watching+0x16/0xb0 [ 511.048913][ T9053] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 511.048938][ T9053] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 511.048983][ T9053] f2fs_write_data_pages+0x2a13/0x36e0 [ 511.049039][ T9053] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 511.049058][ T9053] ? is_bpf_text_address+0x26/0x2b0 [ 511.049090][ T9053] ? arch_stack_walk+0xfb/0x150 [ 511.049140][ T9053] ? add_lock_to_list+0xc7/0x100 [ 511.049161][ T9053] ? lockdep_unlock+0x5c/0xd0 [ 511.049177][ T9053] ? __lock_acquire+0x1511/0x2de0 [ 511.049224][ T9053] ? do_raw_spin_lock+0x12b/0x2f0 [ 511.049255][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 511.049273][ T9053] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 511.049295][ T9053] do_writepages+0x338/0x560 [ 511.049328][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 511.049352][ T9053] filemap_fdatawrite+0x1e9/0x2f0 [ 511.049375][ T9053] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 511.049440][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 511.049465][ T9053] f2fs_sync_dirty_inodes+0x471/0x970 [ 511.049502][ T9053] f2fs_write_checkpoint+0x860/0x24d0 [ 511.049558][ T9053] kill_f2fs_super+0x2dc/0x700 [ 511.049583][ T9053] ? rcu_do_enqueue+0x616/0x870 [ 511.049603][ T9053] ? lockdep_hardirqs_on+0x7b/0x110 [ 511.049625][ T9053] ? __pfx_kill_f2fs_super+0x10/0x10 [ 511.049669][ T9053] ? __pfx_call_rcu+0x10/0x10 [ 511.049694][ T9053] ? shrinker_free+0x2a7/0x3b0 [ 511.049718][ T9053] deactivate_locked_super+0xbe/0x110 [ 511.049742][ T9053] cleanup_mnt+0x204/0x2a0 [ 511.049767][ T9053] task_work_run+0x1d9/0x260 [ 511.049789][ T9053] ? __pfx_task_work_run+0x10/0x10 [ 511.049817][ T9053] exit_to_user_mode_loop+0x204/0x770 [ 511.049836][ T9053] ? rcu_is_watching+0x16/0xb0 [ 511.049859][ T9053] do_syscall_64+0x328/0x520 [ 511.049878][ T9053] ? trace_irq_disable+0x3b/0x140 [ 511.049896][ T9053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.049916][ T9053] ? clear_bhb_loop+0x70/0xc0 [ 511.049938][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.049958][ T9053] RIP: 0033:0x7fc01d79f417 [ 511.049978][ T9053] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 511.049996][ T9053] RSP: 002b:00007ffef308ec68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 511.050017][ T9053] RAX: 0000000000000000 RBX: 00007fc01d834ccb RCX: 00007fc01d79f417 [ 511.050031][ T9053] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef308ed20 [ 511.050044][ T9053] RBP: 00007ffef308ed20 R08: 00007ffef308fd20 R09: 00000000ffffffff [ 511.050057][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef308fdb0 [ 511.050070][ T9053] R13: 00007fc01d834ccb R14: 000000000007cbae R15: 00007ffef308fdf0 [ 511.050102][ T9053] [ 511.050177][ T9053] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 511.159054][T10699] syz_tun: entered allmulticast mode [ 511.325569][T10701] overlayfs: failed to resolve './cgroup': -2 [ 512.193234][T10705] syzkaller0: entered promiscuous mode [ 512.193259][T10705] syzkaller0: entered allmulticast mode [ 514.109829][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 516.782677][ T5899] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.! [ 516.789314][T10773] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress." [ 517.173002][T10783] loop5: detected capacity change from 0 to 8192 [ 517.176080][T10783] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.365635][T10806] loop1: detected capacity change from 0 to 256 [ 519.366576][T10806] exfat: Deprecated parameter 'namecase' [ 519.366709][T10806] exfat: Deprecated parameter 'namecase' [ 519.431885][T10806] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 520.785744][T10802] loop5: detected capacity change from 0 to 32768 [ 520.874854][T10802] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1272 (10802) [ 520.996674][T10824] dummy0 speed is unknown, defaulting to 1000 [ 520.997039][T10824] dummy0 speed is unknown, defaulting to 1000 [ 521.016529][T10824] dummy0 speed is unknown, defaulting to 1000 [ 521.037917][T10824] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 521.037951][T10824] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 521.037989][T10824] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 521.131931][T10824] dummy0 speed is unknown, defaulting to 1000 [ 521.135554][T10824] dummy0 speed is unknown, defaulting to 1000 [ 521.137147][T10824] dummy0 speed is unknown, defaulting to 1000 [ 521.159596][T10824] dummy0 speed is unknown, defaulting to 1000 [ 521.162769][T10824] dummy0 speed is unknown, defaulting to 1000 [ 522.258223][T10802] BTRFS error (device loop5): open_ctree failed: -EINTR [ 522.975752][T10837] loop1: detected capacity change from 0 to 32768 [ 523.191650][T10837] JBD2: Ignoring recovery information on journal [ 524.031775][T10837] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 524.131578][ T33] kauditd_printk_skb: 95 callbacks suppressed [ 524.131597][ T33] audit: type=1804 audit(1791704444.320:137): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1280" name="/newroot/252/file1/bus" dev="loop1" ino=17059 res=1 errno=0 [ 524.492484][ T5611] ocfs2: Unmounting device (7,1) on (node local) [ 525.145460][T10870] loop7: detected capacity change from 0 to 40427 [ 525.203095][T10870] F2FS-fs (loop7): build fault injection rate: 174 [ 525.203118][T10870] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 525.204302][T10870] F2FS-fs (loop7): invalid crc value [ 525.341751][T10870] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 525.358113][T10870] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 530.368830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 530.671820][T10932] loop7: detected capacity change from 0 to 512 [ 530.687361][T10932] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 530.700739][T10932] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c0a8, mo2=0002] [ 530.700984][T10932] EXT4-fs (loop7): orphan cleanup on readonly fs [ 530.801264][T10932] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4221: comm syz.7.1312: Allocating blocks 42-43 which overlap fs metadata [ 530.801390][T10932] loop7: lost filesystem error report for type 5 error -117 [ 530.818414][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 530.818438][ C0] EXT4-fs (loop7): initial error at time 1791704450: ext4_mb_mark_diskspace_used:4221 [ 530.818462][ C0] EXT4-fs (loop7): last error at time 1791704450: ext4_mb_mark_diskspace_used:4221 [ 530.911698][T10932] EXT4-fs (loop7): Remounting filesystem read-only [ 530.919108][T10932] Quota error (device loop7): write_blk: dquota write failed [ 530.919269][T10932] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 530.919429][T10932] EXT4-fs (loop7): 1 truncate cleaned up [ 531.171760][T10932] EXT4-fs (loop7): pa ffff8880772ac000: logic 1, phys. 41, len 23 [ 531.298488][T10932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 531.513734][ T9053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.744539][T10941] dummy0 speed is unknown, defaulting to 1000 [ 532.127571][T10947] loop5: detected capacity change from 0 to 40427 [ 532.233966][T10947] F2FS-fs (loop5): build fault injection rate: 174 [ 532.233994][T10947] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 532.235163][T10947] F2FS-fs (loop5): invalid crc value [ 532.502335][T10947] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 535.096002][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1327'. [ 535.113313][T10980] bond0: (slave bond_slave_0): Releasing backup interface [ 535.160238][T10980] bond_slave_0: entered promiscuous mode [ 535.160263][T10980] bond_slave_0: entered allmulticast mode [ 537.709626][T10993] loop5: detected capacity change from 0 to 32768 [ 538.059645][T10993] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 538.486505][T10993] XFS (loop5): Ending clean mount [ 538.666892][ T6762] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 540.713259][T11056] loop5: detected capacity change from 0 to 512 [ 540.721269][T11056] EXT4-fs: Ignoring removed nobh option [ 541.153178][T11056] EXT4-fs (loop5): Test dummy encryption mode enabled [ 541.153202][T11056] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 541.153213][T11056] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 541.192943][T11056] EXT4-fs (loop5): 1 truncate cleaned up [ 541.194601][T11056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.924381][T11060] netlink: 'syz.8.1347': attribute type 2 has an invalid length. [ 542.007930][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.221826][T11074] loop5: detected capacity change from 0 to 512 [ 543.240739][T11074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 543.240850][T11074] System zones: 1-12 [ 543.241484][T11074] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.1351: missing EA_INODE flag [ 543.241511][T11074] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 543.241841][T11074] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1351: error while reading EA inode 12 err=-117 [ 543.241871][T11074] loop5: lost filesystem error report for type 5 error -117 [ 543.242128][T11074] EXT4-fs (loop5): 1 orphan inode deleted [ 543.243882][T11074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.239564][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.337220][T11089] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1356'. [ 547.436616][T11133] loop5: detected capacity change from 0 to 256 [ 547.444330][T11131] input: syz1 as /devices/virtual/input/input10 [ 547.848655][T11133] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 548.742212][T11147] fuse: fd is not a fuse device [ 548.842986][T11149] loop5: detected capacity change from 0 to 256 [ 548.843945][T11149] exfat: Deprecated parameter 'namecase' [ 548.844084][T11149] exfat: Deprecated parameter 'namecase' [ 548.935002][T11149] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 550.298729][ T1603] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 550.931878][ T1603] usb 6-1: Using ep0 maxpacket: 32 [ 550.955754][ T1603] usb 6-1: unable to get BOS descriptor or descriptor too short [ 550.955803][ T1603] usb 6-1: New USB device found: idVendor=1199, idProduct=0224, bcdDevice=a4.0d [ 551.032769][ T1603] usb 6-1: config 129 has an invalid interface number: 6 but max is 0 [ 551.032798][ T1603] usb 6-1: config 129 has no interface number 0 [ 551.056587][ T1603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.056615][ T1603] usb 6-1: Product: syz [ 551.056631][ T1603] usb 6-1: Manufacturer: syz [ 551.056645][ T1603] usb 6-1: SerialNumber: syz [ 551.328538][T11191] ip_tables: iptables: counters copy to user failed while replacing table [ 551.734484][ T1603] hub 6-1:129.6: bad descriptor, ignoring hub [ 551.734512][ T1603] hub 6-1:129.6: probe with driver hub failed with error -5 [ 551.745418][ T1603] sierra 6-1:129.6: Sierra USB modem converter detected [ 551.771629][ T1603] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 551.981988][ T1603] usb 6-1: USB disconnect, device number 6 [ 552.005623][ T1603] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 552.006154][ T1603] sierra 6-1:129.6: device disconnected [ 552.090189][T11196] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1387'. [ 552.459947][T11211] loop5: detected capacity change from 0 to 2048 [ 552.511133][T11211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.511213][T11211] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 552.762494][ T6762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.316993][T11209] loop1: detected capacity change from 0 to 32768 [ 553.376575][T11209] (syz.1.1388,11209,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 553.407450][T11209] (syz.1.1388,11209,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 553.580639][T11209] JBD2: Ignoring recovery information on journal [ 553.987784][T11240] loop5: detected capacity change from 0 to 40427 [ 554.010593][T11240] F2FS-fs (loop5): build fault injection rate: 174 [ 554.010618][T11240] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 554.016638][T11240] F2FS-fs (loop5): invalid crc value [ 554.070182][T11240] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 554.082843][T11240] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 554.098277][T11209] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 555.076653][T11264] ip_tables: iptables: counters copy to user failed while replacing table [ 557.309012][T11252] [ 557.311383][T11252] ====================================================== [ 557.318455][T11252] WARNING: possible circular locking dependency detected [ 557.325497][T11252] syzkaller #0 Tainted: G Y [ 557.331572][T11252] ------------------------------------------------------ [ 557.338640][T11252] syz.1.1388/11252 is trying to acquire lock: [ 557.344693][T11252] ffff88805079b058 (&oi->ip_alloc_sem/1){+.+.}-{4:4}, at: ocfs2_xattr_set_handle+0x3fc/0x820 [ 557.354998][T11252] [ 557.354998][T11252] but task is already holding lock: [ 557.362358][T11252] ffff888036ee0ce0 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3a9/0x6f0 [ 557.372695][T11252] [ 557.372695][T11252] which lock already depends on the new lock. [ 557.372695][T11252] [ 557.383096][T11252] [ 557.383096][T11252] the existing dependency chain (in reverse order) is: [ 557.392094][T11252] [ 557.392094][T11252] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 557.400703][T11252] down_read+0x45/0x320 [ 557.405374][T11252] ocfs2_start_trans+0x3a9/0x6f0 [ 557.410827][T11252] ocfs2_mknod+0xf07/0x2190 [ 557.415888][T11252] ocfs2_create+0x195/0x460 [ 557.420900][T11252] lookup_open+0xedc/0x1970 [ 557.425912][T11252] path_openat+0x673/0x1da0 [ 557.430920][T11252] do_file_open+0x23e/0x4a0 [ 557.435927][T11252] do_sys_openat2+0x115/0x200 [ 557.441111][T11252] __x64_sys_open+0x11e/0x150 [ 557.446292][T11252] do_syscall_64+0x166/0x520 [ 557.451391][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.457790][T11252] [ 557.457790][T11252] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 557.465313][T11252] ocfs2_start_trans+0x2a7/0x6f0 [ 557.470760][T11252] ocfs2_duplicate_inline_data+0x16a/0x570 [ 557.477420][T11252] ocfs2_reflink_remap_blocks+0x4aa/0x1ab0 [ 557.483733][T11252] ocfs2_remap_file_range+0x451/0x6f0 [ 557.489664][T11252] vfs_copy_file_range+0xd70/0x1340 [ 557.495372][T11252] __se_sys_copy_file_range+0x2fb/0x480 [ 557.501423][T11252] do_syscall_64+0x166/0x520 [ 557.506527][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.512935][T11252] [ 557.512935][T11252] -> #0 (&oi->ip_alloc_sem/1){+.+.}-{4:4}: [ 557.520924][T11252] __lock_acquire+0x164c/0x2de0 [ 557.526285][T11252] lock_acquire+0x115/0x350 [ 557.531294][T11252] down_write_nested+0x98/0x200 [ 557.536651][T11252] ocfs2_xattr_set_handle+0x3fc/0x820 [ 557.542528][T11252] ocfs2_set_acl+0x6d1/0x7b0 [ 557.547691][T11252] ocfs2_init_acl+0x1fe/0x420 [ 557.552876][T11252] ocfs2_mknod+0x1383/0x2190 [ 557.557973][T11252] ocfs2_mkdir+0x180/0x430 [ 557.562896][T11252] vfs_mkdir+0x40e/0x630 [ 557.567647][T11252] filename_mkdirat+0x285/0x510 [ 557.573006][T11252] __se_sys_mkdirat+0x35/0x150 [ 557.578279][T11252] do_syscall_64+0x166/0x520 [ 557.583374][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.589776][T11252] [ 557.589776][T11252] other info that might help us debug this: [ 557.589776][T11252] [ 557.599988][T11252] Chain exists of: [ 557.599988][T11252] &oi->ip_alloc_sem/1 --> sb_internal#4 --> &journal->j_trans_barrier [ 557.599988][T11252] [ 557.614134][T11252] Possible unsafe locking scenario: [ 557.614134][T11252] [ 557.621634][T11252] CPU0 CPU1 [ 557.626991][T11252] ---- ---- [ 557.632357][T11252] rlock(&journal->j_trans_barrier); [ 557.637714][T11252] lock(sb_internal#4); [ 557.644468][T11252] lock(&journal->j_trans_barrier); [ 557.652262][T11252] lock(&oi->ip_alloc_sem/1); [ 557.657014][T11252] [ 557.657014][T11252] *** DEADLOCK *** [ 557.657014][T11252] [ 557.665136][T11252] locks held by syz.1.1388/11252: 8, last CPU#1: [ 557.671541][T11252] #0: ffff888067e4c460 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 557.680763][T11252] #1: ffff8880507db3a0 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 557.691462][T11252] #2: ffff8880507e4fa0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x170/0x4850 [ 557.705246][T11252] #3: ffff8880507e5da0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x170/0x4850 [ 557.719082][T11252] #4: ffff8880507e33a0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x11f/0x2680 [ 557.733079][T11252] #5: ffff888067e4c650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xf07/0x2190 [ 557.742297][T11252] #6: ffff888036ee0ce0 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3a9/0x6f0 [ 557.752986][T11252] #7: ffff88802ecae950 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 557.762934][T11252] [ 557.762934][T11252] stack backtrace: [ 557.768814][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.1.1388 Tainted: G Y syzkaller #0 PREEMPT(full) [ 557.779828][T11252] Tainted: [Y]=FORCED_BIND [ 557.784223][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.794265][T11252] Call Trace: [ 557.797543][T11252] [ 557.800476][T11252] dump_stack_lvl+0xe8/0x150 [ 557.805067][T11252] print_circular_bug+0x2e2/0x300 [ 557.810092][T11252] check_noncircular+0x12f/0x150 [ 557.815032][T11252] __lock_acquire+0x164c/0x2de0 [ 557.819891][T11252] lock_acquire+0x115/0x350 [ 557.824401][T11252] ? ocfs2_xattr_set_handle+0x3fc/0x820 [ 557.829943][T11252] down_write_nested+0x98/0x200 [ 557.834782][T11252] ? ocfs2_xattr_set_handle+0x3fc/0x820 [ 557.840314][T11252] ? __pfx_down_write_nested+0x10/0x10 [ 557.845958][T11252] ? __kmalloc_cache_noprof+0x148/0x600 [ 557.851527][T11252] ? ocfs2_xattr_set_handle+0x32d/0x820 [ 557.857065][T11252] ? ocfs2_xattr_set_handle+0x32d/0x820 [ 557.862602][T11252] ocfs2_xattr_set_handle+0x3fc/0x820 [ 557.867971][T11252] ? __pfx_ocfs2_xattr_set_handle+0x10/0x10 [ 557.873856][T11252] ? __pfx_from_kgid+0x10/0x10 [ 557.878615][T11252] ? __kmalloc_noprof+0x1a6/0x710 [ 557.883631][T11252] ? ocfs2_set_acl+0x117/0x7b0 [ 557.888384][T11252] ? ocfs2_set_acl+0x117/0x7b0 [ 557.893136][T11252] ocfs2_set_acl+0x6d1/0x7b0 [ 557.897717][T11252] ocfs2_init_acl+0x1fe/0x420 [ 557.902384][T11252] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 557.907580][T11252] ? ocfs2_metadata_cache_get_super+0x43/0x80 [ 557.913724][T11252] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 557.919442][T11252] ? inc_nlink+0x4d/0x150 [ 557.923762][T11252] ocfs2_mknod+0x1383/0x2190 [ 557.928346][T11252] ? __pfx_ocfs2_mknod+0x10/0x10 [ 557.933272][T11252] ? do_raw_spin_unlock+0xf5/0x200 [ 557.938374][T11252] ? _raw_spin_unlock+0x28/0x50 [ 557.943285][T11252] ? ocfs2_inode_lock_full_nested+0xaad/0x1b30 [ 557.949430][T11252] ? add_lock_to_list+0xc7/0x100 [ 557.954369][T11252] ? __lock_acquire+0x747/0x2de0 [ 557.959302][T11252] ? do_raw_spin_lock+0x12b/0x2f0 [ 557.964320][T11252] ? do_raw_spin_unlock+0xf5/0x200 [ 557.969431][T11252] ? do_raw_spin_lock+0x12b/0x2f0 [ 557.974453][T11252] ? do_raw_spin_unlock+0xf5/0x200 [ 557.979559][T11252] ? put_pid+0xef/0x130 [ 557.983704][T11252] ? ocfs2_permission+0x116/0x1e0 [ 557.988716][T11252] ? __pfx_ocfs2_permission+0x10/0x10 [ 557.994071][T11252] ? _raw_spin_unlock+0x28/0x50 [ 557.998917][T11252] ocfs2_mkdir+0x180/0x430 [ 558.003327][T11252] ? __pfx_ocfs2_mkdir+0x10/0x10 [ 558.008254][T11252] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 558.013297][T11252] ? security_inode_mkdir+0xc3/0x340 [ 558.018649][T11252] vfs_mkdir+0x40e/0x630 [ 558.022886][T11252] filename_mkdirat+0x285/0x510 [ 558.027733][T11252] ? __might_fault+0xaf/0x130 [ 558.032441][T11252] ? __pfx_filename_mkdirat+0x10/0x10 [ 558.037814][T11252] ? do_getname+0x151/0x250 [ 558.042315][T11252] __se_sys_mkdirat+0x35/0x150 [ 558.047085][T11252] do_syscall_64+0x166/0x520 [ 558.051676][T11252] ? trace_irq_disable+0x3b/0x140 [ 558.056701][T11252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.062762][T11252] ? clear_bhb_loop+0x70/0xc0 [ 558.067432][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.073324][T11252] RIP: 0033:0x7fbdd239e1d9 [ 558.077733][T11252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.097331][T11252] RSP: 002b:00007fbdd3317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 558.105739][T11252] RAX: ffffffffffffffda RBX: 00007fbdd2626090 RCX: 00007fbdd239e1d9 [ 558.113700][T11252] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 558.121749][T11252] RBP: 00007fbdd2435888 R08: 0000000000000000 R09: 0000000000000000 [ 558.129740][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.137712][T11252] R13: 00007fbdd2626128 R14: 00007fbdd2626090 R15: 00007ffdaf0dd208 [ 558.145680][T11252] [ 558.219227][ T33] audit: type=1800 audit(1791704478.390:138): pid=11254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1388" name="bus" dev="loop1" ino=16979 res=0 errno=-22 [ 558.317000][ T5611] ocfs2: Unmounting device (7,1) on (node local) [ 563.059889][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.059923][ T1316] ieee802154 phy1 wpan1: encryption failed: -22